@christang/keel 5.3.1 → 5.3.3

package/assets/bootstrap/AGENTS.md

@@ -1,4 +1,4 @@
-<!-- keel:start version=5.3.1 -->
+<!-- keel:start version=5.3.3 -->
 ## Keel Bootstrap
 
 - Start every session with `keel context`; OpenSpec artifacts and Git are the only durable authority — never native memory, goals, or transcripts.

package/assets/openspec/schemas/keel-spec-driven/schema.yaml

@@ -139,8 +139,18 @@ artifacts:
       are `none` or carry a durable owner — a `Discard reason:`/`Discard
       rationale:` prefix, a `keel/archive/…` path, or an existing
       `openspec/changes/…` artifact; `keel/HANDOFF.md` is never the owner.
-      tasks.md ends with a `## Expectation Coverage` section that change-close
-      requires: one `- E<n>: <expectation> Covered by: <task ids>` line per
+      tasks.md carries two change-level sections beside its tasks.
+      `## Invalidates` is required by task-start, before any task of the
+      change runs: one `- I<n>: "the wording that is now wrong" — where it lives.`
+      line per statement this change makes stale, closed by `Updated by: <task
+      ids>` naming tasks of this change, a `Durable owner:`, or a `Discard
+      reason:`, or `- None.` when the change makes no existing statement wrong.
+      Quote the wording a reader would search for rather than only listing
+      files, because the text that goes stale is the text the author was not
+      already holding in mind; naming it while tasks are authored is what lets
+      the affected paths be declared in Touch instead of forcing a
+      reauthorization mid-task. `## Expectation Coverage` is required by
+      change-close: one `- E<n>: <expectation> Covered by: <task ids>` line per
       critical expectation (or a `Durable owner:` / `Discard reason:` closure),
       or `- None.` when the change has no critical expectations.
     requires:

package/assets/openspec/schemas/keel-spec-driven/templates/tasks.md

@@ -76,6 +76,22 @@
       - Findings: pending
     - Blocker: none
 
+## Invalidates
+
+<!-- task-start requires this section before any task of this change runs, so
+     the statements this change makes stale can be named while their paths can
+     still be declared in Touch instead of forcing a reauthorization later.
+     Each entry quotes the wording a reader would SEARCH for — not just the
+     files you already remembered, because the text that goes stale is the text
+     you were not thinking about — then says where it lives, then closes:
+     `Updated by: 1.1` (tasks of this change), `Durable owner: <url or path>`,
+     or `Discard reason: why it stands`. Use `- None.` when this change makes
+     no existing statement wrong.
+
+     - I1: "the exact wording that is now wrong" — where that wording lives. Updated by: 1.1
+     -->
+- None.
+
 ## Expectation Coverage
 
 <!-- change-close requires this section. One line per critical expectation:

package/package.json

@@ -2,7 +2,7 @@
   "name": "@christang/keel",
   "displayName": "Keel",
   "description": "Keel OpenSpec execution discipline CLI for Claude Code, Codex, and OpenCode.",
-  "version": "5.3.1",
+  "version": "5.3.3",
   "license": "MIT",
   "repository": {
     "type": "git",

package/plugins/keel/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "keel",
-  "version": "5.3.1",
+  "version": "5.3.3",
   "description": "Keel OpenSpec execution discipline: stateless continuity, task capsules, deterministic gates, and expectation alignment for Codex and Claude Code.",
   "author": {
     "name": "TanglmChris",

package/plugins/keel/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "keel",
-  "version": "5.3.1",
+  "version": "5.3.3",
   "description": "Keel OpenSpec execution discipline: stateless continuity, task capsules, deterministic gates, and expectation alignment for Codex and Claude Code.",
   "author": {
     "name": "TanglmChris",

package/plugins/keel/scripts/session-start.js

@@ -15,6 +15,11 @@ const fs = require("fs");
 const path = require("path");
 const { spawnSync } = require("child_process");
 
+// This text is injected into the agent and never rendered for the human, so
+// without an explicit instruction the projection reaches nobody who can catch
+// it being wrong. Every branch carries the same phrase, degraded ones included.
+const DISCLOSURE = "to the user in your first reply";
+
 const TIMEOUT_MS = Number(process.env.KEEL_HOOK_TIMEOUT_MS || 8000) || 8000;
 const MAX_REASONS = 3;
 const MAX_REASON_LENGTH = 300;
@@ -51,7 +56,8 @@ function runKeel(cwd, args) {
 function fallback(reason) {
   emit(
     `Keel hook fallback: ${reason} Run \`keel context\` manually; `
-      + "OpenSpec and Git remain the durable authority."
+      + "OpenSpec and Git remain the durable authority. Report this failure "
+      + `and that command ${DISCLOSURE}.`
   );
 }
 
@@ -145,6 +151,7 @@ function main() {
         + "does not guess among candidates."
     );
   }
+  lines.push(`- report this state ${DISCLOSURE}; it authorizes nothing.`);
   emit(lines.join("\n"));
   return 0;
 }

package/scripts/validate_plugin.py

@@ -37,8 +37,8 @@ REQUIRED_SCRIPTS = [
     "scripts/validate_plugin.py",
 ]
 
