@alphazede/bearing-lite 0.2.1 → 0.2.2

package/README.md

@@ -151,6 +151,16 @@ explain orientation; they never authorize a transition.
 
 ## Roles and authority
 
+Owner questions follow [the owner-stop policy](skills/bearing-lite/references/owner-stops.md).
+The integrated approval records bounded continuation with exclusions and expiry.
+The Router applies approved policy and fallbacks, batches nonblocking questions,
+and continues ready independent work while dependent work waits. Approval shows
+the first-package summary or subsequent changes with the complete package available.
+Local receipt metrics distinguish questions, round trips, response intervals and
+fully blocked time; no telemetry leaves the checkout. The transition preflight
+and scheduling remain procedural, including on skills-only hosts. A legacy
+Journey without explicit timing coverage reports unavailable, not zero wait.
+
 | Role | What it is | Executes | Notes |
 |---|---|---|---|
 | **Router** | Stateful planning controller | no | User-facing; planning-state writer; Expedition sequencing |

package/hooks/closeout.cjs

@@ -1,6 +1,8 @@
 #!/usr/bin/env node
 "use strict";
 
+const { ownerWaitMetrics } = require("./owner-stops.cjs");
+
 /**
  * Bearing Lite return/closeout adapter (CONTRACT-HOOK-01).
  * Advisory for ordinary handoff reminders; may BLOCK only protected completion.
@@ -154,6 +156,21 @@ function evaluate(input) {
       return result("ADVISE", "channel_open", RECOVERY_CHANNEL);
     }
 
+    // Explicit invocation by Router; native Stop mappings do not supply Journey JSON.
+    if (input.action_kind === "owner_wait_summary") {
+      if (input.mode === "protected_completion" || input.protected_completion === true) {
+        return unavailable("owner_wait_summary_is_not_completion");
+      }
+      try {
+        const metrics = ownerWaitMetrics(input.journey, input.as_of);
+        return { ...result("ADVISE", "owner_wait:" + metrics.status,
+          "Render metrics and coverage in the wave or closeout receipt; no authority is granted"),
+        owner_wait: metrics };
+      } catch {
+        return unavailable("owner_wait_records_invalid");
+      }
+    }
+
     const mode =
       input.mode === "protected_completion" || input.protected_completion === true
         ? "protected_completion"

