@akagilnc/pi-workflow-roles 0.1.4673 → 0.1.4698

package/dist/public-cli/terminal.js

@@ -17,7 +17,11 @@ export function exitCodeForTerminalOutcome(outcome) {
  * auto-resumes occurred during this single LLM call; it is not persisted to
  * run-state.json and does not participate in limit decisions.
  */
-/** Original payloads on a terminal — role result for accepted/audit; coexist on failure. */
+/**
+ * Current-result payloads on a terminal — accepted/audit role result, or a
+ * rare intentional failure face. Run history is TerminalResult.submissions
+ * (#836 / #953), not this helper.
+ */
 export function roleResultPayloads(outcome) {
     if (outcome.kind === "accepted" || outcome.kind === "audit_escalation")
         return outcome.payloads ?? [];
@@ -25,6 +29,18 @@ export function roleResultPayloads(outcome) {
         return outcome.payloads ?? [];
     return [];
 }
+/**
+ * Prefer non-empty current-result payloads; an empty array must not shadow
+ * top-level submissions (#953 / #836). Callers that need failure history must
+ * read TerminalResult.submissions directly — do not coalesce into failure.payloads.
+ */
+export function coalesceSubmissionRows(payloads, submissions) {
+    if (payloads !== undefined && payloads.length > 0)
+        return payloads;
+    if (submissions !== undefined && submissions.length > 0)
+        return submissions;
+    return payloads ?? submissions ?? [];
+}
 /**
  * Build an advice navigator fact (#959). Prose is presented as submitted;
  * code does not parse route/next or judge usability.
@@ -109,15 +125,26 @@ export function formatTerminalResult(result) {
     }
     // Role-result block: original payloads, newest first for humans (#961).
     // Typed payloads/submissions stay ledger order; only this presentation reverses.
-    const payloads = result.roleOutcome.kind === "accepted" || result.roleOutcome.kind === "audit_escalation"
-        ? result.roleOutcome.payloads ?? result.submissions ?? []
-        : result.roleOutcome.kind === "failure"
-            ? result.roleOutcome.payloads ?? result.submissions ?? []
+    // #953: failure history is the top-level submissions carrier (#836) — present
+    // as recorded-submission, never as this-turn submission/receipt.
+    if (result.roleOutcome.kind === "failure") {
+        const recorded = result.submissions ?? [];
+        for (let i = recorded.length - 1; i >= 0; i -= 1) {
+            const payload = recorded[i];
+            const rendered = typeof payload === "string" ? payload : JSON.stringify(payload);
+            lines.push(`recorded-submission\t${encodeTerminalField(rendered)}`);
+        }
+    }
+    else {
+        const payloads = result.roleOutcome.kind === "accepted" ||
+            result.roleOutcome.kind === "audit_escalation"
+            ? coalesceSubmissionRows(result.roleOutcome.payloads, result.submissions)
             : result.submissions ?? [];
-    for (let i = payloads.length - 1; i >= 0; i -= 1) {
-        const payload = payloads[i];
-        const rendered = typeof payload === "string" ? payload : JSON.stringify(payload);
-        lines.push(`submission\t${encodeTerminalField(rendered)}`);
+        for (let i = payloads.length - 1; i >= 0; i -= 1) {
+            const payload = payloads[i];
+            const rendered = typeof payload === "string" ? payload : JSON.stringify(payload);
+            lines.push(`submission\t${encodeTerminalField(rendered)}`);
+        }
     }
     return `${lines.join("\n")}\n`;
 }

