@bongos/core 1.19.874 → 1.19.875

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.874",
-  "core_contract": "1.19.874",
-  "source_commit": "57108fe11dd040dbf550355c6ff492141c283504",
+  "core_version": "1.19.875",
+  "core_contract": "1.19.875",
+  "source_commit": "d1782be0c7671dd7dd82c4f354a77d231fb274be",
   "source_ref": "HEAD",
-  "built_at": "2026-09-19T03:56:27.228Z",
+  "built_at": "2026-09-19T04:13:30.837Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 500,
     "agent_docs_stubbed": 26,
-    "functional_verbatim": 2301,
+    "functional_verbatim": 2305,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 2827,
-  "tree_sha256": "28457c8c4f76254953c87b849337aa0804581b4ee7e2c2a696b93afb5338b8dc",
+  "file_count": 2831,
+  "tree_sha256": "1217f7ece32a73d51483fbdd8aabfd37cb8021c9506bca34d253378aedbdd9b3",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -347,12 +347,12 @@
     {
       "path": "clients/bongos-client/README.md",
       "mode": "0000644",
-      "sha256": "6fcda058dc500d2b2847418aac50e95a2a2a8e8c5ec552ed80c4186a38ac6f30"
+      "sha256": "54cdd993cbae28a4dbd1aab84d565905f672b4e1095cfde9212de02ae30e367a"
     },
     {
       "path": "clients/bongos-client/bongos-client.global.js",
       "mode": "0000644",
-      "sha256": "0085363e6846738ee43efc8cef2f3a7046729b9b367c2b3d6b3b2694e71dab6f"
+      "sha256": "b344141a606defff7530f0546e3fc741c5f9685cd6a8d20f6c64f8de1633bc87"
     },
     {
       "path": "clients/bongos-client/examples/hello-world.mjs",
@@ -362,17 +362,17 @@
     {
       "path": "clients/bongos-client/index.cjs",
       "mode": "0000644",
-      "sha256": "d2382ca538ad2a8a2d77265d09570f99de7ae5b29343da6e26ca9064c95b266d"
+      "sha256": "46c9fb18c486f413cda2d73a4dee92c73d6ca15be08109b8dd5986ede3b23a4b"
     },
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "8c18ab08474c44eeb990abb784bfa56e247f47a0cf4f7f584d32375743935afb"
+      "sha256": "cc54c6e360985bfbcf4a00206f16989affd706177cfe3715c77ccd91c3c9d1d9"
     },
     {
       "path": "clients/bongos-client/index.mjs",
       "mode": "0000644",
-      "sha256": "b1133ec6618660be5a643b4f342a9d6afe4d603c59587af788355ca5c7e16674"
+      "sha256": "5bec4eae4564aba7087341014a4690d0717252300cd297ae97b9108102aaabd3"
     },
     {
       "path": "clients/bongos-client/package.json",
@@ -2027,7 +2027,7 @@
     {
       "path": "docs/adr/0307-autobongos-a-deterministic-supervisor-and-agentic-workers.md",
       "mode": "0000644",
-      "sha256": "b32da105f7cea0d8b94372c0188c209c1d70f3218aaff65f4952becc262974fb"
+      "sha256": "c3509e08e96fc65e2e2eb0e6306d79c06d2302652efad47b60107bcf4c0078a8"
     },
     {
       "path": "docs/adr/0308-an-eleventh-working-area.md",
@@ -2042,12 +2042,12 @@
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "cc763b6d2b412c8fc5c0f196538d19f3986cc8ee735b43dc1353946009b83653"
+      "sha256": "505ce889291a3dddbe66c2d375b7f0a631531b741ebe6fdf5d960af3b42173b3"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "1448a7b95a82e88ca8cd6ea82331e95a4f27ad91af9a22a71da8ab0fca822d9f"
+      "sha256": "0b47552a99357a93cb13ea0f546a61b3850c3a8e8a324d243cced32813dfa619"
     },
     {
       "path": "docs/architecture.md",
@@ -2072,12 +2072,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "4671a9e1ebce9a803afcd531d5da4ce939a2b228c62c916100c6748b37f6e72e"
+      "sha256": "c923e66a5b77c20784cfb0e50d8bba2bb41ec38895a029c2bbb69a829c3e6eb3"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "33e3a3376c0d444bb20d0b0f8ae7fc4808539963e7adf17d614ded6fcbd3a1d3"
+      "sha256": "864bbc41a5c93bf63aa529dd396d8784a56d65975d6ebd7e15edab51e3c5093f"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -2602,7 +2602,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "688d9a2c95e934fca0e1df1a685f0cc72844cbe98b718e40f8ae7c49e3f65c9e"
+      "sha256": "0d33c3fc850860d87fcb70790d850de2a2be38635fb152dd7d021c6176f67292"
     },
     {
       "path": "docs/modules-contract.md",
@@ -3787,13 +3787,23 @@
     {
       "path": "modules/autonomy/db.js",
       "mode": "0000644",
-      "sha256": "b1bc58e8cc1fd47c30eb15377e07c86ae218b027aba685370541add3dcff5112"
+      "sha256": "147b12a8b268a62456d8d8f685f067ba36884d28e72aa9d97e096aba4dd58584"
+    },
+    {
+      "path": "modules/autonomy/fence.js",
+      "mode": "0000644",
