@arbiterforge/ca-pi 0.17.10 → 0.18.1

package/README.md

@@ -10,7 +10,7 @@ and durable project context. You decide. codeArbiter enforces.
 <img alt="Claude Code plugin" src="https://img.shields.io/badge/Claude_Code-plugin-d97757">
 <img alt="Codex plugin" src="https://img.shields.io/badge/OpenAI_Codex-plugin-10a37f">
 <img alt="Pi Feature Forge preview" src="https://img.shields.io/badge/ca--pi-Feature_Forge_preview-d97757">
-<img alt="version 2.25.9" src="https://img.shields.io/badge/version-2.25.9-2b7489">
+<img alt="version 2.26.1" src="https://img.shields.io/badge/version-2.26.1-2b7489">
 <img alt="core lanes" src="https://img.shields.io/badge/core_lanes-18-555">
 <img alt="skills" src="https://img.shields.io/badge/skills-22-555">
 <img alt="agents" src="https://img.shields.io/badge/agents-20-555">

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arbiterforge/ca-pi",
-  "version": "0.17.10",
+  "version": "0.18.1",
   "license": "AGPL-3.0-only",
   "repository": {
     "type": "git",

package/plugins/ca-pi/CHANGELOG.md

@@ -4,6 +4,34 @@ All notable changes to `ca-pi` are documented in this file.
 
 ## [Unreleased]
 
+## [0.18.1] - 2026-10-12
+
+### Fixed
+
+- Reproduce normal ORT histogram conflicts in guarded legacy block resolution while preserving exact rendering and index/CAS controls (#968).
+- Clarify unknown host qualification and complete the repository-scoped maintenance commands.
+
+
+## [0.18.0] - 2026-10-10
+
+### Changed
+
+- Identify verification inputs by ship-set membership (ADR-0042): git index
+  entries present on disk plus untracked non-ignored files within the plan roots,
+  minus excludes. Outside git, membership comes from the filesystem; a failed git
+  probe fails closed with `INPUT_MEMBERSHIP_UNAVAILABLE`, and an unmerged index
+  fails closed until resolved.
+- Exempt exactly `.codearbiter/gate-events.log` from snapshots. It is never
+  counted and stays tracked as the audit trail; every other `.codearbiter` path,
+  including `overrides.log`, still counts.
+- Advance the verification-input manifest to `codearbiter.verification-inputs/0.2.0`.
+  Receipts bound to a 0.1.0 manifest read as stale and must be re-verified.
+- Open snapshot files through bounded handle opens and validate each evidence
+  object at most once per operation. Raw reads are reused only up to a 64 MiB
+  per-operation retained-byte budget, so past it an object can be read again;
+  validation still happens once.
+- Raise the `prompt-submit` hook timeout to 600 seconds so a long snapshot no
+  longer times out the prompt seam (#931).
 ## [0.17.10] - 2026-10-12
 
