@arbiterforge/ca-pi 0.16.1 → 0.16.2

package/README.md

@@ -2,25 +2,25 @@
 
 <img src="docs/readme-hero.webp" alt="codeArbiter. Hard gates for agentic coding." width="100%">
 
-**Shared enforcement and project-context parity across Claude Code, Codex CLI, and Pi.**
+**Open-source governance and hard gates for AI coding agents across Claude Code, Codex CLI, and Pi.**
 
-One repository-owned governance layer for tests, reviews, security checks, decisions, and durable
-project context. You decide. codeArbiter enforces.
+codeArbiter is a repository-owned governance layer for tests, reviews, security checks, decisions,
+and durable project context. You decide. codeArbiter enforces.
 
 <img alt="Claude Code plugin" src="https://img.shields.io/badge/Claude_Code-plugin-d97757">
 <img alt="Codex plugin" src="https://img.shields.io/badge/OpenAI_Codex-plugin-10a37f">
 <img alt="Pi Feature Forge preview" src="https://img.shields.io/badge/ca--pi-Feature_Forge_preview-d97757">
-<img alt="version 2.24.1" src="https://img.shields.io/badge/version-2.24.1-2b7489">
+<img alt="version 2.24.2" src="https://img.shields.io/badge/version-2.24.2-2b7489">
 <img alt="core lanes" src="https://img.shields.io/badge/core_lanes-18-555">
 <img alt="skills" src="https://img.shields.io/badge/skills-22-555">
 <img alt="agents" src="https://img.shields.io/badge/agents-20-555">
 <img alt="license AGPL v3" src="https://img.shields.io/badge/license-AGPL_v3-3da639">
 
-[Start learning](https://arbiterforge.github.io/codeArbiter/learn/)
+[Start learning](https://codearbiter.dev/learn/)
 &nbsp;&nbsp;·&nbsp;&nbsp;
-[Install](https://arbiterforge.github.io/codeArbiter/getting-started/install/)
+[Install](https://codearbiter.dev/getting-started/install/)
 &nbsp;&nbsp;·&nbsp;&nbsp;
-[Browse the reference](https://arbiterforge.github.io/codeArbiter/reference/)
+[Browse the reference](https://codearbiter.dev/reference/)
 
 <sub>Install it globally. It stays dormant until a repository explicitly opts in.</sub>
 
@@ -54,13 +54,13 @@ takes the full spec, test-first, review, and PR path.
 
 The Codex path was live-verified on **Codex CLI 0.144.1** with trusted SessionStart injection and a
 real `[H-03]` PreToolUse block. The dated
-[Claude Code + Codex evidence](https://arbiterforge.github.io/codeArbiter/getting-started/claude-code-and-codex/)
+[Claude Code + Codex evidence](https://codearbiter.dev/getting-started/claude-code-and-codex/)
 separates continuously verified packaging from the live checks that require a model-backed turn.
 
 ## See it catch something
 
 The landing page includes a
-[faithful replay of a shipped hook invocation](https://arbiterforge.github.io/codeArbiter/#proof).
+[faithful replay of a shipped hook invocation](https://codearbiter.dev/#proof).
 It invokes the real `pre-bash.py` guard, records the source digest, proves the blocked command never
 ran, and preserves the exact stderr and audit effect. It does not pretend that a direct hook replay
 proves host discovery or trust.
@@ -87,7 +87,7 @@ The user owns the decision. The repository keeps the evidence.
 ## Get running
 
 Choose the adapter for the coding host you already use. The
-[host chooser](https://arbiterforge.github.io/codeArbiter/getting-started/choose-your-host/) covers
+[host chooser](https://codearbiter.dev/getting-started/choose-your-host/) covers
 stability, command syntax, trust, and platform differences.
 
