@bongos/core 1.18.19 → 1.19.3

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.18.19",
-  "core_contract": "1.18.19",
-  "source_commit": "ccda86b3b4fe68b8a59dd1d70bf73bfec9682642",
-  "source_ref": "HEAD",
-  "built_at": "2026-08-08T18:02:27.307Z",
+  "core_version": "1.19.3",
+  "core_contract": "1.19.3",
+  "source_commit": "d074d1f8fcf0018d19950449d5711b6cabd5d5e4",
+  "source_ref": "origin/main",
+  "built_at": "2026-08-08T20:01:04.005Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
-    "docs_redacted": 275,
+    "docs_redacted": 284,
     "agent_docs_stubbed": 21,
-    "functional_verbatim": 1141,
+    "functional_verbatim": 1202,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 1437,
-  "tree_sha256": "6e3052888f6a30b9440eeaefee370fa8f296a9345ab9377935c703346d150f3c",
+  "file_count": 1507,
+  "tree_sha256": "389eb7db83b122b123ebed9b22371d1874d7e6efd8613d417886892b2efa4d4d",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -37,12 +37,12 @@
     {
       "path": ".claude/skills/builder-box/SKILL.md",
       "mode": "0000644",
-      "sha256": "0aabfc07fc71050a6a240ff8e203c9017d9645e2dae5a669fa05284fd9ebee4e"
+      "sha256": "a24e22a6e7102654d71a255210b260d2c2c0dd9047a5bab128fa3e44c6b511c9"
     },
     {
       "path": ".claude/skills/builder-claim/SKILL.md",
       "mode": "0000644",
-      "sha256": "1d2f732a75b0c91539dc5439d8d2559cc8248743c8c3aa2fbe373aee5aa6575b"
+      "sha256": "fed2f54639b98586533fe3482e41493bb07dfcf28421cb1e25b6d29fe9abe900"
     },
     {
       "path": ".claude/skills/builder-connect/SKILL.md",
@@ -147,7 +147,7 @@
     {
       "path": ".claude/skills/goal-create/SKILL.md",
       "mode": "0000644",
-      "sha256": "a7e3cfb115fc14072cc326771e5054f2c5356c0a67655469d06eabd3c6021d70"
+      "sha256": "af3dedaff2c831c4c532644edc2e2e3af012fd359ab02d66b81339d327bd6c43"
     },
     {
       "path": ".claude/skills/goal-review/SKILL.md",
@@ -157,7 +157,7 @@
     {
       "path": ".claude/skills/idea-triage/SKILL.md",
       "mode": "0000644",
-      "sha256": "efa11025425b160cb46f8b31117c5283e5e3162b75b8758f7fa913a89fb8f8cb"
+      "sha256": "deeb1f067f4598207782b6b99c03a25f184cbb44421f7f93cfd680f4b3353acf"
     },
     {
       "path": ".claude/skills/ideate/SKILL.md",
@@ -207,7 +207,7 @@
     {
       "path": ".claude/skills/planning-session/SKILL.md",
       "mode": "0000644",
-      "sha256": "1863f07fcb71209024763076c7836afd29c1d31150033ebc64970c47e8e81b6f"
+      "sha256": "f67391e1ef814d8577b31c89d53df83b911bc09b3db2ad6301547c351de9815f"
     },
     {
       "path": ".claude/skills/priority-session/SKILL.md",
@@ -224,6 +224,11 @@
       "mode": "0000644",
       "sha256": "d54016004fb756a9c6e2da17b08dec88d341f8a4de18116f12586165ea18b770"
     },
+    {
+      "path": ".claude/skills/scan-before-install/SKILL.md",
+      "mode": "0000644",
+      "sha256": "efab6aa06f093f37ee2a99c03a39ad13ce7a3431614a2baffa91683740d7c272"
+    },
     {
       "path": ".claude/skills/session-handoff/SKILL.md",
       "mode": "0000644",
@@ -322,17 +327,17 @@
     {
       "path": "bin/bongos.js",
       "mode": "0000644",
-      "sha256": "a733ab81dadf0281828f4d824eeb10b3037ccb8fb94bdbf0082a506a37b8e7fb"
+      "sha256": "b976a94f0879fd4fe0cdc1eb82209b446cdc7a39186ea1300f4b535bec8f1d00"
     },
     {
       "path": "clients/bongos-client/README.md",
       "mode": "0000644",
-      "sha256": "126b112de4714dcaa928aa941a57a70f7228a67833f11ce1065b370eba86a8f7"
+      "sha256": "8aeb1aaf87db169788d5e17a671846526a1c89f184ee6ff0425730ecea71fb8a"
     },
     {
       "path": "clients/bongos-client/bongos-client.global.js",
       "mode": "0000644",
-      "sha256": "412fba10e0fa5cf4c55870cdd9b1aee49861572479834dc15b6f3ee201769545"
+      "sha256": "724bfb1a3647a316226f32b1b62f56e30dba8df28a2ccfadb1dcbaaff65e7197"
     },
     {
       "path": "clients/bongos-client/examples/hello-world.mjs",
@@ -342,17 +347,17 @@
     {
       "path": "clients/bongos-client/index.cjs",
       "mode": "0000644",
-      "sha256": "1e1655619fe002bc783e5cfd29e45d9993acb8d836f73bcfe783db4874c753f5"
+      "sha256": "e4efb5ad8e209a5c27c9a85f42e920915a7d7b91491197b03a52f85091319247"
     },
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "05f01c553d96ce974caa2874af8fff566d8f1367555676e4f5b557f0cf280556"
+      "sha256": "2e321ea71ad8b24a5562b97dc76bedae62e3a313fd8cbb72f415fa575bd686a1"
     },
     {
       "path": "clients/bongos-client/index.mjs",
       "mode": "0000644",
-      "sha256": "fdfd93367351ec2a22ba13f60146fd8721631751aa5c96c2c05f9b89c69692a2"
+      "sha256": "ff501fe93dd31785d2acb8e55c9b664128065d7acf2862fb91af0800274619de"
     },
     {
       "path": "clients/bongos-client/package.json",
@@ -497,7 +502,7 @@
     {
       "path": "docs/adr/0020-security-model-public-stub.md",
       "mode": "0000644",
-      "sha256": "b7dd96481b423e80f40becc964f96f5b2f10298134ca0485bc1b62a32b5aa647"
+      "sha256": "822b6757a04940d7302c443d1dff52f9cc9fb1ce1638c727b521a215b9afba35"
     },
     {
       "path": "docs/adr/0021-per-builder-skill-model-preferences.md",
@@ -927,7 +932,7 @@
     {
       "path": "docs/adr/0097-one-active-claim-per-session-and-worktree-binding.md",
       "mode": "0000644",
-      "sha256": "3267d88a62cfa36992f039bb05bb6eb775cd0601e3e9d921e36a43f2b012a261"
+      "sha256": "9613664f0f3906aeda7c384c3a6dfaacb8a0a048b0010da8a011831846d7911e"
     },
     {
       "path": "docs/adr/0097-retroactive-reward-backfill.md",
@@ -1137,7 +1142,7 @@
     {
       "path": "docs/adr/0137-upstream-publish-policy-manual-owner-gated.md",
       "mode": "0000644",
-      "sha256": "0479b6f9cf7235bee6d464a4ede0dd1c50521394d66ec0461cb4c79b236966c3"
+      "sha256": "f56c0106d45ac95b6c506680db609859fac109c7b63b52ae8761440d8144871e"
     },
     {
       "path": "docs/adr/0138-bundled-module-deps-declared-per-module.md",
@@ -1157,7 +1162,7 @@
     {
       "path": "docs/adr/0144-devbox-rehome-onto-cloudbongos-plane.md",
       "mode": "0000644",
-      "sha256": "84d6de7e511fcab4fc1d687e8a010fe22b4a0175b16516601ad85698b859f590"
+      "sha256": "e4ddc6e640919691a6f6143493158ee080bb6e9edb9e6bf0b8cc24832fb9c3b2"
     },
     {
       "path": "docs/adr/0144-federated-single-logout-backchannel.md",
@@ -1202,7 +1207,7 @@
     {
       "path": "docs/adr/0151-governance-permissions-as-atom-ranks-as-roles.md",
       "mode": "0000644",
-      "sha256": "1ac1500ed56858f1a46d2c1624daee36395a656c17fff5b59164d2cd463825a0"
+      "sha256": "20fcf384ddef52e0ac09e52372cbd532ea3a4c40705dba7a84e48891a5c14256"
     },
     {
       "path": "docs/adr/0152-landing-gate-served-by-the-core-app.md",
@@ -1224,25 +1229,60 @@
       "mode": "0000644",
       "sha256": "db0e3d371d0172b18f7117a4330b66efc310cb3436bb30f701991c01254ad9c3"
     },
+    {
+      "path": "docs/adr/0155-adopt-private-repo-widen-oauth-scope.md",
+      "mode": "0000644",
+      "sha256": "5f770123e7867476e79821297d3d5e245971e72fd4793569c673e07fde6df03f"
+    },
+    {
+      "path": "docs/adr/0156-user-set-display-name-wins.md",
+      "mode": "0000644",
+      "sha256": "6c6c55670e701f2edfc5f9ea0745ec03bbfa9d2d21f838c83130bc4457e161c9"
+    },
+    {
+      "path": "docs/adr/0157-archon-is-rank-and-identity-only.md",
+      "mode": "0000644",
+      "sha256": "72aae2c4aea03a4a53a216e7eca6a14867d06445ee9dae31f4f193d1fe1823d7"
+    },
+    {
+      "path": "docs/adr/0158-choke-point-verdict-taxonomy.md",
+      "mode": "0000644",
+      "sha256": "47e53b1f3bc5a45333c5687e757d94d09b5e7fbc4a68dff10ccf92ed7cf0550a"
+    },
+    {
+      "path": "docs/adr/0159-merge-gate-reconciliation.md",
+      "mode": "0000644",
+      "sha256": "92ad8e0c4f52495524b8befdb25441bd348557864b90a21c932d9f117ac6968a"
+    },
+    {
+      "path": "docs/adr/0160-main-audit-repo-verifiable-caller.md",
+      "mode": "0000644",
+      "sha256": "3a23a8e64dc258397aea1ecff0c4aa75bf05067be9e1c96c678bf95d66c0c0fb"
+    },
+    {
+      "path": "docs/adr/0161-publish-on-merge.md",
+      "mode": "0000644",
+      "sha256": "056633fe7521143b0e8ba89297426ffd7253deb9ae5aa2fad65c3dfbffddc44f"
+    },
     {
       "path": "docs/adr/README.md",
       "mode": "0000644",
-      "sha256": "f4a447100bc8fbe60d8a99cf34731d58fd52f18de0f03a2069231642b220ce8c"
+      "sha256": "165327e0c447cf9e549ba9389bc7eed6406a64631a9e2d714f7eb3ee80af8be0"
     },
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "6460dbea23438f95217d47f9c4fb04048f9d43228f8830bb84c316838c19fff2"
+      "sha256": "c2e909c0f62a643dc2ff4c705cc6ffccf279dcc588945d1b39147d09d70c5f5b"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "81d074819923960112e52225e29f097a3dd32ae735ecb3dfe119471d73f4ef3c"
+      "sha256": "43b270dbfaa283c2c793d8f779b497cfd0c6da4f4a4cef07f4516d1c4e582946"
     },
     {
       "path": "docs/architecture.md",
       "mode": "0000644",
-      "sha256": "a2cbc583dc9df58741d3c4648956ef4309479e71a32aa58d7ec20cd4828fb5c2"
+      "sha256": "3967a6a48afbbd5e71d486f4f518f768fc3e3000ccd75ee310406a93977a3489"
     },
     {
       "path": "docs/branding-contract.md",
@@ -1257,7 +1297,7 @@
     {
       "path": "docs/canonical-permissions.md",
       "mode": "0000644",
-      "sha256": "bc1aaadb046dd68c035d72436bc04e476605bad53e874ce97ab92b8b95704bc0"
+      "sha256": "cecb0aba0f0276831422a82e42a8c8473479ad6a59dcb180e38795c91f22d6e2"
     },
     {
       "path": "docs/design-contract.md",
@@ -1297,12 +1337,12 @@
     {
       "path": "docs/design/vanilla-hall-ui-redesign-scope.md",
       "mode": "0000644",
-      "sha256": "69007ac56c0567d135440ebc07b0654230192f34175c95af6c3275896749cc22"
+      "sha256": "7e4b465c5b2e61759755a7a45d50171ed88f44095c61f409c4e28b9a7ed4fc0b"
     },
     {
       "path": "docs/file-map.md",
       "mode": "0000644",