package/dist/run-terminal-artifacts.js

@@ -137,6 +137,7 @@ export function runIdFromRunDirectory(runDirectory) {
  * Shared parent-directory unique fallback may be adopted only when the
  * publisher-owned body.runId equals this run directory's runId. Same-run
  * artifactsDir / runDirectory candidates keep path ownership and skip this.
+ * expectedRunId undefined (unparseable run dir) → never bound.
  */
 function presentUniqueFallbackBoundToRun(body, expectedRunId) {
     if (expectedRunId === undefined)
@@ -144,49 +145,87 @@ function presentUniqueFallbackBoundToRun(body, expectedRunId) {
     return typeof body.runId === "string" && body.runId === expectedRunId;
 }
 /**
- * Read the first present typed terminal artifact for a run directory.
- * Order:
+ * Sole authority for seam-owned unique error.<uuid>.json candidates.
+ * Used by both clearOpposite (settlement) and readRunTerminalArtifact — do not
+ * re-enumerate the same-run / parent unique set elsewhere.
+ * Ownership:
+ * - same-run dirs (artifacts/, runDir): path ownership — all unique names
+ * - parent runs/: only body.runId-bound faces; unparseable runId or unreadable body → none
+ */
+export async function listSeamOwnedUniqueErrorFacePaths(runDirectory) {
+    const artifactsDir = roleRunArtifactsDirectory(runDirectory);
+    const owned = await listUniqueErrorFallbackPaths([
+        artifactsDir,
+        runDirectory,
+    ]);
+    const expectedRunId = runIdFromRunDirectory(runDirectory);
+    for (const path of await listUniqueErrorFallbackPaths([dirname(runDirectory)])) {
+        const read = await readTerminalArtifactAtPath(path, "error.json");
+        if (read === undefined || read.status !== "present")
+            continue;
+        if (!presentUniqueFallbackBoundToRun(read.body, expectedRunId))
+            continue;
+        owned.push(path);
+    }
+    return owned;
+}
+/**
+ * Publish contract (#953): only failure publish continues after clearOpposite
+ * failure, so a multi-class residue (residual report/audit beside a new error
+ * face) means the current settlement is failure. Prefer failure-class faces
+ * over success/audit — never filesystem mtime (copy/restore/utimes can lie).
+ */
+function failureClassRank(file) {
+    return file === "error.json" ? 1 : 0;
+}
+/**
+ * Read the current typed terminal artifact for a run directory.
+ *
+ * Candidate set (publisher-owned faces only):
  * 1) conventional artifacts/{report,error,audit-incomplete}.json
  * 2) publisher fixed failure fallbacks (error.settlement.json faces)
- * 3) publisher unique error.<uuid>.json fallbacks under same-run dirs
- * 4) shared parent-directory unique fallbacks bound by body.runId
+ * 3) seam-owned unique error.<uuid>.json via listSeamOwnedUniqueErrorFacePaths
+ *    (same-run path ownership + parent body.runId binding — shared with clear)
  *
- * Absence of every known durable face is a valid no-receipt state (not unreadable).
- * A present file that cannot be parsed as a usable typed JSON object is unreadable.
+ * Invariant: when more than one present face remains (e.g. clearOpposite failed
+ * during failure publish and a fallback was settled beside a residual report),
+ * adopt failure-class over success/audit by the publish contract — not mtime.
+ * Same-class ties keep candidate enumeration order (conventional before
+ * fallbacks before unique).
+ *
+ * Unreadable faces never outrank a present face. Parent unique unreadable
+ * files never enter the shared enumerator (cannot prove run identity).
+ * Absence of every known durable face is a valid no-receipt state.
  */
 export async function readRunTerminalArtifact(runDirectory) {
     const artifactsDir = roleRunArtifactsDirectory(runDirectory);
+    const present = [];
+    const unreadable = [];
+    const consider = (read) => {
+        if (read === undefined || read.status === "absent")
+            return;
+        if (read.status === "present") {
+            present.push(read);
+            return;
+        }
+        unreadable.push(read);
+    };
     for (const file of RUN_TERMINAL_ARTIFACT_FILES) {
-        const path = join(artifactsDir, file);
-        const read = await readTerminalArtifactAtPath(path, file);
-        if (read !== undefined)
-            return read;
+        consider(await readTerminalArtifactAtPath(join(artifactsDir, file), file));
     }
-    // Publisher settled a durable failure outside the conventional error.json name.
     for (const relative of RUN_TERMINAL_ERROR_FALLBACK_RELATIVE_PATHS) {
-        const path = join(runDirectory, relative);
-        const read = await readTerminalArtifactAtPath(path, "error.json");
-        if (read !== undefined)
-            return read;
+        consider(await readTerminalArtifactAtPath(join(runDirectory, relative), "error.json"));
     }
-    // Same-run unique faces: path ownership is the run itself — no cross-run risk.
-    for (const path of await listUniqueErrorFallbackPaths([artifactsDir, runDirectory])) {
-        const read = await readTerminalArtifactAtPath(path, "error.json");
-        if (read !== undefined)
-            return read;
+    // Unique same-run + parent-bound faces: one enumerator shared with clear.
+    for (const path of await listSeamOwnedUniqueErrorFacePaths(runDirectory)) {
+        consider(await readTerminalArtifactAtPath(path, "error.json"));
     }
-    // Shared parent (runs/) unique faces: require publisher runId binding.
-    const expectedRunId = runIdFromRunDirectory(runDirectory);
-    for (const path of await listUniqueErrorFallbackPaths([dirname(runDirectory)])) {
-        const read = await readTerminalArtifactAtPath(path, "error.json");
-        if (read === undefined)
-            continue;
-        if (read.status === "present") {
-            if (!presentUniqueFallbackBoundToRun(read.body, expectedRunId))
-                continue;
-            return read;
-        }
-        // Unreadable parent unique file cannot prove run identity — do not adopt.
+    if (present.length > 0) {
+        present.sort((a, b) => failureClassRank(b.file) - failureClassRank(a.file));
+        return present[0];
+    }
+    if (unreadable.length > 0) {
+        return unreadable[0];
     }
     return { status: "absent" };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@akagilnc/pi-workflow-roles",
-  "version": "0.1.4673",
+  "version": "0.1.4698",
   "description": "Soul-bound workflow roles for Pi",
   "type": "module",
   "license": "Apache-2.0",