 ### Fixed

package/plugins/ca-pi/helpers/artifacts/release.json

@@ -6,43 +6,43 @@
   "binaries": {
     "darwin/amd64": {
       "file": "ca-artifact-darwin-amd64",
-      "sha256": "23755f26d1c1706e674b584f18b9a42e3f270e0dbbae9f78d9969633f3518797",
+      "sha256": "e35e21caa147a5e6c9d04fd400b5b4fcdb2d1d9cec9119d70249fcb80aeb3512",
       "native_tested": true
     },
     "darwin/arm64": {
       "file": "ca-artifact-darwin-arm64",
-      "sha256": "a3e8a3e294c3b4c89998ee6039bd5821598b134f8de4dff99e214250fa482083",
+      "sha256": "dc9157c6ecf48fe05c20351b276ef8c2037847eaedee9dfb88b4f8d0b685b51e",
       "native_tested": true
     },
     "linux/amd64": {
       "file": "ca-artifact-linux-amd64",
-      "sha256": "3831da75adc43ae8cd9a1b7586d12a6951657859101cb2a469bea791e009a071",
+      "sha256": "6fbd763c319d423291832f796515a4c8202d04e8785ea9ce178a495d917049d6",
       "native_tested": true
     },
     "linux/arm64": {
       "file": "ca-artifact-linux-arm64",
-      "sha256": "0853464b56cb264a9949e36cfd2882c901afd585b6dd16899e7540e818bef34e",
+      "sha256": "2b623d4329665513fb11a99e866e30c579a47172ffd16f6faaae21bf21fda83d",
       "native_tested": true
     },
     "windows/amd64": {
       "file": "ca-artifact-windows-amd64.exe",
-      "sha256": "c7a507c63e97a9b7b03d681dded80b90bcb8009ffb65bcdb74f8a585a9a46014",
+      "sha256": "44003f24b77a5cd51b63fe991a8775462619e2b2130c1162d36450a0570970d8",
       "native_tested": true
     },
     "windows/arm64": {
       "file": "ca-artifact-windows-arm64.exe",
-      "sha256": "34e84e6a629ed0a86525d41fc88c1db783e0f028b35a18ca8a13a49eac9b245d",
+      "sha256": "37efc98301beec7c0bf465dee6f4bb48152abef515ae55aa37bff628e969e5bd",
       "native_tested": true
     }
   },
   "context_qualification": {
     "darwin/amd64": {
-      "source_commit": "d547f82777111bc20001a977719307d3d68fc13e",
+      "source_commit": "886d5fa0ae4db7cb230a75dd5ccff6184daaf02b",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "38236271307",
-      "binary_sha256": "23755f26d1c1706e674b584f18b9a42e3f270e0dbbae9f78d9969633f3518797",
-      "observation_sha256": "2e234bae928c90a16f5673505fad5f634a80296f6dfcc022fa075ae63c8d9f59",
-      "module_sha256": "409b54287da99561d7c44e5618e5e4bb22a087bb1bd6da1bda3f4b8d1491aff1",
+      "run_id": "38262163105",
+      "binary_sha256": "e35e21caa147a5e6c9d04fd400b5b4fcdb2d1d9cec9119d70249fcb80aeb3512",
+      "observation_sha256": "fb5a8389cbede26dc53324f351c37b1cd955775b85c022fd61e686ef68130a73",
+      "module_sha256": "05b0359c108baf52bd3884c36969febc3f98e53786cf80da757115bee5ac9dc2",
       "native_cases": [
         "TestContextBoundedRender",
         "TestContextDocumentContract",
@@ -53,12 +53,12 @@
       ]
     },
     "darwin/arm64": {
-      "source_commit": "d547f82777111bc20001a977719307d3d68fc13e",
+      "source_commit": "886d5fa0ae4db7cb230a75dd5ccff6184daaf02b",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "38236271307",
-      "binary_sha256": "a3e8a3e294c3b4c89998ee6039bd5821598b134f8de4dff99e214250fa482083",
-      "observation_sha256": "3a7fe364f16f3c7785fd00d70b3328f6f559aacb12173c324e2f25b565a0ed4f",
-      "module_sha256": "409b54287da99561d7c44e5618e5e4bb22a087bb1bd6da1bda3f4b8d1491aff1",
+      "run_id": "38262163105",
+      "binary_sha256": "dc9157c6ecf48fe05c20351b276ef8c2037847eaedee9dfb88b4f8d0b685b51e",
+      "observation_sha256": "095030f4dd4bdb3e8d6d9bcc8082724c7a981067cec413da16d81f504e828c29",
+      "module_sha256": "05b0359c108baf52bd3884c36969febc3f98e53786cf80da757115bee5ac9dc2",
       "native_cases": [
         "TestContextBoundedRender",
         "TestContextDocumentContract",
@@ -69,12 +69,12 @@
       ]
     },
     "linux/amd64": {