-      "sha256": "1a8be1b1cc1009877c4853fd3a3c868af27fb0bc3d0b5afb11c5762d80903626"
+      "sha256": "4907ddeca728a5060f25f091f325daac85120cefb41f49aa67a7291f2c20d1c8"
     },
     {
       "path": "docs/handoff-template.md",
@@ -1352,7 +1392,7 @@
     {
       "path": "docs/onboarding/diagrams/assertions.json",
       "mode": "0000644",
-      "sha256": "93749def4615356460754b2974a8125066a8e33b4d9081752820ea1c76d613b7"
+      "sha256": "d7a8120a3a2ad20f1be87da516a3f475b03b2a1f961499f7cbb8d77a1a621886"
     },
     {
       "path": "docs/onboarding/diagrams/puppeteer-config.json",
@@ -1409,6 +1449,11 @@
       "mode": "0000644",
       "sha256": "7a2891bcf89ba0ff7f718d4255600d68202518ab3178fd74ba686eeb312a097d"
     },
+    {
+      "path": "docs/recipes/core-release-pipeline.md",
+      "mode": "0000644",
+      "sha256": "c544204fb13188ac17bdb8841866fcd61df2cd8a9a033f73bbca04b4cd1202e2"
+    },
     {
       "path": "docs/recipes/devbox-app-release.md",
       "mode": "0000644",
@@ -1482,17 +1527,17 @@
     {
       "path": "docs/recipes/packaging-the-core.md",
       "mode": "0000644",
-      "sha256": "ee80d178b14fdaff7a19eb340767325cd93c48b17676c602ae9bf72e0060ae91"
+      "sha256": "98852a97d2a8102d723ecc7be21125025462841534badd8222513e1f8e62e6d3"
     },
     {
       "path": "docs/recipes/parallel-goal-waves.md",
       "mode": "0000644",
-      "sha256": "a311e824961b6f5d74e07e7d54db65d9c5fa13f3b3c6298c5c4db832f5c38f2a"
+      "sha256": "0ce5b2395e8e4a78a58af68e45cc25d1ca10a5ddc6cc349e2d2b300a85a83a68"
     },
     {
       "path": "docs/recipes/private-npm-distribution.md",
       "mode": "0000644",
-      "sha256": "b0dc53415d889c21c2549dc5b21041f25f72ac5ca1547b984ac6a35632945744"
+      "sha256": "1aafe7dafea94084c381e7ea1e91fad533ca379f9560da6f9f9f4a2cf4db4fc5"
     },
     {
       "path": "docs/recipes/search-index-ingestion.md",
@@ -1522,7 +1567,7 @@
     {
       "path": "docs/recipes/upgrading-the-core.md",
       "mode": "0000644",
-      "sha256": "bafef1be5b5369bbe7ef4f41c31b7c1a754dcc3b93d7bd7d7eb1943e06083caf"
+      "sha256": "dcf0520928832e4a8e723c830a5d8f5e1ae1a0fcef16ff21345aabf715e142f6"
     },
     {
       "path": "docs/recipes/work-on-a-task-from-your-dev-box.md",
@@ -2129,6 +2174,21 @@
       "mode": "0000644",
       "sha256": "4a3a23cd95959f2666deeaeaf166d6108df9c812681ab14687823f1c6867a4a0"
     },
+    {
+      "path": "migrations/core_197_display_name_source.sql",
+      "mode": "0000644",
+      "sha256": "07dd609ded1dac819a5a6baf7c8401fc4f231d4f50abcd4bf0fede4cfeefb0b3"
+    },
+    {
+      "path": "migrations/core_204_rekey_active_claim_per_session_worktree.sql",
+      "mode": "0000644",
+      "sha256": "614def05feaeefe06de81de73523bbc42da4ffd095a8a71ad4f80af7bf61d878"
+    },
+    {
+      "path": "migrations/core_205_versions_track_default.sql",
+      "mode": "0000644",
+      "sha256": "cfc4208327550710a64e44a401f552d78ab28814f033627f5fccc174f1c15b9d"
+    },
     {
       "path": "modules/autonomy/CLAUDE.md",
       "mode": "0000644",
@@ -2152,7 +2212,7 @@
     {
       "path": "modules/autonomy/routes/autonomy.js",
       "mode": "0000644",
-      "sha256": "db063ae3a129146ab99dd2a7d27b18ef2261ddbdacb4b40233aee10dccc34af1"
+      "sha256": "aa0c84ab532bbc946d80cf625d130b9ef2ba8e2e54cd320945aa1dda6b210488"
     },
     {
       "path": "modules/builder-settings/CLAUDE.md",
@@ -2167,7 +2227,7 @@
     {
       "path": "modules/builder-settings/db.js",
       "mode": "0000644",
-      "sha256": "e283f0566644ed3591ae76f923ae555ddef5c4ce3b6c674576e06d7c14f4e4af"
+      "sha256": "a7ff0f8d78bf5e54149841e4ab2c76555ba25b177b82bd27baba62093d9a098f"
     },
     {
       "path": "modules/builder-settings/display-name.js",
@@ -2447,7 +2507,7 @@
     {
       "path": "modules/dev-box/app/src/vendor/bongos-client.cjs",
       "mode": "0000644",
-      "sha256": "1e1655619fe002bc783e5cfd29e45d9993acb8d836f73bcfe783db4874c753f5"
+      "sha256": "e4efb5ad8e209a5c27c9a85f42e920915a7d7b91491197b03a52f85091319247"
     },
     {
       "path": "modules/dev-box/app/test/unit.mjs",
@@ -2487,7 +2547,7 @@
     {
       "path": "modules/dev-box/routes/box.js",
       "mode": "0000644",
-      "sha256": "7dde5da0323a8f60e86feba0b3b8c9b65bd8f87e4e894ee758a652cfe8fa498a"
+      "sha256": "a9f51c0ddc4fc8c558d0c6dde77ffcd3e1b1262a6f14f93c88e1bb3e9093538d"
     },
     {
       "path": "modules/discord/CLAUDE.md",
@@ -2497,7 +2557,7 @@
     {
       "path": "modules/discord/auth.js",
       "mode": "0000644",
-      "sha256": "238959baabab5387282cc8e3461180f068deaea2d502009ba032afd4ed1f18a6"
+      "sha256": "a3261a569a381ed4b19f6f5d32598a9cec09f62be51533fd6b7c5272d53b63d3"
     },
     {
       "path": "modules/discord/bug-attachments.js",
@@ -2572,12 +2632,12 @@
     {
       "path": "modules/discord/routes/discord.js",
       "mode": "0000644",
-      "sha256": "73d3fee54f1b8fc760e6ba6d2154531f7cf38067f6f9dc4c35e2b9a5b133e13c"
+      "sha256": "6c3d77cb86ea3f9328de88c8ddf02a1af95e3c95ed92559bf380f627f7f59f48"
     },
     {
       "path": "modules/discord/ship-broadcast.js",
       "mode": "0000644",
-      "sha256": "d5672c0a6f141baa4cf6dbe5e8d8b7695233e04ce279856eaad9b6d8452c6767"
+      "sha256": "5c1273de955d5559e549603d7c60a6987f88696631c7536c429c04d55c2fdf5c"
     },
     {
       "path": "modules/discord/webhook.js",
@@ -2657,7 +2717,7 @@
     {
       "path": "modules/governance/catalog.js",
       "mode": "0000644",
-      "sha256": "7ae35f374d8e6e591ef461b495a9f61d775d6f30397403f7e605515cccb3f819"
+      "sha256": "b5d09300e2dc63704c533a62e51022f7a5ccf90efc477cb4f0878479a704c7ce"
     },
     {
       "path": "modules/governance/config.js",
@@ -2667,7 +2727,7 @@
     {
       "path": "modules/governance/db.js",
       "mode": "0000644",
-      "sha256": "56d3190ba4ea3a41019ece6054ecbc719cd1cbd950e7428e734d7703161f502f"
+      "sha256": "fa587b97acc0668ba55ef8329e8b888a45f8c34aa7e93cbf8f6307956f5560a1"
     },
     {
       "path": "modules/governance/migrations/governance_001_tables.sql",
@@ -2694,6 +2754,16 @@
       "mode": "0000644",
       "sha256": "fdbfcd598f6e983207d7a745e5c92540cd28f7a65dc3c9b1b657bb8c8b6435fc"
     },
+    {
+      "path": "modules/governance/migrations/governance_006_version_create.sql",
+      "mode": "0000644",
+      "sha256": "6675a71459ea9f7905887b7fb7f34fa7936d86c777e5ddcb17363fc60989e1cd"
+    },
+    {
+      "path": "modules/governance/migrations/governance_007_delegate_archon_ops_to_metic.sql",
+      "mode": "0000644",
+      "sha256": "cb532aeed42e0b377f0eefa3047b169ca8dff5c13bd8061ce82473172926564f"
+    },
     {
       "path": "modules/governance/module.json",
       "mode": "0000644",
@@ -2722,7 +2792,7 @@
     {
       "path": "modules/governance/routes/governance.js",
       "mode": "0000644",
-      "sha256": "0afebe03b6f83c0435ea09a38bf8e94dadfa34979c6e9cfaafef477bb261a371"
+      "sha256": "6f600bb237009064f18eae7af140cd8376cf5770ff7efd89d0e4071bade9eb4d"
     },
     {
       "path": "modules/governance/routes/role-sync.js",
@@ -2777,7 +2847,7 @@
     {
       "path": "modules/grading/grader-workers/index.js",
       "mode": "0000644",
-      "sha256": "4aed41e7e724a40550a3231a2f0bd20378eed78b3fa37774ae4d60b3da6446c8"
+      "sha256": "80c4bbb043994fcade7a4ff33cd368a1c20ca895e92e36db2f672e9f7553f421"
     },
     {
       "path": "modules/grading/grader-workers/narc.js",
@@ -2932,7 +3002,7 @@
     {
       "path": "modules/hall-ui/public/gate.js",
       "mode": "0000644",
-      "sha256": "4dc84717529a727086b6778c0901c6a6b2dc7f8eecb500a558604eb9ec5f6c28"
+      "sha256": "a70fd388f3e1df5f759dbcc0df7bda4d4492906f06c0a5bd9fab712cda29461e"
     },
     {
       "path": "modules/hall-ui/public/goal-inbox.js",
@@ -2942,7 +3012,7 @@
     {
       "path": "modules/hall-ui/public/goals-page.js",
       "mode": "0000644",
-      "sha256": "d338a81d1a9928e6a5e86e2a8c3970c2649916baa467d225f2b9800a75dbb77f"
+      "sha256": "bacccdcedf5abfe57ebe6ae4f521f00dace123c11509554b2ef6c934fde2afb4"
     },
     {
       "path": "modules/hall-ui/public/goals.css",
@@ -2959,6 +3029,21 @@
       "mode": "0000644",
       "sha256": "9cdbc14c1709dcc26fe9b8c85b2bfd08685a2925c9855758ca8e758455d1bc5c"
     },
+    {
+      "path": "modules/hall-ui/public/governance.css",
+      "mode": "0000644",
+      "sha256": "9b9a442db7091d16e5db948eb3b3eabf2a8e3c29bac608e68fa79c08d05fa76a"
+    },
+    {
+      "path": "modules/hall-ui/public/governance.html",
+      "mode": "0000644",
+      "sha256": "0c4b49a863e98199ee95a29910eac003239f5b6319483928a7aee8d8f06830bb"
+    },
+    {
+      "path": "modules/hall-ui/public/governance.js",
+      "mode": "0000644",
+      "sha256": "bb49a7f64dfe11f9192a6b22e9cf9fedabe0f270f81d5283e8fb56e12a634f77"
+    },
     {
       "path": "modules/hall-ui/public/hall-kit.js",
       "mode": "0000644",
@@ -2982,7 +3067,7 @@
     {
       "path": "modules/hall-ui/public/harbor.js",
       "mode": "0000644",
-      "sha256": "7bd9eed7c846ddad74e6aac3ac651671306680ae2fa50813d27b669cd87d9520"
+      "sha256": "0dbe5085c9672303fdb30c3396d5ce145a71f67c11166427d4a980586f6246f9"
     },
     {
       "path": "modules/hall-ui/public/index.html",
@@ -2992,7 +3077,7 @@
     {
       "path": "modules/hall-ui/public/instances-panel.js",
       "mode": "0000644",
-      "sha256": "50d1d95658ba7fa6b705ce173f3d3ee8545f65c716e4112840e4715776915068"
+      "sha256": "d42ddfb865d8fa928286be158a19a93299050754366b2d625fe2f92dbbd75ade"
     },
     {
       "path": "modules/hall-ui/public/md-reader.js",
@@ -3027,7 +3112,7 @@
     {
       "path": "modules/hall-ui/public/new-project-wizard.js",
       "mode": "0000644",
-      "sha256": "16b5ef8bce6dc0636a9221d4c75f21c77aa4dafa5b3d372d50d8527c95063794"
+      "sha256": "ebd0192e70e01cbf36be4eb977039c2368cc325a6cd64f8de9c7530d25f357c4"
