@claudexor/schema 3.8.0 → 3.8.2

package/generated/ControlRunDetail.schema.json

@@ -164,9 +164,11 @@
                             "credential_pool_exhausted",
                             "delegated_home_unavailable",
                             "delegated_confinement_unavailable",
-                            "delegated_evidence_incomplete"
+                            "delegated_evidence_incomplete",
+                            "access_profile_incompatible",
+                            "retired_access_profile"
                           ],
-                          "description": "Machine-readable failure sub-code within a RunFailure category (budget-denial reasons, Delegate child-drain timeout, a spent subscription quota window whose reopen time is RunFailure.resetsAt, an exhausted credential rotation pool whose EARLIEST known member reset is RunFailure.resetsAt, and the delegated-run confinement refusals: missing scoped home, no OS-enforced boundary on this host, incomplete applied evidence)."
+                          "description": "Machine-readable failure sub-code within a RunFailure category, including historical delegated-run failures and active access-profile refusals."
                         },
                         {
                           "type": "null"
@@ -382,13 +384,17 @@
                     "maxLength": 32,
                     "pattern": "^[a-z0-9]+(?:[_-][a-z0-9]+)*$",
                     "description": "Per-reviewer effort hint, passed to that harness only."
+                  },
+                  "credentialProfileId": {
+                    "$ref": "#/definitions/ControlRunDetail/properties/summary/properties/reviewerPanel/items/properties/model",
+                    "description": "Per-reviewer credential profile id; explicit pins are strict and never fall back."
                   }
                 },
                 "required": [
                   "harness"
                 ],
                 "additionalProperties": false,
-                "description": "One reviewer of an explicit reviewer panel — a harness plus optional model and effort. The CLI spells one entry `harness=model:effort` (e.g. `claude=claude-opus-4-8:max`)."
+                "description": "One reviewer of an explicit reviewer panel — a harness plus optional model, effort, and strict credentialProfileId. Compact entries are unpinned; structured JSON carries pins."
               },
               "description": "Explicit reviewer panel used for the run."
             },
@@ -648,8 +654,8 @@
                 "readonly",
                 "workspace_write",
                 "full",
-                "external_sandbox_full",
-                "inherit_native"
+                "inherit_native",
+                "external_sandbox_full"
               ],
               "description": "Access profile of the run: the effective profile when known, else the requested one (prefer requestedAccess/effectiveAccess)."
             },
@@ -2815,6 +2821,20 @@
                     "default": null,
                     "description": "Reasoning effort requested for the reviewer route."
                   },
+                  "credential_profile_id": {
+                    "type": [
+                      "string",
+                      "null"
+                    ],
+                    "description": "Credential profile requested/effective for the reviewer route; absent = account pool/default."
+                  },
+                  "observed_credential_profile_id": {
+                    "type": [
+                      "string",
+                      "null"
+                    ],
+                    "description": "Credential profile actually reported by the reviewer route; absent when undisclosed."
+                  },
                   "observed_model": {
                     "type": [
                       "string",
@@ -3138,7 +3158,7 @@
                     "properties": {
                       "proven": {
                         "type": "boolean",
-                        "description": "Whether a boundary was actually enforced for this attempt: a named mechanism AND the path it was proven to deny. The only field a consumer should branch on."
+                        "description": "Whether a historical outer boundary was proven by a named mechanism, digest, and denied path; false for current native-access attempts."
                       },
                       "mechanism": {
                         "type": [
@@ -3159,7 +3179,7 @@
                           "string",
                           "null"
                         ],
-                        "description": "Why this attempt ran with NO boundary; null when one was applied. Present exactly when proven is false for a run that asked for a boundary."
+                        "description": "Why no additional outer boundary was applied; current delegated attempts carry the schema-owned deliberate-absence reason."
                       }
                     },
                     "required": [
@@ -3169,13 +3189,13 @@
                       "unavailableReason"
                     ],
                     "additionalProperties": false,
-                    "description": "Applied OS filesystem boundary for one attempt, or the stated reason there was none."
+                    "description": "Historical outer-boundary proof for one attempt, or the deliberate reason current native-access execution applied none."
                   },
                   {
                     "type": "null"
                   }
                 ],
-                "description": "Applied OS boundary for this attempt; null when the run never asked for one (every non-delegated run).",
+                "description": "Historical outer-boundary evidence or current deliberate-absence evidence; null when the attempt has neither.",
                 "default": null
               }
             },