+      "sha256": "6debf9929cf269e84596032146d5bc953e0d7d96c86eea0d25e42c2f94a173fd"
     },
     {
       "path": "modules/autonomy/gauge.js",
       "mode": "0000644",
       "sha256": "64726adb15d64521a3a4da80d4528fa0db7e67b302d0ca407e7142eefdd57e7d"
     },
+    {
+      "path": "modules/autonomy/migrations/autonomy_001_autobongos_fence.sql",
+      "mode": "0000644",
+      "sha256": "23d98c938efdeb221bdcaef1c1ed3f09ac0f389ad6fb38fc221450b34158b5ad"
+    },
     {
       "path": "modules/autonomy/module.json",
       "mode": "0000644",
@@ -3807,7 +3817,7 @@
     {
       "path": "modules/autonomy/routes/autonomy.js",
       "mode": "0000644",
-      "sha256": "ae9aff3f47f2b5801f9839493549b912424e8b22c153e91afcf3376a1cc4fb4d"
+      "sha256": "abb70f760ab019c4ad8f1962a2700f3801c71e3dd86b5124b02900e1812d1e04"
     },
     {
       "path": "modules/builder-settings/CLAUDE.md",
@@ -4162,7 +4172,7 @@
     {
       "path": "modules/dev-box/app/src/vendor/bongos-client.cjs",
       "mode": "0000644",
-      "sha256": "d2382ca538ad2a8a2d77265d09570f99de7ae5b29343da6e26ca9064c95b266d"
+      "sha256": "46c9fb18c486f413cda2d73a4dee92c73d6ca15be08109b8dd5986ede3b23a4b"
     },
     {
       "path": "modules/dev-box/app/test/unit.mjs",
@@ -4412,7 +4422,7 @@
     {
       "path": "modules/government/catalog.js",
       "mode": "0000644",
-      "sha256": "da48187e485a7528bdd705c49df7a28c4ce6a3aad3c2885589f06dd4c8214840"
+      "sha256": "c705435848db169f6a37832b88ae7280193232a3f0f918388a11b05072836af3"
     },
     {
       "path": "modules/government/config.js",
@@ -4539,6 +4549,11 @@
       "mode": "0000644",
       "sha256": "d376d2532b942c77a8ad71f6bdbeea389db3276ee86a6e57a58eed41439b6bdd"
     },
+    {
+      "path": "modules/government/migrations/government_016_autonomy_fence_manage.sql",
+      "mode": "0000644",
+      "sha256": "56bf6e19318922577ca8c9bb3d7a10177957b993f7d572b1bb2f623e5179fce7"
+    },
     {
       "path": "modules/government/module.json",
       "mode": "0000644",
@@ -4937,12 +4952,12 @@
     {
       "path": "modules/hall-ui/public/gate.html",
       "mode": "0000644",
-      "sha256": "172612052f78bbe5afdf3305db1b6dd34bd750a00e245416e9aa75e276418ee5"
+      "sha256": "88f8a79743e7fc40651ab64306c5dec5d52c8a0886d4fd4515227ad89ca837e4"
     },
     {
       "path": "modules/hall-ui/public/gate.js",
       "mode": "0000644",
-      "sha256": "0330d776d073505cf0fe7874739808a2b49696fc57dae6fa7467a2c95f867cca"
+      "sha256": "1445bece8bebdcc43174ee7873729a843d4f60fdd617226d936783e243763754"
     },
     {
       "path": "modules/hall-ui/public/gate.states.json",
@@ -7932,12 +7947,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "7ae11b1bc6205785da22165907051680ba4abe00c7536b9c668488bb0667b78b"
+      "sha256": "f5357bd73be9ea55bd37f72b3510637906159d36638a1ba23366fda56d93da6e"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "ef1cb37663f2cde6765b0ec2dc9df5bdc85ae91bbc63abdebe7aa607d436a6d4"
+      "sha256": "c4516d41236cc62820827c5fed694403aaf255e0e8ad566041ee6397e9eff429"
     },
     {
       "path": "public-docs/index.html",
@@ -8102,7 +8117,7 @@
     {
       "path": "scripts/gds/autobongos-run.js",
       "mode": "0000644",
-      "sha256": "b18c473d6feabdf24ccec72f15191b2e88596791354af40ebfd486b82562113b"
+      "sha256": "6b91b2f34173d0c8bf516f074a7d9f7197c2a69fafcae949f1f2d2e57e353df3"
     },
     {
       "path": "scripts/gds/autobongos-verify.js",
@@ -9922,7 +9937,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "1f7faccdbfb12ca1f1802d7703733b8bf9dd7ff9c2d5fd0bf96ea4c897a5d162"
+      "sha256": "30eab36a9a6432777dcf0df87512a6d06b40eb03ded24b3119a8ceb231e0cc52"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -10324,10 +10339,15 @@
       "mode": "0000644",
       "sha256": "d7ac18d14e8e9e5e7b9e913a76953fe69bfefea4912e77ca30b285647bfcfca8"
     },
+    {
+      "path": "tests/autobongos_fence.mjs",
+      "mode": "0000644",
+      "sha256": "00709f1c010f594c457b9bdb49bd0d7377cebdb140e080869a8f7458960841ff"
+    },
     {
       "path": "tests/autobongos_loop.mjs",
       "mode": "0000644",
-      "sha256": "d490d953faee2f55745cd2b80ee2b6dfbc9c9422e2d66e269b5c3288d07f4d75"
+      "sha256": "2f9c2b4e115b2c7411748cfe5179344bcc0e45c855c68102821966ab63ccbc21"
     },
     {
       "path": "tests/autobongos_verify.mjs",

