@defrex/autobuild 0.11.0 → 0.12.0

package/packages/core/src/events/catalog.ts

@@ -51,6 +51,11 @@ export const allowedActorKinds: Record<EventType, readonly ActorKind[]> = {
   'execution.ended': ['dispatcher'],
   'infrastructure.failed': ['dispatcher'],
   'infrastructure.cleanup-attempted': ['dispatcher'],
+  'pr-summary.requested': ['kernel'],
+  'pr-summary.attempted': ['kernel'],
+  'pr-summary.result': ['kernel'],
+  'pr-summary.settled': ['kernel'],
+  'finalize.step-started': ['kernel'],
   'publication.requested': ['agent', 'kernel'],
   // Only the dispatcher releases workspaces and settles publications (§15.7);
   // the kernel never destroys one, so it never records a loss.
@@ -88,6 +93,7 @@ export const allowedActorKinds: Record<EventType, readonly ActorKind[]> = {
   'code-review.started': ['kernel'],
   'code-review.verdict': ['agent'],
 
+  'verify.reconcile-policy-captured': ['kernel'],
   'verify.started': ['kernel'],
   'verify.completed': ['kernel', 'agent'],
   'finalize.started': ['kernel'],
@@ -177,10 +183,12 @@ export function validateEventWrite(input: {
     const escalation = payloadResult.data as EventPayload<'escalation.raised'>
     if (
       actor.kind === 'dispatcher' &&
-      (escalation.source !== 'policy' || escalation.policyCause !== 'infrastructure-failure-limit')
+      (escalation.source !== 'policy' ||
+        (escalation.policyCause !== 'infrastructure-failure-limit' &&
+          escalation.policyCause !== 'dispatch-failure-limit'))
     ) {
       throw new EventValidationError(
-        'invalid dispatcher escalation: only policy/infrastructure-failure-limit may be raised outside the kernel',
+        'invalid dispatcher escalation: only policy/infrastructure-failure-limit or policy/dispatch-failure-limit may be raised outside the kernel',
       )
     }
     if (escalation.source === 'policy' && escalation.policyCause === undefined) {

package/packages/core/src/events/payloads.ts

@@ -172,6 +172,7 @@ const verifyCompletedPayloadSchema = z.union([
     z.strictObject({
       ...verifyCompletionBase,
       outcome: z.literal('skipped'),
+      skipCause: z.literal('post-reconcile-policy').optional(),
       reason: z.string().trim().min(1, 'a skipped verification requires a non-blank reason'),
     }),
   ]),
@@ -336,6 +337,26 @@ export const eventPayloadSchemas = {
       })
       .optional(),
   }),
+  /** Optional summary publication identities and durable write budgets. */
+  'pr-summary.requested': z.strictObject({
+    occurrence: z.number().int().positive(),
+    boundary: z.number().int().positive(),
+  }),
+  'pr-summary.attempted': z.strictObject({
+    occurrence: z.number().int().positive(),
+    boundary: z.number().int().positive(),
+    pr: z.number().int().positive(),
+  }),
+  'pr-summary.result': z.strictObject({
+    attempt: z.number().int().positive(),
+    outcome: z.enum(['success', 'failure', 'rate-limited']),
+    eligibleAfter: z.string().datetime().optional(),
+  }),
+  'pr-summary.settled': z.strictObject({
+    request: z.number().int().positive(),
+    disposition: z.enum(['attempted', 'skipped', 'deferred']),
+  }),
+  'finalize.step-started': z.strictObject({ step: z.string().min(1) }),
   /** Remote phases deposit their output and park before trusted publication.
    * The dispatcher settles the request only after the VM session and execution
    * lease are gone, then appends the ordinary phase completion fact. */
@@ -515,6 +536,27 @@ export const eventPayloadSchemas = {
      * starts. */
     feedback: feedbackSchema.optional(),
   }),
+  'verify.reconcile-policy-captured': z.strictObject({
+    reconcileSeq: z.number().int().positive(),
+    steps: z
+      .array(
+        z.strictObject({
+          step: z.string().min(1),
+          enabled: z.boolean(),
+          source: z.string().min(1),
+        }),
+      )
+      .superRefine((steps, ctx) => {
+        if (new Set(steps.map((s) => s.step)).size !== steps.length)
+          ctx.addIssue({ code: 'custom', message: 'duplicate policy step' })
+        for (const s of steps)
+          if (
+            s.source !== 'verify.afterReconcile' &&
+            s.source !== `verify.${s.step}.afterReconcile`
+          )
+            ctx.addIssue({ code: 'custom', message: 'invalid policy source' })
+      }),
+  }),
   'verify.completed': verifyCompletedPayloadSchema,
   'finalize.started': empty,
   'finalize.completed': z.strictObject({
@@ -630,6 +672,7 @@ export interface NormalizedVerifyCompletion {
   outcome: VerifyOutcome
   report?: ArtifactRef
   reason?: string
+  skipCause?: 'post-reconcile-policy'
 }
 
