@cassiomc1/forgeloop 1.8.0 → 1.9.0

package/.cursor/rules/project-loop.mdc

@@ -2,14 +2,11 @@
 description: Universal verified project loop
 alwaysApply: true
 ---
-
 <!-- FORGELOOP_PROJECT_PROTOCOL=REQUIRED -->
 # Cursor — Universal Project Loop
-
 This project is ForgeLoop-enabled. If your execution environment loaded this
 file, ForgeLoop applies regardless of model, provider, IDE, agent, or runtime.
 Do not treat ForgeLoop as vendor-specific, optional, or to follow only "in spirit".
-
 1. Read [`LOOP_ENGINEERING.md`](../../LOOP_ENGINEERING.md) and [`PROTOCOL_INTEGRATION.md`](../../PROTOCOL_INTEGRATION.md).
 2. Confirm [`PROJECT_PROFILE.md`](../../PROJECT_PROFILE.md) from real sources; initialize if in `template` mode.
 3. Use [`GUIDE_ROUTER.md`](../../GUIDE_ROUTER.md) to activate relevant guides and report IDs.
@@ -24,6 +21,12 @@ After implementation work for the current task is complete, run `forgeloop next`
 
 10. Report only demonstrated results and checks.
 
+When `structuralQuality` is enabled, capture its baseline after planning and
+before `EXECUTING`, evaluate the current cycle in `VERIFYING`, and route
+regressions through the existing diagnosis/correction loop. Do not claim
+`PASS` for unavailable evidence, replace a baseline after execution begins, or
+expand scope to chase a perfect score.
+
 Do not stop for non-blocking missing product details. When a safe, reversible
 local default exists, record it as an agent assumption and follow the Blocking vs Non-Blocking Decisions policy in `LOOP_ENGINEERING.md`.
 

package/.github/copilot-instructions.md

@@ -21,6 +21,11 @@ Use these instructions across the repository while preserving local rules.
 After implementation work for the current task is complete, run `forgeloop next` before returning a final result. Follow the returned lifecycle action until ForgeLoop reaches a terminal state or an explicit blocker.
 
 - Report results, checks actually run, limitations, and publication state.
+- When `structuralQuality` is enabled, capture its baseline after planning and
+  before `EXECUTING`, evaluate the current cycle in `VERIFYING`, and route
+  regressions through the existing diagnosis/correction loop. Never claim
+  `PASS` for unavailable evidence, replace a baseline after execution begins,
+  or expand scope to chase a perfect score.
 
 Do not stop for non-blocking missing product details. When a safe, reversible
 local default exists, record it as an agent assumption and follow the Blocking vs Non-Blocking Decisions policy in `LOOP_ENGINEERING.md`.

package/AGENTS.md

@@ -20,6 +20,12 @@ Do not treat ForgeLoop as vendor-specific, optional, or to follow only "in spiri
 1. After implementation work for the current task is complete, run `forgeloop next` before returning a final result. Follow the returned lifecycle action until ForgeLoop reaches a terminal state or an explicit blocker.
 1. Finish with result, checks run, limitations, and publication state.
 
+When `structuralQuality` is enabled, capture its task-bound baseline after
+planning and before `EXECUTING`, record the current-cycle evaluation in
+`VERIFYING`, and route regressions through the existing diagnosis/correction
+loop. Never claim structural `PASS` for unavailable evidence, replace a
+baseline after execution begins, or widen scope to chase a perfect score.
+
 Do not stop for non-blocking missing product details. When a safe, reversible
 local default exists, record it as an agent assumption and follow the Blocking vs Non-Blocking Decisions policy in `LOOP_ENGINEERING.md`.
 

package/CLAUDE.md

@@ -20,6 +20,12 @@ When working in this repository:
 1. After implementation work for the current task is complete, run `forgeloop next` before returning a final result. Follow the returned lifecycle action until ForgeLoop reaches a terminal state or an explicit blocker.
 1. Report current evidence, limitations, and publication state without claiming checks that were not run.
 
+When `structuralQuality` is enabled, capture its baseline after planning and
+before `EXECUTING`, evaluate the current cycle in `VERIFYING`, and use the
+existing diagnosis/correction lifecycle for regressions. Do not report
+unavailable evidence as `PASS`, replace a baseline after execution begins, or
+expand scope to pursue a perfect score.
+
 Do not stop for non-blocking missing product details. When a safe, reversible
 local default exists, record it as an agent assumption and follow the Blocking vs Non-Blocking Decisions policy in `LOOP_ENGINEERING.md`.
 