package/clients/bongos-client/README.md

@@ -5,7 +5,7 @@ A **generated**, zero-dependency typed client for the Bongos API — produced fr
 by hand; it regenerates when the spec changes, so it can never drift from the routes.
 
 - API version: **v1** (served at `/api/bongos/v1`)
-- 394 operations across 60 resource groups
+- 398 operations across 60 resource groups
 
 ## Use it from your project
 

package/clients/bongos-client/bongos-client.global.js

@@ -173,6 +173,14 @@ function createClient(opts = {}) {
       getAuthWebStart: (args) => request("GET", "/auth/web/start", { hasBody: false }, args),
     },
     "autonomy": {
+      // GET /autonomy/fence — rank: any-builder — GET /autonomy/fence
+      getAutonomyFence: (args) => request("GET", "/autonomy/fence", { hasBody: false }, args),
+      // POST /autonomy/fence — rank: archon — POST /autonomy/fence
+      postAutonomyFence: (args) => request("POST", "/autonomy/fence", { hasBody: true }, args),
+      // POST /autonomy/fence/goals — rank: archon — POST /autonomy/fence/goals
+      postAutonomyFenceGoals: (args) => request("POST", "/autonomy/fence/goals", { hasBody: true }, args),
+      // DELETE /autonomy/fence/goals/{goalId} — rank: archon — DELETE /autonomy/fence/goals/:goalId
+      deleteAutonomyFenceGoalsGoalId: (args) => request("DELETE", "/autonomy/fence/goals/{goalId}", { hasBody: false }, args),
       // GET /autonomy/precheck — rank: metic+archon — GET /autonomy/precheck
       getAutonomyPrecheck: (args) => request("GET", "/autonomy/precheck", { hasBody: false }, args),
     },