package/souls/audit-law.md

@@ -6,7 +6,10 @@
 
 ## 取证授权
 
-一切取证席位可为取证运行验证，用毕需清理干净并如实记载即可放行。
+> owner 2026-09-20 逐字：「说了无数次不准限制审核衙门的工具和方式。只有事后清理干净就行」
+> 指针：源卷 `~/.claude/projects/-Users-akagilnc-WorkSpace-ak-pi-workflow-roles/e4b50c8e-15c7-4c92-9263-959efadb24eb.jsonl`，owner uuid `54e54b19-27d8-48f9-a334-fc1409b66558`。
+
+一切取证席位的工具与方式不受限：读、写、装、跑、下探针皆可。唯一义务是**用毕清理干净并如实记载**，包括清理本次取证在 worktree 与临时目录之外创建的任何东西。
 
 ## 审官纪律
 
@@ -18,4 +21,6 @@ finding 提**类别**；实例只作证据。一次找齐全，不逐轮抽样
 
 ## 取证边界（owner 2026-09-05）
 
-探针、临时文件、临时家只准落在本次工作区（worktree）与系统临时目录之内；**这两处之外的任何路径一律不得删除、覆写或移动**，「用完恢复原样」。
+> 逐字：「角色的 bash 不该有权删 worktree 和 tmpdir 之外的东西……加上这个限制」
+
+本条只禁销毁**既存之物**：本次工作区（worktree）与系统临时目录之外的任何既存路径，不得删除、覆写或移动。本次取证自己在那之外创建的东西不在此列——按《取证授权》用毕清理干净。这两处之内不设限制。