package/DOCS_INDEX.md

@@ -22,6 +22,7 @@ integration and guide context. Use this map before editing documentation.
 | Durable actions and trajectory evidence | [`docs/EXECUTION_TRACE.md`](./docs/EXECUTION_TRACE.md) and [`docs/RECIPES.md`](./docs/RECIPES.md) | Action provenance, reconciliation, metrics, and project-local evaluation |
 | Troubleshooting and recovery | [`docs/TROUBLESHOOTING.md`](./docs/TROUBLESHOOTING.md) | Symptom-first recovery and stable error code reference |
 | Operational recipes | [`docs/RECIPES.md`](./docs/RECIPES.md) | Short copy-paste recipes for daily workflows |
+| Structural quality feedback | [`docs/STRUCTURAL_QUALITY.md`](./docs/STRUCTURAL_QUALITY.md) | Provider-neutral baseline, delta policy, Sentrux boundary, lifecycle integration, and troubleshooting |
 | Diagnostic model | [`docs/DIAGNOSTIC_MODEL.md`](./docs/DIAGNOSTIC_MODEL.md) | Structured diagnostic cases, interventions, hypothesis dispositions, information gain |
 | Execution trace and observability | [`docs/EXECUTION_TRACE.md`](./docs/EXECUTION_TRACE.md) | `history`, `trace`, `reflect`, and task-level `inspect` read-only projections |
 | Workspace, handoff, responsibility, and scope | [`docs/ARTIFACT_REFERENCE.md`](./docs/ARTIFACT_REFERENCE.md) and [`docs/CLI_REFERENCE.md`](./docs/CLI_REFERENCE.md) | Optional task boundaries and deterministic verification planning |
@@ -31,6 +32,8 @@ integration and guide context. Use this map before editing documentation.
 | Universal integration API | [`docs/UNIVERSAL_INTEGRATION.md`](./docs/UNIVERSAL_INTEGRATION.md) | Programmatic integration subpath, envelope semantics, and consumer map |
 | Local-first MCP adapter | [`docs/MCP.md`](./docs/MCP.md) | stdio default, optional strict loopback HTTP; server modes/capabilities and canonical resources |
 | Adaptive execution-profile benchmarks | [`docs/EXECUTION_PROFILE_BENCHMARKS.md`](./docs/EXECUTION_PROFILE_BENCHMARKS.md) | Measured provider/host runs, robust statistics, paired/distribution deltas, tail status, outliers, and profile-aware host context |
+| Knowledge integration gap analysis | [`docs/KNOWLEDGE_INTEGRATION_GAP_ANALYSIS.md`](./docs/KNOWLEDGE_INTEGRATION_GAP_ANALYSIS.md) | Repository-only research audit of candidate coverage, proven gaps, canonical homes, context cost, and intentional skip/defer decisions |
+| Knowledge sources and provenance | [`docs/KNOWLEDGE_SOURCES.md`](./docs/KNOWLEDGE_SOURCES.md) | Snapshot, licensing observations, source roles, accepted/skipped concepts, and reuse boundaries |
 | Documentation guide | [`docs/DOCUMENTATION_GUIDE.md`](./docs/DOCUMENTATION_GUIDE.md) | Rules and checklist for modifying documentation |
 | Current release checklist | [`docs/RELEASE_CHECKLIST.md`](./docs/RELEASE_CHECKLIST.md) | Package, protocol, attestation, integration, and publication gates |
 | ForgeLoop 1.6.1 release checklist (historical) | [`docs/RELEASE_CHECKLIST_1_6_1.md`](./docs/RELEASE_CHECKLIST_1_6_1.md) | Verification adapter boundary, isolation invariants, and publication gates |
@@ -66,6 +69,7 @@ integration and guide context. Use this map before editing documentation.
 | **Inspecting `.forgeloop/` files** | [`docs/ARTIFACT_REFERENCE.md`](./docs/ARTIFACT_REFERENCE.md) |
 | **Fixing a broken or stale state** | [`docs/TROUBLESHOOTING.md`](./docs/TROUBLESHOOTING.md) |
 | **Looking for quick recipes** | [`docs/RECIPES.md`](./docs/RECIPES.md) |
+| **Configuring structural quality feedback** | [`docs/STRUCTURAL_QUALITY.md`](./docs/STRUCTURAL_QUALITY.md) |
 | **Understanding verification trust** | [`docs/REVISION_PROVIDERS.md`](./docs/REVISION_PROVIDERS.md#differential-verification-scope) |
 | **Understanding attestation trust** | [`docs/CODE_ATTESTATION.md`](./docs/CODE_ATTESTATION.md#trust-levels) |
 | **Maintaining generated diagrams** | [`docs/diagrams/README.md`](./docs/diagrams/README.md) |
@@ -87,6 +91,7 @@ integration and guide context. Use this map before editing documentation.
 - **Fix a blocked, stale, or invalid state**: [`docs/TROUBLESHOOTING.md`](./docs/TROUBLESHOOTING.md)
 - **Recover a stale task or reacquire released claims**: [`docs/RECIPES.md`](./docs/RECIPES.md#recipe-15--release-and-reacquire-claims-for-an-abandoned-task)
 - **Find operational copy-paste commands**: [`docs/RECIPES.md`](./docs/RECIPES.md)
+- **Measure structural quality without replacing tests**: [`docs/STRUCTURAL_QUALITY.md`](./docs/STRUCTURAL_QUALITY.md)
 - **Read the normative protocol specification**: [`LOOP_ENGINEERING.md`](./LOOP_ENGINEERING.md)
 - **Integrate a new AI environment**: [`PROTOCOL_INTEGRATION.md`](./PROTOCOL_INTEGRATION.md)
 - **Map ForgeLoop state into an external runtime/orchestrator**: [`ORCHESTRATOR_INTEGRATION.md`](./ORCHESTRATOR_INTEGRATION.md)

package/ENG/accessibility-eng.md

@@ -3,7 +3,7 @@ name: accessibility-eng
 language: en
 description: "Practical WCAG 2.2-oriented accessibility protocol for web, mobile, and desktop."
 version: "2026.09"
-last-reviewed: "2026-08-10"
+last-reviewed: "2026-08-31"
 guide-id: accessibility
 completion-evidence:
   - keyboard-navigation
@@ -77,6 +77,8 @@ To ensure technical integrity, any AI interacting with the project **MUST**:
 - **Keyboard (SC 2.1.1):** all functionality **MUST** be operable without a mouse. Where the function depends on the path of movement rather than only its endpoints, document why the WCAG exception applies and provide a practical alternative when possible. Avoid purely pointer-based listeners without keyboard event equivalents (`onKeyDown`).
 - **Focus (SC 2.4.7, 2.4.11):** focus **MUST** be visible, never entirely obscured by author content (e.g., sticky headers/footers), persistent, and never suppressed via CSS (`outline: none` without fallback is forbidden).
 - **SPA routing:** after client-side routing changes, focus **MUST** be managed and properly reset (e.g., sending focus to the top or an `h1`). Avoid lost focus on the screen.
+- **Focus order and lifecycle (SC 2.4.3):** the sequential keyboard path **MUST** preserve meaning and operability. Prefer alignment between DOM order, reading order, and visual order when divergence would create confusing or illogical navigation. Avoid positive `tabindex` as a ForgeLoop accessibility best practice; repair the document structure whenever practical. When content is inserted, removed, expanded, collapsed, replaced, or routed, define the next logical focus destination and do not leave focus on a removed or unavailable node.
+- **Modal dialog focus contract:** for a modal dialog, choose the initial focus target according to the modal task, move focus inside the modal, keep the inactive background out of the keyboard path, and remember the invoking control. On close, return focus to that control only when it still exists and is available; otherwise move focus to a documented logical fallback, such as the control that owns the resulting content or the newly exposed heading. A trigger removed during the operation is a lifecycle case, not permission to drop focus. Do not apply modal containment rules to non-modal dialogs.
 - **Targets (SC 2.5.8):** interactive elements MUST have a minimum size of **24×24 CSS pixels** — the WCAG 2.2 AA floor — except when an equivalent larger target exists, sufficient spacing prevents accidental activation, or the target sits inline in text.
   **House Rule†:** design to **44×44px** (48×48 under Shield), the ergonomic floor shared by Apple HIG and Material Design. Under Shield, 44×44 is normative (SC 2.5.5 AAA).
 - **Dragging (SC 2.5.7, AA):** all functionality operated by dragging MUST have a simple pointer alternative that does not require dragging, unless dragging is essential or the behavior is provided by the user agent and has not been modified by the author. The alternative cannot rely only on a path-based gesture.
@@ -96,6 +98,12 @@ To ensure technical integrity, any AI interacting with the project **MUST**:
 - **Semantic HTML:** **MUST** prefer native (HTML5) elements over custom ones.
 - **Interoperability:** the code **MUST** be compatible with current assistive technologies (ISO 9241-171).
 