 | Host | Adapter | Command form | Status |
@@ -101,7 +101,7 @@ Git 2.45.0+ with `--no-lazy-fetch` on all three governance hosts; unavailable fl
 verification with an upgrade prerequisite, never an implicit fetch fallback. Pi also requires Node.js
 22.19+. If Python is missing, Pi installs its final wrappers but blocks mutating calls and points to
 `/ca-doctor`; Claude Code and Codex surface an interpreter breadcrumb instead of silently claiming
-governance is active. The [compatibility matrix](https://arbiterforge.github.io/codeArbiter/getting-started/compatibility/)
+governance is active. The [compatibility matrix](https://codearbiter.dev/getting-started/compatibility/)
 defines the supported native Git/runtime and linked-worktree boundary; mixed Windows Git and WSL Git
 over one shared repository are not supported.
 
@@ -205,7 +205,7 @@ project to `decompose`. `doctor` must report a healthy interpreter, current payl
 live-fire probe before you treat the repository as governed.
 
 Follow the complete
-[first-repository walkthrough](https://arbiterforge.github.io/codeArbiter/getting-started/quickstart/)
+[first-repository walkthrough](https://codearbiter.dev/getting-started/quickstart/)
 for expected output, proof, and recovery.
 
 ## Practice before using your own repository
@@ -225,14 +225,14 @@ The site is designed as a continuous path from first contact to source-backed op
 
 | Need | Start here | You finish able to... |
 |---|---|---|
-| Understand the promise | [What is codeArbiter](https://arbiterforge.github.io/codeArbiter/overview/) | explain command, route, dispatch, gate, and ship |
-| Choose and install a host | [Start](https://arbiterforge.github.io/codeArbiter/getting-started/choose-your-host/) | install, trust, activate, and verify one adapter |
-| Learn in order | [Learning path](https://arbiterforge.github.io/codeArbiter/learn/) | progress from foundation through the power-user capstone |
-| Run daily work | [Workflows](https://arbiterforge.github.io/codeArbiter/guides/feature-lane/) | select and complete the smallest correct lane |
-| Understand the model | [Concept map](https://arbiterforge.github.io/codeArbiter/concepts/) | trace routing, decisions, context, review, and audit evidence |
-| Diagnose a problem | [Troubleshooting](https://arbiterforge.github.io/codeArbiter/guides/troubleshooting/) | follow a symptom to a deterministic recovery |
-| Look up exact behavior | [Reference](https://arbiterforge.github.io/codeArbiter/reference/) | inspect generated commands, skills, agents, hooks, and configuration |
-| Evaluate preview work | [Feature Forge](https://arbiterforge.github.io/codeArbiter/feature-forge/overview/) | opt in, verify the off switch, and understand the promotion bar |
+| Understand the promise | [What is codeArbiter](https://codearbiter.dev/overview/) | explain command, route, dispatch, gate, and ship |
+| Choose and install a host | [Start](https://codearbiter.dev/getting-started/choose-your-host/) | install, trust, activate, and verify one adapter |
+| Learn in order | [Learning path](https://codearbiter.dev/learn/) | progress from foundation through the power-user capstone |
+| Run daily work | [Workflows](https://codearbiter.dev/guides/feature-lane/) | select and complete the smallest correct lane |
+| Understand the model | [Concept map](https://codearbiter.dev/concepts/) | trace routing, decisions, context, review, and audit evidence |
+| Diagnose a problem | [Troubleshooting](https://codearbiter.dev/guides/troubleshooting/) | follow a symptom to a deterministic recovery |
+| Look up exact behavior | [Reference](https://codearbiter.dev/reference/) | inspect generated commands, skills, agents, hooks, and configuration |
+| Evaluate preview work | [Feature Forge](https://codearbiter.dev/feature-forge/overview/) | opt in, verify the off switch, and understand the promotion bar |
 