-PACKAGE_VERSION = "5.3.1"
-PROTOCOL_VERSION = "5.3.1"
+PACKAGE_VERSION = "5.3.3"
+PROTOCOL_VERSION = "5.3.3"
 LEGACY_MANAGED_START = "<!-- keel:start version=2.1 -->"
 OPENSPEC_SCHEMA_NAME = "keel-spec-driven"
 OPENSPEC_CONFIG_PATH = Path("openspec/config.yaml")
@@ -1758,7 +1758,7 @@ def validate_authoring_continuity_scenario() -> int:
             change_root / "specs/demo/spec.md",
             "## ADDED Requirements\n",
         )
-        write_text(change_root / "tasks.md", "# Tasks\n\n## Tasks\n")
+        write_text(change_root / "tasks.md", "# Tasks\n\n## Invalidates\n\n- None.\n\n## Tasks\n")
         invalid = run_keel(invalid_repo, "context", "--json")
         invalid_payload = json.loads(invalid.stdout)
         if (
@@ -2527,7 +2527,9 @@ def write_gate_fixture(repo: Path, tasks: str, design: str = "## Context\n\nfixt
     change = repo / "openspec/changes/demo"
     write_text(
         change / "tasks.md",
-        "# Tasks\n\n"
+        "# Tasks\n\n## Invalidates\n\n- None.\n\n"
+        "## Invalidates\n\n"
+        "- None.\n\n"
         "## Expectation Coverage\n\n"
         "- E1:\n"
         "  - Covered by: 1.1\n\n"
@@ -2625,7 +2627,7 @@ def validate_cli_scenario() -> int:
 
         write_text(
             repo / "openspec/changes/status-drift/tasks.md",
-            "# Tasks\n\n"
+            "# Tasks\n\n## Invalidates\n\n- None.\n\n"
             "## Tasks\n\n"
             "- [x] A1 implementation **未提交**\n\n"
             "## Execution Status\n\n"
@@ -2648,7 +2650,7 @@ def validate_cli_scenario() -> int:
 
         write_text(
             repo / "openspec/changes/status-drift/tasks.md",
-            "# Tasks\n\n"
+            "# Tasks\n\n## Invalidates\n\n- None.\n\n"
             "> Boundary: tasks.md is the source for the current change's slice checklist and logical completion only. Completion state is only `[x]` / `[ ]`; progress and the default next slice are derived from the checklist. Do not record commit hashes, branch/merge state, dirty/uncommitted state, or manually computed completion counts. Durable work state belongs in OpenSpec; HANDOFF is only an explicit pointer override.\n\n"
             "## Tasks\n\n"
             "- [x] A1 implementation\n\n"
@@ -2666,7 +2668,7 @@ def validate_cli_scenario() -> int:
 
         write_text(
             repo / "openspec/changes/archive/2026-07-09-finished/tasks.md",
-            "# Tasks\n\n"
+            "# Tasks\n\n## Invalidates\n\n- None.\n\n"
             "- [x] A1 implementation\n\n"
             "## Evidence\n\n"
             "- Scope check: pre-existing dirty paths were not attributed to this task.\n",
@@ -2862,7 +2864,7 @@ def validate_stateless_continuity_scenario() -> int:
 
         write_text(
             repo / "openspec/changes/other/tasks.md",
-            "# Tasks\n\n- [ ] 1.1 Other task\n",
+            "# Tasks\n\n## Invalidates\n\n- None.\n\n- [ ] 1.1 Other task\n",
         )
         write_text(
             repo / "keel/HANDOFF.md",
@@ -2922,7 +2924,7 @@ def validate_stateless_continuity_scenario() -> int:
 
         write_text(
             tasks_path,
-            "# Tasks\n\n"
+            "# Tasks\n\n## Invalidates\n\n- None.\n\n"
             "- [x] 1.1 First slice\n"
             "- [x] 1.2 Second slice\n",
         )
@@ -3042,7 +3044,7 @@ def validate_stateless_continuity_scenario() -> int:
         stale_repo.mkdir()
         write_text(
             stale_repo / "openspec/changes/current/tasks.md",
-            "# Tasks\n\n- [ ] 1.1 Current task\n",
+            "# Tasks\n\n## Invalidates\n\n- None.\n\n- [ ] 1.1 Current task\n",
         )
         write_text(
             stale_repo / "keel/HANDOFF.md",
@@ -3067,7 +3069,7 @@ def validate_stateless_continuity_scenario() -> int:
 
         write_text(
             stale_repo / "openspec/changes/current/tasks.md",
-            "# Tasks\n\n- [x] 1.1 Current task\n",
+            "# Tasks\n\n## Invalidates\n\n- None.\n\n- [x] 1.1 Current task\n",
         )
         write_text(
             stale_repo / "keel/HANDOFF.md",
@@ -3094,7 +3096,7 @@ def validate_stateless_continuity_scenario() -> int:
 
