npm - @cassiomc1/forgeloop - Versions diffs - 1.10.0 → 1.10.2 - Mend

@cassiomc1/forgeloop 1.10.0 → 1.10.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (67) hide show

package/DOCS_INDEX.md +12 -1
package/LOOP_ENGINEERING.md +4 -4
package/LOOP_SYSTEM_DESIGN.md +23 -0
package/QUALITY_SCORECARD.md +2 -2
package/README.md +22 -8
package/docs/ADVISORY_CONTEXT.md +24 -0
package/docs/AGENT_PROTOCOL_SUMMARY.md +1 -1
package/docs/ARTIFACT_REFERENCE.md +15 -0
package/docs/CODE_ATTESTATION.md +9 -0
package/docs/DOCUMENTATION_GUIDE.md +4 -4
package/docs/EXECUTION_PROFILE_BENCHMARKS.md +10 -0
package/docs/MCP.md +13 -1
package/docs/PACKAGE_CONTENTS.md +88 -0
package/docs/RELEASE_CHECKLIST.md +10 -2
package/docs/REVISION_PROVIDERS.md +9 -0
package/docs/RIPWIRE_ADAPTER.md +189 -0
package/docs/TROUBLESHOOTING.md +12 -0
package/docs/assets/diagrams/forgeloop-code-attestation-flow.html +13 -2
package/docs/assets/diagrams/forgeloop-code-attestation-flow.receipt.json +6 -6
package/docs/assets/diagrams/forgeloop-code-attestation-flow.svg +10 -1
package/docs/assets/diagrams/forgeloop-engineering-flow.html +22 -11
package/docs/assets/diagrams/forgeloop-engineering-flow.receipt.json +6 -6
package/docs/assets/diagrams/forgeloop-engineering-flow.svg +17 -8
package/docs/assets/diagrams/forgeloop-verification-trust-flow.html +14 -3
package/docs/assets/diagrams/forgeloop-verification-trust-flow.receipt.json +6 -6
package/docs/assets/diagrams/forgeloop-verification-trust-flow.svg +10 -1
package/docs/diagrams/README.md +26 -0
package/docs/diagrams/forgeloop-code-attestation-flow.workflow.json +383 -57
package/docs/diagrams/forgeloop-engineering-flow.workflow.json +374 -55
package/docs/diagrams/forgeloop-verification-trust-flow.workflow.json +328 -47
package/docs/diagrams/reviews/forgeloop-code-attestation-flow.review.json +4 -4
package/docs/diagrams/reviews/forgeloop-engineering-flow.review.json +4 -4
package/docs/diagrams/reviews/forgeloop-verification-trust-flow.review.json +4 -4
package/package.json +14 -4
package/scripts/CI_VALIDATORS.md +24 -0
package/scripts/check-critical-coverage.mjs +9 -0
package/src/adapters/ripwire/normalize.js +352 -0
package/src/adapters/ripwire/process.js +248 -0
package/src/adapters/ripwire/provider.js +245 -0
package/src/commands/doctor.js +11 -10
package/src/core/actions.js +2 -2
package/src/core/advisory-context/service.js +36 -14
package/src/core/approvals.js +2 -2
package/src/core/artifacts.js +3 -3
package/src/core/checks.js +0 -33
package/src/core/completion.js +2 -2
package/src/core/events.js +5 -5
package/src/core/execution-profile.js +18 -5
package/src/core/handoff-acceptance.js +10 -1
package/src/core/next-action-pending-actions.js +255 -0
package/src/core/next-action-phases.js +26 -764
package/src/core/next-action-planned-phase.js +51 -0
package/src/core/next-action-quality-guidance.js +19 -0
package/src/core/next-action-recovery-phases.js +97 -0
package/src/core/next-action-refresh.js +20 -0
package/src/core/next-action-review-phase.js +189 -0
package/src/core/next-action-verification-phase.js +192 -0
package/src/core/task-recovery.js +2 -2
package/src/core/transaction-maintenance.js +70 -0
package/src/core/transaction.js +31 -10
package/src/core/work-state.js +20 -11
package/src/integration.d.ts +30 -3
package/src/integration.js +2 -0
package/src/core/cli-metadata.js +0 -23
package/src/core/decision-classification.js +0 -55
package/src/core/gates.js +0 -57
package/src/core/workflow-compatibility.js +0 -151

package/docs/TROUBLESHOOTING.md CHANGED Viewed

@@ -1299,3 +1299,15 @@ current-cycle validation.
 | `E_WORKSPACE_IDENTITY_UNAVAILABLE` | A ForgeLoop boundary, artifact, provider, or attestation validation condition was not satisfied. | Inspect the structured command result, correct the named boundary or artifact, then retry the canonical command. |
 <!-- END FORGELOOP GENERATED: public-error-codes -->
+## Revised contract after a blocked preflight
+Before execution starts, a revised contract and route can leave the old
+checkpoint stale. Run `forgeloop next --task <id> --json`. When the validated
+history ends in a blocked preflight and the new route binds the revised
+contract, it offers `clear-state` followed by `preflight`. Execute those in
+that order, satisfy any remaining gates, and require `READY` again.
+This recovery guidance is unavailable after execution has started, for an
+invalid ledger, or when the new route does not match the contract. Preserve
+those barriers and follow the task's canonical recovery guidance.