 Command, skill, agent, and hook-gate reference pages are generated from shipped source on every site
 build. Hand-authored guides teach the workflow; generated pages define the exact current surface.
@@ -274,7 +274,7 @@ The project record lives beside the code:
 └── overrides.log          append-only sanctioned bypass record
 ```
 
-The [.codearbiter directory reference](https://arbiterforge.github.io/codeArbiter/codearbiter-directory/)
+The [.codearbiter directory reference](https://codearbiter.dev/codearbiter-directory/)
 explains who creates, reads, and updates every artifact, plus its recovery rules.
 
 ### The hard gates
@@ -302,8 +302,8 @@ recommendation. The user still decides.
 `/ca:sprint` uses the same lenses for bounded non-hard decisions and writes every call to
 `.codearbiter/sprint-log.md` with a confidence flag. Security boundaries, irreversible operations,
 gate bypasses, merges, and unresolved questions remain true stops. See
-[SMARTS](https://arbiterforge.github.io/codeArbiter/concepts/smarts/) and
-[autonomous sprints](https://arbiterforge.github.io/codeArbiter/guides/autonomous-sprints/).
+[SMARTS](https://codearbiter.dev/concepts/smarts/) and
+[autonomous sprints](https://codearbiter.dev/guides/autonomous-sprints/).
 
 ## Core lanes
 
@@ -322,7 +322,7 @@ compatibility routes remain available in the complete reference.
 | Operate | `/ca:status`, `/ca:task`, `/ca:doctor`, `/ca:override` | Inspect state, manage the task board, verify enforcement, or log an allowed bypass |
 <!-- core-lane-chooser:end -->
 
-[Complete command reference](https://arbiterforge.github.io/codeArbiter/reference/commands/) includes
+[Complete command reference](https://codearbiter.dev/reference/commands/) includes
 advanced operations, compatibility routes, internal protocols, deprecation guidance, and host
 availability. The generated host catalogs remain inspectable in
 [`plugins/ca/COMMANDS.md`](./plugins/ca/COMMANDS.md),
@@ -348,8 +348,8 @@ The optional `/ca:sprint --farm` preview is a distinct opt-in network feature. I
 secret-redacted task context to the OpenAI-compatible endpoint you configure and is inert without
 the flag and provider key.
 
-See [Enforcement and Security](https://arbiterforge.github.io/codeArbiter/enforcement/) and the
-[Hooks Reference](https://arbiterforge.github.io/codeArbiter/hooks/) for the exact event, read,
+See [Enforcement and Security](https://codearbiter.dev/enforcement/) and the
+[Hooks Reference](https://codearbiter.dev/hooks/) for the exact event, read,
 write, block, and network contract.
 
 ### Pi operational contract
@@ -387,7 +387,7 @@ spending or trust requirements.
 | `ca-sandbox` | install the sibling plugin | real untrusted repositories and interactive `--with-claude` use |
 
 The source-backed
-[live Forge catalog](https://arbiterforge.github.io/codeArbiter/feature-forge/whats-in-the-forge/)
+[live Forge catalog](https://codearbiter.dev/feature-forge/whats-in-the-forge/)
 names every opt-in, off switch, dependency, trust boundary, and promotion signal.
 
 The farm preview uses one checked-in `farm.js` backend across supported hosts. A Pi-native embedded
@@ -424,8 +424,8 @@ Update the Claude marketplace explicitly:
 
 The operator-facing environment-variable catalog, defaults, accepted values, safety boundaries,
 and verification steps live in the
-[Configuration Reference](https://arbiterforge.github.io/codeArbiter/reference/configuration/).
-Release notes are in the [Changelog](https://arbiterforge.github.io/codeArbiter/changelog/).
+[Configuration Reference](https://codearbiter.dev/reference/configuration/).
+Release notes are in the [Changelog](https://codearbiter.dev/changelog/).
 
 </details>
 
@@ -437,7 +437,7 @@ with Claude Code's plugin manager, run `codex plugin remove ca-codex@codearbiter
 `pi remove` with the pinned Git source for Pi. The repository-owned `.codearbiter/` record survives,
 so another supported host can keep using it.
 
-Follow [Uninstall and Disable](https://arbiterforge.github.io/codeArbiter/guides/uninstalling/) for