         write_text(
             stale_repo / "openspec/changes/current/tasks.md",
-            "# Tasks\n\n- [ ] 1.1 Current task\n",
+            "# Tasks\n\n## Invalidates\n\n- None.\n\n- [ ] 1.1 Current task\n",
         )
         write_text(
             stale_repo / "keel/HANDOFF.md",
@@ -3439,7 +3441,7 @@ def task_contract_fixture(
     command_lines = "".join(f"    - {item}\n" for item in commands)
     evidence_lines = "".join(f"    - {item}\n" for item in evidence)
     return (
-        "# Tasks\n\n"
+        "# Tasks\n\n## Invalidates\n\n- None.\n\n"
         "- [ ] 1.1 Exercise task contract\n"
         "  - Owner: keel-agent\n"
         f"  - Mode: {mode}\n"
@@ -3476,6 +3478,246 @@ def task_contract_fixture(
     )
 
 
+# task-start requires a change to declare what it invalidates, so every fixture
+# that expects to start a task carries the cheapest legitimate answer. Scenarios
+# exercising the declaration itself replace this block.
+INVALIDATES_NONE = "## Invalidates\n\n- None.\n\n"
+
+
+INVALIDATION_ENTRIES = (
+    '- I1: "Touch is the write boundary" — assets/bootstrap/AGENTS.md.'
+    " Updated by: 1.1\n"
+    '- I2: "does not accept a GitHub issue URL" —'
+    " keel/archive/follow-ups/note.md."
+    " Discard reason: archive notes are historical evidence.\n"
+    '- I3: "the suite is not portable" — README.md.'
+    " Durable owner: https://example.invalid/issues/1\n"
+)
+
+
+def invalidation_repo(root: Path, name: str, section: str | None) -> Path:
+    repo = root / name
+    # A real Contract anchor, so the missing-section case can prove that a
+    # failing authoring gate leaves the anchor untouched rather than merely
+    # failing earlier for want of one.
+    body = task_contract_fixture(evidence=("Contract: pending", "M1: pending"))
+    body = body.replace(INVALIDATES_NONE, "" if section is None else section)
+    write_text(repo / "openspec/changes/demo/tasks.md", body)
+    return repo
+
+
+def validate_task_start_invalidation_scenario() -> int:
+    label = "task-start-invalidation"
+
+    def gate(repo: Path, *extra: str) -> tuple[subprocess.CompletedProcess[str], dict]:
+        result = run_keel(
+            repo, "gate", "task-start", ".",
+            "--change", "demo", "--task", "1.1", "--json", *extra,
+        )
+        payload = json.loads(result.stdout) if result.stdout.strip() else {}
+        return result, payload
+
+    def codes(payload: dict) -> set[str]:
+        return {item.get("code") for item in payload.get("problems", [])}
+
+    def messages(payload: dict) -> str:
+        return " ".join(item.get("message", "") for item in payload.get("problems", []))
+
+    with tempfile.TemporaryDirectory(
+        prefix="keel-invalidation-", ignore_cleanup_errors=True
+    ) as raw:
+        tmp = Path(raw)
+
+        # A change that never answered the question cannot start, and the
+        # refusal writes nothing — the guard manifest and the Contract anchor
+        # are both withheld, so a failed authoring gate leaves no state behind.
+        missing = invalidation_repo(tmp, "missing", None)
+        tasks_before = (missing / "openspec/changes/demo/tasks.md").read_text(
+            encoding="utf-8"
+        )
+        result, payload = gate(missing, "--record")
+        if (
+            payload.get("status") != "fail"
+            or "invalidation-declaration" not in codes(payload)
+        ):
+            report(f"{label} accepted a change with no invalidation section.")
+            report(repr(payload.get("problems")))
+            return 1
+        if (missing / "keel/guard.json").exists():
+            report(f"{label} wrote a guard manifest for a failing authoring gate.")
+            return 1
+        if (missing / "openspec/changes/demo/tasks.md").read_text(
+            encoding="utf-8"
+        ) != tasks_before:
+            report(f"{label} recorded a Contract anchor for a failing gate.")
+            return 1
+
+        none_repo = invalidation_repo(tmp, "none", INVALIDATES_NONE)
+        _, none_payload = gate(none_repo, "--no-guard")
+        if none_payload.get("status") != "pass":
+            report(f"{label} refused a legitimate declaration of nothing.")
+            report(repr(none_payload.get("problems")))
+            return 1
+
+        full_repo = invalidation_repo(
+            tmp, "full", "## Invalidates\n\n" + INVALIDATION_ENTRIES + "\n"
+        )
+        _, full_payload = gate(full_repo, "--no-guard")
+        if full_payload.get("status") != "pass":
+            report(f"{label} refused well-formed entries covering all three closures.")
+            report(repr(full_payload.get("problems")))
+            return 1
+
+        # The declaration is change-level bookkeeping, not task authority: two
+        # changes whose tasks are byte-identical must compile the same capsule
+        # however differently they answered this question.
+        none_print = none_payload.get("contract", {}).get("fingerprint", {}).get("value")
+        full_print = full_payload.get("contract", {}).get("fingerprint", {}).get("value")
+        if not none_print or none_print != full_print:
+            report(
+                f"{label} let the invalidation section move the capsule "
+                f"fingerprint: {none_print} vs {full_print}"
+            )
+            return 1
+
+        # A location list only ever names files the author already recalled,
+        # which is the failure this section exists to prevent, so an entry
+        # without the searchable wording is refused.
+        no_phrase = invalidation_repo(
