@bongos/core 1.24.26 → 1.24.28

package/docs/adr/0307-autobongos-a-deterministic-supervisor-and-agentic-workers.md

@@ -144,6 +144,18 @@ permission-path pre-pass and the post-push main audit both read the real diff,
 server-side, where the machine cannot reach. Treating it as sufficient on its own
 would be the bug, and the file says so where someone might be tempted.
 
+**The runner never edits its own supervisor, safety checks or kill switch** (owner
+rule, 2026-10-02; task 1004546). None of those files are on the ADR 0043 registry,
+so the fence above would have handed a worker a bug whose fix loosened the fence
+itself. A runner-only list (`modules/lifecycle/runner-self.js`) is checked at three
+points: the declared touches before the claim, the real diff inside the worker
+before the grade, and the pull request's own files on the server at publish. The
+last is the wall, because it runs where the worker cannot reach. The two real-diff
+checks also refuse any ADR 0043 protected file, closing for undeclared work the gap
+the declared-touches gate above leaves. The list covers the files that implement
+those checks; the one route line that calls the server check sits in a protected
+file, and a test on the list drives that route.
+
 ### 7. Workers run with blanket `bypassPermissions`
 
 `--permission-prompt-tool` exists and is print-mode only, so routing every