package/hooks/owner-stops.cjs

@@ -0,0 +1,154 @@
+"use strict";
+
+// Procedural owner-stop preflight and local receipt metrics; never grants authority.
+const fs = require("node:fs");
+const object = (v) => v !== null && typeof v === "object" && !Array.isArray(v);
+const text = (v) => typeof v === "string" && v.trim().length > 0;
+const classes = ["A", "B", "C", "D", "E", "F"];
+const exclusions = ["scope_change", "budget_exhaustion", "owner_hold", "owner_only_actions"];
+
+function timestamp(value) {
+  if (typeof value !== "string" || !/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{3})?Z$/.test(value)) {
+    throw new Error("invalid_utc_timestamp");
+  }
+  const n = Date.parse(value);
+  if (!Number.isFinite(n) || new Date(n).toISOString() !== (value.includes(".") ? value : value.replace("Z", ".000Z"))) {
+    throw new Error("invalid_utc_timestamp");
+  }
+  return n;
+}
+
+function evaluateOwnerStop(input) {
+  const unknown = (reason) => ({ disposition: "NEEDS_MORE_EVIDENCE", reason });
+  if (!object(input) || !classes.includes(input.class) || typeof input.blocking !== "boolean" || !text(input.evidence_ref)) {
+    return unknown("owner_stop_input_missing");
+  }
+  if (["C", "E", "F"].includes(input.class)) {
+    return { disposition: input.blocking ? "ASK" : "QUEUE", reason: "owner_boundary" };
+  }
+  const a = input.authority;
+  const grant = a?.continuation;
+  if (!object(a) || a.effective !== true || a.state !== "active" || !text(a.id) ||
+      !object(a.approval_receipt) || Object.keys(a.approval_receipt).length === 0 ||
+      !object(grant) || grant.granted !== true || !text(grant.owner_decision_id) ||
+      !Array.isArray(a.granting_owner_decisions) || !a.granting_owner_decisions.includes(grant.owner_decision_id) ||
+      !Array.isArray(a.expiry_conditions) || !a.expiry_conditions.length || !a.expiry_conditions.every(text) ||
+      !Array.isArray(grant.exclusions) || !exclusions.every((item) => grant.exclusions.includes(item))) {
+    return unknown("continuation_grant_missing");
+  }
+  try {
+    const now = timestamp(input.checked_at);
+    if (grant.expires_at !== null && timestamp(grant.expires_at) <= now) return unknown("continuation_expired");
+  } catch {
+    return unknown("continuation_expiry_unverified");
+  }
+  const checks = ["scope", "budget", "exclusions", "expiry", "owner_hold"];
+  if (input.class === "A") checks.push("policy");
+  if (input.class === "B") checks.push("fallback");
+  if (!object(input.checks) || !checks.every((key) => input.checks[key] === true) || !text(input.resolution_ref)) {
+    return unknown("continuation_conditions_unverified");
+  }
+  return { disposition: "CONTINUE", reason: "approved_resolution", authority_id: a.id };
+}
+
+function unionLength(intervals) {
+  let total = 0;
+  let end = -Infinity;
+  for (const [start, stop] of intervals.sort((a, b) => a[0] - b[0])) {
+    total += Math.max(0, stop - Math.max(start, end));
+    end = Math.max(end, stop);
+  }
+  return total;
+}
+
+function ownerWaitMetrics(journey, asOf) {
+  if (!object(journey)) throw new Error("journey_missing");
+  if (journey.owner_wait_tracking === undefined || journey.owner_wait_tracking === false) {
+    return { status: "unavailable", reason: "owner_wait_not_tracked" };
+  }
+  if (journey.owner_wait_tracking !== true || !Array.isArray(journey.decisions) ||
+      !Array.isArray(journey.open_decisions) || !Array.isArray(journey.owner_blocked_intervals)) {
+    throw new Error("owner_wait_records_missing");
+  }
+  const now = timestamp(asOf);
+  const counts = Object.fromEntries(classes.map((key) => [key, 0]));
+  const metrics = { status: "measured", as_of: asOf, decisions_asked: 0, round_trips: 0,
+    queued: 0, pending: 0, cancelled: 0, by_class: counts,
+    response_ms: 0, pending_response_ms: 0, response_window_ms: 0, blocked_ms: 0 };
+  const ids = new Set();
+  const rounds = new Map();
+  const responses = [];
+  const windows = new Map();
+  for (const q of [...journey.decisions, ...journey.open_decisions]) {
+    if (!object(q) || q.record_type !== "owner_stop") continue;
+    if (!text(q.id) || ids.has(q.id)) throw new Error("duplicate_or_missing_decision_id");
+    ids.add(q.id);
+    if (!classes.includes(q.class) || !["queued", "asked", "answered", "cancelled"].includes(q.status) ||
+        !text(q.question) || !text(q.evidence_ref) || !text(q.why_owner) ||
+        typeof q.blocking !== "boolean" || !Array.isArray(q.affected_slices) || !q.affected_slices.every(text) ||
+        !["asked_at", "answered_at", "cancelled_at", "round_trip_id"].every((key) => Object.hasOwn(q, key))) {
+      throw new Error("invalid_owner_stop_record");
+    }
+    const asked = q.asked_at === null ? null : timestamp(q.asked_at);
+    const answered = q.answered_at === null ? null : timestamp(q.answered_at);
+    const cancelled = q.cancelled_at === null ? null : timestamp(q.cancelled_at);
+    const created = timestamp(q.created_at);
+    if (created > now || (asked !== null && (asked < created || asked > now))) throw new Error("invalid_question_time");
+    if (q.status === "queued" && (asked !== null || answered !== null || cancelled !== null)) throw new Error("invalid_queued_question");
+    if (q.status === "asked" && (asked === null || answered !== null || cancelled !== null)) throw new Error("invalid_pending_question");
+    if (q.status === "answered" && (asked === null || answered === null || cancelled !== null || !text(q.answer_ref))) throw new Error("invalid_answered_question");
+    if (q.status === "cancelled" && (cancelled === null || answered !== null)) throw new Error("invalid_cancelled_question");
+    const end = answered ?? cancelled ?? now;
+    if (end < (asked ?? created) || end > now) throw new Error("invalid_response_time");
+    if (q.status === "queued") metrics.queued++;
+    if (q.status === "asked") metrics.pending++;
+    if (q.status === "cancelled") metrics.cancelled++;
+    if (asked === null) {
+      if (q.round_trip_id !== null) throw new Error("unasked_round_trip");
+      continue;
+    }
+    if (!text(q.round_trip_id)) throw new Error("round_trip_missing");
+    if (rounds.has(q.round_trip_id) && rounds.get(q.round_trip_id) !== asked) {
+      throw new Error("inconsistent_round_trip_time");
+    }
+    rounds.set(q.round_trip_id, asked);
+    metrics.decisions_asked++;
+    counts[q.class]++;
+    responses.push([asked, end]);
+    windows.set(q.id, [asked, end]);
+    if (answered !== null) metrics.response_ms += end - asked;
+    if (q.status === "asked") metrics.pending_response_ms += now - asked;
+  }
+  const blocked = [];
+  for (const interval of journey.owner_blocked_intervals) {
+    if (!object(interval) || !Array.isArray(interval.decision_ids) || !interval.decision_ids.length ||
+        !interval.decision_ids.every(text) || new Set(interval.decision_ids).size !== interval.decision_ids.length ||
+        !Object.hasOwn(interval, "ended_at")) throw new Error("invalid_blocked_interval");
+    const start = timestamp(interval.started_at);
+    const end = interval.ended_at === null ? now : timestamp(interval.ended_at);
+    if (start > end || end > now) throw new Error("invalid_blocked_time");
+    for (const id of interval.decision_ids) {
+      const window = windows.get(id);
+      if (!window || start < window[0] || end > window[1]) throw new Error("blocked_interval_outside_question");
+    }
+    blocked.push([start, end]);
+  }
+  metrics.round_trips = rounds.size;
+  metrics.response_window_ms = unionLength(responses);
+  metrics.blocked_ms = unionLength(blocked);
+  return metrics;
+}
+
+module.exports = { evaluateOwnerStop, ownerWaitMetrics };
+
+if (require.main === module) {
+  try {
+    const [file, asOf] = process.argv.slice(2);
+    if (!file || !asOf) throw new Error("usage: owner-stops.cjs <journey.json> <as-of-UTC>");
+    console.log(JSON.stringify(ownerWaitMetrics(JSON.parse(fs.readFileSync(file, "utf8")), asOf)));
+  } catch (error) {
+    console.log(JSON.stringify({ status: "invalid", reason: error.code ? "journey_unreadable" :
+      /^[a-z_]+$/.test(error.message) ? error.message : "invalid_journey_input" }));
+    process.exitCode = 1;
+  }
+}