+Follow [Uninstall and Disable](https://codearbiter.dev/guides/uninstalling/) for
 host-specific removal, pinning, and verification.
 
 </details>
@@ -499,7 +499,7 @@ Inspect the repository, grant project trust, start a fresh Pi session, then run
 
 codeArbiter v2 is a ground-up rebuild of the earlier vendored `.agents/` framework as a native,
 multi-host plugin system. The complete record is in [`CHANGELOG.md`](./CHANGELOG.md) and the
-[site changelog](https://arbiterforge.github.io/codeArbiter/changelog/). The v1 implementation
+[site changelog](https://codearbiter.dev/changelog/). The v1 implementation
 remains available in early repository history.
 
 ## License and contributions

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arbiterforge/ca-pi",
-  "version": "0.16.1",
+  "version": "0.16.2",
   "license": "AGPL-3.0-only",
   "repository": {
     "type": "git",

package/plugins/ca-pi/CHANGELOG.md

@@ -4,6 +4,14 @@ All notable changes to `ca-pi` are documented in this file.
 
 ## [Unreleased]
 
+## [0.16.2] - 2026-10-04
+
+### Fixed
+
+- Refresh the shared prerequisite deadline and reviewer finding contract.
+- Correct approval guidance: Pi has an input event, but still needs a native
+  authority adapter before these workflows can run on Pi.
+
 ## [0.16.1] - 2026-10-04
 
 ### Fixed

package/plugins/ca-pi/helpers/artifacts/release.json

@@ -37,11 +37,11 @@
   },
   "context_qualification": {
     "darwin/amd64": {
-      "source_commit": "fa94c56afa59aaa3e429bf15613989bd444090f6",
+      "source_commit": "ed51f5030af5520d5ae67486c3c7776b76bcfae9",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "37253197914",
+      "run_id": "37265481193",
       "binary_sha256": "27fc51465a79c1525b1300b347cee4d09afde3c7b0d845414659302f5bbca2f7",
-      "observation_sha256": "f6a8c71afa0e06521de263ae49934ce33f4272ed40d0fec6d9a17f7a68357c87",
+      "observation_sha256": "d0fb266f27d266e247c38e806336d94f60581a32e6f84602bdcab2ca4caa3e20",
       "module_sha256": "d5cccd13647e2c3a2a752b94b34dec4d4fc6aec5ced8fb0abce6ec9346ba1a7e",
       "native_cases": [
         "TestContextBoundedRender",
@@ -53,11 +53,11 @@
       ]
     },
     "darwin/arm64": {
-      "source_commit": "fa94c56afa59aaa3e429bf15613989bd444090f6",
+      "source_commit": "ed51f5030af5520d5ae67486c3c7776b76bcfae9",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "37253197914",
+      "run_id": "37265481193",
       "binary_sha256": "3a3d61be18eba426db4f260b9cbae0d3d3c89f47efe184395d7f011cc3b4f59a",
-      "observation_sha256": "2ca37cd149e0efdf73929f0398334089cd3bbb1bba03c61407a485eb8edaecad",
+      "observation_sha256": "f90633dfe08215876ef5dbfd9ebddb2b20c48eb334dc52efb4e10af65216d9fa",
       "module_sha256": "d5cccd13647e2c3a2a752b94b34dec4d4fc6aec5ced8fb0abce6ec9346ba1a7e",
       "native_cases": [
         "TestContextBoundedRender",
@@ -69,11 +69,11 @@
       ]
     },
     "linux/amd64": {
-      "source_commit": "fa94c56afa59aaa3e429bf15613989bd444090f6",
+      "source_commit": "ed51f5030af5520d5ae67486c3c7776b76bcfae9",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "37253197914",
+      "run_id": "37265481193",
       "binary_sha256": "3b6178bb54d6a19fc56d99f8fced862ae151605a0373297a69e130d3857a8406",
-      "observation_sha256": "85f789dc87517f96042a8e88da689100bcd561ddda863e0986ace221f18dbbab",
+      "observation_sha256": "0a58c6c7a8e5673f602398c3a5ac477b00d0477e981e43aa0b36f1061683e412",
       "module_sha256": "d5cccd13647e2c3a2a752b94b34dec4d4fc6aec5ced8fb0abce6ec9346ba1a7e",
       "native_cases": [
         "TestContextBoundedRender",
@@ -85,11 +85,11 @@
       ]
     },
     "linux/arm64": {
-      "source_commit": "fa94c56afa59aaa3e429bf15613989bd444090f6",
+      "source_commit": "ed51f5030af5520d5ae67486c3c7776b76bcfae9",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "37253197914",
+      "run_id": "37265481193",
       "binary_sha256": "a5259074098932f815f33d3e1dea98e6d9a04277d1ada958469905da67d29437",
-      "observation_sha256": "50afdbe9ce2e9893cc3557fc230010baf5c093da6f0839f17ed15a3c45c69905",