package/souls/countersign.md

@@ -23,7 +23,7 @@
 
 **五、符合陛下意图** 先根据起居录对话，判断陛下意图。再证实票面是否是陛下想要的，对于修复票，判断 根因是什么、证据在哪 。对于新功能设计票，判断设计是不是合理，是不是陛下想要的方向。以及 因果链本身站不站得住
 
-各步取证按《审法·取证边界》：读码、开卷、传召皆可；探针只落 worktree 与临时目录，不得删改其外任何路径。交付时候清理回原样
+各步取证按《审法·取证授权》：工具与方式不受限，读码、开卷、传召、下探针皆可；不得删除、覆写或移动 worktree 与临时目录之外的既存路径（《审法·取证边界》）。交付时候清理回原样
 
 ## 审读五问
 

package/souls/gleaner-left.md

@@ -6,5 +6,5 @@
 - 无锚定：不接收票面、判词与庭审史。案件＝合并候选的全幅 diff 与仓库现状，看其本身对不对劲，此外不接收方向性指令。
 - 拾遗之责：bug 与边界、安全、命名与一致性、文档漂移、复杂度增长、测试质量、跨片接缝等。
 - 量尺：宿主宪法、仓级 ADR 与《复杂度与测试质量法》。
-- 取证工具一切自取，按《审法·取证边界》：只读；探针只落 worktree 与临时目录，不得删改其外任何路径，如实记录。
+- 取证工具与方式不受限，一切自取，按《审法·取证授权》：用毕清理干净并如实记载。不得删除、覆写或移动 worktree 与临时目录之外的既存路径（《审法·取证边界》）。
 - 只上弹章，不修复、不裁决。

package/souls/notary.md

@@ -23,7 +23,7 @@
 任一病成立，点名该条驳回；拿不准陛下本意的，上呈。
 
 方法：按条封驳。
-取证按《审法·取证边界》。无法解决的上抛陛下。
+取证按《审法·取证授权》与《取证边界》。无法解决的上抛陛下。
 
 ## 结论
 

package/souls/quality-law.md

@@ -8,6 +8,15 @@
 
 取舍位次：过测试 → 显意图 → 无重复 → 最少元素。
 
+## 先搜，再想简单的（owner 2026-09-20）
+
+> 逐字：「请你们思考实现方式的时候。多搜搜互联网，多想简单的方式，不是在那加加加，加一堆烂机制最终还要烧我的token来删！」
+> 指针：源卷 `~/.claude/projects/-Users-akagilnc-WorkSpace-ak-pi-workflow-roles/e4b50c8e-15c7-4c92-9263-959efadb24eb.jsonl`，owner uuid `04255552-6b2a-45ee-9e9e-59a068b960cc`。
+
+动手写机制之前：先搜互联网，确认这是不是已知问题、生态里有没有现成解法（官方文档优先）。再问最简单的做法是什么——包括「换一个前置选择」而不是「给现有选择打补丁」。
+
+自撰机制是最后手段。同一处只增不减时，回查根因，不得靠再补一层收场。
+
 ## 测试对行为负责
 
 测试只保**调用输入正确**的最短确定性案：从真实入口进入，在外部可见的结构化结果上断言，秒级完成。涉真实宿主、真实 LLM、真实并发、真实网络的行为，不写测试；以真跑为证。