package/docs/assets/diagrams/forgeloop-code-attestation-flow.html CHANGED Viewed

@@ -1,7 +1,7 @@
 <!DOCTYPE html>
 <html lang="en" data-theme="dark" data-preset="signal-flow" data-present="true">
 <head>
-      <meta name="forgeloop-diagram-source-sha256" content="669966fba9e69df0525a3581baa4e90075923dbe3069f81f706761a40abf9073">
+      <meta name="forgeloop-diagram-source-sha256" content="33bb9c3c4f3fb4a793febeab34b2d07ca7bf2c058d4f5e7575dba3a6065eedeb">
     <meta name="forgeloop-diagram-renderer" content="archify@2.15.0 (e1ac748f19cf805e44bf74fb93c796662152e273)">
 <meta charset="UTF-8">
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
@@ -40,6 +40,15 @@
   <style>
       /* Keep boundary labels clear of the first node in each group. */
       [data-composition-frame-kind="group"] + text { transform: translateY(-18px); }
+      @media (max-width: 720px) {
+        html:not([data-present="true"]) .toolbar {
+          top: 0;
+          right: 0;
+          width: 100%;
+          flex-wrap: wrap;
+          justify-content: flex-start;
+        }
+      }
     /* ==========================================================
        THEME VARIABLES — switch by toggling [data-theme] on <html>
@@ -4868,7 +4877,7 @@
       <p class="subtitle">Exact content binding from valid completion to read-only trust results</p>
     </div>
-    <script id="archify-guided-views-data" type="application/json">[{"id":"completion-to-manifest","label":"Completion to manifest","focus":["complete","receipt","manifest","captured"],"note":"Follow the transactional binding between valid completion evidence and exact source content."},{"id":"manifest-to-statement","label":"Manifest to statement","focus":["manifest","captured","statement","signing","bundle"],"note":"See how the deterministic code manifest becomes an in-toto Statement v1 and optional signature bundle."},{"id":"revision-range-coverage","label":"Revision-range coverage","focus":["base","provider","changed","attestations","union","range"],"note":"Inspect the separate changed-path coverage question and its gap or conflict result."}]</script>
+    <script id="archify-guided-views-data" type="application/json">[{"id":"completion-to-manifest","label":"Completion to manifest","focus":["complete","receipt","manifest","captured"],"note":"Completion and exact-content evidence bind to the project and task. No supplied CI receipt means NOT_VERIFIED."},{"id":"manifest-to-statement","label":"Manifest to statement","focus":["manifest","captured","statement","signing","bundle"],"note":"See how the deterministic code manifest becomes an in-toto Statement v1 and optional signature bundle."},{"id":"revision-range-coverage","label":"Revision-range coverage","focus":["base","provider","changed","attestations","union","range"],"note":"Inspect the separate changed-path coverage question and its gap or conflict result."}]</script>
     <div class="guided-views no-print" id="guided-views" hidden aria-label="Guided diagram views">
       <button id="guided-view-prev" type="button" aria-label="Previous guided view" title="Previous guided view ([)">&#8592;</button>
@@ -5426,6 +5435,7 @@
           <li>&bull; PROCESSED means artifacts exist and parse</li>
           <li>&bull; VERIFIED means completion, evidence, manifest, and content bindings validate</li>
           <li>&bull; ATTESTED additionally requires a valid external signature policy</li>
+          <li>&bull; No supplied CI receipt means NOT_VERIFIED, not a trust level</li>
         </ul>
       </div>
@@ -5438,6 +5448,7 @@
           <li>&bull; The manifest records one SHA-256 digest per changed source entry</li>
           <li>&bull; The in-toto statement binds the manifest to completion evidence</li>
           <li>&bull; Read-only verification never rewrites task state or ledger events</li>
+          <li>&bull; Compaction preserves transaction manifests and event history</li>
         </ul>
       </div>

package/docs/assets/diagrams/forgeloop-code-attestation-flow.receipt.json CHANGED Viewed