-      "source_commit": "d547f82777111bc20001a977719307d3d68fc13e",
+      "source_commit": "886d5fa0ae4db7cb230a75dd5ccff6184daaf02b",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "38236271307",
-      "binary_sha256": "3831da75adc43ae8cd9a1b7586d12a6951657859101cb2a469bea791e009a071",
-      "observation_sha256": "117d44acb470b9b4d06f41cb53c38a68d7f52a37164a92f512f181970f7270da",
-      "module_sha256": "409b54287da99561d7c44e5618e5e4bb22a087bb1bd6da1bda3f4b8d1491aff1",
+      "run_id": "38262163105",
+      "binary_sha256": "6fbd763c319d423291832f796515a4c8202d04e8785ea9ce178a495d917049d6",
+      "observation_sha256": "355d76a3c904c928406c109802e78d30a7c8d093aadc32c9817cf6fb6d0ef9dc",
+      "module_sha256": "05b0359c108baf52bd3884c36969febc3f98e53786cf80da757115bee5ac9dc2",
       "native_cases": [
         "TestContextBoundedRender",
         "TestContextDocumentContract",
@@ -85,12 +85,12 @@
       ]
     },
     "linux/arm64": {
-      "source_commit": "d547f82777111bc20001a977719307d3d68fc13e",
+      "source_commit": "886d5fa0ae4db7cb230a75dd5ccff6184daaf02b",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "38236271307",
-      "binary_sha256": "0853464b56cb264a9949e36cfd2882c901afd585b6dd16899e7540e818bef34e",
-      "observation_sha256": "6ca2c5dabb2e9a02b90a1d4d2025e3731df84ed2da1a7e0d2ebb3ca96e711db7",
-      "module_sha256": "409b54287da99561d7c44e5618e5e4bb22a087bb1bd6da1bda3f4b8d1491aff1",
+      "run_id": "38262163105",
+      "binary_sha256": "2b623d4329665513fb11a99e866e30c579a47172ffd16f6faaae21bf21fda83d",
+      "observation_sha256": "44605c44231e8d93893aab35874f48cb4ad52b5fc8e0c9c23afe4ad3f4909cfb",
+      "module_sha256": "05b0359c108baf52bd3884c36969febc3f98e53786cf80da757115bee5ac9dc2",
       "native_cases": [
         "TestContextBoundedRender",
         "TestContextDocumentContract",
@@ -101,12 +101,12 @@
       ]
     },
     "windows/amd64": {
-      "source_commit": "d547f82777111bc20001a977719307d3d68fc13e",
+      "source_commit": "886d5fa0ae4db7cb230a75dd5ccff6184daaf02b",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "38236271307",
-      "binary_sha256": "c7a507c63e97a9b7b03d681dded80b90bcb8009ffb65bcdb74f8a585a9a46014",
-      "observation_sha256": "b5fbcd0e0be73a7dfc8eee13ea000721819561f4307b9b59abd920a093f3004d",
-      "module_sha256": "409b54287da99561d7c44e5618e5e4bb22a087bb1bd6da1bda3f4b8d1491aff1",
+      "run_id": "38262163105",
+      "binary_sha256": "44003f24b77a5cd51b63fe991a8775462619e2b2130c1162d36450a0570970d8",
+      "observation_sha256": "b53adeb7ba5c4835928a7d4d837be73888a41bb6398209ba99a49ef735517b9d",
+      "module_sha256": "05b0359c108baf52bd3884c36969febc3f98e53786cf80da757115bee5ac9dc2",
       "native_cases": [
         "TestContextBoundedRender",
         "TestContextDocumentContract",
@@ -117,12 +117,12 @@
       ]
     },
     "windows/arm64": {
-      "source_commit": "d547f82777111bc20001a977719307d3d68fc13e",
+      "source_commit": "886d5fa0ae4db7cb230a75dd5ccff6184daaf02b",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "38236271307",
-      "binary_sha256": "34e84e6a629ed0a86525d41fc88c1db783e0f028b35a18ca8a13a49eac9b245d",
-      "observation_sha256": "4c4fe691b5ce1fdb3664917c1afd247e9fb8779b96d85c1d7e42fc1e6a2c7d71",
-      "module_sha256": "409b54287da99561d7c44e5618e5e4bb22a087bb1bd6da1bda3f4b8d1491aff1",
+      "run_id": "38262163105",
+      "binary_sha256": "37efc98301beec7c0bf465dee6f4bb48152abef515ae55aa37bff628e969e5bd",
+      "observation_sha256": "b00189a7063230bc5e4c174be8f2e2d8edc7892c052d4371c7e1cb183837320b",
+      "module_sha256": "05b0359c108baf52bd3884c36969febc3f98e53786cf80da757115bee5ac9dc2",
       "native_cases": [
         "TestContextBoundedRender",
         "TestContextDocumentContract",