+            tmp,
+            "no-phrase",
+            "## Invalidates\n\n- I1: AGENTS.md and README.md. Updated by: 1.1\n\n",
+        )
+        _, no_phrase_payload = gate(no_phrase, "--no-guard")
+        if (
+            no_phrase_payload.get("status") != "fail"
+            or "I1" not in messages(no_phrase_payload)
+        ):
+            report(f"{label} accepted an entry with no searchable phrase.")
+            report(repr(no_phrase_payload.get("problems")))
+            return 1
+
+        unclosed = invalidation_repo(
+            tmp,
+            "unclosed",
+            '## Invalidates\n\n- I1: "Touch is the write boundary" — AGENTS.md.\n\n',
+        )
+        _, unclosed_payload = gate(unclosed, "--no-guard")
+        if (
+            unclosed_payload.get("status") != "fail"
+            or "I1" not in messages(unclosed_payload)
+        ):
+            report(f"{label} accepted an entry that never closed.")
+            report(repr(unclosed_payload.get("problems")))
+            return 1
+
+        unknown_owner = invalidation_repo(
+            tmp,
+            "unknown-task",
+            '## Invalidates\n\n- I1: "Touch is the write boundary" — AGENTS.md.'
+            " Updated by: 9.9\n\n",
+        )
+        _, unknown_payload = gate(unknown_owner, "--no-guard")
+        if unknown_payload.get("status") != "fail":
+            report(f"{label} accepted an updater task that does not exist.")
+            return 1
+
+        if not codes(payload):
+            report(f"{label} reported a failure with no problem code.")
+            return 1
+
+    report(f"{label} scenario passed.")
+    return 0
+
+
+SCHEMA_COPY_PAIRS = (
+    (
+        "openspec/schemas/keel-spec-driven/templates/tasks.md",
+        "assets/openspec/schemas/keel-spec-driven/templates/tasks.md",
+    ),
+    (
+        "openspec/schemas/keel-spec-driven/schema.yaml",
+        "assets/openspec/schemas/keel-spec-driven/schema.yaml",
+    ),
+)
+
+
+def validate_invalidation_authoring_surface_scenario() -> int:
+    label = "invalidation-authoring-surface"
+
+    # The two schema copies are the repo-local one OpenSpec resolves and the
+    # packaged one `keel --init` writes. compact-task-authoring already means to
+    # assert they agree, but its canonical root does not exist in this layout, so
+    # its rglob compares nothing; this states the pair explicitly.
+    for local, packaged in SCHEMA_COPY_PAIRS:
+        local_text = (ROOT / local).read_text(encoding="utf-8")
+        packaged_text = (ROOT / packaged).read_text(encoding="utf-8")
+        if local_text != packaged_text:
+            report(f"{label} schema copies diverge: {local} vs {packaged}")
+            return 1
+
+    template = (
+        ROOT / "openspec/schemas/keel-spec-driven/templates/tasks.md"
+    ).read_text(encoding="utf-8")
+    for marker in ("## Invalidates", "- None.", "- I1:"):
+        if marker not in template:
+            report(f"{label} tasks template lacks the invalidation section: {marker}")
+            return 1
+
+    schema = (
+        ROOT / "openspec/schemas/keel-spec-driven/schema.yaml"
+    ).read_text(encoding="utf-8")
+    for marker in ("## Invalidates", "Updated by:", "Discard reason:"):
+        if marker not in schema:
+            report(
+                f"{label} authoring instruction does not describe the "
+                f"invalidation section: {marker}"
+            )
+            return 1
+
+    resident = resident_session_start_section(ROOT / "AGENTS.md")
+    agents = (ROOT / "AGENTS.md").read_text(encoding="utf-8")
+    if resident is None:
+        report(f"{label} resident AGENTS.md has no Session Start section.")
+        return 1
+    for marker in ("## Invalidates", "## Expectation Coverage"):
+        if marker not in agents:
+            report(f"{label} resident protocol does not name {marker}.")
+            return 1
+
+    # An author who scaffolds and fills in the tasks must not additionally have
+    # to discover this section, so the template's own answer has to satisfy the
+    # gate. Placeholders are filled generically; the assertion is narrow on
+    # purpose — no invalidation problem may survive.
+    filled = re.sub(r"<!--[\s\S]*?-->", "", template)
+    filled = filled.replace("<strategy>", "evidence-first")
+    filled = re.sub(r"<[^<>\n]+>", "concrete authored value", filled)
+    with tempfile.TemporaryDirectory(
+        prefix="keel-invalidation-surface-", ignore_cleanup_errors=True
+    ) as raw:
+        repo = Path(raw) / "scaffold"
+        write_text(repo / "openspec/changes/demo/tasks.md", filled)
+        started = run_keel(
+            repo, "gate", "task-start", ".",
+            "--change", "demo", "--task", "1.1", "--json", "--no-guard",
+        )
+        payload = json.loads(started.stdout) if started.stdout.strip() else {}
+        offenders = [
+            item for item in payload.get("problems", [])
+            if str(item.get("code", "")).startswith("invalidation-")
+        ]
+        if offenders:
+            report(
+                f"{label} a filled-in scaffold still fails the invalidation "
+                "gate, so the template's own answer is not usable."
+            )
+            report(repr(offenders))
+            return 1
+
+    report(f"{label} scenario passed.")
+    return 0
+
+
 def validate_task_contract_core_scenario() -> int:
     with tempfile.TemporaryDirectory(prefix="keel-task-contract-") as raw_tmp:
         repo = Path(raw_tmp)
@@ -3720,7 +3962,7 @@ def task_capsule_expanded_fixture() -> str:
 