@@ -15,17 +15,17 @@
     "license": "MIT"
   },
   "input": {
-    "sha256": "669966fba9e69df0525a3581baa4e90075923dbe3069f81f706761a40abf9073",
-    "bytes": 7744
+    "sha256": "33bb9c3c4f3fb4a793febeab34b2d07ca7bf2c058d4f5e7575dba3a6065eedeb",
+    "bytes": 9857
   },
   "artifacts": {
     "html": {
-      "sha256": "62666342ec4efbc295ed65f4450008ca5a39072d8a11ff7b8b675ab258711286",
-      "bytes": 652836
+      "sha256": "85bb7abf910d3f6dd12037cfcd90c4b67f0aad4dca2b4cb21be1b0112cbdd92e",
+      "bytes": 653258
     },
     "svg": {
-      "sha256": "0af63dd51683d07981fc681042c437377a78ae8a7e6a7175c18a1def02e6280a",
-      "bytes": 216313
+      "sha256": "3a768148886ffdfcce75221c11e51ee77a3702510e90917bf6e8ba0581ebdb44",
+      "bytes": 216543
     }
   },
   "staticSvg": {

package/docs/assets/diagrams/forgeloop-code-attestation-flow.svg CHANGED Viewed

@@ -1,8 +1,17 @@
-<svg data-archify-version="2.15.0" data-forgeloop-source-sha256="669966fba9e69df0525a3581baa4e90075923dbe3069f81f706761a40abf9073" data-theme="dark" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 720 1024" role="img" aria-labelledby="archify-diagram-title archify-diagram-description" data-animation="trace" data-preset="signal-flow" data-quality-profile="showcase">
+<svg data-archify-version="2.15.0" data-forgeloop-source-sha256="33bb9c3c4f3fb4a793febeab34b2d07ca7bf2c058d4f5e7575dba3a6065eedeb" data-theme="dark" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 720 1024" role="img" aria-labelledby="archify-diagram-title archify-diagram-description" data-animation="trace" data-preset="signal-flow" data-quality-profile="showcase">
     <style>
       .c-bg-rect { fill: var(--bg); }
 /* Keep boundary labels clear of the first node in each group. */
       [data-composition-frame-kind="group"] + text { transform: translateY(-18px); }
+      @media (max-width: 720px) {
+        html:not([data-present="true"]) .toolbar {
+          top: 0;
+          right: 0;
+          width: 100%;
+          flex-wrap: wrap;
+          justify-content: flex-start;
+        }
+      }
     /* ==========================================================
        THEME VARIABLES — switch by toggling [data-theme] on &lt;html>