package/plugins/ca-pi/hooks/_contextmergelib.py

@@ -366,18 +366,23 @@ def _git_conflict_blocks(root, current, base, ours, theirs):
         for path, raw in zip(paths, (ours, base, theirs)):
             path.write_bytes(raw)
         for name, flag in modes:
-            args = [git_executable(), "--no-pager", "--no-lazy-fetch", "-c", "core.fsmonitor=false",
-                    "-c", "core.untrackedCache=false", "-c", "merge.conflictStyle=merge",
-                    "merge-file", "--stdout", "--marker-size=" + str(size)]
-            if flag:
-                args.append(flag)
-            for label in labels:
-                args.extend(("-L", label.decode("utf-8", "strict")))
-            result = subprocess.run([*args, *(str(path) for path in paths)], cwd=root, env=env,
-                                    capture_output=True, shell=False, timeout=30)
-            _require(len(result.stdout) <= MAX_BYTES, "Git conflict rendering is oversized")
-            if 1 <= result.returncode <= 127 and result.stdout.replace(b"\r\n", b"\n") == current.replace(b"\r\n", b"\n"):
-                return payload, name
+            # Retain merge-file's historical default and reproduce ORT's
+            # histogram alignment, still requiring the complete exact rendering.
+            for algorithm in (None, "histogram"):
+                args = [git_executable(), "--no-pager", "--no-lazy-fetch", "-c", "core.fsmonitor=false",
+                        "-c", "core.untrackedCache=false", "-c", "merge.conflictStyle=merge",
+                        "merge-file", "--stdout", "--marker-size=" + str(size)]
+                if flag:
+                    args.append(flag)
+                if algorithm:
+                    args.append("--diff-algorithm=" + algorithm)
+                for label in labels:
+                    args.extend(("-L", label.decode("utf-8", "strict")))
+                result = subprocess.run([*args, *(str(path) for path in paths)], cwd=root, env=env,
+                                        capture_output=True, shell=False, timeout=30)
+                _require(len(result.stdout) <= MAX_BYTES, "Git conflict rendering is oversized")
+                if 1 <= result.returncode <= 127 and result.stdout.replace(b"\r\n", b"\n") == current.replace(b"\r\n", b"\n"):
+                    return payload, name
     raise ResolutionError("worktree is not Git's current three-stage rendering")
 
 

package/plugins/ca-pi/hooks/_host.py

@@ -11,7 +11,7 @@ import hostapi  # noqa: E402
 class PiHost(hostapi.Host):
     name = "pi"
     adapter_name = "@arbiterforge/ca-pi"
-    adapter_version = "0.17.10"
+    adapter_version = "0.18.1"
     update_target = "ca-pi"
     update_tag_prefix = "ca-pi-v"
     update_command = "pi update npm:@arbiterforge/ca-pi"

package/plugins/ca-pi/hooks/hostapi.py

@@ -313,7 +313,7 @@ class Host:
 
     name = "claude"
     adapter_name = "ca"
-    adapter_version = "2.25.9"
+    adapter_version = "2.26.1"
 