 def task_capsule_compact_fixture() -> str:
     return (
-        "# Tasks\n\n"
+        "# Tasks\n\n## Invalidates\n\n- None.\n\n"
         "- [ ] 1.1 Exercise task contract\n"
         "  - Covers:\n"
         "    - E1: Public behavior passes.\n"
@@ -4263,7 +4505,7 @@ TRACKER_OWNER = "https://github.com/TanglmChris/keel/issues/12"
 def tracker_owner_tasks(findings: str, closure: str) -> str:
     """One complete, checked task plus one Expectation Coverage closure line."""
     return (
-        "# Tasks\n\n"
+        "# Tasks\n\n## Invalidates\n\n- None.\n\n"
         "## Expectation Coverage\n\n"
         "- E1:\n"
         f"  - {closure}\n\n"
@@ -5167,7 +5409,7 @@ def validate_task_capsule_scenario() -> int:
 
         close_task = (
             completion_task
-            .replace("# Tasks\n\n", "# Tasks\n\n## Expectation Coverage\n\n"
+            .replace("# Tasks\n\n## Invalidates\n\n- None.\n\n", "# Tasks\n\n## Invalidates\n\n- None.\n\n## Expectation Coverage\n\n"
                      "- E1:\n  - Covered by: 1.1\n\n## 1. Work\n\n")
             .replace("- [ ] 1.1", "- [x] 1.1")
         )
@@ -5227,7 +5469,7 @@ def validate_core_gates_scenario() -> int:
         tasks_path = repo / "openspec/changes/demo/tasks.md"
         write_text(
             tasks_path,
-            "# Tasks\n\n"
+            "# Tasks\n\n## Invalidates\n\n- None.\n\n"
             "- [ ] 1.1 Incomplete task\n"
             "  - Owner: keel-agent\n",
         )
@@ -5262,7 +5504,7 @@ def validate_core_gates_scenario() -> int:
 
         write_text(
             tasks_path,
-            "# Tasks\n\n"
+            "# Tasks\n\n## Invalidates\n\n- None.\n\n"
             "- [ ] 1.1 Complete executable task\n"
             "  - Owner: keel-agent\n"
             "  - Mode: implementation\n"
@@ -5412,7 +5654,7 @@ def validate_core_gates_scenario() -> int:
             findings: str = "none",
         ) -> str:
             return (
-                "# Tasks\n\n"
+                "# Tasks\n\n## Invalidates\n\n- None.\n\n"
                 "- [ ] 1.1 Complete behavior\n"
                 "  - Owner: keel-agent\n"
                 "  - Mode: implementation\n"
@@ -5531,7 +5773,7 @@ def validate_core_gates_scenario() -> int:
         )
         write_text(
             completion_repo / "openspec/changes/follow-up/tasks.md",
-            "# Tasks\n\n- [ ] 1.1 Own the finding\n",
+            "# Tasks\n\n## Invalidates\n\n- None.\n\n- [ ] 1.1 Own the finding\n",
         )
         owned_finding = run_keel(
             completion_repo,
@@ -5849,7 +6091,7 @@ def validate_core_gates_scenario() -> int:
             if extra_touch:
                 touch += "    - src/extra.js\n"
             return (
-                "# Tasks\n\n"
+                "# Tasks\n\n## Invalidates\n\n- None.\n\n"
                 "- [ ] 1.1 Record behavior\n"
                 "  - Owner: keel-agent\n"
                 "  - Mode: implementation\n"
@@ -6067,7 +6309,7 @@ def validate_core_gates_scenario() -> int:
         def close_task(checked: bool, review_status: str = "pass") -> str:
             mark = "x" if checked else " "
             return (
-                "# Tasks\n\n"
+                "# Tasks\n\n## Invalidates\n\n- None.\n\n"
                 "## Expectation Coverage\n\n"
                 "- E1:\n"
                 "  - Covered by: 1.1\n\n"
@@ -6226,7 +6468,7 @@ def validate_core_gates_scenario() -> int:
 