     },
     {
       "path": "modules/hall-ui/public/not-ready.html",
@@ -3054,6 +3139,16 @@
       "mode": "0000644",
       "sha256": "f01a585277f24dafb12caa39d4b475cd65e61cda50ba918c66941a20916fd8b1"
     },
+    {
+      "path": "modules/hall-ui/public/people.html",
+      "mode": "0000644",
+      "sha256": "22de52171687542636cf2635d5b96bc207abceb8eceab02e2b959a572c9efbd5"
+    },
+    {
+      "path": "modules/hall-ui/public/people.js",
+      "mode": "0000644",
+      "sha256": "5439654ddbc1ad6be7944dc198eca5094ec5978ad3b73b7196215ad3dc781dca"
+    },
     {
       "path": "modules/hall-ui/public/primer.css",
       "mode": "0000644",
@@ -3072,12 +3167,12 @@
     {
       "path": "modules/hall-ui/public/profile.html",
       "mode": "0000644",
-      "sha256": "e3246b23a2320e1d84421399b918e2cef1d1b6b2fd1a7d1ea51bdc3fe2ce1430"
+      "sha256": "cd3148ae6a22d7e7fff8e0b4a07aed2fe6d27b4e0b6e5b450bd2a63b3f078713"
     },
     {
       "path": "modules/hall-ui/public/profile.js",
       "mode": "0000644",
-      "sha256": "b5ac5d2011390a97940e7990dc8867b23796a6fb282bec90477fa05332e24680"
+      "sha256": "be57f192368280ac1ae2b0b820f89daf59512f9f89d9ad23414c42cbf09a462e"
     },
     {
       "path": "modules/hall-ui/public/ranks.html",
@@ -3127,7 +3222,7 @@
     {
       "path": "modules/hall-ui/public/sessions.js",
       "mode": "0000644",
-      "sha256": "b3465ea8ebb5f8b27e4fa3daa3b4ec6e93bd60ebef6592dc506310c51eeaeae8"
+      "sha256": "e99046a2c0e2cb6ce9f05711ddbe6ed9d2e7536086dca16496ef0e5e8cb9a041"
     },
     {
       "path": "modules/hall-ui/public/settings.css",
@@ -3147,7 +3242,7 @@
     {
       "path": "modules/hall-ui/public/shell.js",
       "mode": "0000644",
-      "sha256": "88599e272c4f943512c71b5c61692d6e544cc9a012e4938177f2316ebbbf542e"
+      "sha256": "00a356cf20df11fd195c8ecce619ba5e4bc4138ccb3b66ebdef1522fa3f56c8e"
     },
     {
       "path": "modules/hall-ui/public/style.css",
@@ -3157,7 +3252,7 @@
     {
       "path": "modules/hall-ui/public/task-detail.js",
       "mode": "0000644",
-      "sha256": "cbfebae6118a307fbabfa13a207a58d1bad6aea1908434df9b2774cf36d9fd1a"
+      "sha256": "fc9224e79a1003434f7cb35925b3264b26bb4aea1d32c1b24723de4918530bef"
     },
     {
       "path": "modules/hall-ui/public/task.html",
@@ -3182,7 +3277,7 @@
     {
       "path": "modules/hall-ui/public/watch.js",
       "mode": "0000644",
-      "sha256": "040530b54a32352021138450db3597d5786af659b18e9c36b04d546d42fcdd2f"
+      "sha256": "31dc79e6aaf72260cae3b46eb0fbb356e4e2bb01e3a2cbce3c420dad5221f25e"
     },
     {
       "path": "modules/hall-ui/public/work.css",
@@ -3207,7 +3302,7 @@
     {
       "path": "modules/ideas/blockers.js",
       "mode": "0000644",
-      "sha256": "ce92de31f385440c0bed072ddb4f01e617d834ef6bfaae11626aa580472c5b60"
+      "sha256": "73349f0209190305a61e2f4d771fa466c12be4f9034b4134b60a9e4a560e1c5a"
     },
     {
       "path": "modules/ideas/inbox.js",
@@ -3222,12 +3317,12 @@
     {
       "path": "modules/ideas/routes/blockers.js",
       "mode": "0000644",
-      "sha256": "f5ebbc932acc2327550cc51d529eee756a9a402cf81362f651912a4a67d4c3d1"
+      "sha256": "7c61821b9ddf9a9255f6a9916659140881a6436dbd50f3d53b4cf818640a39a4"
     },
     {
       "path": "modules/ideas/routes/inbox.js",
       "mode": "0000644",
-      "sha256": "6eefb842097067b5b7a12efd9c85aecc06b9563ed3c83f8339cd205d736dde6a"
+      "sha256": "6c57608d1eae4159e967f9b471b20cb4c518c2b4acdf9d5ab88cad2afaf7c197"
     },
     {
       "path": "modules/lifecycle/CLAUDE.md",
@@ -3252,7 +3347,7 @@
     {
       "path": "modules/lifecycle/db.js",
       "mode": "0000644",
-      "sha256": "e647ee3f50a2242d02a435d8694f11db3ac8dfcfbaa0a6ac1199ff41425c388d"
+      "sha256": "44cdb3c44dcf9277e9e0661d664387f0497e7d9b11c9775e1133aeec0da9db9f"
     },
     {
       "path": "modules/lifecycle/done-when.js",
@@ -3262,7 +3357,7 @@
     {
       "path": "modules/lifecycle/github-push.js",
       "mode": "0000644",
-      "sha256": "918ab0c4a38fcb9fea2403b6a31efbea025a523c431702bdf1ea2b19411d7ee0"
+      "sha256": "200de3b5be6b1f3b0612dea91409f44aa3d5b76f8f90fb71e4e5ced43a0890fb"
     },
     {
       "path": "modules/lifecycle/goal-advisory.js",
@@ -3317,7 +3412,7 @@
     {
       "path": "modules/lifecycle/publish-reconciler.js",
       "mode": "0000644",
-      "sha256": "de21ed92ca1ca8974c52f5c3058c9bb478ae0deff5499424d5868f5b5c2442c7"
+      "sha256": "7f42dfe5b16dff0e3833b0a586c5b04592aeaee1aa1f4f41c0255a16db1a14fc"
     },
     {
       "path": "modules/lifecycle/routes/analytics.js",
@@ -3327,27 +3422,27 @@
     {
       "path": "modules/lifecycle/routes/claims.js",
       "mode": "0000644",
-      "sha256": "b518c5ab8d9692f23436542f10db55dab377009bdc0e29bb1c49cff85174eb3e"
+      "sha256": "6e30cf7169736737ea7aeac0aa1af9e5f31ed8ea79f08796cc2da9ed9ae03577"
     },
     {
       "path": "modules/lifecycle/routes/dependencies.js",
       "mode": "0000644",
-      "sha256": "f5137fc12a7e57c5896d2bdad0991c22fea671dd65933590385b4f893c59c9e7"
+      "sha256": "bafacf5c0cb990ae2604179d86cbcaff9f9752a7f8d4f26dd65eafd777a8d793"
     },
     {
       "path": "modules/lifecycle/routes/done-when.js",
       "mode": "0000644",
-      "sha256": "971774b1e794e2de346d816463b3b6f585dc45b9cd18f1497d1afc0f6dd193fb"
+      "sha256": "f77651b5418d6eb99e78ecf4c864f239ba75a149444a88eae59a5c3082f48cae"
     },
     {
       "path": "modules/lifecycle/routes/gate-approvals.js",
       "mode": "0000644",
-      "sha256": "4ca9732777a8995eadff3dd6855fac2f69381c4e0acba294adf4e5d76196212d"
+      "sha256": "e88256fd506eafbecde48704f6eee72141451f38107fa10630257a171122d67a"
     },
     {
       "path": "modules/lifecycle/routes/goals.js",
       "mode": "0000644",
-      "sha256": "3d212f1ec6fc7328b5aa54b967989bf95e5ac73941cce3d192dc9be9175fa83c"
+      "sha256": "9651f16e968983ab378aabc3d2a5e3d6ef6ba3fc3aaa00727fc5aff673b8d10e"
     },
     {
       "path": "modules/lifecycle/routes/lifecycle.js",
@@ -3357,17 +3452,17 @@
     {
       "path": "modules/lifecycle/routes/tasks.js",
       "mode": "0000644",
-      "sha256": "068ff4593569cfd166a6ad11d0bb04b1fb430bd9afa12a007d3149d29c4c48df"
+      "sha256": "14320bb5a3257a422854c41362f010042ed390bdd7efcf1b4959ed72f0ee1f9f"
     },
     {
       "path": "modules/lifecycle/routes/versions.js",
       "mode": "0000644",
-      "sha256": "f28e2a50510829dcfba1bafd4e50e9aefa735a838e4494329697daa73d1def1f"
+      "sha256": "044ca86e5605c19dd8e523da9eb061b4a90ed0af199ec1288c3c5f1b1bb8f46b"
     },
     {
       "path": "modules/lifecycle/ship-card.js",
       "mode": "0000644",
-      "sha256": "391ff28d28360e7b7c8e43368406069de69718b8dbf43adb0413f34e91d4eaef"
+      "sha256": "c2c4f75c6fec8a51befbe9e08f9fdb15b47a637654791a98d5eac6ed4a319ece"
     },
     {
       "path": "modules/lifecycle/ship-preflight.js",
@@ -3412,7 +3507,7 @@
     {
       "path": "modules/memory/routes/memory.js",
       "mode": "0000644",
-      "sha256": "00fee1a02d4c11ae333868e3b0325c3e619f5ca16d76001ed54b089bbc5f0677"
+      "sha256": "1d0e08502f34acec327052a352444561f6c48305a89e1ed8c6acd22f3c4163c3"
     },
     {
       "path": "modules/memory/routes/search.js",
@@ -3472,7 +3567,7 @@
     {
       "path": "modules/onboarding/routes/access-requests.js",
       "mode": "0000644",
-      "sha256": "76ba18cf1e3c2d44a31315d90d6dc931cd57f6c258ece6f6d5bf8ac3095f4549"
+      "sha256": "96cc25d7f8c343333cc4393258ad931c2cb9df9b25b564d77d0fcf2257455a03"
     },
     {
       "path": "modules/onboarding/routes/onboarding.js",
@@ -3542,12 +3637,12 @@
     {
       "path": "modules/platform-identity/routes/projects.js",
       "mode": "0000644",
-      "sha256": "f3a5c55d983b986bc418cabde2b42dbb00560cb3486b0373c3e0491d3398ac4e"
+      "sha256": "33acce5b2f0c9ea9aef4a0d38f5245e56be4cd2756bc1d49129d5fadeb56a4a1"
     },
     {
       "path": "modules/platform-identity/routes/scouting.js",
       "mode": "0000644",
-      "sha256": "b471f91c1a7c102eb0e6ed094e5fbc8b08f6a650a4731b25e2b94da24214c979"
+      "sha256": "c6db7fa003caaf55d2ecb68f1ff73d7d89d8b71b6d999ed3ebf71286e8726359"
     },
     {
       "path": "modules/platform-identity/routes/sso.js",
@@ -3584,6 +3679,11 @@
       "mode": "0000644",
       "sha256": "6142399fba4d11d27de9d4fdeabf6d28a39e6f9341555ec34b15625470bd3234"
     },
+    {
+      "path": "modules/provisioning/migrations/provisioning_004_onboard_mode.sql",
+      "mode": "0000644",
+      "sha256": "c25101daed13fc22ba3f132b2dac59c782fa564fa4bc22a6a5169e6644109b3a"
+    },
     {
       "path": "modules/provisioning/module.json",
       "mode": "0000644",
@@ -3597,7 +3697,7 @@
     {
       "path": "modules/provisioning/provisioning.js",
       "mode": "0000644",
-      "sha256": "ff9b64f711f1b7eee9936326b9f76d97d4f115bb3c87ca8bb7a8d01b4b2ce693"
+      "sha256": "468557062f75a9a02e3cab53103389d7ecaaede6528b60587e51a71ce9dfecf5"
     },
     {
       "path": "modules/provisioning/rate-limit.js",
@@ -3607,7 +3707,7 @@
     {
       "path": "modules/provisioning/routes/provisioning.js",
       "mode": "0000644",
-      "sha256": "d4a3f8afcb95d032a00bfda625996ef39d631bc42a0b4fa7b738d60ee011eb1f"
+      "sha256": "f48562d5f17e0ea9934b4ca96c84e1ac0fc448819a8fff54227045e52aa98731"
     },
     {
       "path": "modules/provisioning/tests/provisioning.mjs",
@@ -3624,15 +3724,140 @@
       "mode": "0000644",
       "sha256": "7cb9dac9cb87b679e1ae50e4112b3a7928a38ebb9902c8947a74d17bec4d9009"
     },
+    {
+      "path": "modules/security/artifact-scan/aggregate.js",
+      "mode": "0000644",
+      "sha256": "06f407b53be4492eda77a9c286dfb58348e75ab7491422b858808092afde1332"
+    },
+    {
+      "path": "modules/security/artifact-scan/detectors/capabilities.js",
+      "mode": "0000644",