+      "observation_sha256": "9cccf649f682ee7c0d62ed6a0fb4336479eb7f24a9977027811954d77f3c2efe",
       "module_sha256": "d5cccd13647e2c3a2a752b94b34dec4d4fc6aec5ced8fb0abce6ec9346ba1a7e",
       "native_cases": [
         "TestContextBoundedRender",
@@ -101,11 +101,11 @@
       ]
     },
     "windows/amd64": {
-      "source_commit": "fa94c56afa59aaa3e429bf15613989bd444090f6",
+      "source_commit": "ed51f5030af5520d5ae67486c3c7776b76bcfae9",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "37253197914",
+      "run_id": "37265481193",
       "binary_sha256": "8339c077262f861631631de49bca7cdafec5e0730b9e3676fd2db36f3c119036",
-      "observation_sha256": "56e2f848ba306bbf4acbb2febdfd298e08988761a53b87d9dded7bbf23c9a0ea",
+      "observation_sha256": "843fdcf7c1f8b171abbb3a6ed0d636a755ccd3898e24a33e7d651daaa1b233fc",
       "module_sha256": "d5cccd13647e2c3a2a752b94b34dec4d4fc6aec5ced8fb0abce6ec9346ba1a7e",
       "native_cases": [
         "TestContextBoundedRender",
@@ -117,11 +117,11 @@
       ]
     },
     "windows/arm64": {
-      "source_commit": "fa94c56afa59aaa3e429bf15613989bd444090f6",
+      "source_commit": "ed51f5030af5520d5ae67486c3c7776b76bcfae9",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "37253197914",
+      "run_id": "37265481193",
       "binary_sha256": "f7b193cf0d1eb9ecd233bf1588f6290c2fb8bc41ad327918a740beb2099f719c",
-      "observation_sha256": "5db05023f4fe8441c0e2f664fc0704f42967285a54566f801f9e37f9ad4819a5",
+      "observation_sha256": "72aa77d09842772a7918b1ebd3ba6d2d7ecfefc24256cd557fb66949fef7b0ec",
       "module_sha256": "d5cccd13647e2c3a2a752b94b34dec4d4fc6aec5ced8fb0abce6ec9346ba1a7e",
       "native_cases": [
         "TestContextBoundedRender",

package/plugins/ca-pi/hooks/_artifactauthoritylib.py

@@ -1325,6 +1325,8 @@ def _dispatch_prompt(request: dict[str, Any], *, legacy_inline: bool = False) ->
             "HTML to reconstruct artifact authority. "
             "Do not pass if the evidence is missing, unreadable or inconsistent. The locator "
             "is a reference to the complete immutable evidence, not replacement authority.\n"
+            "Each finding has exactly severity, code, message; severity must be BLOCK, WARN, or INFO. "
+            "code and message must be non-empty strings. Use an empty findings list when there are none.\n"
         )
     profile = (
         f"Native review profile: {CODEX_NATIVE_V1}. This review was dispatched through "

package/plugins/ca-pi/hooks/_host.py

@@ -11,7 +11,7 @@ import hostapi  # noqa: E402
 class PiHost(hostapi.Host):
     name = "pi"
     adapter_name = "@arbiterforge/ca-pi"
-    adapter_version = "0.16.1"
+    adapter_version = "0.16.2"
     update_target = "ca-pi"
     update_tag_prefix = "ca-pi-v"
     update_command = "pi update npm:@arbiterforge/ca-pi"

package/plugins/ca-pi/hooks/_prerequisitelib.py

@@ -48,7 +48,7 @@ PENDING_DIR = Path(".codearbiter/.markers/pending-prerequisites")
 SOURCE_DIR = Path(".codearbiter/.artifacts/authority-sources")
 FORMAT = "codearbiter.pending-user-prerequisite/0.1.0"
 POLICY = "explicit-user-prerequisite-confirmation/0.1.0"
-CONFIRMATION_LIFETIME_SECONDS = 15 * 60
+CONFIRMATION_LIFETIME_SECONDS = _replylib.CODE_TTL_SECONDS
 CONFIRMATION_RE = re.compile(r"[A-Za-z0-9_-]{12,128}")
 ID_RE = re.compile(r"[A-Z][A-Z0-9_-]{0,127}")
 HOST_RE = re.compile(r"[A-Za-z0-9_-]{1,32}")
@@ -620,9 +620,12 @@ def arm_user_prerequisite(
         "requirement": record["requirement"],
         "review_packet_sha256": packet_sha256,
         "reply": reply,
+        "expires_at": pending["expires_at"],
+        "expires_at_utc": time.strftime("%Y-%m-%d %H:%M:%S UTC", time.gmtime(pending["expires_at"])),
         **_replylib.offer_code(root, "prerequisite", artifact_id, reply,
                                names=[artifact_id, prerequisite_id],
-                               short_prefix=["satisfy-prerequisite"]),
+                               short_prefix=["satisfy-prerequisite"],