package/hooks/transition-order.cjs

@@ -12,6 +12,7 @@ const OUTCOMES = Object.freeze(["ADVISE", "REROUTE", "BLOCK", "UNAVAILABLE"]);
 const ENFORCEMENT = "procedural";
 const { evaluatePlanningReview } = require("./planning-review.cjs");
 const { evaluateAssuranceBudget } = require("./assurance-budget.cjs");
+const { evaluateOwnerStop } = require("./owner-stops.cjs");
 
 const RECOVERY_UNAVAILABLE =
   "Keep the current state, run the transition checklist procedurally, and record the result before retrying";
@@ -132,6 +133,17 @@ function evaluate(input) {
       return result("ADVISE", "channel_open", RECOVERY_CHANNEL);
     }
 
+    if (input.action_kind === "owner_stop_check") {
+      const stop = evaluateOwnerStop(input.owner_stop);
+      return {
+        ...result(stop.disposition === "NEEDS_MORE_EVIDENCE" ? "UNAVAILABLE" :
+          stop.disposition === "ASK" ? "REROUTE" : "ADVISE",
+        "owner_stop:" + stop.disposition + ":" + stop.reason,
+        "Apply references/owner-stops.md; this check grants no action or dispatch authority"),
+        owner_stop: stop,
+      };
+    }
+
     if (input.action_kind === "planning_review_transition") {
       const verdict = evaluatePlanningReview(input.planning_review);
       if (verdict.outcome === "PASS") {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@alphazede/bearing-lite",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "description": "Skills-first Agent Plugin for planning, routing, bounded execution, and independent review of repository work—without CLI, MCP, server, or hidden runtime state.",
   "keywords": [
     "agent-plugins",

package/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
   "name": "bearing-lite",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "description": "Skills-first portable plugin that routes repository work through the smallest valid planning stages and agent roles, using project Markdown as the only task record.",
   "author": {
     "name": "William Rumph / AlphaZede",