+      "sha256": "3e9c130cc4cad9faa62b06ecfce9f65024dc0cbd2077959084c8ae7bd9c0307d"
+    },
+    {
+      "path": "modules/security/artifact-scan/detectors/config-obfuscation.js",
+      "mode": "0000644",
+      "sha256": "887cd4cc270df4fde4531cf14bbbba1799132dc0cab6fb036e0f160adfa85d05"
+    },
+    {
+      "path": "modules/security/artifact-scan/detectors/credentials.js",
+      "mode": "0000644",
+      "sha256": "ac793c3caa1b047770dc5729777881fa9a9c0e799eb46799fda038ed98338934"
+    },
+    {
+      "path": "modules/security/artifact-scan/detectors/dependencies.js",
+      "mode": "0000644",
+      "sha256": "e33d0deb1a1c883d021fa7a838600ea1a0c14d01a22059cb1e34f41d88b26b41"
+    },
+    {
+      "path": "modules/security/artifact-scan/detectors/hooks.js",
+      "mode": "0000644",
+      "sha256": "206e631050862c429369d5f5e5ad576391a3f0e2d4111fd4cbd45ede55cd08cc"
+    },
+    {
+      "path": "modules/security/artifact-scan/detectors/injection.js",
+      "mode": "0000644",
+      "sha256": "5fa6a7e22bc9ab856fad95f6faef83b8dba35bb919abbcc50aa5afef7e8c1ab5"
+    },
+    {
+      "path": "modules/security/artifact-scan/detectors/mcp.js",
+      "mode": "0000644",
+      "sha256": "0c49d45fcd72905eccbf7c2bb675ca39cf072a9e8e80dd6450631f03c26d5079"
+    },
+    {
+      "path": "modules/security/artifact-scan/detectors/network.js",
+      "mode": "0000644",
+      "sha256": "0fff96f4a628586351159059b7cd4f50ba393093b2d1e20ae53c2bc71afe92a1"
+    },
+    {
+      "path": "modules/security/artifact-scan/detectors/npm-lifecycle.js",
+      "mode": "0000644",
+      "sha256": "ad38a6c63b2b55c31708a1a1b3e0302f7333ac39deb1a073c47423915cbc476b"
+    },
+    {
+      "path": "modules/security/artifact-scan/detectors/permissions.js",
+      "mode": "0000644",
+      "sha256": "2e3cb01a85a9fdb77ef5c755c6bdfafbaf25fbcce78a2f5f45930a1da88b25ee"
+    },
+    {
+      "path": "modules/security/artifact-scan/detectors/shared.js",
+      "mode": "0000644",
+      "sha256": "1f56f5049bd8616f9ada86889b34d9548c0b7757847aeaf6ec59c0439a66eb1c"
+    },
+    {
+      "path": "modules/security/artifact-scan/fence-local.js",
+      "mode": "0000644",
+      "sha256": "d01aab5eb3761296a93ee454ef30b3074577317bcb2c0fa9bd0b4ea38c159b8d"
+    },
+    {
+      "path": "modules/security/artifact-scan/fetch.js",
+      "mode": "0000644",
+      "sha256": "73fecaa98fd69649edf75c8854ffcefa9117412e8604cf5ccfa1ac376ae27fd6"
+    },
+    {
+      "path": "modules/security/artifact-scan/floor.js",
+      "mode": "0000644",
+      "sha256": "c3daa70d6a07cb64040f0f0c88b359ef7ff284c66b0282297253d726b25ba93b"
+    },
+    {
+      "path": "modules/security/artifact-scan/limits.js",
+      "mode": "0000644",
+      "sha256": "7e404f5621c493c23a2ebed05919180d480c830da588a6b46773b0ffd558533d"
+    },
+    {
+      "path": "modules/security/artifact-scan/manifest.js",
+      "mode": "0000644",
+      "sha256": "924f3601b9c71bbff0b11cf2f77f028898ed03c8f86f0a89298b7fee7e537503"
+    },
+    {
+      "path": "modules/security/artifact-scan/mirror.js",
+      "mode": "0000644",
+      "sha256": "8b77b65410cdde306d60903fe08913cb87e3db0af1a03926dce57dd4ce79a163"
+    },
+    {
+      "path": "modules/security/artifact-scan/quarantine.js",
+      "mode": "0000644",
+      "sha256": "9ac4695e571efdda2b991ff42d4635c9b493383733819c8c97ca93f1066220a1"
+    },
+    {
+      "path": "modules/security/artifact-scan/rebuild-spec.js",
+      "mode": "0000644",
+      "sha256": "c9c7136299e76135390e6feda44149e7d5124cedb2360d9901fb28709afbc848"
+    },
+    {
+      "path": "modules/security/artifact-scan/report.js",
+      "mode": "0000644",
+      "sha256": "68c071b172fbebf1ce4897887414abcacab056a2b420358ff6f09a9b7d7f2d04"
+    },
+    {
+      "path": "modules/security/artifact-scan/sanitize.js",
+      "mode": "0000644",
+      "sha256": "861abc56de494363d4420d8e5826eeda01ba6ba79f113deceea094db4d9ab6a8"
+    },
+    {
+      "path": "modules/security/migrations/security_001_tool_scans.sql",
+      "mode": "0000644",
+      "sha256": "17bd24de65db4b1d5f0b6af5d92b0d5dcb58bb69faae6e872d92376fb6b07d50"
+    },
     {
       "path": "modules/security/module.json",
       "mode": "0000644",
-      "sha256": "c3d781d701178329c4dee80157008b3685cd61c99d7a25abc40ba30dc47b2b0b"
+      "sha256": "b087a1752b413882c8d3057867d8dcb464395831b9cc1be3b82a05607802cc26"
     },
     {
       "path": "modules/security/routes/reports.js",
       "mode": "0000644",
-      "sha256": "135d8ae66de4a3eabed3fa0f791f877de0c6b98010d873591381f2fd86651691"
+      "sha256": "cf24557603650a2f0d692f36da24acf80011e0c0d4f58f6a6e7a0ae14c6085d9"
+    },
+    {
+      "path": "modules/security/routes/scans.js",
+      "mode": "0000644",
+      "sha256": "008bee59c78d7e67726f30d770da81b5c16f4fe01905f22a47a5d2ab6c5e68d8"
+    },
+    {
+      "path": "modules/security/scan-store.js",
+      "mode": "0000644",
+      "sha256": "2b6aa7dc200d10e53c0908c8cb5f099955e2a1bb9cc9e19eb0df9fa4e1d08915"
     },
     {
       "path": "modules/security/secret-scrub.js",
@@ -3644,6 +3869,41 @@
       "mode": "0000644",
       "sha256": "0cb4a6bd849a4b9486ad342041e1b848e81fcb99ab52f9ba55fbd01f58fc1fc7"
     },
+    {
+      "path": "modules/security/tests/aggregate.mjs",
+      "mode": "0000644",
+      "sha256": "f046ddf3890eea7bd5c1191b2a5999b39cf50a1a0d8eb6423eec0c526896acb1"
+    },
+    {
+      "path": "modules/security/tests/artifact_scan.mjs",
+      "mode": "0000644",
+      "sha256": "68079f8cc0e8c8466054865032fa03bd23f0a46513cbe997c4390d2e236e9249"
+    },
+    {
+      "path": "modules/security/tests/floor.mjs",
+      "mode": "0000644",
+      "sha256": "7fcc6fedf6d087156ba91c6a6935fcf86b4c0cd0d80c31082121669f14b58172"
+    },
+    {
+      "path": "modules/security/tests/mirror.mjs",
+      "mode": "0000644",
+      "sha256": "b1bceda3d21897133db69f22d02fc91ed9671c536432d32959409637bfaf3bdb"
+    },
+    {
+      "path": "modules/security/tests/sanitize_rebuild.mjs",
+      "mode": "0000644",
+      "sha256": "4af88247bed3dcb3c12370e48380625871a9b50a0b430a6da34db0ce6d6c8aca"
+    },
+    {
+      "path": "modules/security/tests/scan_store.mjs",
+      "mode": "0000644",
+      "sha256": "a369afdadb5e3b4c2c1f49de2ce1504d1b5927be5bada151fdb820bd7276dd8b"
+    },
+    {
+      "path": "modules/security/tests/tool_scans_migration.mjs",
+      "mode": "0000644",
+      "sha256": "4add5724402e529ab1aaac86f06d948f8a5639fde621ea676601b75c542fd322"
+    },
     {
       "path": "modules/sessions/CLAUDE.md",
       "mode": "0000644",
@@ -3677,7 +3937,7 @@
     {
       "path": "modules/sessions/routes/sessions.js",
       "mode": "0000644",
-      "sha256": "8b235d4bb620c2e39219535a17cf63a4313057d540fbe20ec1b40a8bd0b9eaf2"
+      "sha256": "731287e9960d4492f9c2d1c4160093010d79ed3ee5ab91dd94f9ea4a222fd761"
     },
     {
       "path": "modules/status-ui/CLAUDE.md",
@@ -3737,12 +3997,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "e8bc8b5238e6c8d6fb3c4168cc93e4fcbad6cff43364b52d7e976466de3c235d"
+      "sha256": "9fac5a0812e107806de4ca9aa07ab0037174433dd328f13af2b9185ab7114f15"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "04a15921eadb531ab832ada19fd934cd7ffa79ca138cb23832394511a2c8e016"
+      "sha256": "a72c1ac2abad46cc2c620a73ee9f42d6e827d4246a3d6f59f9e2df133621d163"
     },
     {
       "path": "public-docs/index.html",
@@ -3987,7 +4247,7 @@
     {
       "path": "public-landing/create.html",
       "mode": "0000644",
-      "sha256": "b31ca99c0630299390879d1e081feefba336e874be4b179cc3048f7494de9296"
+      "sha256": "31dec15fbf56b826b6a8e3623cdbd0eb2f015ee56f08fefda19135c7ee7c725f"
     },
     {
       "path": "public-landing/gate/README.md",
@@ -4122,7 +4382,7 @@
     {
       "path": "scripts/gds/abandon.js",
       "mode": "0000644",
-      "sha256": "a4c02cc2c2938242ea29ce3de2d0547935494661b2b987b04711171c8e3177fa"
+      "sha256": "226e266390bd7eac3c10526557427a3b1e7916749ad64dda2a7163c4fac43a74"
     },
     {
       "path": "scripts/gds/adopt-detect.js",
@@ -4162,7 +4422,7 @@
     {
       "path": "scripts/gds/audit-authorship.sh",
       "mode": "0000644",
-      "sha256": "2ba18619ea5cbadeb68b6e44e521a5eefbaaa0276047ebf5aa8c546abf4d6254"
+      "sha256": "eeeb1471e46e5b62ec95dd4d856ec2e6f48fd110f5a0ac86e6b0895d2aa0bfa8"
     },
     {
       "path": "scripts/gds/audit-deps.js",
@@ -4232,13 +4492,18 @@
     {
       "path": "scripts/gds/box.js",
       "mode": "0000644",
-      "sha256": "dd8d5d211e0b7d4fea4d009c35afb41036bfa364db7c0e7d2ab312480cd49f27"
+      "sha256": "65712c9b88a461add6211d895c650d9e6bc3a0994d8966a17be373a5dafbd105"
     },
     {
       "path": "scripts/gds/build-bongos.js",
       "mode": "0000644",
       "sha256": "6a696f9291da2d071d8a8aa0f92bf0be08445569a73196f9204f696bf6cb6cb5"
     },
+    {
+      "path": "scripts/gds/bump-version.js",
+      "mode": "0000644",
+      "sha256": "91664a0a1338ded41b780179c16040e2c686f6ab92304891cb1bc6ef3ca805b6"
+    },
     {
       "path": "scripts/gds/capture.js",
       "mode": "0000644",
@@ -4262,7 +4527,7 @@
     {
       "path": "scripts/gds/claim.js",
       "mode": "0000644",
-      "sha256": "47ae299991299191936d13f381514d3397ba2eddb16803f48c9b85a7259330b1"
+      "sha256": "23f9932dd79c63915679eeb175e2fc6d95e43b840dba78336c23504c85617987"
     },
     {
       "path": "scripts/gds/classify-discipline.js",
@@ -4287,7 +4552,7 @@
     {
       "path": "scripts/gds/cli-lib.js",
       "mode": "0000644",
-      "sha256": "fe82cf86a36256bc330c7efe3d538aea0a925ea5e4cbd13475da0308c3f22f44"
+      "sha256": "6c42a8ee151ba5e12475e50b0d113d306fd01c5c95100f131713fb3abeaa4e62"
     },
     {
       "path": "scripts/gds/code.js",
@@ -4427,7 +4692,7 @@
     {
       "path": "scripts/gds/gating.js",
       "mode": "0000644",