package/souls/reviewer.md

@@ -4,6 +4,6 @@
 
 - 风闻奏事，言不为狱：弹章（finding）不是权威、不负坐实义务。弹章须指明所劾之处（文件/条文指针），说错无罪。
 - 独立机关，直属陛下：不接收输入 prompt。案件＝固定的被评审目标，目标或事实前提无法成立时如实拒绝；方法＝canonical Skill；其余一切自取。
-- 取证工具一切自取，按《审法·取证边界》：只读；探针只落 worktree 与临时目录，不得删改其外任何路径。有权抽查≠有责核实：对存疑处可开卷、可下探针，如实记录即可。不跑全量测试套件。
+- 取证工具与方式不受限，一切自取，按《审法·取证授权》：读、写、装、跑、下探针皆可，用毕清理干净并如实记载。不得删除、覆写或移动 worktree 与临时目录之外的既存路径（《审法·取证边界》）。有权抽查≠有责核实。
 - 劾前逐项过改动清单。固定目标内每项改动都要标明由票面哪条驱动：标不出来的即为夹带（默认值、护栏、平行机制、仅测试用的生产钩子同论）；票面有要求而清单中没有的即为缺口。二者同为 finding。
 - 重点劾三事：违宪（与既裁法源 ADR、铁律相抵）、测试必要性（最小必要成本法）、复杂度（可删不删、同形状第二份）。劾的范围＝眼前一切：票面、实现、测试、输入 prompt 与给你的派单命令本身。唯一例外是陛下亲笔——援引此例外必须引陛下原话为证。

package/src/compliance-transport.ts

@@ -5,6 +5,7 @@ import type { HostContext } from "./host-contracts.ts";
 import type { NoReceiptLifecycleFacts } from "./receipt-delivery-policy.ts";
 import type { PublicSummonResult } from "./public-role-summons.ts";
 import { OFFICER_CONCLUSION_REASK } from "./gatekeeper-role.ts";
+import { coalesceSubmissionRows } from "./public-cli/terminal.ts";
 
 export type ComplianceNoReceipt = NoReceiptLifecycleFacts & { status: "no-receipt"; usage?: Usage };
 /**
@@ -149,7 +150,9 @@ async function projectAuditorTerminal(summoned: PublicSummonResult): Promise<Com
     };
   }
   if (outcome.kind === "failure") {
-    const rows = outcome.payloads ?? summoned.terminal?.submissions ?? [];
+    // #953: history stays on the historical carrier; do not read failure.payloads
+    // as if they were the current failure result (#836 A.3 beside-channel).
+    const rows = summoned.terminal?.submissions ?? [];
     return {
       status: "transport_failure",
       diagnostic: outcome.diagnostic,
@@ -159,7 +162,10 @@ async function projectAuditorTerminal(summoned: PublicSummonResult): Promise<Com
     };
   }
   if (outcome.kind === "accepted") {
-    const rows = outcome.payloads ?? summoned.terminal?.submissions ?? [];
+    const rows = coalesceSubmissionRows(
+      outcome.payloads,
+      summoned.terminal?.submissions,
+    );
     if (rows.length === 0) {
       return readComplianceCandidate({}, usage);
     }

package/src/gatekeeper-role.ts

@@ -260,20 +260,20 @@ function projectOfficerDecision(
  */
 function thisCourtOfficerPayloads(terminal: TerminalResult | undefined): readonly unknown[] {
   const outcome = terminal?.roleOutcome;
+  // This-court identity only from accepted/audit_escalation settlement payloads
+  // (#879). Failure history is not this-court (#953) — it rides submissions.
   if (outcome !== undefined && (outcome.kind === "accepted" || outcome.kind === "audit_escalation")) {
     if (outcome.payloads !== undefined && outcome.payloads.length > 0) return outcome.payloads;
   }
-  if (outcome?.kind === "failure" && outcome.payloads !== undefined && outcome.payloads.length > 0) {
-    return outcome.payloads;
-  }
   // No sole-row identity guess: undivided submissions are not this-court (#879).
   return [];
 }
 