+### Composite visuals, code, and status
+
+- When several DOM nodes together communicate one informative visual, expose one meaningful semantic representation and keep decorative fragments out of the accessibility tree. Do not make users traverse borders, connector lines, repeated labels, or illustration layers that add no information.
+- A code example **MUST** remain available as text with code semantics. Line-number gutters, syntax decoration, and duplicate visual labels **SHOULD** be hidden from assistive technology when they do not add meaning. A copy or expand action **MUST** be a named, keyboard-operable control; its result belongs in the pre-mounted status region described above rather than only in a changed icon or color.
+- A composite presentation is not evidence that its semantics work. Verify the accessible name, role, value, focus path, and status announcement in the supported browser and assistive-technology combinations; automated tree checks cover only part of this behavior.
+
 ## 4. Visual directives (strict UI criteria)
 
 These directives combine WCAG requirements where identified and this guide's ergonomic recommendations. They support implementation but do not assure certification or legal compliance.
@@ -120,7 +128,7 @@ When identifying an unmapped or highly complex component (e.g., charts, dynamic
 - **Leaked focus traps:** **MUST NOT** create modals without managing focus. When a modal is open:
   - focus MUST move into the modal;
   - focus MUST be trapped within the modal;
-  - focus MUST return to the triggering element when closed;
+  - focus MUST return to the triggering element when it still exists and remains available; otherwise focus MUST move to a documented logical fallback;
   - background content MUST NOT be interactive or reachable via keyboard.
 - **Placeholder labels:** **MUST NOT** use `placeholder` as the sole form of label. Crucial instructions (like date formats) **MUST** be visible outside the field to prevent disappearance during filling.
 - **ARIA soup:** **MUST NOT** add ARIA where native HTML already provides the semantics — no ARIA is better than bad ARIA. Forbidden by default: redundant roles (`role="button"` on a `<button>`), `aria-label` duplicating visible text (harmless today, but it drifts into an SC 2.5.3 failure when the text changes), and static ARIA states that are never updated (hardcoded `aria-expanded` — an SC 4.1.2 failure). ARIA is the fallback for gaps in native semantics ([First Rule of ARIA Use](https://www.w3.org/TR/using-aria/#rule1)), not a seasoning. The number of ARIA attributes is not evidence of accessibility; validate behavior, semantics, and assistive-technology support.
@@ -131,12 +139,14 @@ When identifying an unmapped or highly complex component (e.g., charts, dynamic
 
 - [ ] **Technical check:** run the project's already configured static accessibility checks and engines such as `Axe` where applicable (see [`test-code-eng.md`](./test-code-eng.md) for tool selection). Do not install a tool solely to satisfy this item; record a required unavailable check as blocked.
 - [ ] **Tab order:** `Tab` key path manually validated (ensures absence of frontend dead-ends).
+- [ ] **Focus order and lifecycle:** sequential order preserves meaning and operability; DOM, reading, and visual order are aligned where divergence would create confusing or illogical navigation; no positive `tabindex` is used; inserted, removed, expanded, collapsed, replaced, and routed content has a defined logical focus destination; modal dialogs have intentional initial focus and a valid return or fallback target.
 - [ ] **Focus (SC 2.4.13, AAA when applicable):** measure the area equivalent to a 2 CSS pixel perimeter and 3:1 contrast between the same pixels in focused and unfocused states; also verify applicable non-text contrast.
 - [ ] **Dragging (SC 2.5.7, AA):** test every drag operation with a simple pointer alternative that does not require dragging; document the essentiality or user-agent exception, if any.
 - [ ] **Consistent help (SC 3.2.6, A):** compare pages in the same set and confirm repeated help mechanisms retain the same relative order, unless the user initiated a change.
 - [ ] **Redundant entry (SC 3.3.7, A):** run multi-step processes and confirm auto-population or selection of previously provided information, or record the applicable exception.
 - [ ] **Authentication (SC 3.3.8, AA):** test the whole flow, including MFA, without requiring unassisted memorization, solving, or transcription; confirm password-manager and paste support when they are the chosen mechanism.
 - [ ] **User flow and announcements:** manually test dynamic interactions without a mouse. Confirm DOM-present regions announce non-urgent messages through `role="status"` or `aria-live="polite"`, reserve `role="alert"` for urgent errors, and work in supported browser and assistive-technology combinations.
+- [ ] **Composite content:** informative multi-node visuals have one meaningful representation, decorative fragments are not announced, code remains readable as text, code controls have names, and copy/result status is announced through the intended region.
 - [ ] **Zoom and reflow:** text resizes up to 200% without loss of content or function (SC 1.4.4); content reflows at 320 CSS px width — equivalent to 400% zoom on a 1280px viewport — without two-dimensional scrolling (SC 1.4.10). Preserve flexibility using relative units (rem/em).
 - [ ] **Color and perception:** no functional loss when color is unavailable; confirm the additional channel appropriate to the meaning without requiring universal visual redundancy.
 - [ ] **Exceptions audit:** `EXCEPTIONS.md` reviewed — every active entry has a risk owner, approver, tracking issue, and expiry; no expired entries left unaddressed.

package/ENG/design-code-eng.md

@@ -3,7 +3,7 @@ name: design-code-eng
 language: en
 description: "Visual direction, UX, motion, and perceived performance for premium digital experiences."
 version: "2026.09"
-last-reviewed: "2026-08-17"
+last-reviewed: "2026-08-31"
 guide-id: design
 requires-gates:
   - design
@@ -261,6 +261,27 @@ Canvas, WebGL, SVG displacement, and Liquid Glass effects follow the **normative
 
 ## Premium Components (measurable defaults)
 
+### Component state contract
+
+Before polishing an interactive or data-bearing component, list the states it
+can actually reach. Use only the applicable states; this is a review aid, not a
+requirement to manufacture every variant.
+
+- **Resting and interaction:** default, hover where supported, focus-visible,
+  and active/pressed.
+- **Availability:** disabled and loading when the operation or dependency is
+  unavailable or in progress.
+- **Data and outcome:** empty, selected, expanded/collapsed, success, and error
+  when the component can display those conditions.
+
+Every reachable state must preserve the component's semantic name, action,
+focus behavior, contrast, and a non-color cue where color alone would be
+ambiguous. Define the authoritative transition for asynchronous states,
+including cancellation or a repeated request, so an interrupted operation
+cannot leave stale loading, success, or error feedback. Verify reachable
+transitions with interaction and semantic checks; a screenshot can show an
+appearance but cannot prove the state behavior or accessibility.
+
 **Primary button**
 
 - Padding: `14px 28px` (mobile `12px 24px`)

package/LOOP_ENGINEERING.md

@@ -24,6 +24,7 @@
 - [Proportional Planning](#proportional-planning)
 - [Execution Loop](#execution-loop)
 - [Verification & Regression](#verification-and-regression)
+- [Structural Quality Feedback](#structural-quality-feedback)
 - [Evidence-Driven Correction](#evidence-driven-correction)
 - [Precedence & Stop Conditions](#precedence)
 - [Final Delivery](#final-delivery)
@@ -1208,6 +1209,33 @@ Choose checks that match the artifact and risk.
 Regression depth grows with risk: specific check, related tests, then suite,
 build, and integration validation when reasonable.
 