package/docs/assets/diagrams/forgeloop-engineering-flow.html CHANGED Viewed

@@ -1,7 +1,7 @@
 <!DOCTYPE html>
 <html lang="en" data-theme="dark" data-preset="signal-flow" data-present="true">
 <head>
-      <meta name="forgeloop-diagram-source-sha256" content="a83128a8639db5db497ac552cfdbc318839e6451c718581fbfcd064e3e869981">
+      <meta name="forgeloop-diagram-source-sha256" content="0bfd5bbf8d6bbeaec23db543deb1e99844321c77b3c7feb21ee0cc877bbba9a9">
     <meta name="forgeloop-diagram-renderer" content="archify@2.15.0 (e1ac748f19cf805e44bf74fb93c796662152e273)">
 <meta charset="UTF-8">
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
@@ -40,6 +40,15 @@
   <style>
       /* Keep boundary labels clear of the first node in each group. */
       [data-composition-frame-kind="group"] + text { transform: translateY(-18px); }
+      @media (max-width: 720px) {
+        html:not([data-present="true"]) .toolbar {
+          top: 0;
+          right: 0;
+          width: 100%;
+          flex-wrap: wrap;
+          justify-content: flex-start;
+        }
+      }
     /* ==========================================================
        THEME VARIABLES — switch by toggling [data-theme] on <html>
@@ -4865,10 +4874,10 @@
         <div class="pulse-dot"></div>
         <h1>ForgeLoop Evidence-First Engineering Flow</h1>
       </div>
-      <p class="subtitle">Typed intent → scoped work → observed evidence → validator-backed closure</p>
+      <p class="subtitle">Structured intent → project-bound work → observed evidence → valid closure</p>
     </div>
-    <script id="archify-guided-views-data" type="application/json">[{"id":"contract-to-work","label":"Contract to work","focus":["request","profile","contract","route","gates","preflight","work"],"note":"Follow how a request becomes scoped, routed, and safe to execute."},{"id":"evidence-to-close","label":"Evidence to close","focus":["work","evidence","review","valid"],"note":"See the evidence and review boundary that makes completion trustworthy."},{"id":"recovery-loop","label":"Recovery loop","focus":["evidence","diagnose","correct","preflight","blocked"],"note":"Failures return to diagnosis and correction before another claim is made."}]</script>
+    <script id="archify-guided-views-data" type="application/json">[{"id":"contract-to-work","label":"Contract to work","focus":["request","profile","contract","route","gates","preflight","work"],"note":"Structured obligations and explicit risks set the profile; exclusions do not create required actions."},{"id":"evidence-to-close","label":"Evidence to close","focus":["work","evidence","review","valid"],"note":"See the evidence and review boundary that makes completion trustworthy."},{"id":"recovery-loop","label":"Recovery loop","focus":["evidence","diagnose","correct","preflight","blocked"],"note":"Before execution, blocked refresh needs a valid ledger and revised route. Later failures use diagnosis and correction."}]</script>
     <div class="guided-views no-print" id="guided-views" hidden aria-label="Guided diagram views">
       <button id="guided-view-prev" type="button" aria-label="Previous guided view" title="Previous guided view ([)">&#8592;</button>
@@ -4911,9 +4920,9 @@
     <!-- Main Diagram -->
     <div class="diagram-container" data-detail-level="read">
-      <svg viewBox="0 0 720 900" role="img" aria-labelledby="archify-diagram-title archify-diagram-description" data-animation="trace" data-preset="signal-flow" data-quality-profile="showcase">
+      <svg viewBox="0 0 850 900" role="img" aria-labelledby="archify-diagram-title archify-diagram-description" data-animation="trace" data-preset="signal-flow" data-quality-profile="showcase">
         <title id="archify-diagram-title">ForgeLoop Evidence-First Engineering Flow</title>
-        <desc id="archify-diagram-description">Typed intent → scoped work → observed evidence → validator-backed closure</desc>
+        <desc id="archify-diagram-description">Structured intent → project-bound work → observed evidence → valid closure</desc>
         <!-- Definitions -->
         <defs>
           <marker id="arrowhead" markerWidth="10" markerHeight="7" refX="9" refY="3.5" orient="auto">
@@ -5065,19 +5074,19 @@
         <text data-detail="fine" x="500" y="265" class="t-security" font-size="7" text-anchor="middle">Preflight</text>
         </g>