package/generated/ControlRunListResponse.schema.json

@@ -166,9 +166,11 @@
                               "credential_pool_exhausted",
                               "delegated_home_unavailable",
                               "delegated_confinement_unavailable",
-                              "delegated_evidence_incomplete"
+                              "delegated_evidence_incomplete",
+                              "access_profile_incompatible",
+                              "retired_access_profile"
                             ],
-                            "description": "Machine-readable failure sub-code within a RunFailure category (budget-denial reasons, Delegate child-drain timeout, a spent subscription quota window whose reopen time is RunFailure.resetsAt, an exhausted credential rotation pool whose EARLIEST known member reset is RunFailure.resetsAt, and the delegated-run confinement refusals: missing scoped home, no OS-enforced boundary on this host, incomplete applied evidence)."
+                            "description": "Machine-readable failure sub-code within a RunFailure category, including historical delegated-run failures and active access-profile refusals."
                           },
                           {
                             "type": "null"
@@ -384,13 +386,17 @@
                       "maxLength": 32,
                       "pattern": "^[a-z0-9]+(?:[_-][a-z0-9]+)*$",
                       "description": "Per-reviewer effort hint, passed to that harness only."
+                    },
+                    "credentialProfileId": {
+                      "$ref": "#/definitions/ControlRunListResponse/properties/runs/items/properties/reviewerPanel/items/properties/model",
+                      "description": "Per-reviewer credential profile id; explicit pins are strict and never fall back."
                     }
                   },
                   "required": [
                     "harness"
                   ],
                   "additionalProperties": false,
-                  "description": "One reviewer of an explicit reviewer panel — a harness plus optional model and effort. The CLI spells one entry `harness=model:effort` (e.g. `claude=claude-opus-4-8:max`)."
+                  "description": "One reviewer of an explicit reviewer panel — a harness plus optional model, effort, and strict credentialProfileId. Compact entries are unpinned; structured JSON carries pins."
                 },
                 "description": "Explicit reviewer panel used for the run."
               },
@@ -650,8 +656,8 @@
                   "readonly",
                   "workspace_write",
                   "full",
-                  "external_sandbox_full",
-                  "inherit_native"
+                  "inherit_native",
+                  "external_sandbox_full"
                 ],
                 "description": "Access profile of the run: the effective profile when known, else the requested one (prefer requestedAccess/effectiveAccess)."
               },