+<a id="FL-SQ-001"></a> **FL-SQ-001 — Structural-quality evidence MUST remain provider-neutral, task-bound, delta-first, and separate from other verification dimensions.**
+
+### Structural quality feedback
+
+Structural quality is an optional provider-neutral verification dimension. It
+is a measurement of dependency structure, not a guide, a static analyzer built
+into ForgeLoop, or a universal software-quality score. The external provider
+remains a replaceable sensor while ForgeLoop owns policy and evidence.
+
+When enabled, capture a task-bound baseline after planning and immediately
+before execution. In `VERIFYING`, record the current-cycle evaluation before
+entering `REVIEWING`. A gate requires a comparable current-cycle pass; observe
+mode exposes the result or limitation without adding a completion blocker;
+off mode does not resolve or launch a provider.
+
+The baseline is immutable after `EXECUTING`. Provider identity/version, policy,
+route, contract, scope, and rules drift makes observations incomparable. A
+regression follows the existing `VERIFYING -> DIAGNOSING -> CORRECTING ->
+VERIFYING` loop with evidence-backed diagnosis; ForgeLoop does not fabricate a
+diagnosis. Do not claim `PASS` for unavailable or malformed evidence.
+
+Optional optimization is bounded, advisory, and scope-safe. It may use at most
+two extra evaluations in a verification cycle, never becomes required for
+completion, never widens claims, and never chases a perfect score. See
+[`docs/STRUCTURAL_QUALITY.md`](./docs/STRUCTURAL_QUALITY.md) for the provider
+contract, policy fields, commands, artifact layout, and Sentrux boundary.
+
 ### Executable Policy & Autonomy-Preserving Invariants
 
 ForgeLoop enforces executable verification rules (`.forgeloop/policy/rules.json`) that evaluate constraints on code and artifacts.

package/PROTOCOL_INTEGRATION.md

@@ -506,6 +506,7 @@ The ownership boundary for these extensions is explicit:
 | Handoff envelope | Creates immutable protocol-derived snapshots and verifies their digest and ledger relationships | Supplies any descriptive note or recipient hint; it cannot turn the envelope into delegation or evidence |
 | Responsibility contract | Validates allowed/read-only paths, required checks, and frozen-input fingerprints | Chooses the optional boundary and performs the work inside it |
 | Verification scope | Resolves `AUTO`, `CHANGED`, `CLAIMED`, or `FULL`, binds scoped-checker argv, and fails closed on stale or mismatched inputs | Declares checker configuration and consumes the returned scope without guessing a narrower one |
+| Structural quality | Owns provider-neutral baseline/evaluation artifacts, delta policy, typed check provenance, and lifecycle/completion semantics | Supplies or selects a runtime provider and consumes `quality-status`; it does not provide arbitrary executable or shell input |
 | RevisionProvider | Reads opaque revisions, exact bytes, normalized changes, and range coverage through the provider contract | Supplies or selects the provider and revision identifiers |
 | SigningProvider | Validates provider results and preserves `VERIFIED` versus `ATTESTED` semantics | Owns the external signer, identity/issuer policy, credentials, and availability |
 | Generic CI / MCP | Keeps canonical command, evidence, and trust semantics | Owns the platform job, transport, scheduling, and presentation layer |
@@ -526,6 +527,31 @@ OIDC tokens, and credentials outside ForgeLoop artifacts. Signing and
 verification may use an external provider, while the persisted statement stays
 deterministic and provider-neutral.
 
+<a id="FL-SQ-002"></a> **FL-SQ-002 — A structural-quality integration MUST preserve unavailable, malformed, stale, incomparable, and blocked provider results without promoting them to PASS.**
+
+## Structural quality integration
+
+Structural quality is an optional provider-neutral capability. The public
+integration API exposes `StructuralQualityProvider`, normalized detection and
+snapshot types, and runtime provider injection through the context. Project
+configuration selects only a registered provider name and policy; it cannot
+select an executable path, shell command, arbitrary argument vector, raw score,
+or baseline.
+
+The canonical commands are `quality-baseline` and `quality-verify` for bounded
+provider execution and task mutation, plus read-only `quality-status`. MCP and
+the integration API consume the same declarative command definitions and
+preserve `PASS`, `FAIL`, `BLOCKED`, and `NOT_OBSERVED` without duplicating
+lifecycle logic. The read-only `task/structural-quality` resource never starts
+the provider.
+
+The built-in `sentrux` provider uses the local MCP stdio boundary, requires a
+supported version, and keeps output, timeout, path, and secret handling inside
+ForgeLoop's normalized evidence boundary. Sentrux is not a runtime dependency;
+installation and analytics preferences remain user-managed. Quality evidence
+does not replace behavioral, security, performance, accessibility, review,
+publication, or production-readiness evidence.
+
 ## Executable Policy Protocol Integration
 
 ForgeLoop integrates executable verification rules directly into the lifecycle:

package/QUALITY_SCORECARD.md

@@ -15,6 +15,7 @@ policy are all present.
 | Portability | Node 20/22/24 Linux depth, OS smoke coverage, path/line-ending fixtures, and adapter compatibility evidence. |
 | Observability | `inspect`/`status`/`validate-protocol` shared derived state classification, real schema health, shared evidence, rich doctor findings, receipts, and no telemetry. |
 | Completion enforcement | Canonical contract, persisted route, guide-declared gates, preflight, phase ledger, structured checks, evidence coverage, `audit`, `report`, and `complete` validators. |
+| Structural quality feedback | Provider-neutral baseline and delta policy, five root-cause scores, typed task artifacts, bounded Sentrux MCP adapter, gate/observe semantics, and corrective lifecycle integration. |
 | Agent lifecycle navigation | Read-only `forgeloop next` decisions, stable action/reason output, persisted-state safety, and adapter guidance at lifecycle boundaries. |
 | Execution → Verification handoff | Legal `EXECUTING` → `VERIFYING` transition, implementation-step reconciliation, and preservation of verification evidence. |
 | Pre-contract autonomy — structural | Blocking vs Non-Blocking Decisions policy, classify-before-ask invariant, PRE-QUESTION CHECK, explicit ASSUMPTION / source=agent-default recording, contract-before-clarification ordering, deterministic reason-code helper, and positive/negative tests. |
@@ -101,6 +102,7 @@ are both present:
 | Security boundary | realpath containment, bounded JSON, `THREAT_MODEL.md`, secret-free artifacts, authority and no-runtime rules | `tests/security-limits.test.js`, Markdown/loop validators, and `scripts/scan_secrets.py` |
 | Cross-artifact conformance | `src/core/conformance.js`, `classifyLoadedWorkState`, and `forgeloop validate-protocol --contract-file` | `tests/conformance.test.js`, `tests/validate-protocol-cli.test.js`, and protocol fixtures covering precedence and stale evidence |
 | Protocol preparation and completion | `src/core/preflight.js`, `src/core/completion.js`, `src/core/events.js`, policy packs, and portable bundles | `tests/preflight.test.js`, `tests/completion.test.js`, `tests/lifecycle.test.js`, `tests/policy.test.js`, and `tests/bundle.test.js` |
+| Structural quality feedback | `docs/STRUCTURAL_QUALITY.md`, `LOOP_ENGINEERING.md`, `src/core/structural-quality/`, quality CLI commands, lifecycle projections, and `schemas/structural-quality.schema.json` | Structural-quality policy, provider, lifecycle, Sentrux adapter, artifact, bundle, and real-provider E2E tests; local Sentrux 0.5.7 cycle-regression scenario verified |
 | Protocol activation resumability | `src/core/resumability.js`, READY consistency checks, event matrix, and `next` repair semantics | `tests/resumable-protocol.test.js` |
 | Hidden kit layout | `src/core/target-layout.js`, safe init/update migration, manifest layout version, native shims, and profile resolver | `tests/hidden-layout.test.js`, package and compatibility tests |
 | Contextual frontend taste | `ENG/taste-frontend-eng.md`, router metadata, attribution, and design/accessibility precedence | `tests/taste-guide.test.js`, route fixtures |

package/README.md

@@ -36,6 +36,7 @@ relevant guides.
 - **CLI command reference** → [`docs/CLI_REFERENCE.md`](./docs/CLI_REFERENCE.md)
 - **Artifact & schema reference** → [`docs/ARTIFACT_REFERENCE.md`](./docs/ARTIFACT_REFERENCE.md)
 - **Operational recipes** → [`docs/RECIPES.md`](./docs/RECIPES.md)
+- **Structural quality feedback** → [`docs/STRUCTURAL_QUALITY.md`](./docs/STRUCTURAL_QUALITY.md)
 - **Troubleshooting & error codes** → [`docs/TROUBLESHOOTING.md`](./docs/TROUBLESHOOTING.md)
 - **Code attestation & revision coverage** → [`docs/CODE_ATTESTATION.md`](./docs/CODE_ATTESTATION.md)
 - **System architecture & safety** → [`LOOP_SYSTEM_DESIGN.md`](./LOOP_SYSTEM_DESIGN.md) & [`THREAT_MODEL.md`](./THREAT_MODEL.md)
@@ -70,6 +71,7 @@ changed the repository.
 | Accessibility | [`ENG/accessibility-eng.md`](./ENG/accessibility-eng.md) |
 | Web games | [`ENG/games-code-design-web-eng.md`](./ENG/games-code-design-web-eng.md) |
 | Documentation quality | [`ENG/documentation-quality-eng.md`](./ENG/documentation-quality-eng.md) |
+| Structural quality feedback | [`docs/STRUCTURAL_QUALITY.md`](./docs/STRUCTURAL_QUALITY.md) |
 
 Each guide declares its name, language, version, and review date in
 frontmatter. Repository validators keep the catalog and metadata synchronized.
@@ -124,6 +126,15 @@ does not prove authorship or absolute security. See
 [`docs/CODE_ATTESTATION.md`](./docs/CODE_ATTESTATION.md) for configuration,
 read-only verification, signatures, and revision-range coverage.
 
+### Optional structural quality feedback
+
+Projects may enable a provider-neutral structural-quality comparison. Capture
+an immutable baseline before execution, verify the current cycle, and let the
+configured `off`, `observe`, or `gate` mode determine whether the result is
+informational or completion-required. Sentrux is an optional user-managed
+sensor, not a ForgeLoop dependency or a universal software-quality score. See
+[`docs/STRUCTURAL_QUALITY.md`](./docs/STRUCTURAL_QUALITY.md).
+
 ### Optional task boundaries and differential verification
 
 Workspace binding, immutable handoff envelopes, and responsibility contracts

package/THREAT_MODEL.md

@@ -124,6 +124,30 @@ provide a universal exactly-once guarantee.
 | Signature confusion | A plain digest or platform publication signal is presented as a cryptographic signature | External signing-provider boundary | `ATTESTED` requires a valid external signature under the requested signer policy; private keys and tokens never enter persisted artifacts | Trust in the external signer and transparency infrastructure remains outside ForgeLoop | `tests/signing-provider.test.js` |
 | Incomplete revision coverage | A changed source path has no valid task attestation or overlaps another task with a conflicting digest | Provider-neutral range coverage evaluator | Changed, covered, uncovered, and overlapping paths are computed from the selected revision provider; enforcement fails closed on gaps or conflicts | Coverage is limited to the provider's observable revision/content boundary | `tests/attestation-coverage.test.js`, `tests/generic-ci-attestation.test.js` |
 
+## Structural-quality provider boundary
+
+Structural-quality observations are untrusted external data. The built-in
+adapter fixes the executable name to `sentrux`, passes `--mcp` with
+`shell: false`, validates the MCP handshake and minimum version, bounds
+combined stdout/stderr, and terminates a hung process. Project configuration
+cannot choose an executable path, shell fragment, arbitrary arguments, or a
+score. Runtime hosts may inject a provider only through the typed integration
+context.
+
+| Threat | Mitigation | Residual limitation | Test evidence |
+| --- | --- | --- | --- |
+| Malicious config launches `./sentrux` or another arbitrary executable | Config normalization rejects executable/argv/shell fields; built-in resolution uses the fixed `sentrux` command and shell-free spawn | A privileged host can launch its own process outside ForgeLoop | `tests/sentrux-structural-quality-provider.test.js` |
+| PATH resolves an unexpected executable | Provider/version/transport identity is recorded and the provider boundary remains explicit; portable artifacts omit absolute executable paths | PATH itself is host-managed and cannot prove binary provenance | `tests/sentrux-structural-quality-provider.test.js` |
+| Provider hangs, floods stdout/stderr, or sends malformed JSON-RPC | Monotonic request IDs, strict response validation, bounded output, timeout, SIGTERM, and bounded forced termination fail closed | A hostile process may still consume resources until the OS releases it | `tests/sentrux-structural-quality-provider.test.js` |
+| Provider leaks confidential fields or outside-project paths | Normalization applies secret scanning, string/list limits, project containment, and safe relative paths before persistence | Unknown encodings may require host-level review | `tests/structural-quality-provider.test.js` |
+| Provider version or provider configuration changes after baseline | Version, provider-config, policy, route, contract, and scope fingerprints bind baseline/current comparison; incompatible drift is incomparable | External files can change again after validation; architecture-rule provenance is intentionally a separate sensor | `tests/structural-quality-lifecycle.test.js`, `tests/structural-quality-policy.test.js` |
+| Agent launders a regression by replacing the baseline | Replacement is allowed only before `EXECUTING`; superseded fingerprints remain in the ledger | A separately privileged actor can rewrite all local artifacts | `tests/structural-quality-artifacts.test.js` |
+| Bundle quality evidence is tampered | Bundle import revalidates typed artifacts, bindings, fingerprints, cycle, and check references without rescanning | Local consistency is not remote attestation | `tests/structural-quality-bundle.test.js` |
+| Observe or diagnostic absence is misreported as success | Unavailable evidence maps to `NOT_OBSERVED`, absent diagnostics remain `null`, and only gate PASS satisfies the quality requirement | Provider capability still determines diagnostic detail | `tests/structural-quality-lifecycle.test.js`, `tests/sentrux-structural-quality-provider.test.js` |
+
+ForgeLoop never changes Sentrux analytics preferences, installs the provider,
+or treats Sentrux Free diagnostics as necessary for score correctness.
+
 ## Boundary rules
 