package/schemas/authority.schema.json

@@ -23,28 +23,22 @@
     "approval_receipt"
   ],
   "properties": {
-    "schema_version": { "type": "string", "minLength": 1 },
-    "schema": { "type": "string", "minLength": 1, "description": "Envelope schema identity" },
-    "id": { "type": "string", "minLength": 1, "description": "Authority envelope ID" },
-    "state": { "type": "string", "minLength": 1 },
-    "subject": { "type": "object", "minProperties": 1, "additionalProperties": true },
-    "repositories": {
-      "type": "array",
-      "items": { "type": "object", "additionalProperties": true }
-    },
-    "baseline": { "type": "object", "minProperties": 1, "additionalProperties": true },
-    "granting_owner_decisions": {
-      "type": "array",
-      "items": { "type": "string", "minLength": 1 }
-    },
+    "schema_version": {"type": "string", "minLength": 1},
+    "schema": {"type": "string", "minLength": 1, "description": "Envelope schema identity"},
+    "id": {"type": "string", "minLength": 1, "description": "Authority envelope ID"},
+    "state": {"type": "string", "minLength": 1},
+    "subject": {"type": "object", "minProperties": 1, "additionalProperties": true},
+    "repositories": {"type": "array", "items": {"type": "object", "additionalProperties": true}},
+    "baseline": {"type": "object", "minProperties": 1, "additionalProperties": true},
+    "granting_owner_decisions": {"type": "array", "items": {"type": "string", "minLength": 1}},
     "allowed": {
       "type": "object",
       "additionalProperties": true,
       "required": ["scope", "actions", "paths"],
       "properties": {
-        "scope": { "type": "array", "items": { "type": "string" } },
-        "actions": { "type": "array", "items": { "type": "string" } },
-        "paths": { "type": "array", "items": { "type": "string" } }
+        "scope": {"type": "array", "items": {"type": "string"}},
+        "actions": {"type": "array", "items": {"type": "string"}},
+        "paths": {"type": "array", "items": {"type": "string"}}
       }
     },
     "prohibited": {
@@ -52,24 +46,51 @@
       "additionalProperties": true,
       "required": ["scope", "actions", "paths"],
       "properties": {
-        "scope": { "type": "array", "items": { "type": "string" } },
-        "actions": { "type": "array", "items": { "type": "string" } },
-        "paths": { "type": "array", "items": { "type": "string" } }
+        "scope": {"type": "array", "items": {"type": "string"}},
+        "actions": {"type": "array", "items": {"type": "string"}},
+        "paths": {"type": "array", "items": {"type": "string"}}
       }
     },
-    "role_grants": {
-      "type": "array",
-      "items": { "type": "object", "additionalProperties": true }
-    },
-    "effective": { "type": "boolean", "description": "Machine-enforced effectiveness. Boolean only: a string is not an effectiveness decision." },
-    "expiry_conditions": {
-      "type": "array",
-      "items": { "type": "string", "minLength": 1 }
-    },
-    "supersedes": {
-      "type": "array",
-      "items": { "type": "string" }
+    "role_grants": {"type": "array", "items": {"type": "object", "additionalProperties": true}},
+    "effective": {
+      "type": "boolean",
+      "description": "Machine-enforced effectiveness. Boolean only: a string is not an effectiveness decision."
     },
-    "approval_receipt": { "type": "object", "additionalProperties": true }
-  }
+    "expiry_conditions": {"type": "array", "items": {"type": "string", "minLength": 1}},
+    "supersedes": {"type": "array", "items": {"type": "string"}},
+    "approval_receipt": {"type": "object", "additionalProperties": true},
+    "continuation": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["granted", "owner_decision_id", "exclusions", "expires_at"],
+      "properties": {
+        "granted": {"type": "boolean"},
+        "owner_decision_id": {"type": "string", "minLength": 1},
+        "exclusions": {
+          "type": "array",
+          "uniqueItems": true,
+          "items": {"type": "string", "minLength": 1},
+          "allOf": [
+            {"contains": {"const": "scope_change"}},
+            {"contains": {"const": "budget_exhaustion"}},
+            {"contains": {"const": "owner_hold"}},
+            {"contains": {"const": "owner_only_actions"}}
+          ]
+        },
+        "expires_at": {"type": ["string", "null"], "format": "date-time", "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}(?:\\.\\d{3})?Z$"}
+      }
+    }
+  },
+  "allOf": [
+    {
+      "if": {"required": ["continuation"]},
+      "then": {
+        "properties": {
+          "expiry_conditions": {"minItems": 1},
+          "granting_owner_decisions": {"minItems": 1},
+          "approval_receipt": {"minProperties": 1}
+        }
+      }
+    }
+  ]
 }