package/generated/ControlRunStartRequest.schema.json

@@ -111,7 +111,11 @@
             "delegated": {
               "type": "boolean",
               "default": false,
-              "description": "Marks a run driven by an EXTERNAL orchestrator that owns the workspace, not by the operator at a surface. Such a run is confined to a scoped harness HOME even under isolation='live' (an in-place delegated attempt therefore cannot resume a native vendor session stored under the real HOME). Unrelated to the `delegate` belt flag and to `delegatedFromRunId` (belt-child provenance)."
+              "description": "Marks a run driven by an EXTERNAL orchestrator that owns the workspace, not by the operator at a surface. Such a run uses a scoped harness HOME even under isolation='live' (an in-place delegated attempt therefore cannot resume a native vendor session stored under the real HOME). Unrelated to the `delegate` belt flag and to `delegatedFromRunId` (belt-child provenance)."
+            },
+            "workspaceRoot": {
+              "type": "string",
+              "description": "Absolute existing execution workspace for a project-scoped delegated agent live run. The stable project identity remains scope.root."
             }
           },
           "additionalProperties": false,
@@ -298,7 +302,6 @@
             "readonly",
             "workspace_write",
             "full",
-            "external_sandbox_full",
             "inherit_native"
           ],
           "description": "Requested access profile; effective access is derived by the engine and never client-supplied."
@@ -451,16 +454,20 @@
               "effort": {
                 "$ref": "#/definitions/ControlRunStartRequest/properties/effort",
                 "description": "Per-reviewer effort hint, passed to that harness only."
+              },
+              "credentialProfileId": {
+                "$ref": "#/definitions/ControlRunStartRequest/properties/harnesses/items",
+                "description": "Per-reviewer credential profile id; explicit pins are strict and never fall back."
               }
             },
             "required": [
               "harness"
             ],
             "additionalProperties": false,
-            "description": "One reviewer of an explicit reviewer panel — a harness plus optional model and effort. The CLI spells one entry `harness=model:effort` (e.g. `claude=claude-opus-4-8:max`)."
+            "description": "One reviewer of an explicit reviewer panel — a harness plus optional model, effort, and strict credentialProfileId. Compact entries are unpinned; structured JSON carries pins."
           },
           "minItems": 1,
-          "description": "Explicit Agent reviewer panel — who reviews the change, one entry per reviewer as `harness=model:effort` (CLI `--reviewer-panel \"claude=claude-opus-4-8:max,cursor=gemini-3.1-pro\"`). Duplicate harness entries are kept so one provider can review through several models; overrides the legacy reviewerModels/reviewerEfforts maps."
+          "description": "Explicit Agent reviewer panel — who reviews the change, one entry per reviewer as `harness=model:effort` (CLI `--reviewer-panel`, unpinned) or structured `--reviewer-panel-json` with optional strict credentialProfileId. Duplicate harness entries are kept so one provider can review through several models; overrides the legacy reviewerModels/reviewerEfforts maps."
         },
         "authPreference": {
           "type": "string",

package/generated/ControlRunSummary.schema.json

@@ -161,9 +161,11 @@
                         "credential_pool_exhausted",
                         "delegated_home_unavailable",
                         "delegated_confinement_unavailable",
-                        "delegated_evidence_incomplete"
+                        "delegated_evidence_incomplete",
+                        "access_profile_incompatible",
+                        "retired_access_profile"
                       ],
-                      "description": "Machine-readable failure sub-code within a RunFailure category (budget-denial reasons, Delegate child-drain timeout, a spent subscription quota window whose reopen time is RunFailure.resetsAt, an exhausted credential rotation pool whose EARLIEST known member reset is RunFailure.resetsAt, and the delegated-run confinement refusals: missing scoped home, no OS-enforced boundary on this host, incomplete applied evidence)."
+                      "description": "Machine-readable failure sub-code within a RunFailure category, including historical delegated-run failures and active access-profile refusals."
                     },
                     {
                       "type": "null"
@@ -379,13 +381,17 @@
                 "maxLength": 32,
                 "pattern": "^[a-z0-9]+(?:[_-][a-z0-9]+)*$",
                 "description": "Per-reviewer effort hint, passed to that harness only."
+              },
+              "credentialProfileId": {
+                "$ref": "#/definitions/ControlRunSummary/properties/reviewerPanel/items/properties/model",
+                "description": "Per-reviewer credential profile id; explicit pins are strict and never fall back."
               }
             },
             "required": [
               "harness"
             ],
             "additionalProperties": false,
-            "description": "One reviewer of an explicit reviewer panel — a harness plus optional model and effort. The CLI spells one entry `harness=model:effort` (e.g. `claude=claude-opus-4-8:max`)."
+            "description": "One reviewer of an explicit reviewer panel — a harness plus optional model, effort, and strict credentialProfileId. Compact entries are unpinned; structured JSON carries pins."
           },
           "description": "Explicit reviewer panel used for the run."
         },
@@ -645,8 +651,8 @@
             "readonly",
             "workspace_write",
             "full",
-            "external_sandbox_full",
-            "inherit_native"
+            "inherit_native",
+            "external_sandbox_full"
           ],
           "description": "Access profile of the run: the effective profile when known, else the requested one (prefer requestedAccess/effectiveAccess)."
         },