package/clients/bongos-client/index.cjs

@@ -172,6 +172,14 @@ function createClient(opts = {}) {
       getAuthWebStart: (args) => request("GET", "/auth/web/start", { hasBody: false }, args),
     },
     "autonomy": {
+      // GET /autonomy/fence — rank: any-builder — GET /autonomy/fence
+      getAutonomyFence: (args) => request("GET", "/autonomy/fence", { hasBody: false }, args),
+      // POST /autonomy/fence — rank: archon — POST /autonomy/fence
+      postAutonomyFence: (args) => request("POST", "/autonomy/fence", { hasBody: true }, args),
+      // POST /autonomy/fence/goals — rank: archon — POST /autonomy/fence/goals
+      postAutonomyFenceGoals: (args) => request("POST", "/autonomy/fence/goals", { hasBody: true }, args),
+      // DELETE /autonomy/fence/goals/{goalId} — rank: archon — DELETE /autonomy/fence/goals/:goalId
+      deleteAutonomyFenceGoalsGoalId: (args) => request("DELETE", "/autonomy/fence/goals/{goalId}", { hasBody: false }, args),
       // GET /autonomy/precheck — rank: metic+archon — GET /autonomy/precheck
       getAutonomyPrecheck: (args) => request("GET", "/autonomy/precheck", { hasBody: false }, args),
     },

package/clients/bongos-client/index.d.ts

@@ -227,6 +227,9 @@ export interface PostAuthRevokeAllRequest { builder_id?: StringifiableId }
 export interface PostAuthRevokeAllResponse { ok: boolean; revoked: unknown }
 export interface PostAuthRevokeRequest { session_id?: StringifiableId }
 export interface PostAuthRevokeResponse { ok: boolean; revoked: unknown }
+export interface PostAutonomyFenceGoalsRequest { goal_id: StringifiableId; note?: string }
+export interface PostAutonomyFenceGoalsResponse { goal: unknown }
+export interface PostAutonomyFenceRequest { enabled: boolean; reason?: string }
 export interface PostBackupTriggerResponse { ok: boolean; message: unknown; started_at: unknown }
 export interface PostBlockersIdLinkRequest { task_id: StringifiableId }
 export interface PostBlockersIdLinkResponse { ok: boolean; blocked: unknown }
@@ -539,6 +542,14 @@ export interface BongosClient {
     getAuthWebStart(args?: RequestArgs): Promise<ApiResponse>;
   };
   "autonomy": {
+    /** GET /autonomy/fence — rank: any-builder */
+    getAutonomyFence(args?: RequestArgs): Promise<ApiResponse>;
+    /** POST /autonomy/fence — rank: archon */
+    postAutonomyFence(args: RequestArgs & { body: PostAutonomyFenceRequest }): Promise<ApiResponse>;
+    /** POST /autonomy/fence/goals — rank: archon */
+    postAutonomyFenceGoals(args: RequestArgs & { body: PostAutonomyFenceGoalsRequest }): Promise<PostAutonomyFenceGoalsResponse>;
+    /** DELETE /autonomy/fence/goals/{goalId} — rank: archon */
+    deleteAutonomyFenceGoalsGoalId(args?: RequestArgs): Promise<ApiResponse>;
     /** GET /autonomy/precheck — rank: metic+archon */
     getAutonomyPrecheck(args?: RequestArgs): Promise<ApiResponse>;
   };