 def validate_scope_rename_attribution_scenario() -> int:
     rename_task = (
-        "# Tasks\n\n"
+        "# Tasks\n\n## Invalidates\n\n- None.\n\n"
         "- [ ] 1.1 Complete behavior\n"
         "  - Owner: keel-agent\n"
         "  - Mode: implementation\n"
@@ -6429,7 +6671,7 @@ def validate_target_capability_adapters_scenario() -> int:
 
             write_text(
                 repo / "openspec/changes/demo/tasks.md",
-                "# Tasks\n\n- [ ] 1.1 Incomplete\n  - Owner: keel-agent\n",
+                "# Tasks\n\n## Invalidates\n\n- None.\n\n- [ ] 1.1 Incomplete\n  - Owner: keel-agent\n",
             )
             gate = run_keel(
                 repo,
@@ -6855,6 +7097,31 @@ def session_start_context(result: subprocess.CompletedProcess[str]) -> str | Non
     return output.get("additionalContext")
 
 
+# The projection is delivered through additionalContext, which the host injects
+# into the agent and never renders for the human. Every branch must therefore
+# carry the instruction to relay it, including — especially — the degraded ones,
+# because a projection nobody sees is a projection nobody checks.
+SESSION_START_DISCLOSURE = "to the user in your first reply"
+
+# A host loads its plugins once per session, so the projection can be absent for
+# reasons no repository check can see. The resident protocol is the carrier of
+# last resort and must state the same obligation without trading away the
+# continuity rules it already carried.
+RESIDENT_SESSION_START_REQUIRED = (
+    SESSION_START_DISCLOSURE,
+    "keel context",
+    "never infer continuity from native memory",
+)
+
+
+def resident_session_start_section(path: Path) -> str | None:
+    text = path.read_text(encoding="utf-8")
+    match = re.search(
+        r"^## Session Start$(.*?)^## ", text, re.MULTILINE | re.DOTALL
+    )
+    return match.group(1) if match else None
+
+
 def validate_native_plugin_session_start_scenario() -> int:
     real_cli = f'node "{ROOT / "bin/keel.js"}"'
     codex_event = {"hook_event_name": "SessionStart", "source": "startup"}
@@ -6902,6 +7169,7 @@ def validate_native_plugin_session_start_scenario() -> int:
             or "demo#1.1" not in codex_context
             or "task-start" not in codex_context
             or "disposable" not in codex_context
+            or SESSION_START_DISCLOSURE not in codex_context
         ):
             report(
                 "native-plugin-session-start ready projection lacks concise "
@@ -6913,6 +7181,24 @@ def validate_native_plugin_session_start_scenario() -> int:
                 report("native-plugin-session-start projection overstepped.")
                 return 1
 
+        idle_repo = tmp / "idle"
+        (idle_repo / "openspec/changes").mkdir(parents=True)
+        idle_result = run_session_start_hook(
+            idle_repo, codex_event, keel_cli=real_cli
+        )
+        idle_context = session_start_context(idle_result)
+        if (
+            idle_result.returncode != 0
+            or not idle_context
+            or "idle" not in idle_context
+            or SESSION_START_DISCLOSURE not in idle_context
+        ):
+            report(
+                "native-plugin-session-start idle projection did not disclose "
+                "its status to the user: " + repr(idle_context)
+            )
+            return 1
+
         ambiguous_repo = tmp / "ambiguous"
         ambiguous_repo.mkdir()
         for change in ("alpha", "beta"):
@@ -6929,6 +7215,7 @@ def validate_native_plugin_session_start_scenario() -> int:
             or not ambiguous_context
             or "ambiguous" not in ambiguous_context
             or "keel context" not in ambiguous_context
+            or SESSION_START_DISCLOSURE not in ambiguous_context
             or "alpha#1.1" in ambiguous_context
         ):
             report(
@@ -6958,6 +7245,7 @@ def validate_native_plugin_session_start_scenario() -> int:
             or not missing_context
             or "missing or incompatible" not in missing_context
             or "keel context" not in missing_context
+            or SESSION_START_DISCLOSURE not in missing_context
         ):
             report("native-plugin-session-start missing-CLI fallback failed.")
             report(repr(missing_context))
@@ -6980,6 +7268,7 @@ def validate_native_plugin_session_start_scenario() -> int:
             malformed_result.returncode != 0
             or not malformed_context
             or "malformed" not in malformed_context
+            or SESSION_START_DISCLOSURE not in malformed_context
         ):
             report("native-plugin-session-start malformed-output fallback failed.")
             report(repr(malformed_context))
@@ -7005,6 +7294,7 @@ def validate_native_plugin_session_start_scenario() -> int:
             hang_result.returncode != 0
             or not hang_context
             or "failed or timed out" not in hang_context
+            or SESSION_START_DISCLOSURE not in hang_context
         ):
             report("native-plugin-session-start timeout fallback failed.")
             report(repr(hang_context))
@@ -7025,6 +7315,21 @@ def validate_native_plugin_session_start_scenario() -> int:
         )
         return 1
 