-        <g id="node-work" data-node-id="work" data-node-label="Execution" tabindex="0" role="button" aria-label="Focus Execution, checkpoint, Resumable Execution › Route + authorize" aria-pressed="false" data-node-kind="backend" data-node-sublabel="checkpoint" data-node-context="Resumable Execution › Route + authorize">
-          <title>Execution · checkpoint · Resumable Execution › Route + authorize</title>
+        <g id="node-work" data-node-id="work" data-node-label="Execution" tabindex="0" role="button" aria-label="Focus Execution, root + task, Resumable Execution › Route + authorize" aria-pressed="false" data-node-kind="backend" data-node-sublabel="root + task" data-node-context="Resumable Execution › Route + authorize">
+          <title>Execution · root + task · Resumable Execution › Route + authorize</title>
           <rect x="469" y="341" width="62" height="52" rx="6" class="c-mask"/>
           <rect x="469" y="341" width="62" height="52" rx="6" class="c-backend" data-animate="node" style="--step:6" stroke-width="1.5"/>
           <g aria-hidden="true" data-semantic-sigil="backend" class="semantic-sigil s-backend" transform="translate(475 347) scale(0.6875)">
             <path d="M6 3 3 8l3 5M10 3l3 5-3 5"/>
           </g>
           <text data-detail-anchor x="500" y="362" class="t-primary" font-size="10" font-weight="600" text-anchor="middle">Execution</text>
-          <text data-detail="context" x="500" y="379" class="t-muted" font-size="8" text-anchor="middle">checkpoint</text>
+          <text data-detail="context" x="500" y="379" class="t-muted" font-size="8" text-anchor="middle">root + task</text>
         </g>
-        <g id="node-evidence" data-node-id="evidence" data-node-label="Evidence" tabindex="0" role="button" aria-label="Focus Evidence, scope + checks, Evidence Ledger › Evidence boundary › Route + authorize" aria-pressed="false" data-node-kind="database" data-node-sublabel="scope + checks" data-node-tag="observed" data-node-context="Evidence Ledger › Evidence boundary › Route + authorize">
-          <title>Evidence · scope + checks · Evidence Ledger › Evidence boundary › Route + authorize · observed</title>
+        <g id="node-evidence" data-node-id="evidence" data-node-label="Evidence" tabindex="0" role="button" aria-label="Focus Evidence, run-check, Evidence Ledger › Evidence boundary › Route + authorize" aria-pressed="false" data-node-kind="database" data-node-sublabel="run-check" data-node-tag="observed" data-node-context="Evidence Ledger › Evidence boundary › Route + authorize">
+          <title>Evidence · run-check · Evidence Ledger › Evidence boundary › Route + authorize · observed</title>
           <rect x="465" y="457" width="70" height="68" rx="6" class="c-mask"/>
           <rect x="465" y="457" width="70" height="68" rx="6" class="c-database" data-animate="node" style="--step:7" stroke-width="1.5"/>
           <g aria-hidden="true" data-semantic-sigil="database" class="semantic-sigil s-database" transform="translate(471 463) scale(0.6875)">
@@ -5085,7 +5094,7 @@
             <path d="M3 4v8c0 1.1 2.2 2 5 2s5-.9 5-2V4M3 8c0 1.1 2.2 2 5 2s5-.9 5-2"/>
           </g>
           <text data-detail-anchor x="500" y="478" class="t-primary" font-size="11" font-weight="600" text-anchor="middle">Evidence</text>
-          <text data-detail="context" x="500" y="495" class="t-muted" font-size="7.3" text-anchor="middle">scope + checks</text>
+          <text data-detail="context" x="500" y="495" class="t-muted" font-size="8" text-anchor="middle">run-check</text>
         <text data-detail="fine" x="500" y="513" class="t-database" font-size="7" text-anchor="middle">observed</text>
         </g>
@@ -5383,6 +5392,7 @@
           <li>&bull; Workspace binding is optional but blocks mismatched execution</li>
           <li>&bull; Failures return to diagnosis before another claim</li>
           <li>&bull; Completion is validator-backed, not inferred from a screenshot</li>
+          <li>&bull; Blocked pre-execution refresh requires a valid ledger and revised route</li>
         </ul>
       </div>
@@ -5396,6 +5406,7 @@
           <li>&bull; run-check binds exact commands to an execution reference</li>
           <li>&bull; record-check covers manual observations</li>
           <li>&bull; Drift reopens verification instead of being hidden</li>
+          <li>&bull; Matching task IDs never authorize cross-project transaction reuse</li>
         </ul>
       </div>