     # Update-notifier descriptor. Each independently versioned host overrides
     # these three values in its per-plugin _host.py. Keeping the target,

package/plugins/ca-pi/includes/artifacts.md

@@ -88,7 +88,10 @@ executable/workspace binding and fresh named-result evidence remain required.
 repository-relative paths. Exclusions are directory paths, not globs or basename
 matches and not relative to an individual root. For root `site`, a generated
 dependency exclusion is `site/node_modules`, not `node_modules`. Review each
-excluded output directory explicitly; `.gitignore` does not define this policy.
+excluded output directory explicitly: the plan's roots and exclusions narrow
+the ship set. In a git work tree `.gitignore` already keeps untracked ignored
+files out of it; outside git nothing is filtered, so exclude generated
+directories explicitly.
 An exclusion outside all selected roots is rejected as ineffective. Overlapping
 roots cannot reinclude an excluded directory. Roots must exist before execution;
 use an existing containing directory for a planned new file so its creation
@@ -96,6 +99,21 @@ changes the snapshot. An oversized included file is reported with its path and
 the 32 MiB per-file limit; revise the explicit policy rather than increasing the
 limit or excluding source/test/governance inputs needed for the task.
 
+Snapshot input identity is ship-set membership. In a git work tree the members
+are the git index entries present on disk, plus untracked non-ignored files
+within the plan's roots, minus its excludes. The one fixed exemption is
+`.codearbiter/gate-events.log`: it is never counted, whatever the plan says, and
+stays tracked as the audit trail; every other `.codearbiter` path still counts.
+Outside git, membership is read from the filesystem (`membership: filesystem`);
+the root must be the top level of its work tree, so a subdirectory root counts as
+outside git. A failed git probe fails closed with `INPUT_MEMBERSHIP_UNAVAILABLE`. An unmerged
+git index (conflicted paths) makes a snapshot fail closed until it is resolved.
+The manifest format is `codearbiter.verification-inputs/0.2.0`; receipts bound to
+a 0.1.0 manifest read as stale. Each evidence object is validated at most once
+per operation and scans are bounded; raw reads are reused only up to a 64 MiB
+per-operation retained-byte budget, past which an object can be read again, but
+validation is never skipped.
+
 The existing user, SMARTS, reviewer, or verification boundary must first persist
 its actual policy-owned workflow event as canonical JSON in the reserved
 content-addressed authority-source store. Interactive prompt approval currently

package/plugins/ca-pi/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arbiterforge/ca-pi",
-  "version": "0.17.10",
+  "version": "0.18.1",
   "private": true,
   "license": "AGPL-3.0-only",
   "type": "module",

package/plugins/ca-pi/routines/commit-gate/SKILL.md

@@ -114,16 +114,33 @@ Run an **incremental re-scout for each affected document**, scoped to its select
 - **Claim still holds → silently re-baseline only that document's provenance record.** Call `_provenancelib.rebaseline(doc_provenance, selected_current_hashes)` where `selected_current_hashes` contains current hashes only for the selected staged paths whose claims in that document were inspected and still hold. Do not re-baseline a path whose claim changed or was not inspected. Stage only `.codearbiter/.provenance/<doc>.json` by explicit path so the re-baselined record rides THIS commit (ADR-0008 ride-along pattern — nothing is surfaced to the user). After staging, re-run the secrets scan from `tech-stack.md` over the newly-staged path(s) — any file staged after Phase 4 must still pass the automated secrets scan before the commit proceeds. A missing current hash (deletion or rename) cannot be silently re-baselined; surface it in Phase 6 for review.
 - **Claim changed → route to the existing Phase 6 diff-review.** Propose only the affected doc or code-map edit required to reflect its changed claim. The user reviews that edit in the normal diff, and Phase 7 stages approved paths explicitly; do not silently rewrite or add unrelated documentation.
 