-/** Failure/transport channel may still surface every recorded payload beside the failure (#836 A.3). */
+/**
+ * Failure/transport channel surfaces recorded history beside the failure
+ * (#836 A.3) via the historical carrier only (#953 — not failure.payloads).
+ */
 function officerFailurePayloads(terminal: TerminalResult | undefined): readonly unknown[] {
-  const outcome = terminal?.roleOutcome;
-  if (outcome?.kind === "failure") return outcome.payloads ?? terminal?.submissions ?? [];
   return terminal?.submissions ?? [];
 }
 

package/src/public-cli/countersign-run.ts

@@ -31,6 +31,7 @@ import {
 } from "../package-resources/engine-material.ts";
 import { CliUsageError } from "./cli-errors.ts";
 import { projectCourtTicketNumbers } from "../diarist-contracts.ts";
+import { readableGateItem } from "../readable-gate-item.ts";
 import { isSafePositiveTicketNumber } from "../run-ticket-number.ts";
 import {
   admitCountersignInvocation,
@@ -139,13 +140,74 @@ export type CourtDiaristIdentity =
       readonly courtTicketNumbers?: readonly number[];
     }
   | { readonly kind: "unbound" }
-  | { readonly kind: "escalate" };
+  | {
+      readonly kind: "escalate";
+      /** Honest diagnostic from diarist escalate payload (#953) — never invent 认不出. */
+      readonly diagnostic: string;
+    };
 
 export type CourtDiaristInvocationResult = {
   readonly identity: CourtDiaristIdentity;
   readonly failedWithoutEscalate?: { readonly diagnostic: string };
 };
 
+function isRecord(value: unknown): value is Record<string, unknown> {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+
+function isEscalatePayload(payload: unknown): boolean {
+  if (!isRecord(payload)) return false;
+  return (
+    payload.status === "escalate" || payload.countersignStatus === "escalate"
+  );
+}
+
+/**
+ * Rows a parent may read from a nested diarist terminal (#836 / #953).
+ * Accepted/audit use role result payloads; failure history is submissions only.
+ */
+function courtDiaristPayloadRows(
+  roleOutcome: TerminalRoleOutcome | undefined,
+  submissions: readonly unknown[] | undefined,
+): readonly unknown[] {
+  if (roleOutcome === undefined) return submissions ?? [];
+  if (roleOutcome.kind === "accepted" || roleOutcome.kind === "audit_escalation") {
+    return roleOutcome.payloads ?? [];
+  }
+  if (roleOutcome.kind === "failure") return submissions ?? [];
+  return [];
+}
+
+/**
+ * Parent diagnostic for court-diarist escalate (#953 / 失败诚实 / 传话).
+ * Relays diarist escalate payload(s) via readableGateItem — never invents
+ * "cannot identify court target" when a payload already carries other facts
+ * (e.g. ticketNumber present with a different reason).
+ *
+ * Multiple escalate payloads remain reachable after the run (ADR 0003/0041;
+ * no courtAttempt sole-filter on diarist). Same law as secretariat parent face:
+ * every escalate receipt as-is, last = currentConclusion.
+ */
+function courtDiaristEscalateDiagnostic(
+  roleOutcome: TerminalRoleOutcome | undefined,
+  submissions?: readonly unknown[],
+): string {
+  const payloads = courtDiaristPayloadRows(roleOutcome, submissions);
+  const escalatePayloads: unknown[] = [];
+  for (const payload of payloads) {
+    if (isEscalatePayload(payload)) escalatePayloads.push(payload);
+  }
+  if (escalatePayloads.length === 0) return "court diarist station escalated";
+  // Single escalate: prior carrier (payload body only) — no shape churn.
+  if (escalatePayloads.length === 1) {
+    return `court diarist station escalated: ${readableGateItem(escalatePayloads[0])}`;
+  }
+  return `court diarist station escalated: ${readableGateItem({
+    receipts: escalatePayloads,
+    currentConclusion: escalatePayloads[escalatePayloads.length - 1],
+  })}`;
+}
+
 /** Env slice shared by court diarist identity summons (countersign / secretariat). */
 export type CourtDiaristSummonEnv = Pick<
   CountersignRunEnv,
@@ -171,14 +233,10 @@ export type CourtDiaristSummonEnv = Pick<
 function courtTicketNumbersFromOutcome(
   roleOutcome: TerminalRoleOutcome | undefined,
   principalTicket: number,
+  submissions?: readonly unknown[],
 ): readonly number[] | undefined {
   if (roleOutcome === undefined) return undefined;
-  const payloads =
-    roleOutcome.kind === "accepted" ||
-    roleOutcome.kind === "audit_escalation" ||
-    roleOutcome.kind === "failure"
-      ? (roleOutcome.payloads ?? [])
-      : [];
+  const payloads = courtDiaristPayloadRows(roleOutcome, submissions);
   let latest: readonly number[] | undefined;
   for (const payload of payloads) {
     if (
@@ -216,18 +274,7 @@ function courtDiaristEscalated(
   if (roleOutcome === undefined) return false;
   if (roleOutcome.kind === "audit_escalation") return true;
   if (roleOutcome.kind !== "accepted") return false;
-  return (roleOutcome.payloads ?? []).some((payload) => {
-    if (
-      typeof payload !== "object" ||
-      payload === null ||
-      Array.isArray(payload)
-    )
-      return false;
-    const record = payload as Record<string, unknown>;
-    return (
-      record.status === "escalate" || record.countersignStatus === "escalate"
-    );
-  });
+  return (roleOutcome.payloads ?? []).some(isEscalatePayload);
 }
 