package/generated/ControlThread.schema.json

@@ -91,10 +91,10 @@
                 "readonly",
                 "workspace_write",
                 "full",
-                "external_sandbox_full",
-                "inherit_native"
+                "inherit_native",
+                "external_sandbox_full"
               ],
-              "description": "Filesystem/command access profile for a run: readonly (no writes), workspace_write (writes inside the workspace only), full (unrestricted; requires the per-repo trust allow), external_sandbox_full (the harness stands its native sandbox down; the engine applies its own OS boundary only on delegated runs — requested directly this is unrestricted, and not behind the trust allow), inherit_native (defer to the harness's own native sandbox settings)."
+              "description": "Access profile recorded by an immutable historical artifact. external_sandbox_full is retired and cannot be requested by active surfaces."
             },
             {
               "type": "null"

package/generated/ControlThreadCreateRequest.schema.json

@@ -111,7 +111,6 @@
             "readonly",
             "workspace_write",
             "full",
-            "external_sandbox_full",
             "inherit_native"
           ],
           "description": "Sticky write scope for the thread's write turns; omit = the repo trust default."

package/generated/ControlThreadDetail.schema.json

@@ -94,10 +94,10 @@
                     "readonly",
                     "workspace_write",
                     "full",
-                    "external_sandbox_full",
-                    "inherit_native"
+                    "inherit_native",
+                    "external_sandbox_full"
                   ],
-                  "description": "Filesystem/command access profile for a run: readonly (no writes), workspace_write (writes inside the workspace only), full (unrestricted; requires the per-repo trust allow), external_sandbox_full (the harness stands its native sandbox down; the engine applies its own OS boundary only on delegated runs — requested directly this is unrestricted, and not behind the trust allow), inherit_native (defer to the harness's own native sandbox settings)."
+                  "description": "Access profile recorded by an immutable historical artifact. external_sandbox_full is retired and cannot be requested by active surfaces."
                 },
                 {
                   "type": "null"

package/generated/ControlThreadListResponse.schema.json

@@ -96,10 +96,10 @@
                       "readonly",
                       "workspace_write",
                       "full",
-                      "external_sandbox_full",
-                      "inherit_native"
+                      "inherit_native",
+                      "external_sandbox_full"
                     ],
-                    "description": "Filesystem/command access profile for a run: readonly (no writes), workspace_write (writes inside the workspace only), full (unrestricted; requires the per-repo trust allow), external_sandbox_full (the harness stands its native sandbox down; the engine applies its own OS boundary only on delegated runs — requested directly this is unrestricted, and not behind the trust allow), inherit_native (defer to the harness's own native sandbox settings)."
+                    "description": "Access profile recorded by an immutable historical artifact. external_sandbox_full is retired and cannot be requested by active surfaces."
                   },
                   {
                     "type": "null"

package/generated/ControlThreadTurnRequest.schema.json

@@ -220,7 +220,6 @@
             "readonly",
             "workspace_write",
             "full",
-            "external_sandbox_full",
             "inherit_native"
           ],
           "description": "Requested access profile; effective access is derived by the engine and never client-supplied."
@@ -330,16 +329,20 @@
               "effort": {
                 "$ref": "#/definitions/ControlThreadTurnRequest/properties/effort",
                 "description": "Per-reviewer effort hint, passed to that harness only."
+              },
+              "credentialProfileId": {
+                "$ref": "#/definitions/ControlThreadTurnRequest/properties/harnesses/items",
+                "description": "Per-reviewer credential profile id; explicit pins are strict and never fall back."
               }
             },
             "required": [
               "harness"
             ],
             "additionalProperties": false,
-            "description": "One reviewer of an explicit reviewer panel — a harness plus optional model and effort. The CLI spells one entry `harness=model:effort` (e.g. `claude=claude-opus-4-8:max`)."
+            "description": "One reviewer of an explicit reviewer panel — a harness plus optional model, effort, and strict credentialProfileId. Compact entries are unpinned; structured JSON carries pins."
           },
           "minItems": 1,
-          "description": "Explicit Agent reviewer panel — who reviews the change, one entry per reviewer as `harness=model:effort` (CLI `--reviewer-panel \"claude=claude-opus-4-8:max,cursor=gemini-3.1-pro\"`). Duplicate harness entries are kept so one provider can review through several models; overrides the legacy reviewerModels/reviewerEfforts maps."
+          "description": "Explicit Agent reviewer panel — who reviews the change, one entry per reviewer as `harness=model:effort` (CLI `--reviewer-panel`, unpinned) or structured `--reviewer-panel-json` with optional strict credentialProfileId. Duplicate harness entries are kept so one provider can review through several models; overrides the legacy reviewerModels/reviewerEfforts maps."
         },
         "authPreference": {
           "type": "string",