-      "sha256": "3f6cad9ca65b6ed0a1d29158296a9a9c57a4dd48783f71f2ad6e497c5f7737ec"
+      "sha256": "5de3e4129006035e844efd4c5a2147060228fe6c73fe0bbbf1ead72af2cc405c"
     },
     {
       "path": "scripts/gds/gds-db-backup.service",
@@ -4457,7 +4722,7 @@
     {
       "path": "scripts/gds/gen-api-docs.js",
       "mode": "0000644",
-      "sha256": "bf0f270cbad06386f858aba52667d1a68024540d48cc1143613b6282c7916725"
+      "sha256": "ccdebd47cc53a4896c766c6a70f43dfb91e3b84264b82bd927c918ac941a6905"
     },
     {
       "path": "scripts/gds/gen-atlas.js",
@@ -4494,6 +4759,11 @@
       "mode": "0000644",
       "sha256": "75130de4a880fc7d76f5a8d79ed65750238df94847c1ccfdc974188f9300a1e6"
     },
+    {
+      "path": "scripts/gds/goal.js",
+      "mode": "0000644",
+      "sha256": "6cd8b2e7d23a4a8351f4018d2eec9403bb7eb16391e77fa2583a5f4c612e3046"
+    },
     {
       "path": "scripts/gds/grade-smoke.js",
       "mode": "0000644",
@@ -4512,7 +4782,7 @@
     {
       "path": "scripts/gds/init.js",
       "mode": "0000644",
-      "sha256": "90ac7e61c185040efe0d6dfc8fb1216537c9842994313add96a7ac08713ceb7f"
+      "sha256": "a58a741f11ea7d34396dcb9e242825bf88326ca2709b7c726a91b06f60f9c24c"
     },
     {
       "path": "scripts/gds/install-git-hooks.js",
@@ -4582,7 +4852,7 @@
     {
       "path": "scripts/gds/main-audit.js",
       "mode": "0000644",
-      "sha256": "6049b1492b6575169a7b1000eb2fd6ca31851bb14f2a43c3a1ee237a25f57d61"
+      "sha256": "18e14d00fead3293eb5b1c9d7a756a0a3780147938a40253ff35540740a73f4b"
     },
     {
       "path": "scripts/gds/me.js",
@@ -4612,7 +4882,7 @@
     {
       "path": "scripts/gds/mirror-redact.js",
       "mode": "0000644",
-      "sha256": "a409ef4841901f027ed9fdcb8762fc8c51b75265c72bb8098f886417f494989e"
+      "sha256": "161493827d30df4f10ed91913c628338487bfec129174423d5731d3db13b6799"
     },
     {
       "path": "scripts/gds/module.js",
@@ -4627,7 +4897,7 @@
     {
       "path": "scripts/gds/newcomer-floor.js",
       "mode": "0000644",
-      "sha256": "71db643fe8bf2216d5d1beb4376e1c80dfc11c10f3f8214cf935d9576fdf7690"
+      "sha256": "17c264e600dbc9a456942bd4392c5e897439fbcecd35666a3c1b240c8ead4f9b"
     },
     {
       "path": "scripts/gds/newcomer-floor.templates.json",
@@ -4702,7 +4972,7 @@
     {
       "path": "scripts/gds/provision.js",
       "mode": "0000644",
-      "sha256": "0385afa30f53e668d883576e94253db692616197c5a287dd94daac09ed82ff0b"
+      "sha256": "79c45444d67985ba0e6bc5e4d5cbff79f28a1490badf3bcfc7b39d8d1d47f7d5"
     },
     {
       "path": "scripts/gds/publish-manifest.js",
@@ -4767,12 +5037,12 @@
     {
       "path": "scripts/gds/run-unit-tests.js",
       "mode": "0000644",
-      "sha256": "510fee49670cbaba7097d86d56918e1eca5638be014b3fc7cdb1e20424ae0d2c"
+      "sha256": "85712b5cd1e20a2d84646b117cbaadf0ee4903f278ca904eb863da4612ee937b"
     },
     {
       "path": "scripts/gds/sandbox-stage.js",
       "mode": "0000644",
-      "sha256": "1deea547e003ba0026e2f85e9f2a66f1f787c1e5ebee90e263f3ba97cff1e56c"
+      "sha256": "327528f90554c2c60ae9e2ad6a0d5dc177d33d918c34fa83f87fe80e0ca89cfc"
     },
     {
       "path": "scripts/gds/search-ingest-db.js",
@@ -4782,7 +5052,7 @@
     {
       "path": "scripts/gds/search-ingest-md.js",
       "mode": "0000644",
-      "sha256": "d5d26db4c44fd25d95238482dd39fd437e103c00008f4c2b25b0ff1bcfa7f32c"
+      "sha256": "19b4e880f0a44dcba9458d863ba10686fe67b90f3aed5b595f7b7db4e205e68a"
     },
     {
       "path": "scripts/gds/security-baseline-check.sh",
@@ -4887,7 +5157,7 @@
     {
       "path": "scripts/gds/sequence.js",
       "mode": "0000644",
-      "sha256": "371cce49cc36c650b91e76c4bb42d561de16705a2123e193d9364e97c47bd7bd"
+      "sha256": "52c43371c2e6e8f7ffeac588143167ffc43e0010bceb7137ebce4ed61eaa64e6"
     },
     {
       "path": "scripts/gds/session-cost.js",
@@ -4922,7 +5192,7 @@
     {
       "path": "scripts/gds/ship.js",
       "mode": "0000644",
-      "sha256": "451c08587652132afca1860e7d4a5a2ff5b42cb80425c033156fc47753181a4c"
+      "sha256": "fc83c3ee63ce06c603eff9a4423f21d3b915ea7eae27e68ba953a45c8f14eda6"
     },
     {
       "path": "scripts/gds/smoke-batch-claim.sh",
@@ -5012,12 +5282,12 @@
     {
       "path": "scripts/hall-preview/server.js",
       "mode": "0000644",
-      "sha256": "301aa249bd15559d82d9baaa492b5eb1ab023ddea6c8c5c00eec46263e5201cc"
+      "sha256": "b6550cee568d8e8082c30512979256872d71d0d7f1810d061f5dbffad8a76979"
     },
     {
       "path": "scripts/migrate.sh",
       "mode": "0000644",
-      "sha256": "28fc9fc9450ca6147d57db0a6f3ab38a5edab5f7dee22ec0340093d854c6c50a"
+      "sha256": "1c0ffd6822949c0aeb0bd89f48e12c2923c6d623228619729e9812056351fe9d"
     },
     {
       "path": "scripts/migrate_cost_ledger.sh",
@@ -5117,7 +5387,7 @@
     {
       "path": "src/bongos/auth.js",
       "mode": "0000644",
-      "sha256": "0c0246bce00fed81b7c8bd428842ce2197646d4b38743c1ec67e517ec11ebc01"
+      "sha256": "60888e8a84fc109ce258256ed7c0af13a8a453464b4f71716bc3a018a89f1b1a"
     },
     {
       "path": "src/bongos/cascade-dispatch.js",
@@ -5127,22 +5397,22 @@
     {
       "path": "src/bongos/db-kernel.js",
       "mode": "0000644",
-      "sha256": "d7a9bee94b0db7ecc80afdc9814e1751f5c82919f1095d1191801470bc80ea6b"
+      "sha256": "7951e23e770dc001f6893d42db1cdb6dbb91cf8b084f0651972c75bc8463083d"
     },
     {
       "path": "src/bongos/db.js",
       "mode": "0000644",
-      "sha256": "7d00051835f8aea48695aff743ca8ec129fe6da909ee6b915271beb74c08a0a3"
+      "sha256": "64b0efa7c0a251266a8dbc00d43373fb1516fa5c88ba737220c969ec97a2e98b"
     },
     {
       "path": "src/bongos/github-repos.js",
       "mode": "0000644",
-      "sha256": "40d23e16bc96820cb964f81d542c5b4621e6494be7a5b74d25ad554380acf850"
+      "sha256": "893a2eb6f2658942cee2043ff130a5ae38538007e47e2ec2665548e0d286e211"
     },
     {
       "path": "src/bongos/goal-scope-check.js",
       "mode": "0000644",
-      "sha256": "2c7fedc3434bdb82d20752548d8c67d40df88ec75648cda52dedb5ebc5296968"
+      "sha256": "7455ac1f04b8715bb998653ddfd0986eb79d6eac540972562ffc5084920bb63d"
     },
     {
       "path": "src/bongos/hierarchy-config.js",
@@ -5187,7 +5457,7 @@
     {
       "path": "src/bongos/module-scope-map.js",
       "mode": "0000644",
-      "sha256": "61f009b8611c62a161d0128962fef38cc8bc188c89a5c21e3f956174d1e8af0d"
+      "sha256": "f39bb8e6269b64ce57e1a16d5369ccdbd384618172f742494c4aaa3c04392cba"
     },
     {
       "path": "src/bongos/module-submissions.js",
@@ -5207,7 +5477,7 @@
     {
       "path": "src/bongos/permission-path-check.js",
       "mode": "0000644",
-      "sha256": "b6fb51a2366c1783d71160b0a56bdeae24abf6d515c4aee945c43d9fc9a6f4f2"
+      "sha256": "75f463c95a694cc04aec7748783b427cf46d5805dae862428cf8a2546035dcb3"
     },
     {
       "path": "src/bongos/pool.js",
@@ -5222,7 +5492,7 @@
     {
       "path": "src/bongos/route-rank-check.js",
       "mode": "0000644",
-      "sha256": "97f455932eea3331ed4d2260a95de2a42b9a2f87e7e6d9526b712011ad67039e"
+      "sha256": "ceaa1116fe91fa618da5b52dccf36a06caef0f8a9a40673d58a92425c91b9c47"
     },
     {
       "path": "src/bongos/routes.js",
@@ -5242,27 +5512,27 @@
     {
       "path": "src/bongos/routes/audit-log.js",
       "mode": "0000644",
-      "sha256": "90da0d599e688531d4560178b300d3aae3851895642b2bb2c6462bc1850da688"
+      "sha256": "c5c8ece90dd00bc567cd1f9cc6579d91bbf0fa3aa50d351a9e2e18f77ab6954d"
     },
     {
       "path": "src/bongos/routes/auth.js",
       "mode": "0000644",
-      "sha256": "15058365eaf2a5c78d766800615fa636bee808e66ca2b903c170427bcc5a8ba0"
+      "sha256": "2cacde2aa0984457904c0a29cc0dd0d41e32be89b7b6e401d885662805c3de5e"
     },
     {
       "path": "src/bongos/routes/backup.js",
       "mode": "0000644",
-      "sha256": "5c2d23684960d157ee0f3175804553e09b6e37e8679492a1f595b989503cce7e"
+      "sha256": "23f9a3f8c3e0741fb9bd771942cd8beb8f434a748a2d006eab858710ea2f0cc7"
     },
     {
       "path": "src/bongos/routes/builders.js",
       "mode": "0000644",
-      "sha256": "67ccaed4dbba0c5d264365bb7c95d88cab63ee1710524db1c97e3dd588a6497f"
+      "sha256": "43a409918ba54af69d0c7183af510ff9d73b26566a1a520ad97d84360abcc79b"
     },
     {
       "path": "src/bongos/routes/github.js",
       "mode": "0000644",
-      "sha256": "a57f3cca8aff642c2c52b632cabe33e17229231bc698eaf7f105862901e71866"
+      "sha256": "2895aa72fbcef361a5edf07166e64e9902edcb5971eb2e496705b3bfddeabda1"
     },
     {
       "path": "src/bongos/routes/healthz.js",
@@ -5282,7 +5552,7 @@
     {
       "path": "src/bongos/routes/llm-cache.js",
       "mode": "0000644",
-      "sha256": "6c1831495dd205c0972a42004761f76f005d7b02cbabea92bb008fb8a658c990"
+      "sha256": "552320e8c14c94abdacc45ffb034c93bc6c9703b2e9290fcf742abad5c4b734f"
     },
     {
       "path": "src/bongos/routes/me.js",
@@ -5292,7 +5562,7 @@
     {
       "path": "src/bongos/routes/modules.js",
       "mode": "0000644",
-      "sha256": "093f7ce68161ef6948cf9d962ea0abf6c7ce2c8cbc03a6222dba7150985fce30"
+      "sha256": "62018ff2d9a9ed274a789c6141edce3dfe90a282f99f99965dcbf513e3f55037"
     },
     {
       "path": "src/bongos/routes/optimizer.js",
@@ -5307,7 +5577,7 @@
     {
       "path": "src/bongos/routes/security.js",
       "mode": "0000644",
-      "sha256": "fe5bb9abe01df00ab4cabb5888a3efa0dea6e0e5181a8b703b7ec364bbce7f82"
+      "sha256": "ae79028f92e0f299a8da7b68a2a17d227c7db06e43334991a9673468ca155a6f"
     },
     {
       "path": "src/bongos/secret-box.js",
@@ -5322,7 +5592,7 @@
     {
       "path": "src/bongos/serve-internal.js",
       "mode": "0000644",
-      "sha256": "570fa92c63ba1dbbc38481e9deb69e3c468502d5d2685b0552bf5062dad2027e"
+      "sha256": "25c52c06c03af400c94f04f2cda1aaab0c5e5486a084005b9a4e224f345a4871"