package/schemas/journey.schema.json

@@ -5,29 +5,18 @@
   "description": "Append-only decisions and authority-event history plus the generation-bound checkout lease. The full mutable file digest is not the stable SEIT execution baseline. Extra lifecycle metadata is allowed at the document root. Lease identity fields stay closed.",
   "type": "object",
   "additionalProperties": true,
-  "required": [
-    "schema_version",
-    "journey",
-    "checkout_lease",
-    "decisions",
-    "open_decisions",
-    "planning_receipts",
-    "lineup_selection"
-  ],
+  "required": ["schema_version", "journey", "checkout_lease", "decisions", "open_decisions", "planning_receipts", "lineup_selection"],
   "properties": {
-    "schema_version": { "type": "string", "minLength": 1 },
+    "schema_version": {"type": "string", "minLength": 1},
     "journey": {
       "type": "object",
       "additionalProperties": true,
       "required": ["id", "title", "status", "planning_repository"],
       "properties": {
-        "id": { "type": "string", "minLength": 1 },
-        "title": { "type": "string", "minLength": 1 },
-        "status": {
-          "type": "string",
-          "enum": ["planning", "implementation", "complete", "cancelled"]
-        },
-        "planning_repository": { "type": "string", "minLength": 1 }
+        "id": {"type": "string", "minLength": 1},
+        "title": {"type": "string", "minLength": 1},
+        "status": {"type": "string", "enum": ["planning", "implementation", "complete", "cancelled"]},
+        "planning_repository": {"type": "string", "minLength": 1}
       }
     },
     "checkout_lease": {
@@ -45,57 +34,162 @@
         "state"
       ],
       "properties": {
-        "journey": { "type": "string", "minLength": 1 },
-        "controller": { "type": "string", "minLength": 1 },
-        "repository": { "type": "string", "minLength": 1 },
-        "checkout": { "type": "string", "minLength": 1 },
-        "branch": { "type": "string", "minLength": 1 },
-        "candidate_revision": { "type": "string", "minLength": 1 },
-        "acquired_at": { "type": "string", "minLength": 1 },
-        "generation": { "type": "integer", "minimum": 1 },
-        "state": { "enum": ["active", "released"] },
-        "released_at": { "type": "string", "format": "date-time" },
-        "release_reason": { "type": "string", "minLength": 1 }
-      },
-      "if": {
-        "properties": {
-          "state": { "const": "released" }
-        }
+        "journey": {"type": "string", "minLength": 1},
+        "controller": {"type": "string", "minLength": 1},
+        "repository": {"type": "string", "minLength": 1},
+        "checkout": {"type": "string", "minLength": 1},
+        "branch": {"type": "string", "minLength": 1},
+        "candidate_revision": {"type": "string", "minLength": 1},
+        "acquired_at": {"type": "string", "minLength": 1},
+        "generation": {"type": "integer", "minimum": 1},
+        "state": {"enum": ["active", "released"]},
+        "released_at": {"type": "string", "format": "date-time"},
+        "release_reason": {"type": "string", "minLength": 1}
       },
-      "then": {
-        "required": ["released_at", "release_reason"]
-      }
+      "if": {"properties": {"state": {"const": "released"}}},
+      "then": {"required": ["released_at", "release_reason"]}
     },
     "history": {
       "type": "object",
       "additionalProperties": true,
       "description": "Optional append-only Journey history wrapper",
       "properties": {
-        "decisions": { "type": "array", "items": { "type": "object", "additionalProperties": true } },
-        "authority_events": { "type": "array", "items": { "type": "object", "additionalProperties": true } }
+        "decisions": {"type": "array", "items": {"type": "object", "additionalProperties": true}},
+        "authority_events": {"type": "array", "items": {"type": "object", "additionalProperties": true}}
       }
     },
     "decisions": {
       "type": "array",
       "description": "Append-only confirmed owner decisions",
-      "items": { "type": "object", "additionalProperties": true }
+      "items": {
+        "type": "object",
+        "additionalProperties": true,
+        "allOf": [
+          {
+            "if": {"required": ["record_type"], "properties": {"record_type": {"const": "owner_stop"}}},
+            "then": {"$ref": "#/$defs/ownerStop"}
+          }
+        ]
+      }
     },
     "authority_events": {
       "type": "array",
       "description": "Append-only authority grant, amend, revoke, or supersede events",
-      "items": { "type": "object", "additionalProperties": true }
+      "items": {"type": "object", "additionalProperties": true}
     },
     "open_decisions": {
       "type": "array",
-      "items": { "type": "object", "additionalProperties": true }
+      "items": {
+        "type": "object",
+        "additionalProperties": true,
+        "allOf": [
+          {
+            "if": {"required": ["record_type"], "properties": {"record_type": {"const": "owner_stop"}}},
+            "then": {"$ref": "#/$defs/ownerStop"}
+          }
+        ]
+      }
     },
-    "planning_receipts": {
+    "planning_receipts": {"type": "array", "items": {"type": "object", "additionalProperties": true}},
+    "lineup_selection": {"type": "object", "additionalProperties": true},
+    "owner_wait_tracking": {"type": "boolean", "description": "Explicit coverage marker; absence is unavailable, never zero owner wait."},
+    "owner_blocked_intervals": {
       "type": "array",
-      "items": { "type": "object", "additionalProperties": true }
-    },
-    "lineup_selection": {
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["decision_ids", "started_at", "ended_at"],
+        "properties": {
+          "decision_ids": {"type": "array", "minItems": 1, "uniqueItems": true, "items": {"type": "string", "minLength": 1}},
+          "started_at": {"type": "string", "format": "date-time", "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}(?:\\.\\d{3})?Z$"},
+          "ended_at": {"type": ["string", "null"], "format": "date-time", "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}(?:\\.\\d{3})?Z$"}
+        }
+      }
+    }
+  },
+  "$defs": {
+    "ownerStop": {
       "type": "object",
-      "additionalProperties": true
+      "additionalProperties": true,
+      "required": [
+        "record_type",
+        "id",
+        "class",
+        "question",
+        "why_owner",
+        "evidence_ref",
+        "affected_slices",
+        "blocking",
+        "status",
+        "created_at",
+        "asked_at",
+        "answered_at",
+        "cancelled_at",
+        "round_trip_id"
+      ],
+      "properties": {
+        "record_type": {"const": "owner_stop"},
+        "id": {"type": "string", "minLength": 1},
+        "class": {"enum": ["A", "B", "C", "D", "E", "F"]},
+        "question": {"type": "string", "minLength": 1},
+        "why_owner": {"type": "string", "minLength": 1},
+        "evidence_ref": {"type": "string", "minLength": 1},
+        "affected_slices": {"type": "array", "uniqueItems": true, "items": {"type": "string", "minLength": 1}},
+        "blocking": {"type": "boolean"},
+        "status": {"enum": ["queued", "asked", "answered", "cancelled"]},
+        "created_at": {"type": "string", "format": "date-time", "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}(?:\\.\\d{3})?Z$"},
+        "asked_at": {"type": ["string", "null"], "format": "date-time", "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}(?:\\.\\d{3})?Z$"},
+        "answered_at": {"type": ["string", "null"], "format": "date-time", "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}(?:\\.\\d{3})?Z$"},
+        "cancelled_at": {"type": ["string", "null"], "format": "date-time", "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}(?:\\.\\d{3})?Z$"},
+        "round_trip_id": {"type": ["string", "null"], "minLength": 1},
+        "answer_ref": {"type": "string", "minLength": 1}
+      },
+      "allOf": [
+        {
+          "if": {"properties": {"status": {"const": "queued"}}},
+          "then": {
+            "properties": {
+              "asked_at": {"type": "null"},
+              "answered_at": {"type": "null"},
+              "cancelled_at": {"type": "null"},
+              "round_trip_id": {"type": "null"}
+            }
+          }
+        },
+        {
+          "if": {"properties": {"status": {"const": "asked"}}},
+          "then": {
+            "properties": {
+              "asked_at": {"type": "string"},
+              "round_trip_id": {"type": "string", "minLength": 1},
+              "answered_at": {"type": "null"},
+              "cancelled_at": {"type": "null"}
+            }
+          }
+        },
+        {
+          "if": {"properties": {"status": {"const": "answered"}}},
+          "then": {
+            "properties": {
+              "asked_at": {"type": "string"},
+              "answered_at": {"type": "string"},
+              "cancelled_at": {"type": "null"},
+              "round_trip_id": {"type": "string", "minLength": 1}
+            },
+            "required": ["answer_ref"]
+          }
+        },
+        {
+          "if": {"properties": {"status": {"const": "cancelled"}}},
+          "then": {"properties": {"cancelled_at": {"type": "string"}, "answered_at": {"type": "null"}}}
+        }
+      ]
+    }
+  },
+  "allOf": [
+    {
+      "if": {"required": ["owner_wait_tracking"], "properties": {"owner_wait_tracking": {"const": true}}},
+      "then": {"required": ["owner_blocked_intervals"]}
     }
-  }
+  ]
 }