+                               expires_at=pending["expires_at"]),
         "pending": relative.as_posix(),
     }
 
@@ -652,7 +655,7 @@ def _confirm(
     session_id: str,
     now: int,
 ) -> dict[str, Any]:
-    if now > pending["expires_at"]:
+    if now >= pending["expires_at"]:
         raise PrerequisiteError(
             "EXPIRED_PREREQUISITE", "the prerequisite confirmation request expired"
         )

package/plugins/ca-pi/hooks/_replylib.py

@@ -207,7 +207,8 @@ def _write(path: Path, value: dict) -> None:
 
 
 def issue_code(root, route: str, artifact_id: str, full_reply: str, *,
-               names: list[str], short_prefix: list[str]) -> dict[str, str]:
+               names: list[str], short_prefix: list[str],
+               expires_at: int | None = None) -> dict[str, str]:
     """Issue a unique four-character code expanding to ``full_reply``."""
     if route not in ROUTES or not isinstance(full_reply, str) or canonicalize(full_reply) != full_reply:
         raise ReplyCodeError("reply code request is invalid")
@@ -223,20 +224,22 @@ def issue_code(root, route: str, artifact_id: str, full_reply: str, *,
         raise ReplyCodeError("no free reply code")
     value = {"format": FORMAT, "route": route, "artifact_id": artifact_id, "repository": repository,
              "short_reply": short, "full_reply": full_reply, "names": list(names),
-             "expires_at": int(time.time()) + CODE_TTL_SECONDS}
+             "expires_at": int(time.time()) + CODE_TTL_SECONDS if expires_at is None else expires_at}
     value["integrity_sha256"] = _digest(_canonical(value))
     _write(path, value)
     return {"code": code, "short_reply": short}
 
 
 def offer_code(root, route: str, artifact_id: str, full_reply: str, *,
-               names: list[str], short_prefix: list[str]) -> dict[str, str]:
+               names: list[str], short_prefix: list[str],
+               expires_at: int | None = None) -> dict[str, str]:
     """Arm-result fields for a short code; empty when one cannot be issued.
 
     The code is a convenience: failing to issue one never blocks arming, and
     the full reply always remains accepted."""
     try:
-        issued = issue_code(root, route, artifact_id, full_reply, names=names, short_prefix=short_prefix)
+        issued = issue_code(root, route, artifact_id, full_reply, names=names,
+                            short_prefix=short_prefix, expires_at=expires_at)
     except (ReplyCodeError, OSError):
         return {}
     return {"code": issued["code"], "short_reply": issued["short_reply"]}

package/plugins/ca-pi/hooks/hostapi.py

@@ -313,7 +313,7 @@ class Host:
 
     name = "claude"
     adapter_name = "ca"
-    adapter_version = "2.24.1"
+    adapter_version = "2.24.2"
 
     # Update-notifier descriptor. Each independently versioned host overrides
     # these three values in its per-plugin _host.py. Keeping the target,

package/plugins/ca-pi/includes/artifacts.md

@@ -99,9 +99,9 @@ limit or excluding source/test/governance inputs needed for the task.
 The existing user, SMARTS, reviewer, or verification boundary must first persist
 its actual policy-owned workflow event as canonical JSON in the reserved
 content-addressed authority-source store. Interactive prompt approval currently
-has production host seams in Claude Code and Codex. Pi 0.84.1 exposes no
-pre-model event carrying the user's exact prompt, so under Pi do not arm this
-adapter; the workflow remains blocked until a Pi-native authority adapter is
+has production host seams in Claude Code and Codex. Pi 1.0.0 exposes an `input`
+event, but codeArbiter has no Pi-native authority adapter. Under Pi do not arm this
+adapter; the workflow remains blocked until that adapter is
 implemented. On Claude Code or Codex, arm the exact current artifact immediately
 before asking the approval question:
 
@@ -180,8 +180,9 @@ current approved plan and prerequisite:
 python "<plugin-root>/hooks/_prerequisitelib.py" arm --root "<project-root>" --artifact-id <artifact-id> --prerequisite-id <prerequisite-id>
 ```
 