     },
     {
       "path": "src/bongos/uptime-poller.js",
@@ -5352,7 +5622,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "36c522ca8a10cf57bc03bc87987c8eacea995ab99bf8f6b21842c68ec8389943"
+      "sha256": "83c26b7433074af19c2ba5593f791f2ddc85d79bc13f030d04a9dc0710a4b212"
     },
     {
       "path": "src/module-loader/loader.js",
@@ -5387,7 +5657,7 @@
     {
       "path": "src/platform-server.js",
       "mode": "0000644",
-      "sha256": "589edf13e3beb9dbe5756fff75c51d77b6711c1411e58a92e6fec179cf45fa33"
+      "sha256": "287e49f074612ae29fc43dc7126f6e4fed243d97e1f27df77284b0e106f5dfca"
     },
     {
       "path": "src/ui/adapters/claude-design/index.js",
@@ -5437,7 +5707,7 @@
     {
       "path": "tests/api_client.mjs",
       "mode": "0000644",
-      "sha256": "0cf2b490477d2572d71b4c47075f56374eba4c74b8dc6fbbd3e7b2052ba58b6c"
+      "sha256": "fa360a42fa5d11b225afe1b13622f2a27fe43f2b7d0a47c2fef158bc8a11ecb6"
     },
     {
       "path": "tests/api_docs.mjs",
@@ -5467,7 +5737,7 @@
     {
       "path": "tests/api_path_404.mjs",
       "mode": "0000644",
-      "sha256": "14cee28bf8b12adb3a393e13da8d0670ed3a532fbbaa51cbb8294896daf0b274"
+      "sha256": "427f5750b4115fc0ddd30f6f7f8202521d5b31300b191093bc98f8416bb4a228"
     },
     {
       "path": "tests/app_pair.mjs",
@@ -5482,7 +5752,7 @@
     {
       "path": "tests/art_stage.mjs",
       "mode": "0000644",
-      "sha256": "a072bf2b3dbc30ce658d3d8955129d0e30ff8d3749261bf6d8a240e02c625848"
+      "sha256": "244b8d71c2ad4403c077629f7f1f726bcdfd62e6d4a3ee16c35ee73b5d8f563d"
     },
     {
       "path": "tests/asset_version.mjs",
@@ -5492,7 +5762,7 @@
     {
       "path": "tests/atlas.mjs",
       "mode": "0000644",
-      "sha256": "8c38fafa17e6bd3606967e3d827b2e1222e1e85317780d55126d3b080939e2e8"
+      "sha256": "ccc47720350deebc3c652d67a75046daf41408fe2089f10684f0ae04b6b6f71e"
     },
     {
       "path": "tests/audit_deps.mjs",
@@ -5507,7 +5777,7 @@
     {
       "path": "tests/auth_admission_gate.mjs",
       "mode": "0000644",
-      "sha256": "ba416ae2a11e511968828acaa1365dab40401ccf9eb8d19299add9f35e9bdb7b"
+      "sha256": "32fa656fd994219498b4ba7923fd925eccc039f20fac5ab66cab97b25977ee0f"
     },
     {
       "path": "tests/auth_anthropic_identity.mjs",
@@ -5522,7 +5792,7 @@
     {
       "path": "tests/auth_error_brand.mjs",
       "mode": "0000644",
-      "sha256": "748ca496432973927a28a29335f10d4be18b2b59d05346ceb278b81305119702"
+      "sha256": "e28bdcf3149d3baa15fdd4d5a44276953abfa3633ff37923f75355be746fc840"
     },
     {
       "path": "tests/auth_flow_slice1.mjs",
@@ -5539,6 +5809,11 @@
       "mode": "0000644",
       "sha256": "70a269e2f3457c9b00ec97fb1d8bf449467bfbfbb5c520b203f75753685e5219"
     },
+    {
+      "path": "tests/auth_resolve_failure.mjs",
+      "mode": "0000644",
+      "sha256": "8d40fbb16a8b6256551eb014ba3a209b577548fe1e61ccd965227422ac238d90"
+    },
     {
       "path": "tests/auth_session_ttl.mjs",
       "mode": "0000644",
@@ -5589,11 +5864,21 @@
       "mode": "0000644",
       "sha256": "445231e7fea9163e83ec0a76fce981415ed141760e34b165016a8039bba4da51"
     },
+    {
+      "path": "tests/blocker_link.mjs",
+      "mode": "0000644",
+      "sha256": "0ade9bbcb1782ffa2dd01799002dee7d88f6b17dab8ee418fe58e1a06ffb925e"
+    },
     {
       "path": "tests/bongos_box_connect.mjs",
       "mode": "0000644",
       "sha256": "76380b52738c3ca2d452742f0b4316de765c39d68bc101ce6a90ea9d115842ef"
     },
+    {
+      "path": "tests/bongos_cli.mjs",
+      "mode": "0000644",
+      "sha256": "e017ee497f5aaf041cf18d8bc2b12faed4e3cd71418e14d55eee630ebb4282d3"
+    },
     {
       "path": "tests/bongos_dispatch.mjs",
       "mode": "0000644",
@@ -5602,7 +5887,7 @@
     {
       "path": "tests/bongos_downloads.mjs",
       "mode": "0000644",
-      "sha256": "b38dc3afcebd1c474cf58ea6c1cc411e0ffbb6d633049bf0bfe4a03b1e436b51"
+      "sha256": "e9bb8c19e1f45679e46b154d4317959d7ee2b30c4b80e65d44f66f2257bb9aca"
     },
     {
       "path": "tests/bongos_login.mjs",
@@ -5642,7 +5927,7 @@
     {
       "path": "tests/box_dns_repoint.mjs",
       "mode": "0000644",
-      "sha256": "ab2784a13ea5c381f7282d16967f1ae48a5a1f80510b475746c75973ad84818c"
+      "sha256": "f0718abdcaaf538bff5b7724bf848ec8a81082192fee4f492409a13faf18c578"
     },
     {
       "path": "tests/box_host_keys.mjs",
@@ -5667,7 +5952,7 @@
     {
       "path": "tests/box_ship_permissions.mjs",
       "mode": "0000644",
-      "sha256": "7762cd8752056ae168a0af709ffad42c2e8c8ff44e7c7c7698f54f7113a7eb62"
+      "sha256": "5347fc776e8edb533223534707ddc7085af21654298d9d2169d711ecc5cfce2c"
     },
     {
       "path": "tests/box_sync.mjs",
@@ -5682,7 +5967,7 @@
     {
       "path": "tests/box_terminal_ssrf.mjs",
       "mode": "0000644",
-      "sha256": "76876d65ed7a8b27efd2b358f40e2fc7d22cec0f01e3412ea9867ee291bd73ab"
+      "sha256": "c2956956fd87f8172d36c4612f04f75babfe3be6261d04d2a295d3416ab32387"
     },
     {
       "path": "tests/boxes.mjs",
@@ -5709,6 +5994,11 @@
       "mode": "0000644",
       "sha256": "e3d8c5ac45d59f5d566547e2c406cf44ffa60f1b243afcb222b09eee68f5ee0d"
     },
+    {
+      "path": "tests/bump_version.mjs",
+      "mode": "0000644",
+      "sha256": "d8493f101a0009dd550c1ccf126e5ceb6433013257aa4f307ca68b00788dc77e"
+    },
     {
       "path": "tests/cap_newcomer_tasks.mjs",
       "mode": "0000644",
@@ -5732,7 +6022,7 @@
     {
       "path": "tests/claim_error_surface.mjs",
       "mode": "0000644",
-      "sha256": "b2c813eaa0d2ef630e42d1eb6f72454a95bdfcd0342108fcb3cf2bd62018f3c9"
+      "sha256": "6273b5b86f0fecd24bcb54a36a673ec9d42f81180d602d5d374fc9d07a511072"
     },
     {
       "path": "tests/claim_gate_rebase.mjs",
@@ -5752,7 +6042,7 @@
     {
       "path": "tests/claude_materialize.mjs",
       "mode": "0000644",
-      "sha256": "8be8bf17604b760598733387e96d30f3ee12408b10fdd1570ff6c54b1fb59e02"
+      "sha256": "ba55196528236a9473d7038f00f7c7c0d6c8bd9fd05bfe2b11d94688e97cdb90"
     },
     {
       "path": "tests/clawback_confirmed_backlog.mjs",
@@ -5762,7 +6052,7 @@
     {
       "path": "tests/cli_box_scope.mjs",
       "mode": "0000644",
-      "sha256": "2bfc3e7cd8e347ad0f6077e5045814fade478a80642f91994beb035a56580459"
+      "sha256": "b9258f690d5dc7c87bcbb12d510b3071a38669777ae9a92a99e683e76ea15e83"
     },
     {
       "path": "tests/cli_lib_formatters.mjs",
@@ -5782,12 +6072,12 @@
     {
       "path": "tests/cloud_bongos_pack.mjs",
       "mode": "0000644",
-      "sha256": "3b2e401ed8fbf2923895878a999701328c2a42f78b46f55140701686b2a4310a"
+      "sha256": "7d4277afa6566c6287d71e9ca31333ebf0f6d8532d299537bbc7fa64ab73d86d"
     },
     {
       "path": "tests/conductor.mjs",
       "mode": "0000644",
-      "sha256": "b644eaf849361167acd7f09e9d23b759789e679b988afd86397e66cc21751321"
+      "sha256": "27d1c2654d9d0bbd970b088d7aae674c624b70e112a70de63f87fe7a1e99ae7a"
     },
     {
       "path": "tests/confirm_attribution.mjs",
@@ -5842,7 +6132,7 @@
     {
       "path": "tests/criterion_authoring_gate.mjs",
       "mode": "0000644",
-      "sha256": "ed83e7ae0f0ab26afc418f7d5b2b02da610dee980389397a33b872b8fd5014f1"
+      "sha256": "23d8c31f310e7ffb840dce3850c1eb2eab59b5513489bde19edb22c5bab6eb75"
     },
     {
       "path": "tests/criterion_progress.mjs",
@@ -5867,7 +6157,7 @@
     {
       "path": "tests/currency_label.mjs",
       "mode": "0000644",
-      "sha256": "74e130da2ab7a2e4e86d3a2ec669b4a2c0e007c54dd8f558eb4dc3a377bb0eb4"
+      "sha256": "dd3a232a6bcb8fb26abb88fa98662919a474f61527d88484c14a3bb3c98bf3c8"
     },
     {
       "path": "tests/cutover_codemod.mjs",
@@ -5887,7 +6177,7 @@
     {
       "path": "tests/deploy_instance.mjs",
       "mode": "0000644",
-      "sha256": "ab3b368375eaf928383fe768da543e50115982e75d4531ec03b9829337d2585c"
+      "sha256": "1abfa6c8bb119d010d2a53f71373508a31a9cc3c28207ca1dbac2138a7eda595"
     },
     {
       "path": "tests/dev_lib.mjs",
@@ -5907,7 +6197,7 @@
     {
       "path": "tests/devbox_downloads.mjs",
       "mode": "0000644",
-      "sha256": "2cf326039b31fdf88e9b19be180923e754e60e629d667b49c730896b7d08586c"
+      "sha256": "91950e7477f9fff30e361bc32def211e1cb3792fa098e9c839d5db1e1ba21d6a"
     },
     {
       "path": "tests/devbox_icons.mjs",
@@ -5992,7 +6282,7 @@
     {
       "path": "tests/display_name.mjs",
       "mode": "0000644",
-      "sha256": "b10c1e9af80cc3b97b068a3aa89851ecb55eb3137699d7666ee40426bb5d6ed5"
+      "sha256": "4eac4b50dc7e3b9797f7d7633eb480b04dd5ebde4fc867ec19765177ff22d8b4"
     },
     {
       "path": "tests/dns_preflight.mjs",
@@ -6017,7 +6307,7 @@
     {
       "path": "tests/eviction_policy.mjs",
       "mode": "0000644",
-      "sha256": "538266cde93cc7124749c64ad7c749f552528541b5a9eacee596facf701f0568"
+      "sha256": "d6a78357533fdeea3bc33fe97cfcd27b1d04747c600d0a7800ddfca5199dbb1f"
     },
     {
       "path": "tests/extract_json.mjs",
@@ -6032,22 +6322,22 @@
     {
       "path": "tests/file_map.mjs",
       "mode": "0000644",
-      "sha256": "10d208f6d2308a64287b7e067ea4f898135e860c5c6ae51bc7d71eb69c24b37d"
+      "sha256": "387eb4455a5e79f930fccae875278841094a52900a1158617345db8b58147d1a"
     },
     {
       "path": "tests/first_admin_bootstrap.mjs",
       "mode": "0000644",
-      "sha256": "a85288ae63e220314d3a5a3e649242197bdc47cb1a436113370e71fab42b9b1e"
+      "sha256": "5466ddf0b7e0298206d46da7b84cfd3826e0f549395088bf5ed91397d15f1746"
     },
     {
       "path": "tests/first_run_engine_check.mjs",
       "mode": "0000644",
-      "sha256": "9a56f41889e6a43a740ab9d9d9a162dd6023102a50cadce92db1b0834679aea7"
+      "sha256": "ca84a108f24015ec3a94d8510960f2cc5963f5f502c35d84567aa35e8727021e"
     },
     {
       "path": "tests/fitness.mjs",