 - Safe paths are checked before reading or writing; no protocol field is a

package/completions/_forgeloop

@@ -1,7 +1,7 @@
 #compdef forgeloop
 # Generated by scripts/generate-shell-completions.mjs. Do not edit.
 _arguments \
-  '1:command:(action-authorize action-propose action-reconcile action-record action-show action-verify activate advance approval-request approval-resolve attestation-create attestation-status attestation-verify attestation-verify-range audit baseline bundle clear-continuity clear-state complete continuity doctor efficiency eval handoff-create handoff-list handoff-show history init inspect metrics migrate-protocol next policy policy-diff policy-discover policy-status preflight prepare-completion profile-interview progress protocol-info reconcile-closure reconcile-continuity record-check record-continuity record-decision-criterion record-diagnosis record-hypothesis-disposition record-intervention record-terminal-result reflect report responsibility-set responsibility-status route rule-verify run-action run-check status task-create task-list task-lock-status task-migrate task-recover task-repair-legacy-recovery task-resume task-scope task-show task-unlock trace update usage-record validate-protocol validate-receipt validate-state verify-scope workspace-bind workspace-status)' \
+  '1:command:(action-authorize action-propose action-reconcile action-record action-show action-verify activate advance approval-request approval-resolve attestation-create attestation-status attestation-verify attestation-verify-range audit baseline bundle clear-continuity clear-state complete continuity doctor efficiency eval handoff-create handoff-list handoff-show history init inspect metrics migrate-protocol next policy policy-diff policy-discover policy-status preflight prepare-completion profile-interview progress protocol-info quality-baseline quality-status quality-verify reconcile-closure reconcile-continuity record-check record-continuity record-decision-criterion record-diagnosis record-hypothesis-disposition record-intervention record-terminal-result reflect report responsibility-set responsibility-status route rule-verify run-action run-check status task-create task-list task-lock-status task-migrate task-recover task-repair-legacy-recovery task-resume task-scope task-show task-unlock trace update usage-record validate-protocol validate-receipt validate-state verify-scope workspace-bind workspace-status)' \
   '*::options:->options'
 case $words[2] in
   action-authorize) _arguments '--action[durable action ID]' '--approval[current fingerprint-bound approval]' '--help[show this help]' '--json[emit structured output as JSON]' '--path[target project directory (default: current directory)]' '--task[task ID to operate on (when omitted, resolved from context or single active task)]' '--version[show the installed package version]' ;;
@@ -46,6 +46,9 @@ case $words[2] in
   profile-interview) _arguments '--dry-run[show planned interview questions without changing files]' '--help[show this help]' '--json[emit structured output as JSON]' '--path[target project directory (default: current directory)]' '--version[show the installed package version]' ;;
   progress) _arguments '--help[show this help]' '--json[emit progress evaluation as JSON]' '--path[target project directory (default: current directory)]' '--task[task ID to operate on (when omitted, resolved from context or single active task)]' '--version[show the installed package version]' ;;
   protocol-info) _arguments '--help[show this help]' '--json[emit complete machine-readable protocol metadata]' '--path[target project directory (default: current directory)]' '--version[show the installed package version]' ;;
+  quality-baseline) _arguments '--help[show this help]' '--json[emit baseline result as JSON]' '--path[target project directory (default: current directory)]' '--replace[replace a different baseline before EXECUTING]' '--task[task ID to operate on (when omitted, resolved from context or single active task)]' '--timeout-ms[bounded analyzer timeout in milliseconds]' '--version[show the installed package version]' ;;
+  quality-status) _arguments '--help[show this help]' '--json[emit persisted structural-quality status as JSON]' '--path[target project directory (default: current directory)]' '--task[task ID to operate on (when omitted, resolved from context or single active task)]' '--version[show the installed package version]' ;;
+  quality-verify) _arguments '--help[show this help]' '--json[emit structural-quality verification as JSON]' '--path[target project directory (default: current directory)]' '--task[task ID to operate on (when omitted, resolved from context or single active task)]' '--timeout-ms[bounded analyzer timeout in milliseconds]' '--version[show the installed package version]' ;;
   reconcile-closure) _arguments '--[exact command argv to execute as objective-satisfaction evidence]' '--details[additional structured execution details]' '--help[show this help]' '--id[contract verification item id used as evidence]' '--json[emit structured output as JSON]' '--path[target project directory (default: current directory)]' '--requirement[exact contract verification item requirement text]' '--task[task ID to operate on (when omitted, resolved from context or single active task)]' '--version[show the installed package version]' ;;
   reconcile-continuity) _arguments '--help[show this help]' '--json[emit structured output as JSON]' '--path[target project directory (default: current directory)]' '--task[task ID to operate on (when omitted, resolved from context or single active task)]' '--version[show the installed package version]' ;;
   record-check) _arguments '--command[recorded only as metadata; it is never executed]' '--details[additional structured check details]' '--evidence-kind[OBSERVED, INFERRED, NOT_VERIFIED, or BLOCKED]' '--execution-ref[ForgeLoop execution artifact reference]' '--exit-code[observed process exit code]' '--help[show this help]' '--id[stable check identifier]' '--json[emit structured output as JSON]' '--kind[check kind (default: command; use manual-review for manual evidence)]' '--path[target project directory (default: current directory)]' '--provenance[FORGELOOP_EXECUTED, ACTOR_REPORTED, or MANUAL_OBSERVATION]' '--requirement[completion requirement covered by the check]' '--result[observed result supplied by the actor]' '--status[passed, failed, blocked, or not-run]' '--task[task ID to operate on (when omitted, resolved from context or single active task)]' '--version[show the installed package version]' ;;