-For reviewed legacy code-map metadata, use the shipped fixed-target helper at
-`<plugin-root>/hooks/resolve-context-conflict.py`. Run `--root "<project-root>"
-inspect-claims`, then `--root "<project-root>" refresh-claims --expected <binding>
---claims <json-array>` with one to four reviewed records containing exactly
+For reviewed legacy code-map metadata in codeArbiter's source layout, use the
+shipped fixed-target helper at `<plugin-root>/hooks/resolve-context-conflict.py`.
+This claim-refresh lane reads all three fixed source manifests:
+`<project-root>/plugins/ca/.claude-plugin/plugin.json`,
+`<project-root>/plugins/ca-codex/.codex-plugin/plugin.json`, and `<project-root>/plugins/ca-pi/package.json`,
+even for a date-only refresh. Other repository layouts and arbitrary manifest
+claims are unsupported.
+
+Resolve the interpreter once by presence, then inspect:
+
+```sh
+PY=python3; { command -v python3 >/dev/null 2>&1 && python3 --version >/dev/null 2>&1; } || PY=python
+"$PY" "<plugin-root>/hooks/resolve-context-conflict.py" --root "<project-root>" inspect-claims
+```
+
+Pass the returned `binding` to the same helper and interpreter:
+
+```sh
+"$PY" "<plugin-root>/hooks/resolve-context-conflict.py" --root "<project-root>" refresh-claims --expected '<binding>' --claims '<json-array>'
+```
+
+Supply one to four reviewed records containing exactly
 `field`, `before`, and `after`. The supported existing fields are `ca_version`,
 `codex_version`, `pi_version`, and `metadata_date`. Use the inspection's exact
 current claim as `before`; a version's `after` must match its fixed source
-manifest, and the date must match `inspection_date`. Select the interpreter once
-by presence and use it for both calls; never retry a failed operation under
-another interpreter.
+manifest, and the date must match `inspection_date`. Use the selected interpreter
+for both calls; never retry a failed operation under another interpreter.
 
 This operation requires resolved, tracked legacy schema-1 document/provenance
 and no native or uncertain journal ownership. It binds document, provenance,

package/plugins/ca-pi/routines/finishing-a-development-branch/SKILL.md

@@ -169,9 +169,20 @@ qualification remains unchanged. Re-run the current-head review and CI
 requirements after integration; previous green evidence does not bind new code.
 
 For an explicitly selected per-block resolution, use the same shipped helper
-with `--root "<project-root>" inspect-blocks`, then `--root "<project-root>"
-resolve-blocks --expected <binding> --choices <json-array>`. Review each block
-and supply exactly one `"ours"` or `"theirs"` choice in its displayed order. The
+and the interpreter already selected by presence:
+
+```sh
+"$PY" "<plugin-root>/hooks/resolve-context-conflict.py" --root "<project-root>" inspect-blocks
+```
+
+Pass the returned `binding` to the same helper and interpreter:
+
+```sh
+"$PY" "<plugin-root>/hooks/resolve-context-conflict.py" --root "<project-root>" resolve-blocks --expected '<binding>' --choices '<json-array>'
+```
+
+Review each block and supply exactly one `"ours"` or `"theirs"` choice in its
+displayed order. The
 inspection returns the block count and side hashes; read the conflict document
 to review the actual text. This is a separate operation: `restore-head` keeps
 its original single-block exact-HEAD contract.

package/plugins/ca-pi/skills/ca-commit/SKILL.md

@@ -114,16 +114,33 @@ Run an **incremental re-scout for each affected document**, scoped to its select
 - **Claim still holds → silently re-baseline only that document's provenance record.** Call `_provenancelib.rebaseline(doc_provenance, selected_current_hashes)` where `selected_current_hashes` contains current hashes only for the selected staged paths whose claims in that document were inspected and still hold. Do not re-baseline a path whose claim changed or was not inspected. Stage only `.codearbiter/.provenance/<doc>.json` by explicit path so the re-baselined record rides THIS commit (ADR-0008 ride-along pattern — nothing is surfaced to the user). After staging, re-run the secrets scan from `tech-stack.md` over the newly-staged path(s) — any file staged after Phase 4 must still pass the automated secrets scan before the commit proceeds. A missing current hash (deletion or rename) cannot be silently re-baselined; surface it in Phase 6 for review.
 - **Claim changed → route to the existing Phase 6 diff-review.** Propose only the affected doc or code-map edit required to reflect its changed claim. The user reviews that edit in the normal diff, and Phase 7 stages approved paths explicitly; do not silently rewrite or add unrelated documentation.
 