package/clients/bongos-client/index.mjs

@@ -169,6 +169,14 @@ export function createClient(opts = {}) {
       getAuthWebStart: (args) => request("GET", "/auth/web/start", { hasBody: false }, args),
     },
     "autonomy": {
+      // GET /autonomy/fence — rank: any-builder — GET /autonomy/fence
+      getAutonomyFence: (args) => request("GET", "/autonomy/fence", { hasBody: false }, args),
+      // POST /autonomy/fence — rank: archon — POST /autonomy/fence
+      postAutonomyFence: (args) => request("POST", "/autonomy/fence", { hasBody: true }, args),
+      // POST /autonomy/fence/goals — rank: archon — POST /autonomy/fence/goals
+      postAutonomyFenceGoals: (args) => request("POST", "/autonomy/fence/goals", { hasBody: true }, args),
+      // DELETE /autonomy/fence/goals/{goalId} — rank: archon — DELETE /autonomy/fence/goals/:goalId
+      deleteAutonomyFenceGoalsGoalId: (args) => request("DELETE", "/autonomy/fence/goals/{goalId}", { hasBody: false }, args),
       // GET /autonomy/precheck — rank: metic+archon — GET /autonomy/precheck
       getAutonomyPrecheck: (args) => request("GET", "/autonomy/precheck", { hasBody: false }, args),
     },

package/docs/adr/0307-autobongos-a-deterministic-supervisor-and-agentic-workers.md

@@ -115,6 +115,24 @@ ship pipeline and its server-side grade. That grade is the *only* review between
 an unattended worker and main, so **a grader outage stops the runner** rather
 than downgrading it to shipping unreviewed.
 
+Three things the implementation settled (`modules/autonomy/fence.js`, task
+1003908). The kill switch is `autonomy.fence.manage`, declared **`system: true,
+floor: 'archon'`** in the permission catalog, because a switch the runner could
+be granted the power to flip is not a switch — the catalog's own invariant
+forbids granting a system key to a lower rank, and that invariant is what makes
+it a stop button. `--goal` and `AUTOBONGOS_GOALS` are kept but **demoted to a
+narrowing filter**: they intersect with the database allowlist, so a setting on
+the runner host can take a goal away and can never add one. And an **unknown**
+grader state refuses exactly as a bypassed one does — "I could not tell" must not
+resolve to "go ahead" when the thing being checked is the only review there is.
+
+The protected-path gate reads the task's **declared** `touches[]`, which is a
+claim by whoever filed the task and not a fact about what the work will edit. That
+is acceptable only because it is the outer of three layers — the grader's
+permission-path pre-pass and the post-push main audit both read the real diff,
+server-side, where the machine cannot reach. Treating it as sufficient on its own
+would be the bug, and the file says so where someone might be tempted.
+
 ### 7. Workers run with blanket `bypassPermissions`
 