       "mode": "0000644",
-      "sha256": "20dfafcb75ac7f5c48272af46b51122576e8776a45819a81bf02511b0e22cdd4"
+      "sha256": "ebb93b7bdd90c0775f71eb949a6e47022570bdb35c901bd4522413fefa750e14"
     },
     {
       "path": "tests/fitness_two_root.mjs",
@@ -6062,7 +6352,7 @@
     {
       "path": "tests/gate_approvals.mjs",
       "mode": "0000644",
-      "sha256": "6ef688216e53c77f629d679a9a199bbf7eb244dd098daf0c193550e2d1e52ec2"
+      "sha256": "900923ab39dee11de4c59ec977555346aa52ba875d12e2b4ca27013bf99e51c2"
     },
     {
       "path": "tests/gate_review.mjs",
@@ -6087,7 +6377,7 @@
     {
       "path": "tests/github_push_land_proof.mjs",
       "mode": "0000644",
-      "sha256": "f89e0b986cce4fdfecb47766b47c492668807e54f19ce7b214df204a6efe6a68"
+      "sha256": "080a19cae0faf168b4b7fa31d1a68d0fe84b3d5b41c9bbfda1f5ecee34ad8ca4"
     },
     {
       "path": "tests/github_push_merge_driver.mjs",
@@ -6097,17 +6387,17 @@
     {
       "path": "tests/github_repos_helpers.mjs",
       "mode": "0000644",
-      "sha256": "be8b6dd0c0f956a66759f5c3ad9e0548088c0e3ab14926b3c706c011d13097fe"
+      "sha256": "14d68c064218655bdbc04fe95dd7d03a8ac0d152301ac65c8c2c7b9fd93926ef"
     },
     {
       "path": "tests/github_token_store.mjs",
       "mode": "0000644",
-      "sha256": "4d7de0efaa515422a0f0d8f2f8bd0dd8e6ccb56d7bb91b614e3396e2554d7f65"
+      "sha256": "d0d10628a17717fdef505dcf501915ecfcc31a0c99d9e5d4cf6dc06b47d8c883"
     },
     {
       "path": "tests/goal_abuse_matrix.mjs",
       "mode": "0000644",
-      "sha256": "ee265b8c35a122ff54f1e62ed46bafd5f9c5e342bfd8d432f87377966d3974b7"
+      "sha256": "e5b32e9c4a38e405cfd3185b49f4a1d9a6b39a0f39c12053c01ba3680c550120"
     },
     {
       "path": "tests/goal_achievement.mjs",
@@ -6119,6 +6409,11 @@
       "mode": "0000644",
       "sha256": "c4eb5f6a36faed5c90b500c20bc84944dba62a0af06d4c88c08eaa684bf96aad"
     },
+    {
+      "path": "tests/goal_cli.mjs",
+      "mode": "0000644",
+      "sha256": "8d1f3511b8ecd0bb88f75a936ee29035d9f789a2be4f6aedabb46b9be5bd2385"
+    },
     {
       "path": "tests/goal_conflicts.mjs",
       "mode": "0000644",
@@ -6164,6 +6459,11 @@
       "mode": "0000644",
       "sha256": "412ca7c0bdc10abc90146b777571bcc7a180e19f0e3d058c6998ac2d33941940"
     },
+    {
+      "path": "tests/governance_abuse_matrix.mjs",
+      "mode": "0000644",
+      "sha256": "370578b833f99e0ef3ffa2f54203109cf8569613c122c4046b2f7871633f52b3"
+    },
     {
       "path": "tests/governance_catalog.mjs",
       "mode": "0000644",
@@ -6179,6 +6479,21 @@
       "mode": "0000644",
       "sha256": "eccfd3a277ced9c4d83bc6bf3557126628573101b21ac4a31aa1a1fdc3d1d1e8"
     },
+    {
+      "path": "tests/governance_fold.mjs",
+      "mode": "0000644",
+      "sha256": "e460eb69eac6ad7af6c838f1d009dbe5841ffd5f51d5f2cbef42a437bd647585"
+    },
+    {
+      "path": "tests/governance_fold_bench.mjs",
+      "mode": "0000644",
+      "sha256": "93025d2a9cf51db2910ca26e4d605b54b52d7cd16a3e75f918582f28fcf2f4eb"
+    },
+    {
+      "path": "tests/governance_live_proof.mjs",
+      "mode": "0000644",
+      "sha256": "33635e67bee87b917c30eb59ffbd3d8429b67dc19cf1df6be624323bac4c583e"
+    },
     {
       "path": "tests/governance_ownership_scope.mjs",
       "mode": "0000644",
@@ -6187,12 +6502,12 @@
     {
       "path": "tests/governance_page_gates.mjs",
       "mode": "0000644",
-      "sha256": "28e74bb5d7e5a136835810d083c5c8d4b448e2cc173d5784b430eec726add839"
+      "sha256": "cf0d01b58a209d9d2ad64e2c1c999ce2338fb0f69bb5ddff43ca7f24d7bc66be"
     },
     {
       "path": "tests/governance_parity.mjs",
       "mode": "0000644",
-      "sha256": "252a3f8039cfae826f3e3d50d2e7af277afdc06d7446ec13b8f4e17d76053e57"
+      "sha256": "a5b58fa4ba3aae75a5062a81a61ff4664c0996ebeb782d04e4ddc207ec2008e0"
     },
     {
       "path": "tests/governance_principals.mjs",
@@ -6207,7 +6522,7 @@
     {
       "path": "tests/governance_require_permission.mjs",
       "mode": "0000644",
-      "sha256": "90ef6fc86adc762f12064f1db7b43a111d5b5c3c2be813c152e0525a0a4cfc85"
+      "sha256": "58090f6e6cb0cb7e99b03675deeb80302986b053dc1402e254f64ae4126df084"
     },
     {
       "path": "tests/governance_resolver.mjs",
@@ -6219,6 +6534,11 @@
       "mode": "0000644",
       "sha256": "350599cd0b2d3e10d3a0b92b9551599783a8046b6cacc429a6276277e68a0693"
     },
+    {
+      "path": "tests/governance_routes.mjs",
+      "mode": "0000644",
+      "sha256": "aaa4e675bdcaef579bca67a204700a3cd50be044acb9bfe798b92af583ab25c9"
+    },
     {
       "path": "tests/governance_seed.mjs",
       "mode": "0000644",
@@ -6262,7 +6582,7 @@
     {
       "path": "tests/grader.mjs",
       "mode": "0000644",
-      "sha256": "1f593cd9f3f841e2049028ea815dfb284136a28fd59f4afa0a0572583a269374"
+      "sha256": "380ef7c395dea5ba988a1b0f9492451c621ebc01ba5e04c2674ebb54fe32cddd"
     },
     {
       "path": "tests/grader_bypass.mjs",
@@ -6287,7 +6607,7 @@
     {
       "path": "tests/hall_nav.mjs",
       "mode": "0000644",
-      "sha256": "fa4c121b840b6ab3e0d0d671734a546a6f033585c4a7be1f17cf61283d393610"
+      "sha256": "c2456b6fe8845c5778e9e57323cd7a0f2f9d6e96ef9d3a9d4f47f0312da07964"
     },
     {
       "path": "tests/hall_palette.mjs",
@@ -6302,7 +6622,7 @@
     {
       "path": "tests/helpers.mjs",
       "mode": "0000644",
-      "sha256": "341d06038bec0726443c1844159983c44bb99f18f26697967fba9f2b64212897"
+      "sha256": "56321847cf62d27db361b7b4f2511f3573967e3d1b95630f7efd48bad74a7a8f"
     },
     {
       "path": "tests/hierarchy-config.mjs",
@@ -6312,13 +6632,18 @@
     {
       "path": "tests/hook_core_resolve.mjs",
       "mode": "0000644",
-      "sha256": "c941d82f376eac7c312208cbc7465c2945e983fdfa47773c7681106f00c0e825"
+      "sha256": "7035673d4b9e55166acc19d5c40a2128c0aceb233bca6856eace34bebc1139e4"
     },
     {
       "path": "tests/hook_user_agents.mjs",
       "mode": "0000644",
       "sha256": "7289010b4d9e52bce152b4acba1cd6e17f747756719664c7f7e07ac818f885b7"
     },
+    {
+      "path": "tests/host_topology_skips.mjs",
+      "mode": "0000644",
+      "sha256": "7d384cd84cdc93b8e7b57df291a4600a40f43346fd2a52168324ecde219f1388"
+    },
     {
       "path": "tests/idea_triage.mjs",
       "mode": "0000644",
@@ -6337,12 +6662,12 @@
     {
       "path": "tests/infra_exec_paths.mjs",
       "mode": "0000644",
-      "sha256": "a88324a9a9368667d76af80b4cf283caf020fa2069092b8e2d23d609653572b8"
+      "sha256": "0437795b927bf68baa1e08ba2e52ca5b1799d41938402159ffb01f2f5bff01b2"
     },
     {
       "path": "tests/init.mjs",
       "mode": "0000644",
-      "sha256": "cdfb04930f74b6f4085db59c7f5a602d1e6ca921778c97dddbac483a4886ee96"
+      "sha256": "ed99a7b7d925d9f202ab90f861cc4b761c0e58bb7eb79b189a6366591faeb388"
     },
     {
       "path": "tests/instance_config.mjs",
@@ -6379,6 +6704,11 @@
       "mode": "0000644",
       "sha256": "db9ad86df4c9593db89f91ef2306c30eb33ae56bebe5b210a4b3a1912f67d42c"
     },
+    {
+      "path": "tests/known_failing_ratchet.mjs",
+      "mode": "0000644",
+      "sha256": "0afe138db1e80744f79a352c7ac5e0e998c05d07885aa23d047b9da2ed4be237"
+    },
     {
       "path": "tests/land_watch.mjs",
       "mode": "0000644",
@@ -6387,7 +6717,7 @@
     {
       "path": "tests/lifecycle-card.mjs",
       "mode": "0000644",
-      "sha256": "1ff087ef15ba217c4492399c983b16dd1a6351c82ef1a20857e8714dc5f82dd4"
+      "sha256": "3bf8585f0cb4afa7db94d3a8db37d0fea34336dfab3053f518aae029199b1563"
     },
     {
       "path": "tests/lifecycle_breakdown_view.mjs",
@@ -6432,12 +6762,12 @@
     {
       "path": "tests/main_audit.mjs",
       "mode": "0000644",
-      "sha256": "5f3437449911e3aed2e06c2cc4ec782a9d6535a237e0f5ee686efbe86ddc1658"
+      "sha256": "9a1813d6036886ea07d1563e71a466e66c28554b75b22605464c795fd9fa2ebb"
     },
     {
       "path": "tests/memory_isolation.mjs",
       "mode": "0000644",
-      "sha256": "fed7f019384aa7f7f17c22e927e8fdddcb51e6a8a9c5716d65d2a83247725e9e"
+      "sha256": "8f0f583120c4fc2e7cb92c78afd0d170482d6d555bd6a5c8c04d5e66845feb13"
     },
     {
       "path": "tests/memory_map.mjs",
@@ -6467,7 +6797,7 @@
     {
       "path": "tests/migrate_root_resolution.mjs",
       "mode": "0000644",
-      "sha256": "caf6f21d69cf7ab0521deb40a10450e6f2fc7c3baadcd4602dbfc3edcd224d70"
+      "sha256": "eec69562f86d218a0f22411bbf6707d864e42e5f0b3f841692ca938d775a45ad"
     },
     {
       "path": "tests/migration_allocation.mjs",
@@ -6502,7 +6832,7 @@
     {
       "path": "tests/mirror_redact.mjs",
       "mode": "0000644",
-      "sha256": "38b984f62bede5766e522a20c8612ac614a8070bcdc39ad78a48440b880034ab"
+      "sha256": "77c58f22a2d4c0d5b3490afc4b804743c5239afa407d0c345b0d7e927e0eb04a"
     },
     {
       "path": "tests/model_alloc_prefs.mjs",
@@ -6517,7 +6847,7 @@
     {
       "path": "tests/module_api.mjs",
       "mode": "0000644",
-      "sha256": "59b10b2e729e652d4e1ded4f53c44c1364631ffc4b7bccd81de271f738e89579"
+      "sha256": "f9142ae695964882ef4d6c4b83fec12c9ab32d0e31b3135333c27d695afb3262"
     },
     {
       "path": "tests/module_cli.mjs",
@@ -6532,7 +6862,7 @@
     {
       "path": "tests/module_loader.mjs",
       "mode": "0000644",
-      "sha256": "2b4594974ebbfb66481ced0bd577a92aa58a8ea91cfec20aed750ad6d4bfc080"
+      "sha256": "005e784feb96676ada71399fae94e7b11c579159cd80a7fac0ba0ac79bda1e5d"
     },
     {
       "path": "tests/module_manifest.mjs",
@@ -6572,12 +6902,12 @@
     {
       "path": "tests/modules.mjs",
       "mode": "0000644",
-      "sha256": "8fe3bf808c207f8f5dd863ab2bd8f209eec9e797d4ae8694dc6d292975708c45"
+      "sha256": "3e786351878160a4726ef8712c33fc2d85bdb7aca8bcadb4c5c19f120c23e023"
     },
     {
       "path": "tests/modules_route.mjs",
       "mode": "0000644",