-Show the returned title, requirement, and review-packet digest, then require the
-returned `short_reply` (`satisfy-prerequisite <code>`) or the full `reply`, with
+Show the returned title, requirement, review-packet digest, and `expires_at_utc`
+deadline. The request and its reply code expire together 24 hours after arming.
+Require the returned `short_reply` (`satisfy-prerequisite <code>`) or the full `reply`, with
 the same tolerance and mismatch reporting as approval. The `UserPromptSubmit` hook
 durably records that observed decision before publishing its authority source,
 captures a prerequisite receipt, and applies the existing prerequisite CAS
@@ -211,7 +212,7 @@ python "<plugin-root>/hooks/_prerequisitelib.py" supersede --root "<project-root
 The adapter fixes `authority_kind: user_workflow` and `verdict: satisfied`;
 there is no caller-selected authority or bulk-satisfaction path. SMARTS prerequisite satisfaction remains unsupported; the plan-method producer below does not
 grant prerequisite, security, backend or publication authority. Pi has no
-qualified pre-model prompt seam and must remain blocked. Do not infer eligibility from one satisfied prerequisite:
+prerequisite-capture adapter and must remain blocked. Do not infer eligibility from one satisfied prerequisite:
 rerun `eligible`, and resolve each remaining record independently against the
 new current plan identity.
 

package/plugins/ca-pi/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arbiterforge/ca-pi",
-  "version": "0.16.1",
+  "version": "0.16.2",
   "private": true,
   "license": "AGPL-3.0-only",
   "type": "module",