package/skills/bearing-lite/SKILL.md

@@ -3,7 +3,7 @@ name: bearing-lite
 description: Bearing Lite Router for Journeys. Not for ordinary work, assigned packets, implementation, or publication.
 ---
 
-The Router alone writes Journey planning state, owns owner conversation, and owns Expedition sequencing;
+Router alone writes Journey planning state, owns owner conversation, and owns Expedition sequencing;
 planning nodes return owner questions. Plugin hosts are partial; skill-copy is skills-only.
 
 1. Say `Preparing this Journey.` Acquire or resume a generation-bound checkout lease before
@@ -19,14 +19,14 @@ planning nodes return owner questions. Plugin hosts are partial; skill-copy is s
 4. Run Repository Fit → Set Bearings → Gather Supplies; unresolved material intent blocks Map the Route.
 5. Invoke Map the Route after settled intent. Do not ask for lineup or route
    before it; carry owner-supplied lineup and `review_cadence: at-end` as proposals.
-6. Enforce `references/review-policy.md`. Show one integrated
+6. Enforce `references/review-policy.md` and `references/owner-stops.md`. Show one integrated
    approval-or-change gate for outcome, design, route, lineup, role states,
    reasoning, cadence, and plan. Record the approved Journey type and snapshot.
    Never add a staged lineup or route-review gate.
    Dispatch only after approval.
 7. Crewmate and Explorer may continue in-wave. `work_class: light` slices go to the
    Light Implementer; a `reclassify: judgement` return re-dispatches to the Crewmate.
-   Use the visible wave receipt and update implementation and review once per wave.
+   Use visible wave receipts and update implementation and review once per wave.
 
 Return `READY`, `WAITING_ON`, `OWNER_DECISION_REQUIRED`, or `COMPLETE`.
 `max_assurance_rounds` is 1 per declared phase or wave-end, not per Journey;

package/skills/bearing-lite/references/lineups.md

@@ -41,6 +41,11 @@ never a deviation.
 
 Only verified primary unavailability activates its approved fallback. If
 both are unavailable, return `OWNER_DECISION_REQUIRED`.
+Activation within the frozen ordered fallbacks is a dated execution receipt,
+not a lineup amendment or a new owner approval. Verify the approved activation
+condition and remaining eligible routes before escalating exhaustion. A new
+identity or changed fallback condition requires an owner amendment; follow
+`owner-stops.md` for classification and batching.
 
 This catalog is the single lineup source. A legacy
 `~/.agents/bearing-lite/default-role-lineup.md` is never read or created;