package/generated/ControlThreadUpdateRequest.schema.json

@@ -56,10 +56,9 @@
                 "readonly",
                 "workspace_write",
                 "full",
-                "external_sandbox_full",
                 "inherit_native"
               ],
-              "description": "Filesystem/command access profile for a run: readonly (no writes), workspace_write (writes inside the workspace only), full (unrestricted; requires the per-repo trust allow), external_sandbox_full (the harness stands its native sandbox down; the engine applies its own OS boundary only on delegated runs — requested directly this is unrestricted, and not behind the trust allow), inherit_native (defer to the harness's own native sandbox settings)."
+              "description": "Active filesystem/command access profile for a run: readonly (no writes), workspace_write (use the harness's native workspace-write policy), full (unrestricted; requires the per-repo trust allow), inherit_native (defer to the harness's own native settings)."
             },
             {
               "type": "null"

package/generated/ControlTrustListResponse.schema.json

@@ -30,7 +30,6 @@
                   "readonly",
                   "workspace_write",
                   "full",
-                  "external_sandbox_full",
                   "inherit_native"
                 ],
                 "description": "Default access profile for runs in the repo."

package/generated/ControlTrustState.schema.json

@@ -25,7 +25,6 @@
             "readonly",
             "workspace_write",
             "full",
-            "external_sandbox_full",
             "inherit_native"
           ],
           "description": "Default access profile for runs in the repo."

package/generated/ControlTrustUpdateRequest.schema.json

@@ -66,7 +66,6 @@
             "readonly",
             "workspace_write",
             "full",
-            "external_sandbox_full",
             "inherit_native"
           ],
           "description": "Effective access profile covered by grantTestCommand; defaults to the trust default."

package/generated/CredentialProfileStatus.schema.json

@@ -37,6 +37,15 @@
           "default": "local_store",
           "description": "How the verification verdict was reached: local_store = the binding's required local state or managed secret is present (says nothing about a token being live); vendor = the vendor answered under the exact binding environment and effective platform credential policy."
         },
+        "stale": {
+          "type": "boolean",
+          "description": "True only for a bounded stale last-known-good observation; stale is never a fresh passed verification."
+        },
+        "stale_age_ms": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "Age in milliseconds of the bounded stale observation, when stale is true."
+        },
         "detail": {
           "type": "string",
           "description": "Redacted human-readable probe evidence."

package/generated/HarnessManifest.schema.json

@@ -258,11 +258,12 @@
                     "enum": [
                       "env_or_file_injection",
                       "scoped_home_keychain_bridge",
+                      "private_per_profile_keychain",
                       "host_user_context",
                       "process_sandbox",
                       "container"
                     ],
-                    "description": "Isolation containment level an adapter supports for run environments, from env/file injection through scoped-HOME keychain bridging to process sandboxes and containers."
+                    "description": "Isolation containment level an adapter supports for run environments, from env/file injection through scoped-HOME keychain bridging or a private per-profile keychain to process sandboxes and containers."
                   },
                   "default": [
                     "env_or_file_injection"
@@ -567,10 +568,9 @@
               "readonly",
               "workspace_write",
               "full",
-              "external_sandbox_full",
               "inherit_native"
             ],
-            "description": "Filesystem/command access profile for a run: readonly (no writes), workspace_write (writes inside the workspace only), full (unrestricted; requires the per-repo trust allow), external_sandbox_full (the harness stands its native sandbox down; the engine applies its own OS boundary only on delegated runs — requested directly this is unrestricted, and not behind the trust allow), inherit_native (defer to the harness's own native sandbox settings)."
+            "description": "Active filesystem/command access profile for a run: readonly (no writes), workspace_write (use the harness's native workspace-write policy), full (unrestricted; requires the per-repo trust allow), inherit_native (defer to the harness's own native settings)."
           },
           "default": [],
           "description": "Access profiles the adapter can enforce."