package/completions/forgeloop.bash

@@ -48,6 +48,9 @@ _forgeloop() {
       profile-interview) command="profile-interview" ;;
       progress) command="progress" ;;
       protocol-info) command="protocol-info" ;;
+      quality-baseline) command="quality-baseline" ;;
+      quality-status) command="quality-status" ;;
+      quality-verify) command="quality-verify" ;;
       reconcile-closure) command="reconcile-closure" ;;
       reconcile-continuity) command="reconcile-continuity" ;;
       record-check) command="record-check" ;;
@@ -88,7 +91,7 @@ _forgeloop() {
     esac
   done
   if [[ -z "\${command}" && "\${cur}" != -* ]]; then
-    COMPREPLY=( $(compgen -W 'action-authorize action-propose action-reconcile action-record action-show action-verify activate advance approval-request approval-resolve attestation-create attestation-status attestation-verify attestation-verify-range audit baseline bundle clear-continuity clear-state complete continuity doctor efficiency eval handoff-create handoff-list handoff-show history init inspect metrics migrate-protocol next policy policy-diff policy-discover policy-status preflight prepare-completion profile-interview progress protocol-info reconcile-closure reconcile-continuity record-check record-continuity record-decision-criterion record-diagnosis record-hypothesis-disposition record-intervention record-terminal-result reflect report responsibility-set responsibility-status route rule-verify run-action run-check status task-create task-list task-lock-status task-migrate task-recover task-repair-legacy-recovery task-resume task-scope task-show task-unlock trace update usage-record validate-protocol validate-receipt validate-state verify-scope workspace-bind workspace-status' -- "$cur") )
+    COMPREPLY=( $(compgen -W 'action-authorize action-propose action-reconcile action-record action-show action-verify activate advance approval-request approval-resolve attestation-create attestation-status attestation-verify attestation-verify-range audit baseline bundle clear-continuity clear-state complete continuity doctor efficiency eval handoff-create handoff-list handoff-show history init inspect metrics migrate-protocol next policy policy-diff policy-discover policy-status preflight prepare-completion profile-interview progress protocol-info quality-baseline quality-status quality-verify reconcile-closure reconcile-continuity record-check record-continuity record-decision-criterion record-diagnosis record-hypothesis-disposition record-intervention record-terminal-result reflect report responsibility-set responsibility-status route rule-verify run-action run-check status task-create task-list task-lock-status task-migrate task-recover task-repair-legacy-recovery task-resume task-scope task-show task-unlock trace update usage-record validate-protocol validate-receipt validate-state verify-scope workspace-bind workspace-status' -- "$cur") )
     return
   fi
   case "\${command}" in
@@ -134,6 +137,9 @@ _forgeloop() {
     profile-interview) COMPREPLY=( $(compgen -W '--dry-run --help --json --path --version' -- "$cur") );;
     progress) COMPREPLY=( $(compgen -W '--help --json --path --task --version' -- "$cur") );;
     protocol-info) COMPREPLY=( $(compgen -W '--help --json --path --version' -- "$cur") );;
+    quality-baseline) COMPREPLY=( $(compgen -W '--help --json --path --replace --task --timeout-ms --version' -- "$cur") );;
+    quality-status) COMPREPLY=( $(compgen -W '--help --json --path --task --version' -- "$cur") );;
+    quality-verify) COMPREPLY=( $(compgen -W '--help --json --path --task --timeout-ms --version' -- "$cur") );;
     reconcile-closure) COMPREPLY=( $(compgen -W '-- --details --help --id --json --path --requirement --task --version' -- "$cur") );;
     reconcile-continuity) COMPREPLY=( $(compgen -W '--help --json --path --task --version' -- "$cur") );;
     record-check) COMPREPLY=( $(compgen -W '--command --details --evidence-kind --execution-ref --exit-code --help --id --json --kind --path --provenance --requirement --result --status --task --version' -- "$cur") );;