package/skills/bearing-lite/references/owner-stops.md

@@ -0,0 +1,122 @@
+# Owner decisions and continuation
+
+One integrated approval covers the approved work and its continuation grant.
+Before asking, identify the unresolved decision, affected slices, evidence,
+and why the current policy or authority does not answer it. Never invent an
+extra role, review gate, approval checkpoint, or scope to resolve uncertainty.
+
+| Class | Decision | Router behavior |
+| --- | --- | --- |
+| A | Existing policy | Apply the cited rule and record a dated execution receipt. A real policy conflict is a C boundary decision. |
+| B | Approved fallback | Verify unavailability under the frozen fallback condition; activate the next eligible approved route and record evidence. Changing the lineup or fallback condition is C. |
+| C | Bound, scope, or policy conflict | Ask for the smallest amendment when it blocks ready work. Never reset a spent bound. |
+| D | Continue approved work | Use the effective continuation grant; never ask again while its conditions hold. Missing or expired authority is F. |
+| E | Integrated plan approval | Present the package once for approval or change; execution waits for explicit approval. |
+| F | Authority reserved to the owner | Ask only when the action is not already expressly authorized. Owner holds remain effective until explicitly lifted. |
+
+A/B/D continuation requires verified authority, scope, budget, exclusions,
+expiry, and owner-hold checks. Missing evidence is `NEEDS_MORE_EVIDENCE`, not
+permission and not automatically an owner question. Recover discoverable
+evidence first; escalate a real unresolved boundary as C or F. Fallback
+activation is an execution receipt, not an authority amendment. Only the
+owner changes the frozen lineup or grants authority.
+
+## Approval and authority
+
+Map the Route includes `authority.json.continuation` in the integrated gate:
+`granted`, `owner_decision_id`, named `exclusions`, and `expires_at` (UTC or
+null for event-based expiry). The surrounding envelope retains allowed and
+prohibited actions/paths, role grants, approval receipt, and nonempty
+`expiry_conditions`. Record explicit approval against the exact package;
+the continuation decision ID must occur in `granting_owner_decisions`.
+No grant is inferred from silence, a lineup selection, or passing checks.
+
+Always exclude scope change, budget exhaustion, owner holds, and owner-only
+actions from the continuation grant. A separate explicit action grant can
+authorize an otherwise owner-only action; continuation cannot create it.
+Revocation, supersession, expiry, or changed authority invalidates the grant.
+An older envelope without continuation remains valid historical data but
+provides no standing continuation grant. Do not manufacture a retroactive one.
+
+For first approval show outcome, scope/exclusions, role responsibilities,
+route, bounds, risks, open decisions and proof coverage in a concise summary.
+For revisions show changed requirements, design, proof cases, slices,
+lineup, authority and bounds against the last owner-reviewed package, citing
+both revisions/digests. Explain invalidated approvals and unresolved decisions.
+Keep the complete frozen `review.html` accessible in both cases; a diff or
+freeze PASS is neither approval nor proof of semantic completeness. An
+unchanged package does not need reapproval. A changed package returns to the
+same gate, never an extra gate.
+
+## Queue and continue
+
+Keep pending questions in the existing `journey.json.open_decisions` array
+as typed `record_type: owner_stop` records. Preserve stable IDs when moving
+answered records to `decisions`; append owner answers to normal history.
+Automatic resolutions and unsolicited owner directions remain normal dated
+receipts, not fabricated questions. Required fields are defined by
+`schemas/journey.schema.json` and checked by the metrics helper.
+
+Queue nonblocking questions until wave end and present one batch with the
+wave receipt. Queue nonblocking owner-only closeout actions until Journey
+end. Required credentials, publication prerequisites, or other owner-only
+dependencies surface immediately when they block ready work. Do not defer
+safety/integrity intervention or an explicit owner stop. Each actual
+presentation has a stable `round_trip_id`; questions in the same batch share
+that ID and the exact same presentation timestamp.
+Record `asked_at` when presented, not when drafted or queued; `answered_at`
+when the owner answers. Cancellation uses `cancelled_at`, never a fabricated
+answer. Times are UTC with a `Z` suffix and either whole seconds or exactly
+three fractional digits (milliseconds); normalize host timestamps before
+recording. Re-presenting an unanswered question keeps its ID and
+original asked time; it is not another distinct question.
+
+While waiting, walk the approved slice graph. Dispatch only READY slices
+with satisfied dependencies, active authority, valid lease, available route,
+and verified independence from the question and other running slices.
+Disjoint writes alone do not prove independence: check shared runtime,
+resources, integration order, and read/write dependencies. `parallel_safe`
+is evidence to inspect, not permission. Respect host concurrency limits and
+never dispatch completed or already-running work again. Keep dependent work
+pending. Owner holds apply to their stated scope, including the whole Journey
+when so directed; they cannot be bypassed by calling work independent.
+
+## Deterministic checks and measurement
+
+Before a proposed stop, run `hooks/transition-order.cjs` with
+`action_kind: owner_stop_check` and `owner_stop` containing `class`,
+`blocking`, `evidence_ref`, `resolution_ref`, `authority`, `checked_at`,
+and `checks`. Checks are explicit booleans: `scope`, `budget`, `exclusions`,
+`expiry`, `owner_hold`, plus `policy` for A or `fallback` for B. Router must
+verify them against the actual frozen inputs; the helper does not authenticate
+receipts or interpret arbitrary path globs or expiry prose. C/E/F need the
+class, evidence reference and blocking flag; return ASK or QUEUE. A/B/D
+return CONTINUE only with the grant and all required checks. This is a
+procedural transition adapter, not a new registered host event, permission
+grant, scheduler, or security boundary. Skills-only hosts execute the same
+checklist and disclose unavailable deterministic checks.
+
+New Journeys set `owner_wait_tracking: true` and initialize
+`owner_blocked_intervals: []`. Record intervals only while no authorized ready
+work can progress specifically because of unanswered owner questions. Each
+interval lists their `decision_ids`, `started_at`, and nullable `ended_at`.
+End the interval as soon as work can progress, even if some questions remain
+unanswered. Do not treat every dependency wait, off-hours gap, or commit gap as
+owner-blocked time. Never backfill unknown times. Legacy Journeys without
+tracking report `unavailable`, not zero waiting.
+
+Run `node <plugin root>/hooks/owner-stops.cjs <journey.json> <as-of-UTC>` at
+wave receipts and final closeout. It validates typed records, rejects duplicate
+IDs or inconsistent times, counts `decisions_asked`, distinct approval
+`round_trips`, pending/queued/cancelled questions and A–F counts, and reports
+`response_ms` (sum of completed response intervals), `pending_response_ms`,
+`response_window_ms` (union of asked-to-answer/cancellation/as-of intervals),
+and `blocked_ms` (union of the explicitly recorded fully blocked intervals).
+Overlapping questions are not additive wall-clock wait. Local records only:
+no telemetry or network transmission. Closeout renders these metrics and
+coverage limitations; it must not claim measured savings from legacy gaps.
+
+Operational target after settled scope: zero unnecessary stops per wave;
+one integrated approval batch and one closeout batch per unchanged Journey
+when closeout needs owner authority. Exceptions are recorded, never suppressed
+to hit a quota. Forecast savings only from verified classified observations.