package/generated/HarnessStatusDto.schema.json

@@ -276,11 +276,12 @@
                             "enum": [
                               "env_or_file_injection",
                               "scoped_home_keychain_bridge",
+                              "private_per_profile_keychain",
                               "host_user_context",
                               "process_sandbox",
                               "container"
                             ],
-                            "description": "Isolation containment level an adapter supports for run environments, from env/file injection through scoped-HOME keychain bridging to process sandboxes and containers."
+                            "description": "Isolation containment level an adapter supports for run environments, from env/file injection through scoped-HOME keychain bridging or a private per-profile keychain to process sandboxes and containers."
                           },
                           "default": [
                             "env_or_file_injection"
@@ -585,10 +586,9 @@
                       "readonly",
                       "workspace_write",
                       "full",
-                      "external_sandbox_full",
                       "inherit_native"
                     ],
-                    "description": "Filesystem/command access profile for a run: readonly (no writes), workspace_write (writes inside the workspace only), full (unrestricted; requires the per-repo trust allow), external_sandbox_full (the harness stands its native sandbox down; the engine applies its own OS boundary only on delegated runs — requested directly this is unrestricted, and not behind the trust allow), inherit_native (defer to the harness's own native sandbox settings)."
+                    "description": "Active filesystem/command access profile for a run: readonly (no writes), workspace_write (use the harness's native workspace-write policy), full (unrestricted; requires the per-repo trust allow), inherit_native (defer to the harness's own native settings)."
                   },
                   "default": [],
                   "description": "Access profiles the adapter can enforce."

package/generated/McpRunHandleResult.schema.json

@@ -681,9 +681,11 @@
                         "credential_pool_exhausted",
                         "delegated_home_unavailable",
                         "delegated_confinement_unavailable",
-                        "delegated_evidence_incomplete"
+                        "delegated_evidence_incomplete",
+                        "access_profile_incompatible",
+                        "retired_access_profile"
                       ],
-                      "description": "Machine-readable failure sub-code within a RunFailure category (budget-denial reasons, Delegate child-drain timeout, a spent subscription quota window whose reopen time is RunFailure.resetsAt, an exhausted credential rotation pool whose EARLIEST known member reset is RunFailure.resetsAt, and the delegated-run confinement refusals: missing scoped home, no OS-enforced boundary on this host, incomplete applied evidence)."
+                      "description": "Machine-readable failure sub-code within a RunFailure category, including historical delegated-run failures and active access-profile refusals."
                     },
                     {
                       "type": "null"

package/generated/McpRunToolResult.schema.json

@@ -657,9 +657,11 @@
                         "credential_pool_exhausted",
                         "delegated_home_unavailable",
                         "delegated_confinement_unavailable",
-                        "delegated_evidence_incomplete"
+                        "delegated_evidence_incomplete",
+                        "access_profile_incompatible",
+                        "retired_access_profile"
                       ],
-                      "description": "Machine-readable failure sub-code within a RunFailure category (budget-denial reasons, Delegate child-drain timeout, a spent subscription quota window whose reopen time is RunFailure.resetsAt, an exhausted credential rotation pool whose EARLIEST known member reset is RunFailure.resetsAt, and the delegated-run confinement refusals: missing scoped home, no OS-enforced boundary on this host, incomplete applied evidence)."
+                      "description": "Machine-readable failure sub-code within a RunFailure category, including historical delegated-run failures and active access-profile refusals."
                     },
                     {
                       "type": "null"

package/generated/ReviewFinding.schema.json

@@ -164,6 +164,20 @@
               "default": null,
               "description": "Reasoning effort requested for the reviewer route."
             },
+            "credential_profile_id": {
+              "type": [
+                "string",
+                "null"
+              ],
+              "description": "Credential profile requested/effective for the reviewer route; absent = account pool/default."
+            },
+            "observed_credential_profile_id": {
+              "type": [
+                "string",
+                "null"
+              ],
+              "description": "Credential profile actually reported by the reviewer route; absent when undisclosed."
+            },
             "observed_model": {
               "type": [
                 "string",