package/docs/assets/diagrams/forgeloop-engineering-flow.receipt.json CHANGED Viewed

@@ -15,17 +15,17 @@
     "license": "MIT"
   },
   "input": {
-    "sha256": "a83128a8639db5db497ac552cfdbc318839e6451c718581fbfcd064e3e869981",
-    "bytes": 7610
+    "sha256": "0bfd5bbf8d6bbeaec23db543deb1e99844321c77b3c7feb21ee0cc877bbba9a9",
+    "bytes": 9779
   },
   "artifacts": {
     "html": {
-      "sha256": "55d71098d15a46778454d53690110195e0e923d37f34cb6c57fcc5e6601ab7ec",
-      "bytes": 647796
+      "sha256": "251e09f3cc36d54c4b8567dd3e6dd8a890a2621cdd12667fb80cc61e7dbf4b7c",
+      "bytes": 648281
     },
     "svg": {
-      "sha256": "37244a07cc862e3fe4a7188f5236a509a4adf565d5b785ba3c0932057ac6f3a8",
-      "bytes": 211160
+      "sha256": "ef3effe7e756494c7dffef9ee315e970bbbdb9fddc0ee0a1e4bfccfbb0c05534",
+      "bytes": 211373
     }
   },
   "staticSvg": {

package/docs/assets/diagrams/forgeloop-engineering-flow.svg CHANGED Viewed

@@ -1,8 +1,17 @@
-<svg data-archify-version="2.15.0" data-forgeloop-source-sha256="a83128a8639db5db497ac552cfdbc318839e6451c718581fbfcd064e3e869981" data-theme="dark" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 720 900" role="img" aria-labelledby="archify-diagram-title archify-diagram-description" data-animation="trace" data-preset="signal-flow" data-quality-profile="showcase">
+<svg data-archify-version="2.15.0" data-forgeloop-source-sha256="0bfd5bbf8d6bbeaec23db543deb1e99844321c77b3c7feb21ee0cc877bbba9a9" data-theme="dark" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 850 900" role="img" aria-labelledby="archify-diagram-title archify-diagram-description" data-animation="trace" data-preset="signal-flow" data-quality-profile="showcase">
     <style>
       .c-bg-rect { fill: var(--bg); }
 /* Keep boundary labels clear of the first node in each group. */
       [data-composition-frame-kind="group"] + text { transform: translateY(-18px); }
+      @media (max-width: 720px) {
+        html:not([data-present="true"]) .toolbar {
+          top: 0;
+          right: 0;
+          width: 100%;
+          flex-wrap: wrap;
+          justify-content: flex-start;
+        }
+      }
     /* ==========================================================
        THEME VARIABLES — switch by toggling [data-theme] on &lt;html>
@@ -4723,7 +4732,7 @@
     </style>
     <rect width="100%" height="100%" class="c-bg-rect" />
         <title id="archify-diagram-title">ForgeLoop Evidence-First Engineering Flow</title>
-        <desc id="archify-diagram-description">Typed intent → scoped work → observed evidence → validator-backed closure</desc>
+        <desc id="archify-diagram-description">Structured intent → project-bound work → observed evidence → valid closure</desc>
         <!-- Definitions -->
         <defs>
           <marker id="arrowhead" markerWidth="10" markerHeight="7" refX="9" refY="3.5" orient="auto">
@@ -4875,19 +4884,19 @@
         <text data-detail="fine" x="500" y="265" class="t-security" font-size="7" text-anchor="middle">Preflight</text>
         </g>
-        <g id="node-work" data-node-id="work" data-node-label="Execution" tabindex="0" role="button" aria-label="Focus Execution, checkpoint, Resumable Execution › Route + authorize" aria-pressed="false" data-node-kind="backend" data-node-sublabel="checkpoint" data-node-context="Resumable Execution › Route + authorize">
-          <title>Execution · checkpoint · Resumable Execution › Route + authorize</title>
+        <g id="node-work" data-node-id="work" data-node-label="Execution" tabindex="0" role="button" aria-label="Focus Execution, root + task, Resumable Execution › Route + authorize" aria-pressed="false" data-node-kind="backend" data-node-sublabel="root + task" data-node-context="Resumable Execution › Route + authorize">
+          <title>Execution · root + task · Resumable Execution › Route + authorize</title>
           <rect x="469" y="341" width="62" height="52" rx="6" class="c-mask"/>
           <rect x="469" y="341" width="62" height="52" rx="6" class="c-backend" data-animate="node" style="--step:6" stroke-width="1.5"/>
           <g aria-hidden="true" data-semantic-sigil="backend" class="semantic-sigil s-backend" transform="translate(475 347) scale(0.6875)">
             <path d="M6 3 3 8l3 5M10 3l3 5-3 5"/>
           </g>
           <text data-detail-anchor="true" x="500" y="362" class="t-primary" font-size="10" font-weight="600" text-anchor="middle">Execution</text>
-          <text data-detail="context" x="500" y="379" class="t-muted" font-size="8" text-anchor="middle">checkpoint</text>
+          <text data-detail="context" x="500" y="379" class="t-muted" font-size="8" text-anchor="middle">root + task</text>
         </g>
-        <g id="node-evidence" data-node-id="evidence" data-node-label="Evidence" tabindex="0" role="button" aria-label="Focus Evidence, scope + checks, Evidence Ledger › Evidence boundary › Route + authorize" aria-pressed="false" data-node-kind="database" data-node-sublabel="scope + checks" data-node-tag="observed" data-node-context="Evidence Ledger › Evidence boundary › Route + authorize">
-          <title>Evidence · scope + checks · Evidence Ledger › Evidence boundary › Route + authorize · observed</title>
+        <g id="node-evidence" data-node-id="evidence" data-node-label="Evidence" tabindex="0" role="button" aria-label="Focus Evidence, run-check, Evidence Ledger › Evidence boundary › Route + authorize" aria-pressed="false" data-node-kind="database" data-node-sublabel="run-check" data-node-tag="observed" data-node-context="Evidence Ledger › Evidence boundary › Route + authorize">
+          <title>Evidence · run-check · Evidence Ledger › Evidence boundary › Route + authorize · observed</title>
           <rect x="465" y="457" width="70" height="68" rx="6" class="c-mask"/>
           <rect x="465" y="457" width="70" height="68" rx="6" class="c-database" data-animate="node" style="--step:7" stroke-width="1.5"/>
           <g aria-hidden="true" data-semantic-sigil="database" class="semantic-sigil s-database" transform="translate(471 463) scale(0.6875)">
@@ -4895,7 +4904,7 @@
             <path d="M3 4v8c0 1.1 2.2 2 5 2s5-.9 5-2V4M3 8c0 1.1 2.2 2 5 2s5-.9 5-2"/>
           </g>
           <text data-detail-anchor="true" x="500" y="478" class="t-primary" font-size="11" font-weight="600" text-anchor="middle">Evidence</text>
-          <text data-detail="context" x="500" y="495" class="t-muted" font-size="7.3" text-anchor="middle">scope + checks</text>
+          <text data-detail="context" x="500" y="495" class="t-muted" font-size="8" text-anchor="middle">run-check</text>
         <text data-detail="fine" x="500" y="513" class="t-database" font-size="7" text-anchor="middle">observed</text>
         </g>

package/docs/assets/diagrams/forgeloop-verification-trust-flow.html CHANGED Viewed