-For reviewed legacy code-map metadata, use the shipped fixed-target helper at
-`<plugin-root>/hooks/resolve-context-conflict.py`. Run `--root "<project-root>"
-inspect-claims`, then `--root "<project-root>" refresh-claims --expected <binding>
---claims <json-array>` with one to four reviewed records containing exactly
+For reviewed legacy code-map metadata in codeArbiter's source layout, use the
+shipped fixed-target helper at `<plugin-root>/hooks/resolve-context-conflict.py`.
+This claim-refresh lane reads all three fixed source manifests:
+`<project-root>/plugins/ca/.claude-plugin/plugin.json`,
+`<project-root>/plugins/ca-codex/.codex-plugin/plugin.json`, and `<project-root>/plugins/ca-pi/package.json`,
+even for a date-only refresh. Other repository layouts and arbitrary manifest
+claims are unsupported.
+
+Resolve the interpreter once by presence, then inspect:
+
+```sh
+PY=python3; { command -v python3 >/dev/null 2>&1 && python3 --version >/dev/null 2>&1; } || PY=python
+"$PY" "<plugin-root>/hooks/resolve-context-conflict.py" --root "<project-root>" inspect-claims
+```
+
+Pass the returned `binding` to the same helper and interpreter:
+
+```sh
+"$PY" "<plugin-root>/hooks/resolve-context-conflict.py" --root "<project-root>" refresh-claims --expected '<binding>' --claims '<json-array>'
+```
+
+Supply one to four reviewed records containing exactly
 `field`, `before`, and `after`. The supported existing fields are `ca_version`,
 `codex_version`, `pi_version`, and `metadata_date`. Use the inspection's exact
 current claim as `before`; a version's `after` must match its fixed source
-manifest, and the date must match `inspection_date`. Select the interpreter once
-by presence and use it for both calls; never retry a failed operation under
-another interpreter.
+manifest, and the date must match `inspection_date`. Use the selected interpreter
+for both calls; never retry a failed operation under another interpreter.
 
 This operation requires resolved, tracked legacy schema-1 document/provenance
 and no native or uncertain journal ownership. It binds document, provenance,

package/plugins/ca-pi/skills/ca-init/SKILL.md

@@ -52,8 +52,9 @@ a qualified host.
 When these prerequisites are unavailable or unknown, report the missing
 capability before invoking the scaffolder. Keep a fresh repository unactivated
 and retain every byte of any existing partial state. Name the loaded package,
-actual host limitation, selected population route and next missing prerequisite
-in the handoff; leave unobserved qualification and prior operation identities
+observed host limitation or explicitly unknown qualification, selected
+population route and next missing prerequisite in the handoff; leave
+unobserved qualification and prior operation identities
 unknown. Resume on a host only after fresh containment and writer qualification,
 using the existing interrupted-population recovery procedure. No supported
 destination is implied by this guidance.

package/plugins/ca-pi/skills/ca-pr/SKILL.md

@@ -169,9 +169,20 @@ qualification remains unchanged. Re-run the current-head review and CI
 requirements after integration; previous green evidence does not bind new code.
 
 For an explicitly selected per-block resolution, use the same shipped helper
-with `--root "<project-root>" inspect-blocks`, then `--root "<project-root>"
-resolve-blocks --expected <binding> --choices <json-array>`. Review each block
-and supply exactly one `"ours"` or `"theirs"` choice in its displayed order. The
+and the interpreter already selected by presence:
+
+```sh
+"$PY" "<plugin-root>/hooks/resolve-context-conflict.py" --root "<project-root>" inspect-blocks
+```
+
+Pass the returned `binding` to the same helper and interpreter:
+
+```sh
+"$PY" "<plugin-root>/hooks/resolve-context-conflict.py" --root "<project-root>" resolve-blocks --expected '<binding>' --choices '<json-array>'
+```
+
+Review each block and supply exactly one `"ours"` or `"theirs"` choice in its
+displayed order. The
 inspection returns the block count and side hashes; read the conflict document
 to review the actual text. This is a separate operation: `restore-head` keeps
 its original single-block exact-HEAD contract.