package/skills/bearing-lite/references/review-policy.md

@@ -35,3 +35,8 @@ confirmation or rereview returns `OWNER_AMENDMENT_REQUIRED`.
 This gate reviews planning artifacts before dispatch. It never invokes a
 reviewer. Implementation assurance remains governed separately by
 `max_assurance_rounds` and task `required_assurance` / `assurance_rounds`.
+
+Owner presentation and continuation follow `owner-stops.md`: one integrated
+gate includes the bounded grant, first-approval summary or revision diff, open
+decisions, and access to the full frozen package. This adds no reviewer,
+review round, or approval checkpoint and does not alter the bounds above.

package/skills/explorer/SKILL.md

@@ -13,7 +13,6 @@ description: >
 Wave authority. Coordinates more and implements less than Crewmate.
 
 ## Inputs and match
-
 - **Inputs:** approved baseline, wave objective, packet graph, dependencies,
   scope, authority, lineup from the recorded Journey snapshot, visible wave
   receipt, acceptance, and compact return schema.
@@ -21,7 +20,6 @@ Wave authority. Coordinates more and implements less than Crewmate.
 - **Non-match:** one bounded packet needs no orchestration, multiple waves conflict, or assurance alone is requested.
 
 ## Algorithm
-
 1. Continue this wave when identity, authority, route, and generation are
    unchanged; otherwise start fresh. Verify wave readiness, packet boundaries,
    dependencies, and approved identities from the recorded Journey snapshot,
@@ -42,6 +40,9 @@ Wave authority. Coordinates more and implements less than Crewmate.
 4. Inspect compact returns against write sets and acceptance; integrate
    evidence without implementing. Update `implementation.json` and `review.html`
    once per wave, plus owner-decision or blocker changes.
+   Apply `../bearing-lite/references/owner-stops.md` for queued questions,
+   blocking prerequisites, proven-independent progress and owner holds; never
+   add unapproved roles or gates.
 5. Dispatch declared assurance automatically at wave-end on this wave's
    integrated candidate. Deterministic checks always run. Honor
    `max_assurance_rounds` of 1 per declared phase or wave from visible
@@ -53,7 +54,6 @@ Wave authority. Coordinates more and implements less than Crewmate.
    `COMPLETE`, deployment checks do not reopen assurance.
 
 ## Return and recovery
-
 Return `READY`, `REROUTED`, `WAITING_ON`, or `OWNER_DECISION_REQUIRED` with
 verdict, candidate_ref, changed_paths, tests, findings, and blocker. Reroute only from new evidence; three attempts per packet.
 

package/skills/map-the-route/SKILL.md

@@ -46,7 +46,8 @@ Fresh planning node. The Router writes Journey state and owns owner conversation
    requirements. Two `review.html` states: `planning-review` and `final-closeout`.
 5. Give every slice stable requirement/design/SEIT IDs, dependencies, exact
    write set, authority, role, session rule, evidence, recovery, and stop rule.
-6. Open and verify final HTML, then request exactly one integrated owner review
+6. Follow `../bearing-lite/references/owner-stops.md`.
+   Open and verify HTML, then request exactly one integrated owner review
    of outcome, design, route, lineup, cadence, and plan. Dispatch remains
    prohibited until approval. An owner change regenerates affected artifacts,
    then returns to this same gate; never insert a lineup or route-review pause.

package/skills/scribe/SKILL.md

@@ -22,6 +22,10 @@ Event side lane. Transcribes; cannot activate authority.
 
 1. Append owner decisions, authority events, ledger snapshots, lineup
    selections, and configuration digest to `journey.json` history.
+   Follow `../bearing-lite/references/owner-stops.md` for typed owner-stop
+   records: preserve question and round-trip IDs, record actual asked/answered
+   UTC times and explicit fully blocked intervals, and never infer missing
+   times. Automatic resolutions and owner steering are not invented questions.
 2. Do not activate authority or invent unresolved choices.
 3. Do not write Journey selections into `lineups.json` unless the owner
    asks to save a reusable profile.