+    resident = resident_session_start_section(ROOT / "AGENTS.md")
+    if resident is None:
+        report(
+            "native-plugin-session-start resident AGENTS.md has no Session "
+            "Start section."
+        )
+        return 1
+    for needle in RESIDENT_SESSION_START_REQUIRED:
+        if needle not in resident:
+            report(
+                "native-plugin-session-start resident Session Start section is "
+                f"missing: {needle}"
+            )
+            return 1
+
     report("native-plugin-session-start scenario passed.")
     return 0
 
@@ -7713,7 +8018,7 @@ def validate_native_runtime_projection_scenario() -> int:
 
     def projection_task(acceptance: str = "observable result") -> str:
         return (
-            "# Tasks\n\n"
+            "# Tasks\n\n## Invalidates\n\n- None.\n\n"
             "- [ ] 1.1 Project selected behavior\n"
             "  - Owner: keel-agent\n"
             "  - Mode: implementation\n"
@@ -8307,7 +8612,7 @@ NATIVE_GOAL_VERSION = "keel-native-goal/v1"
 
 
 def _goal_tasks_file(blocks: list[str]) -> str:
-    return "# Tasks\n\n" + "\n\n".join(blocks) + "\n"
+    return "# Tasks\n\n## Invalidates\n\n- None.\n\n" + "\n\n".join(blocks) + "\n"
 
 
 def _goal_task_block(
@@ -8926,7 +9231,7 @@ def validate_fast_pre_push_doctor_scenario() -> int:
 
 def validate_verify_layer_tag_scenario() -> int:
     fixture = (
-        "# Tasks\n\n"
+        "# Tasks\n\n## Invalidates\n\n- None.\n\n"
         "- [ ] 1.1 Exercise the verification-layer tag\n"
         "  - Covers:\n"
         "    - E1: Public behavior passes.\n"
@@ -10319,7 +10624,7 @@ def validate_native_plugin_install_matrix_scenario() -> int:
 def guard_task_fixture(checked: bool = False) -> str:
     box = "x" if checked else " "
     return (
-        "# Tasks\n\n"
+        "# Tasks\n\n## Invalidates\n\n- None.\n\n"
         f"- [{box}] 1.1 Exercise guarded feature\n"
         "  - Covers:\n"
         "    - E1: Guarded public behavior passes.\n"
@@ -10419,7 +10724,7 @@ RECORD_LAYER_SPEC = (
 def record_layer_tasks(checked: bool = False, touch: str = "src/feature.js") -> str:
     box = "x" if checked else " "
     return (
-        "# Tasks\n\n"
+        "# Tasks\n\n## Invalidates\n\n- None.\n\n"
         f"- [{box}] 1.1 Exercise guarded feature\n"
         "  - Covers:\n"
         "    - demo-cap / Guarded behavior holds / Guarded public behavior passes\n"
@@ -10435,7 +10740,7 @@ def record_layer_tasks(checked: bool = False, touch: str = "src/feature.js") ->
 
 def mode_fixture_tasks(mode: str, touch: str) -> str:
     return (
-        "# Tasks\n\n"
+        "# Tasks\n\n## Invalidates\n\n- None.\n\n"
         "- [ ] 1.1 Establish the version baseline\n"
         f"  - Mode: {mode}\n"
         "  - Covers:\n"
@@ -10577,7 +10882,7 @@ def sibling_scope_tasks(sibling_checked: bool, sibling_touch: str) -> str:
         )
 
     return (
-        "# Tasks\n\n"
+        "# Tasks\n\n## Invalidates\n\n- None.\n\n"
         "## 1. Work\n\n"
         + task("1.1", "Own the shared file", sibling_checked, sibling_touch)
         + "\n"
@@ -11258,7 +11563,7 @@ def validate_touch_write_guard_scenario() -> int:
 
 def compaction_task_fixture() -> str:
     return (
-        "# Tasks\n\n"
+        "# Tasks\n\n## Invalidates\n\n- None.\n\n"
         "- [ ] 1.1 Exercise compaction continuity\n"
         "  - Covers:\n"
         "    - E1: Continuity survives compaction.\n"
@@ -12146,6 +12451,11 @@ SCENARIOS: tuple = (
     ("repo-action-mode", validate_repo_action_mode_scenario),
     ("runner-skip-accounting", validate_runner_skip_accounting_scenario),
     ("resident-topic-matching", validate_resident_topic_matching_scenario),
+    ("task-start-invalidation", validate_task_start_invalidation_scenario),
+    (
+        "invalidation-authoring-surface",
+        validate_invalidation_authoring_surface_scenario,
+    ),
     (
         "completed-sibling-attribution",
         validate_completed_sibling_attribution_scenario,