package/generated/RouteProof.schema.json

@@ -33,6 +33,13 @@
               ],
               "default": null,
               "description": "Model requested for the route; null = harness default."
+            },
+            "credential_profile_id": {
+              "type": [
+                "string",
+                "null"
+              ],
+              "description": "Credential profile requested/effective for the route; absent = account pool/default."
             }
           },
           "required": [
@@ -61,6 +68,13 @@
               "default": null,
               "description": "Model actually observed; null when no evidence."
             },
+            "credential_profile_id": {
+              "type": [
+                "string",
+                "null"
+              ],
+              "description": "Credential profile actually observed on the harness route; absent when undisclosed."
+            },
             "evidence_source": {
               "type": "string",
               "enum": [

package/generated/RunFailure.schema.json

@@ -43,9 +43,11 @@
                 "credential_pool_exhausted",
                 "delegated_home_unavailable",
                 "delegated_confinement_unavailable",
-                "delegated_evidence_incomplete"
+                "delegated_evidence_incomplete",
+                "access_profile_incompatible",
+                "retired_access_profile"
               ],
-              "description": "Machine-readable failure sub-code within a RunFailure category (budget-denial reasons, Delegate child-drain timeout, a spent subscription quota window whose reopen time is RunFailure.resetsAt, an exhausted credential rotation pool whose EARLIEST known member reset is RunFailure.resetsAt, and the delegated-run confinement refusals: missing scoped home, no OS-enforced boundary on this host, incomplete applied evidence)."
+              "description": "Machine-readable failure sub-code within a RunFailure category, including historical delegated-run failures and active access-profile refusals."
             },
             {
               "type": "null"

package/generated/RunTelemetry.schema.json

@@ -34,8 +34,8 @@
             "readonly",
             "workspace_write",
             "full",
-            "external_sandbox_full",
-            "inherit_native"
+            "inherit_native",
+            "external_sandbox_full"
           ],
           "description": "Access profile the caller requested."
         },
@@ -45,10 +45,10 @@
             "readonly",
             "workspace_write",
             "full",
-            "external_sandbox_full",
-            "inherit_native"
+            "inherit_native",
+            "external_sandbox_full"
           ],
-          "description": "Access profile actually enforced by the engine."
+          "description": "Access profile enforced by the engine."
         },
         "external_context_policy": {
           "type": "string",

package/generated/TaskContract.schema.json

@@ -347,10 +347,10 @@
                               "readonly",
                               "workspace_write",
                               "full",
-                              "external_sandbox_full",
-                              "inherit_native"
+                              "inherit_native",
+                              "external_sandbox_full"
                             ],
-                            "description": "Effective access profile covered by this grant."
+                            "description": "Effective access profile recorded by this historical grant."
                           }
                         },
                         "required": [
@@ -362,13 +362,13 @@
                           "accessProfile"
                         ],
                         "additionalProperties": false,
-                        "description": "External exact grant for one versioned project test command."
+                        "description": "Historical exact grant for one versioned project test command."
                       },
                       {
                         "type": "null"
                       }
                     ],
-                    "description": "Matching external grant; null when none was found.",
+                    "description": "Matching historical external grant; null when none was found.",
                     "default": null
                   }
                 },
@@ -377,7 +377,7 @@
                   "id"
                 ],
                 "additionalProperties": false,
-                "description": "A deterministic typed-argv test command used as a verification gate."
+                "description": "A deterministic typed-argv test command recorded in an immutable TaskContract."
               },
               "default": [],
               "description": "Deterministic test commands configured as gates."
@@ -398,8 +398,8 @@
                 "readonly",
                 "workspace_write",
                 "full",
-                "external_sandbox_full",
-                "inherit_native"
+                "inherit_native",
+                "external_sandbox_full"
               ],
               "description": "Access profile the caller requested.",
               "default": "workspace_write"