@@ -1,7 +1,7 @@
 <!DOCTYPE html>
 <html lang="en" data-theme="dark" data-preset="signal-flow" data-present="true">
 <head>
-      <meta name="forgeloop-diagram-source-sha256" content="6fe11b0530cc6640f7b0f07d0f2d7e5a1f961745491f39016b340bc354af0e79">
+      <meta name="forgeloop-diagram-source-sha256" content="ba0016d705a7d89be0cdff7529b29112e844ef806ae9f87a1bbff8db8c109043">
     <meta name="forgeloop-diagram-renderer" content="archify@2.15.0 (e1ac748f19cf805e44bf74fb93c796662152e273)">
 <meta charset="UTF-8">
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
@@ -40,6 +40,15 @@
   <style>
       /* Keep boundary labels clear of the first node in each group. */
       [data-composition-frame-kind="group"] + text { transform: translateY(-18px); }
+      @media (max-width: 720px) {
+        html:not([data-present="true"]) .toolbar {
+          top: 0;
+          right: 0;
+          width: 100%;
+          flex-wrap: wrap;
+          justify-content: flex-start;
+        }
+      }
     /* ==========================================================
        THEME VARIABLES — switch by toggling [data-theme] on <html>
@@ -4868,7 +4877,7 @@
       <p class="subtitle">Canonical scope planning before exact command execution</p>
     </div>
-    <script id="archify-guided-views-data" type="application/json">[{"id":"scope-resolution","label":"Resolve verification scope","focus":["claims","changes","checker","cycle","fingerprints","scope"],"note":"Follow the trusted inputs that determine whether a checker may narrow its execution."},{"id":"exact-execution","label":"Bind exact execution","focus":["scope","argv","observed"],"note":"See how the resolved scope binds the exact argv and observed execution evidence."},{"id":"fail-closed","label":"Fail closed when trust is missing","focus":["checker","full","unresolved","reject"],"note":"No trusted checker means AUTO uses FULL; explicit narrowing without one is unresolved."}]</script>
+    <script id="archify-guided-views-data" type="application/json">[{"id":"scope-resolution","label":"Resolve verification scope","focus":["claims","changes","checker","cycle","fingerprints","scope"],"note":"Follow the trusted inputs that determine whether a checker may narrow its execution."},{"id":"exact-execution","label":"Bind exact execution","focus":["scope","argv","observed"],"note":"run-check proves execution; manual-review is explicit. Test filters do not establish canonical verification scope."},{"id":"fail-closed","label":"Fail closed when trust is missing","focus":["checker","full","unresolved","reject"],"note":"No trusted checker means AUTO uses FULL; explicit narrowing without one is unresolved."}]</script>
     <div class="guided-views no-print" id="guided-views" hidden aria-label="Guided diagram views">
       <button id="guided-view-prev" type="button" aria-label="Previous guided view" title="Previous guided view ([)">&#8592;</button>
@@ -4911,7 +4920,7 @@
     <!-- Main Diagram -->
     <div class="diagram-container" data-detail-level="read">
-      <svg viewBox="0 0 720 900" role="img" aria-labelledby="archify-diagram-title archify-diagram-description" data-animation="trace" data-preset="signal-flow" data-quality-profile="showcase">
+      <svg viewBox="0 0 850 900" role="img" aria-labelledby="archify-diagram-title archify-diagram-description" data-animation="trace" data-preset="signal-flow" data-quality-profile="showcase">
         <title id="archify-diagram-title">ForgeLoop Verification Trust Flow</title>
         <desc id="archify-diagram-description">Canonical scope planning before exact command execution</desc>
         <!-- Definitions -->
@@ -5368,6 +5377,7 @@
           <li>&bull; AUTO uses CHANGED or CLAIMED only with a trusted scoped checker</li>
           <li>&bull; Without that capability, AUTO resolves safely to FULL</li>
           <li>&bull; Explicit CHANGED or CLAIMED without a checker returns unresolved</li>
+          <li>&bull; A test name or file filter is not a canonical scope boundary</li>
         </ul>
       </div>
@@ -5380,6 +5390,7 @@
           <li>&bull; RevisionProvider changes and task claims are canonical inputs</li>
           <li>&bull; Contract, repository, and cycle fingerprints bind the scope</li>
           <li>&bull; argv prefix and selected paths are checked before launch</li>
+          <li>&bull; Manual evidence declares manual-review; command metadata is not execution</li>
         </ul>
       </div>

package/docs/assets/diagrams/forgeloop-verification-trust-flow.receipt.json CHANGED Viewed