 `--permission-prompt-tool` exists and is print-mode only, so routing every

package/docs/api/openapi.json

@@ -1772,6 +1772,180 @@
         "security": []
       }
     },
+    "/autonomy/fence": {
+      "get": {
+        "operationId": "get_autonomy_fence",
+        "tags": [
+          "autonomy"
+        ],
+        "summary": "GET /autonomy/fence",
+        "description": "The runner's own read, every iteration. ANY-BUILDER on purpose: learning that you must stop should never require an elevated session, because the failure mode of \"could not read the fence\" is a machine that keeps going. The body carries no secret — it is a boolean, a reason string and a list of goal ids.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/autonomy/routes/autonomy.js",
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      },
+      "post": {
+        "operationId": "post_autonomy_fence",
+        "tags": [
+          "autonomy"
+        ],
+        "summary": "POST /autonomy/fence",
+        "description": "The kill switch. Archon, system:true — see the catalog entry for why it is the one permission that cannot be delegated to a custom rank.\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `autonomy.fence.manage` (all required).",
+        "x-rank": "archon",
+        "x-source": "modules/autonomy/routes/autonomy.js",
+        "x-permissions": [
+          "autonomy.fence.manage"
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostAutonomyFenceRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/autonomy/fence/goals": {
+      "post": {
+        "operationId": "post_autonomy_fence_goals",
+        "tags": [
+          "autonomy"
+        ],
+        "summary": "POST /autonomy/fence/goals",
+        "description": "Add a goal to the allowlist.\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `autonomy.fence.manage` (all required).",
+        "x-rank": "archon",
+        "x-source": "modules/autonomy/routes/autonomy.js",
+        "x-permissions": [
+          "autonomy.fence.manage"
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostAutonomyFenceGoalsRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PostAutonomyFenceGoalsResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/autonomy/fence/goals/{goalId}": {
+      "delete": {
+        "operationId": "delete_autonomy_fence_goals_goalId",
+        "tags": [
+          "autonomy"
+        ],
+        "summary": "DELETE /autonomy/fence/goals/:goalId",
+        "description": "Revoke one. `removed` distinguishes \"just revoked\" from \"already gone\" — an owner clicking Remove deserves to know which happened.\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `autonomy.fence.manage` (all required).",
+        "x-rank": "archon",
+        "x-source": "modules/autonomy/routes/autonomy.js",
+        "x-permissions": [
+          "autonomy.fence.manage"
+        ],
+        "parameters": [
+          {
+            "name": "goalId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `goalId`."
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/autonomy/precheck": {
       "get": {
         "operationId": "get_autonomy_precheck",
@@ -21166,6 +21340,47 @@
           "revoked"
         ]
       },
+      "PostAutonomyFenceGoalsRequest": {
+        "type": "object",
+        "properties": {
+          "goal_id": {
+            "$ref": "#/components/schemas/StringifiableId"
+          },
+          "note": {
+            "type": "string",
+            "maxLength": 500
+          }
+        },
+        "required": [
+          "goal_id"
+        ],
+        "additionalProperties": false
+      },
+      "PostAutonomyFenceGoalsResponse": {
+        "type": "object",
+        "properties": {
+          "goal": {}
+        },
+        "required": [
+          "goal"
+        ]
+      },
+      "PostAutonomyFenceRequest": {
+        "type": "object",
+        "properties": {
+          "enabled": {
+            "type": "boolean"
+          },
+          "reason": {
+            "type": "string",
+            "maxLength": 500
+          }
+        },
+        "required": [
+          "enabled"
+        ],
+        "additionalProperties": false
+      },
       "PostBackupTriggerResponse": {
         "type": "object",
         "properties": {
@@ -24996,9 +25211,9 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 394,
-  "x-schema-count": 433,
+  "x-endpoint-count": 398,
+  "x-schema-count": 436,
   "x-undocumented-bodies": 9,
-  "x-response-schemas": 297,
+  "x-response-schemas": 298,
   "x-generated-by": "scripts/gds/gen-api-docs.js"
 }

package/docs/api-reference.md

@@ -2,7 +2,7 @@
 
 # Bongos API reference
 
-> **Generated from the live route files** — the route file is authoritative. 394 endpoints across 64 route files.
+> **Generated from the live route files** — the route file is authoritative. 398 endpoints across 64 route files.
 > Machine-readable spec: [`docs/api/openapi.json`](api/openapi.json) (OpenAPI 3.1). Rendered docs site: **`/docs`** (e.g. `cloudbongos.com/docs`).
 
 Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust-boundary-server-enforced-permissions.md)): `public` < `any-builder` < `metic+archon` < `archon`.
@@ -83,10 +83,14 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | GET | `/api/bongos/auth/web/callback` | `public` | — | OAuth callback; the state cookie + code are the bearer. |
 | GET | `/api/bongos/auth/web/start` | `public` | — | /auth/web — browser flow (used by the /builders page). |
 
-## `autonomy` (1)
+## `autonomy` (5)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
+| GET | `/api/bongos/autonomy/fence` | `any-builder` | — | The runner's own read, every iteration. |
+| POST | `/api/bongos/autonomy/fence` | `archon` | `enabled`, `reason` | The kill switch. |
+| POST | `/api/bongos/autonomy/fence/goals` | `archon` | `goal_id`, `note` | Add a goal to the allowlist. |
+| DELETE | `/api/bongos/autonomy/fence/goals/:goalId` | `archon` | — | Revoke one. |
 | GET | `/api/bongos/autonomy/precheck` | `metic+archon` | — |  |
 
 ## `backup` (2)