 /**
@@ -292,11 +339,15 @@ export async function invokeCourtDiarist(
   });
 
   const roleOutcome = result.terminal?.roleOutcome;
+  const submissions = result.terminal?.submissions;
   // Escalate routing is a boolean over the preserved sequence (#881). Reasons and
   // payload bodies stay on roleOutcome — never rewritten into a sole identity reason.
   if (courtDiaristEscalated(roleOutcome)) {
     return {
-      identity: { kind: "escalate" },
+      identity: {
+        kind: "escalate",
+        diagnostic: courtDiaristEscalateDiagnostic(roleOutcome, submissions),
+      },
     };
   }
 
@@ -319,6 +370,7 @@ export async function invokeCourtDiarist(
     const courtTicketNumbers = courtTicketNumbersFromOutcome(
       roleOutcome,
       asserted,
+      submissions,
     );
     return {
       identity: {
@@ -390,9 +442,7 @@ export async function runCountersignCourtDiaristStation(
     );
 
     if (outcome.identity.kind === "escalate") {
-      throw new StationChildExhaustedError(
-        "court diarist station escalated (cannot identify court target)",
-      );
+      throw new StationChildExhaustedError(outcome.identity.diagnostic);
     }
     if (outcome.failedWithoutEscalate !== undefined) {
       throw new StationChildExhaustedError(
@@ -509,6 +559,7 @@ export async function runPublicCountersign(
 
           if (outcome.identity.kind === "escalate") {
             // 御批: 识别不了就上抛 — materialize and settle this countersign run.
+            // Diagnostic relays diarist escalate payload facts (#953).
             await materializeAdmission();
             await markRunAdmitted(admitted, env.principalAuthority);
             return await presentControlledFailure(
@@ -517,9 +568,7 @@ export async function runPublicCountersign(
                 timedOut: false,
                 code: null,
                 stderr: "",
-                thrown: new Error(
-                  "court diarist station escalated (cannot identify court target)",
-                ),
+                thrown: new Error(outcome.identity.diagnostic),
               },
               countersignAdapters(),
               env.principalAuthority,

package/src/public-cli/secretariat-run.ts

@@ -139,15 +139,14 @@ export async function runPublicSecretariat(
   );
 
   if (outcome.identity.kind === "escalate") {
+    // Diagnostic relays diarist escalate payload facts (#953) — never invent 认不出.
     return await presentControlledFailure(
       admitted,
       {
         timedOut: false,
         code: null,
         stderr: "",
-        thrown: new Error(
-          "court diarist station escalated (cannot identify court target)",
-        ),
+        thrown: new Error(outcome.identity.diagnostic),
       },
       secretariatAdapters(),
       env.principalAuthority,