@@ -15,17 +15,17 @@
     "license": "MIT"
   },
   "input": {
-    "sha256": "6fe11b0530cc6640f7b0f07d0f2d7e5a1f961745491f39016b340bc354af0e79",
-    "bytes": 6917
+    "sha256": "ba0016d705a7d89be0cdff7529b29112e844ef806ae9f87a1bbff8db8c109043",
+    "bytes": 8793
   },
   "artifacts": {
     "html": {
-      "sha256": "9dee511d07c01b6570dbfe0e6127517813f7843056e7faa93af00b133b6e44ba",
-      "bytes": 646396
+      "sha256": "0a56559866acd7276b93977cb3308993e5ce043da29d911f2f52294b78a1bebd",
+      "bytes": 646847
     },
     "svg": {
-      "sha256": "e225c69f2ec90f403c394d88b5d41af75363c7fa336181ee85664f5d495f4555",
-      "bytes": 209918
+      "sha256": "5c63af3190251de5b6268c62ea5a6ae6fb325fe20fd9a69e996a95566fe6ebd0",
+      "bytes": 210148
     }
   },
   "staticSvg": {

package/docs/assets/diagrams/forgeloop-verification-trust-flow.svg CHANGED Viewed

@@ -1,8 +1,17 @@
-<svg data-archify-version="2.15.0" data-forgeloop-source-sha256="6fe11b0530cc6640f7b0f07d0f2d7e5a1f961745491f39016b340bc354af0e79" data-theme="dark" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 720 900" role="img" aria-labelledby="archify-diagram-title archify-diagram-description" data-animation="trace" data-preset="signal-flow" data-quality-profile="showcase">
+<svg data-archify-version="2.15.0" data-forgeloop-source-sha256="ba0016d705a7d89be0cdff7529b29112e844ef806ae9f87a1bbff8db8c109043" data-theme="dark" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 850 900" role="img" aria-labelledby="archify-diagram-title archify-diagram-description" data-animation="trace" data-preset="signal-flow" data-quality-profile="showcase">
     <style>
       .c-bg-rect { fill: var(--bg); }
 /* Keep boundary labels clear of the first node in each group. */
       [data-composition-frame-kind="group"] + text { transform: translateY(-18px); }
+      @media (max-width: 720px) {
+        html:not([data-present="true"]) .toolbar {
+          top: 0;
+          right: 0;
+          width: 100%;
+          flex-wrap: wrap;
+          justify-content: flex-start;
+        }
+      }
     /* ==========================================================
        THEME VARIABLES — switch by toggling [data-theme] on &lt;html>

package/docs/diagrams/README.md CHANGED Viewed

@@ -39,6 +39,15 @@ dark presentation so it remains legible in repository previews; the adjacent tex
 [`README.md`](../../README.md#architecture-flow) carries the same lifecycle
 semantics for text-only readers.
+Advisory context, including the optional Ripwire adapter, is intentionally not
+drawn as a lifecycle node or transition. It is a host-injected, explicit,
+non-evidence input that can guide inspection while remaining outside state,
+authority, verification, completion, and next-action decisions. Its boundary
+is documented in [`ADVISORY_CONTEXT.md`](../ADVISORY_CONTEXT.md) and
+[`RIPWIRE_ADAPTER.md`](../RIPWIRE_ADAPTER.md); keeping it out of these P0
+visuals prevents an optional side channel from being mistaken for protocol
+control flow.
 Archify is vendored at `vendor/archify/v2.15.0/archify` under its MIT license.
 The exact source commit and cryptographic vendor-tree hash are recorded in
 `vendor/archify/v2.15.0/PIN.json`; generated-file hashes are recorded in the
@@ -61,3 +70,20 @@ three workflow diagrams because the pinned wrapper currently maps only
 an explicit renderer mapping before it can be added as an active diagram.
 Additional safety-boundary, resume, or provider visuals remain intentionally
 deferred until their mappings are proven.
+## Current behavioral boundaries
+The engineering explorer describes structured obligations, project/task-bound
+transactions, and bounded refresh of blocked pre-execution checkpoints. Its
+later correction loop still returns through verification.
+The verification explorer distinguishes test filtering from a canonical
+verification scope and executed command evidence from explicit manual review.
+The attestation explorer distinguishes absent CI receipts (`NOT_VERIFIED`)
+from attestation trust levels and notes that payload compaction preserves
+transaction manifests and event history.
+These explanations are part of the JSON sources and generated explorers;
+matching textual fallbacks live in the README, revision-provider guide, and
+attestation guide. Re-render before renewing a visual review, then inspect
+the new output at desktop and narrow widths before binding the review hashes.