-      "sha256": "e841237b01395741c235868c1ef62bcf0cf3d5c90b67f9849a41aa254a6b1f5a"
+      "sha256": "079d7eef5828912e306e9dbbe081fef6004526067bd15aa6433dc2ff1873a4be"
     },
     {
       "path": "tests/needs_rebase.mjs",
@@ -6622,12 +6952,12 @@
     {
       "path": "tests/onboarding_observability.mjs",
       "mode": "0000644",
-      "sha256": "9d10ced73274d1fe3eabdbaeb8cc892af42acc02cd235dbe4f4ee36e3599d37d"
+      "sha256": "9a14f7cc72a1beed580cc5cc219bf221f30e11892b1c42924d77785ead8d95a4"
     },
     {
       "path": "tests/onboarding_route_signals.mjs",
       "mode": "0000644",
-      "sha256": "f4c9cdb18262aadb0b947a6b0be6be42be981bc2e5cc1f3ab59e5b8cb229ca61"
+      "sha256": "53d8761d47a5288bc3e755f478b6b24be63a035510948d32e0eb0ea246498ea9"
     },
     {
       "path": "tests/onboarding_state.mjs",
@@ -6637,7 +6967,7 @@
     {
       "path": "tests/one_active_claim_per_session.mjs",
       "mode": "0000644",
-      "sha256": "6e84981e96c18ee5e4d5a66ef5d076f4272bb2347cc21d3f2da4838a00f22504"
+      "sha256": "3a4d6cc704d0ecd7be2f094ad10baf9c725a2045587994f076de76fb26ce90e5"
     },
     {
       "path": "tests/orphaned_claim_ship.mjs",
@@ -6669,6 +6999,11 @@
       "mode": "0000644",
       "sha256": "fd69c44ebf3d246ecedf527275448389cca809e231d1c6cb34e4c12bfdc38111"
     },
+    {
+      "path": "tests/patch_gate_ordering.mjs",
+      "mode": "0000644",
+      "sha256": "4472cc00b1bc62c47a2f3121d0b5ec08f0b5b3bca6cebc3aaef179093eccffe8"
+    },
     {
       "path": "tests/path_match.mjs",
       "mode": "0000644",
@@ -6697,7 +7032,7 @@
     {
       "path": "tests/pre_compact.mjs",
       "mode": "0000644",
-      "sha256": "0bf6a4991bece0101c1f5184dfcef11640931452281525ab63217f146f5f26c1"
+      "sha256": "c9604d5184f2f1243c4bfab594e3f0e2c04060aadc2d726c923e72d38e276577"
     },
     {
       "path": "tests/preflight_checks.mjs",
@@ -6707,23 +7042,28 @@
     {
       "path": "tests/preview_server.mjs",
       "mode": "0000644",
-      "sha256": "2d4f63b1dd4e50c2dfb7889de00301cb4c6c2d908116d824426de1fe99601d24"
+      "sha256": "3c85d28ecc55e375988f3e55aee993c8c84220889678262d8207146c2772f3f5"
     },
     {
       "path": "tests/profile_route.mjs",
       "mode": "0000644",
-      "sha256": "69529c5aee0df18cc23876b7766d01add2b4e2c6ed2d6e3c309235196a15daf8"
+      "sha256": "dc354f082204073409aea90df9b91f149d474c6930b761ed5c9928bb76e1358f"
     },
     {
       "path": "tests/provision.mjs",
       "mode": "0000644",
-      "sha256": "6951112ee088b536813fffbf0860ec73dcbb978e12b626d6ee3e5cd691a98e33"
+      "sha256": "6f47c2a9c43fbef9b26090c9ca794a67bbca279f5bc79db625f26fa43775d4b7"
     },
     {
       "path": "tests/provisioning_github_app_routes.mjs",
       "mode": "0000644",
       "sha256": "fce4837d4882dcd980bc144a2afeaf04fbce99aa31d7d1a72a277bad0ebfae99"
     },
+    {
+      "path": "tests/provisioning_onboard_mode.mjs",
+      "mode": "0000644",
+      "sha256": "9a41d64fba3a8cc8ffdbccb0aea363ca6ccb63909cfeefd4bd0b05ebab052403"
+    },
     {
       "path": "tests/pruned_lockfile_integrity.mjs",
       "mode": "0000644",
@@ -6747,18 +7087,23 @@
     {
       "path": "tests/publish_manifest.mjs",
       "mode": "0000644",
-      "sha256": "c28a54a36d196b16e9335361c12a8865bbc43e7a59604479edf75e8d84108f82"
+      "sha256": "8849310cc884c09785478faa8193c853468a46b79b63e72f1e362d95586fcdcc"
     },
     {
       "path": "tests/publish_reconciler.mjs",
       "mode": "0000644",
-      "sha256": "01ff3691f6b12e6d5bc66a1f0b31027a4f05f5dae797fec29e09c1baefc3d4dc"
+      "sha256": "fa54fe19a54153ce65f8a98ccce22c9aad7e2c928a648fb2fc621067168eb703"
     },
     {
       "path": "tests/rank_gate.mjs",
       "mode": "0000644",
       "sha256": "2745778ec6ff188a9e65b0a5964f07d5a399aaafdd8854aa962e3cb6728244e6"
     },
+    {
+      "path": "tests/rank_tier_single_source.mjs",
+      "mode": "0000644",
+      "sha256": "930fccbeeeaece47fcf7aa70132f16a40cebe20c408e67c7dd177c4b4f12a06c"
+    },
     {
       "path": "tests/rate_limit_public.mjs",
       "mode": "0000644",
@@ -6777,7 +7122,7 @@
     {
       "path": "tests/recall_hints.mjs",
       "mode": "0000644",
-      "sha256": "bcfbbae82e6e08865fe4f8a9fd8c29bfd5abcedc2f3b207390c5c5cbd6d326dc"
+      "sha256": "d337def56a38ae73a195fa057e52a0e6f39fd6a228348a4b7d3e86673cfef5e8"
     },
     {
       "path": "tests/recent_shipped_window.mjs",
@@ -6802,7 +7147,7 @@
     {
       "path": "tests/repo_map.mjs",
       "mode": "0000644",
-      "sha256": "8099ce02b4b4bb70b03b78d0ad2dee7555dba810cecccf5a62c718dd385575b6"
+      "sha256": "b88208852062b4e8c8efcb44380e13205cd4d5ece7eed4e6c340a0ea969b33a9"
     },
     {
       "path": "tests/reward_gate.mjs",
@@ -6822,7 +7167,7 @@
     {
       "path": "tests/route_permission_check.mjs",
       "mode": "0000644",
-      "sha256": "fa6e737b7cc99438ae53291cb1003dff79e5e1fd16258ba9a62b59e74e2e09c0"
+      "sha256": "8e61e22dd5750eb5fcec706ee876a7ab51dd21d2feee22f961185c9ef3a3bf62"
     },
     {
       "path": "tests/route_rank_check.mjs",
@@ -6842,7 +7187,7 @@
     {
       "path": "tests/rubric_fixtures.mjs",
       "mode": "0000644",
-      "sha256": "fd9f7e8936659ee62683c0c4b957933f0aa3bb31ce4df9b104a7bcc1a756206f"
+      "sha256": "96fc57ac449e372e7f762f03a0dcfef1db85492221c8b837638122388499119d"
     },
     {
       "path": "tests/run_routine.mjs",
@@ -6852,12 +7197,12 @@
     {
       "path": "tests/run_routine_two_root.mjs",
       "mode": "0000644",
-      "sha256": "060a70b752c7a7459a7a5358f7bb7aaf436bdbf65c8fa5d3f553855fa56e54b1"
+      "sha256": "b5698af4ca50c44b384a3adfd1a1b1132bab630241ebb70ac77b13a67ffc8eae"
     },
     {
       "path": "tests/sandbox_stage.mjs",
       "mode": "0000644",
-      "sha256": "88654f839d33d60b5fd17b5418f866271fb51c29994cbc74a8a9acc6c511266a"
+      "sha256": "b499ea62cdc1a615e565ce7b0379b2cab83b9aaa8098361f94d3eb93ebc7f927"
     },
     {
       "path": "tests/scrubber_corpus.mjs",
@@ -6872,7 +7217,7 @@
     {
       "path": "tests/search_ingest.mjs",
       "mode": "0000644",
-      "sha256": "d937836667b74df91207e4479979bde049655970f3a716d41328bda8b38933de"
+      "sha256": "504a855803d88468667663f663656dfd8e25726b90a412e34bcf55da0ad57d5e"
     },
     {
       "path": "tests/search_ingest_db.mjs",
@@ -6897,7 +7242,7 @@
     {
       "path": "tests/security_docs.mjs",
       "mode": "0000644",
-      "sha256": "852b1522abba0921f161380266b95f4b86abbf36d8957499cbb89a184b3ff9d0"
+      "sha256": "b3eb71705068be493488ee504b6e1f91e00880f029bd6f8c6d2619602203cbb4"
     },
     {
       "path": "tests/security_route.mjs",
@@ -6907,7 +7252,7 @@
     {
       "path": "tests/sequence.mjs",
       "mode": "0000644",
-      "sha256": "47b17cca0f533b07651fb5f1c95335545652abc169b420f39d21af6c524e5753"
+      "sha256": "68e8478af48abc5d3a114f74d1f0bba6cb527c9b457a9f2d291a2ed45cf971dc"
     },
     {
       "path": "tests/served_paths_shipped.mjs",
@@ -6917,7 +7262,7 @@
     {
       "path": "tests/session-cards.mjs",
       "mode": "0000644",
-      "sha256": "7591e53074692d6996de7e4a6dbe48259d60916bf5134d081eabbe0dff7e5460"
+      "sha256": "3b9ca3392533ade9dc8fecd33c705e844a3c3c692fd7ffb33a0d582bf8da6ca6"
     },
     {
       "path": "tests/session_506_regression.mjs",
@@ -6972,7 +7317,7 @@
     {
       "path": "tests/session_start_freshness.mjs",
       "mode": "0000644",
-      "sha256": "bb0b13119f360a4cdca6f39c3f0b5dfd7d4670e5b927550592fb30c6534d4923"
+      "sha256": "a630ac72981f230e8aa6609152765c13e8928ac329cb0ff3fe615371f31208d2"
     },
     {
       "path": "tests/setup_smoke.mjs",
@@ -7007,17 +7352,17 @@
     {
       "path": "tests/ship_broadcast_server.mjs",
       "mode": "0000644",
-      "sha256": "f8e7437e390d729e9ee2884f0e76df7d1b152e864ee527266d6699a091df8905"
+      "sha256": "72507f8192bc95ac1c3a92714d2280a43ed588820ce409586a9dad88c5677b09"
     },
     {
       "path": "tests/ship_card.mjs",
       "mode": "0000644",
-      "sha256": "41e9c8698859084c508d967b6b8eb237099aabd54d471bbc8e251e03c35bf7b7"
+      "sha256": "d326bec65ddabbdfedee525c7adadf6c9e3ed4a46e9f44402c3711705897f97a"
     },
     {
       "path": "tests/ship_ci_deploy.mjs",
       "mode": "0000644",
-      "sha256": "09397a0a36c74713818f3a690d23d394c59784ca860057f2322b154a9fc93462"
+      "sha256": "02346e000b0b4212a27dce1d2638a52b2e80509eea335110a148886f18ee5b81"
     },
     {
       "path": "tests/ship_preflight.mjs",
@@ -7034,6 +7379,11 @@
       "mode": "0000644",
       "sha256": "2b2ef91bda46ab9a764709ab30b97de6e184a3ab2b86c4b7cb8f1c168fc0a5b7"
     },
+    {
+      "path": "tests/ship_smoke_gate.mjs",
+      "mode": "0000644",
+      "sha256": "43e2f109ce85e99e71daa4573a6ec4fc591b167fe81ee02f2f73ea1ce84d465c"
+    },
     {
       "path": "tests/ship_upload_skip.mjs",
       "mode": "0000644",
@@ -7172,7 +7522,7 @@
     {
       "path": "tests/versions_route.mjs",
       "mode": "0000644",
-      "sha256": "0fc0539e087f423af2d93f72aca6fdb0031e590cdbe40b07a1891ddb624e1a23"
+      "sha256": "2a381bab380342e4fc556211d4821c85fdde1f676a6c5c6aa2421a89a573cd27"
     },
     {
       "path": "tests/wandering_prefs.mjs",
@@ -7187,7 +7537,7 @@
     {
       "path": "tests/workflow_exec_paths.mjs",
       "mode": "0000644",
-      "sha256": "0fe20bb9b7d6a7ce8f5d1da7a919e1f04673588149f6ef9212213c566f0fc898"
+      "sha256": "43c7c42ffe92143443c45d5ba382d522efa0a16ef14f58675e6a86233e3f8e74"
     },
     {
       "path": "tests/worktree_disambiguation.mjs",
@@ -7197,7 +7547,7 @@
     {
       "path": "tests/worktree_guard.mjs",
       "mode": "0000644",
-      "sha256": "df0efb2db07c22aaaa39f621e9db7798f749bee05b4d2ab6b914f7bcbff0794a"
+      "sha256": "aa1aab27bdfc5761586514fa07dacfad125fb1d5dcc7f01c060cbe3556985454"
     },
     {
       "path": "tests/write_validation_gaps.mjs",