package/src/core/gates.js

@@ -134,7 +134,10 @@ function taskStart(repo, options) {
   const selection = loadSelection(repo, options);
   const task = selection.selected[0];
   const compiled = compileTaskContract(repo, selection.change, task);
-  const problems = [...compiled.diagnostics];
+  const problems = [
+    ...compiled.diagnostics,
+    ...invalidationProblems(selection.content, selection.tasks),
+  ];
   // Recording the current fingerprint is idempotent: --record replaces the
   // selected task's Contract anchor whatever it holds, so reauthorizing a task
   // whose authority changed — the path the guard's own drift messages direct
@@ -543,6 +546,103 @@ function taskComplete(repo, options) {
   );
 }
 
+// Follow-up Ownership governs work a change left undone. This is the opposite
+// shape: statements left standing by work the change completed. It is asked at
+// task-start rather than change-close because the whole value is that the
+// affected paths enter Touch before implementation — asking at the close finds
+// the same facts after the reauthorization it was meant to prevent.
+//
+// A location list is refused on purpose. The text that goes stale is the text
+// the author was not already holding in mind, so a list of remembered files
+// reproduces the failure; a searchable phrase is what turns the declaration
+// into a grep. What the phrase says is the agent's judgment, not the gate's.
+function invalidationProblems(content, tasks) {
+  const heading = content.search(/^## Invalidates\s*$/m);
+  if (heading < 0) {
+    return [
+      problem(
+        "invalidation-declaration",
+        "tasks.md requires a `## Invalidates` section before its tasks are "
+          + "executable: one `- I<n>: \"searchable phrase\" — where it lives. "
+          + "Updated by: <task ids>` line per statement this change makes "
+          + "stale, using `Durable owner:` or `Discard reason:` instead when "
+          + "no task of this change updates it, or `- None.`."
+      ),
+    ];
+  }
+  const bodyStart = content.indexOf("\n", heading);
+  const remainder = bodyStart < 0 ? "" : content.slice(bodyStart + 1);
+  const nextHeading = remainder.search(/^##\s+/m);
+  const section = nextHeading < 0 ? remainder : remainder.slice(0, nextHeading);
+  if (/^\s*-\s+None\.?\s*$/im.test(section)) return [];
+  const entries = [
+    ...section.matchAll(
+      /^\s*-\s+(I\d+)\s*:\s*([\s\S]*?)(?=^\s*-\s+I\d+\s*:|(?![\s\S]))/gm
+    ),
+  ];
+  if (entries.length === 0) {
+    return [
+      problem(
+        "invalidation-declaration",
+        "Invalidates must declare each `I<n>` entry — a quoted searchable "
+          + "phrase, where it lives, and a closure (`Updated by:`, "
+          + "`Durable owner:`, or `Discard reason:`) — or `- None.`."
+      ),
+    ];
+  }
+  const problems = [];
+  for (const entry of entries) {
+    const [, id, body] = entry;
+    if (!/"[^"\n]{3,}"/.test(body)) {
+      problems.push(
+        problem(
+          "invalidation-phrase",
+          `${id} names where to look but not what to look for. Quote the `
+            + "wording a reader would search for, so the entry is a search "
+            + "rather than a reminder."
+        )
+      );
+      continue;
+    }
+    const updated = body.match(/Updated by:\s*([0-9.,\s-]+)/i);
+    const declaredOwner = body.match(/Durable owner:\s*(\S[^\n]*)/i);
+    const hasDurableOwner = Boolean(
+      declaredOwner
+      && (/^openspec\/changes\//i.test(declaredOwner[1].trim())
+        || SHARED_DURABLE_OWNER_FORMS.test(declaredOwner[1]))
+    );
+    const discarded = /Discard(?:ed)? (?:reason|rationale):\s*\S/i.test(body);
+    if (!updated && !hasDurableOwner && !discarded) {
+      problems.push(
+        problem(
+          "invalidation-closure",
+          `${id} lacks an updating task, a durable owner, or a discard `
+            + "rationale."
+        )
+      );
+      continue;
+    }
+    // Deliberately weaker than Expectation Coverage, which requires a checked
+    // task: at authoring time the updater has not run yet, so existence is the
+    // only honest assertion. Completion is then structural — the named task
+    // carries the paths in its Touch and passes its own gate.
+    if (updated) {
+      const ids = updated[1].match(/\d+(?:\.\d+)+/g) || [];
+      for (const taskId of ids) {
+        if (!tasks.some((task) => task.id === taskId)) {
+          problems.push(
+            problem(
+              "invalidation-owner",
+              `${id} names task ${taskId}, which this change does not define.`
+            )
+          );
+        }
+      }
+    }
+  }
+  return problems;
+}
+
 function expectationProblems(content, tasks) {
   const heading = content.search(/^## Expectation Coverage\s*$/m);
   if (heading < 0) {