package/completions/forgeloop.fish

@@ -1,5 +1,5 @@
 # Generated by scripts/generate-shell-completions.mjs. Do not edit.
-complete -c forgeloop -f -n '__fish_use_subcommand' -a 'action-authorize action-propose action-reconcile action-record action-show action-verify activate advance approval-request approval-resolve attestation-create attestation-status attestation-verify attestation-verify-range audit baseline bundle clear-continuity clear-state complete continuity doctor efficiency eval handoff-create handoff-list handoff-show history init inspect metrics migrate-protocol next policy policy-diff policy-discover policy-status preflight prepare-completion profile-interview progress protocol-info reconcile-closure reconcile-continuity record-check record-continuity record-decision-criterion record-diagnosis record-hypothesis-disposition record-intervention record-terminal-result reflect report responsibility-set responsibility-status route rule-verify run-action run-check status task-create task-list task-lock-status task-migrate task-recover task-repair-legacy-recovery task-resume task-scope task-show task-unlock trace update usage-record validate-protocol validate-receipt validate-state verify-scope workspace-bind workspace-status'
+complete -c forgeloop -f -n '__fish_use_subcommand' -a 'action-authorize action-propose action-reconcile action-record action-show action-verify activate advance approval-request approval-resolve attestation-create attestation-status attestation-verify attestation-verify-range audit baseline bundle clear-continuity clear-state complete continuity doctor efficiency eval handoff-create handoff-list handoff-show history init inspect metrics migrate-protocol next policy policy-diff policy-discover policy-status preflight prepare-completion profile-interview progress protocol-info quality-baseline quality-status quality-verify reconcile-closure reconcile-continuity record-check record-continuity record-decision-criterion record-diagnosis record-hypothesis-disposition record-intervention record-terminal-result reflect report responsibility-set responsibility-status route rule-verify run-action run-check status task-create task-list task-lock-status task-migrate task-recover task-repair-legacy-recovery task-resume task-scope task-show task-unlock trace update usage-record validate-protocol validate-receipt validate-state verify-scope workspace-bind workspace-status'
 complete -c forgeloop -f -n '__fish_seen_subcommand_from action-authorize' -l 'action' -d 'durable action ID'
 complete -c forgeloop -f -n '__fish_seen_subcommand_from action-authorize' -l 'approval' -d 'current fingerprint-bound approval'
 complete -c forgeloop -f -n '__fish_seen_subcommand_from action-authorize' -l 'help' -d 'show this help'
@@ -279,6 +279,24 @@ complete -c forgeloop -f -n '__fish_seen_subcommand_from protocol-info' -l 'help
 complete -c forgeloop -f -n '__fish_seen_subcommand_from protocol-info' -l 'json' -d 'emit complete machine-readable protocol metadata'
 complete -c forgeloop -f -n '__fish_seen_subcommand_from protocol-info' -l 'path' -d 'target project directory (default: current directory)'
 complete -c forgeloop -f -n '__fish_seen_subcommand_from protocol-info' -l 'version' -d 'show the installed package version'
+complete -c forgeloop -f -n '__fish_seen_subcommand_from quality-baseline' -l 'help' -d 'show this help'
+complete -c forgeloop -f -n '__fish_seen_subcommand_from quality-baseline' -l 'json' -d 'emit baseline result as JSON'
+complete -c forgeloop -f -n '__fish_seen_subcommand_from quality-baseline' -l 'path' -d 'target project directory (default: current directory)'
+complete -c forgeloop -f -n '__fish_seen_subcommand_from quality-baseline' -l 'replace' -d 'replace a different baseline before EXECUTING'
+complete -c forgeloop -f -n '__fish_seen_subcommand_from quality-baseline' -l 'task' -d 'task ID to operate on (when omitted, resolved from context or single active task)'
+complete -c forgeloop -f -n '__fish_seen_subcommand_from quality-baseline' -l 'timeout-ms' -d 'bounded analyzer timeout in milliseconds'
+complete -c forgeloop -f -n '__fish_seen_subcommand_from quality-baseline' -l 'version' -d 'show the installed package version'
+complete -c forgeloop -f -n '__fish_seen_subcommand_from quality-status' -l 'help' -d 'show this help'
+complete -c forgeloop -f -n '__fish_seen_subcommand_from quality-status' -l 'json' -d 'emit persisted structural-quality status as JSON'
+complete -c forgeloop -f -n '__fish_seen_subcommand_from quality-status' -l 'path' -d 'target project directory (default: current directory)'
+complete -c forgeloop -f -n '__fish_seen_subcommand_from quality-status' -l 'task' -d 'task ID to operate on (when omitted, resolved from context or single active task)'
+complete -c forgeloop -f -n '__fish_seen_subcommand_from quality-status' -l 'version' -d 'show the installed package version'
+complete -c forgeloop -f -n '__fish_seen_subcommand_from quality-verify' -l 'help' -d 'show this help'
+complete -c forgeloop -f -n '__fish_seen_subcommand_from quality-verify' -l 'json' -d 'emit structural-quality verification as JSON'
+complete -c forgeloop -f -n '__fish_seen_subcommand_from quality-verify' -l 'path' -d 'target project directory (default: current directory)'
+complete -c forgeloop -f -n '__fish_seen_subcommand_from quality-verify' -l 'task' -d 'task ID to operate on (when omitted, resolved from context or single active task)'
+complete -c forgeloop -f -n '__fish_seen_subcommand_from quality-verify' -l 'timeout-ms' -d 'bounded analyzer timeout in milliseconds'
+complete -c forgeloop -f -n '__fish_seen_subcommand_from quality-verify' -l 'version' -d 'show the installed package version'
 complete -c forgeloop -f -n '__fish_seen_subcommand_from reconcile-closure' -l '' -d 'exact command argv to execute as objective-satisfaction evidence'
 complete -c forgeloop -f -n '__fish_seen_subcommand_from reconcile-closure' -l 'details' -d 'additional structured execution details'
 complete -c forgeloop -f -n '__fish_seen_subcommand_from reconcile-closure' -l 'help' -d 'show this help'

package/docs/AGENT_PROTOCOL_SUMMARY.md

@@ -7,7 +7,7 @@
 ForgeLoop is a portable protocol and support CLI for verifiable engineering workflows. It records and validates task state, contracts, routing, checks, evidence, continuity, and optional code attestations. It does not become an agent scheduler, delegation service, source-control authority, or secret manager.
 
 Protocol version: 1
-Package version: 1.8.0
+Package version: 1.9.0
 
 ## Canonical loop
 
@@ -90,6 +90,7 @@ Phases: RECEIVED, DISCOVERING, CONTRACT_READY, ROUTED, DESIGNING, PLANNED, EXECU
 | observabilityStability | n/a | yes |
 | reflection | 1 | yes |
 | responsibilityConstraints | 1 | yes |
+| structuralQuality | 1 | yes |
 | structuredTrace | 1 | yes |
 | taskClaimRecovery | 1 | yes |
 | taskInspection | 1 | yes |
@@ -131,6 +132,7 @@ Phases: RECEIVED, DISCOVERING, CONTRACT_READY, ROUTED, DESIGNING, PLANNED, EXECU
 | session | SESSION | .forgeloop/sessions/<session-id>.json | activation | SESSION_MARKER |
 | sources | PROJECT | .forgeloop/sources.json | source-registry | SOURCE_ATTESTATION |
 | state | TASK | .forgeloop/task-state/<task-key>/work-state.json | work-state | CANONICAL_LIFECYCLE_STATE |
+| structuralQuality | TASK | .forgeloop/task-state/<task-key>/structural-quality/baseline.json | structural-quality | STRUCTURAL_QUALITY_EVIDENCE |
 | usage | TASK | .forgeloop/task-state/<task-key>/usage.json | usage | INFORMATIONAL_USAGE_TELEMETRY |
 | verificationScope | TASK | .forgeloop/task-state/<task-key>/verification-scope.json | verification-scope | VERIFICATION_SCOPE_PLAN |
 | workspaceBinding | TASK | .forgeloop/task-state/<task-key>/workspace-binding.json | workspace-binding | WORKSPACE_IDENTITY_BINDING |
@@ -252,6 +254,9 @@ Phases: RECEIVED, DISCOVERING, CONTRACT_READY, ROUTED, DESIGNING, PLANNED, EXECU
 | --- | --- | --- |
 | audit | READ_ONLY | Performs read-only evaluation of verification receipt coverage and gate satisfaction. |
 | prepare-completion | MUTATING | Initializes execution-receipt.json with empty requirement evidence slots for the active cycle. |
+| quality-baseline | EXTERNAL_EXECUTION | Captures an immutable provider-neutral structural-quality baseline through the trusted analyzer adapter. |
+| quality-status | READ_ONLY | Projects persisted structural-quality baseline and evaluation status without invoking a provider. |
+| quality-verify | EXTERNAL_EXECUTION | Captures one bounded structural-quality evaluation and projects it into canonical verification evidence. |
 | record-check | MUTATING | Records structured verification evidence (command, manual review, or test output) against a requirement. |
 | record-terminal-result | MUTATING | Records external terminal result evidence (PUBLICATION or PRODUCTION_READINESS) into receipt. |
 | report | READ_ONLY | Emits a human-readable or structured JSON summary report of protocol state. |