 /**
@@ -653,6 +696,7 @@ export function normalizeVerifyCompletion(
       attempt: payload.attempt,
       outcome: 'skipped',
       reason: payload.reason,
+      ...(payload.skipCause !== undefined ? { skipCause: payload.skipCause } : {}),
     }
   }
   return {

package/packages/core/src/events/repository.ts

@@ -90,6 +90,7 @@ const tickCountersSchema = z.strictObject({
 const restartRequiredConfigPathSchema = z.enum([
   'forge',
   'plugins',
+  'store',
   'workspace.provider',
   'workspace.config',
   'tickets.source',
@@ -154,6 +155,16 @@ export const harvestEventPayloadSchemas = {
    * command supervising the guest runner. Written as soon as the launch
    * succeeds so a later process can re-observe the execution without
    * process memory. */
+  'harvest.execution.authorized': z.strictObject({
+    execution: z.string().min(1),
+    run: z.string().min(1),
+    launch: z.enum(['started', 'resumed']),
+    leaseHolder: z.string().min(1),
+  }),
+  'harvest.execution.ended': z.strictObject({
+    execution: z.string().min(1),
+    run: z.string().min(1),
+  }),
   'harvest.execution.started': z.strictObject({
     execution: z.string().min(1),
     provider: z.string().min(1),
@@ -557,6 +568,8 @@ const allowedActorKinds: Record<RepositoryEventType, readonly ActorKind[]> = {
   'harvest.recovery-requested': ['kernel'],
   'harvest.recovery-exhausted': ['kernel'],
   'harvest.started': ['dispatcher', 'kernel'],
+  'harvest.execution.authorized': ['dispatcher'],
+  'harvest.execution.ended': ['dispatcher'],
   'harvest.execution.started': ['dispatcher'],
   'harvest.execution.released': ['dispatcher'],
   'harvest.step.started': ['kernel'],

package/packages/core/src/kernel/__snapshots__/reducer-registry.test.ts.snap

@@ -138,27 +138,28 @@ exports[`reducer registry accumulator shapes 1`] = `
     "$.lastEvent.actor.user: string",
     "$.lastEvent.actor: object",
     "$.lastEvent.build: string",
+    "$.lastEvent.payload.answer: string",
     "$.lastEvent.payload.artifact.kind: string",
     "$.lastEvent.payload.artifact.rev: number",
     "$.lastEvent.payload.artifact: object",
-    "$.lastEvent.payload.asset.assetId: number",
-    "$.lastEvent.payload.asset.provider: string",
-    "$.lastEvent.payload.asset.releaseId: number",
-    "$.lastEvent.payload.asset.repository: string",
-    "$.lastEvent.payload.asset.url: string",
-    "$.lastEvent.payload.asset: object",
+    "$.lastEvent.payload.assets: array",
+    "$.lastEvent.payload.assets[].dirCount: number",
+    "$.lastEvent.payload.assets[].fileCount: number",
+    "$.lastEvent.payload.assets[].kind: string",
+    "$.lastEvent.payload.assets[].layout: string",
+    "$.lastEvent.payload.assets[].name: string",
+    "$.lastEvent.payload.assets[].revision: number",
+    "$.lastEvent.payload.assets[].size: number",
+    "$.lastEvent.payload.assets[]: object",
     "$.lastEvent.payload.attempt: number",
     "$.lastEvent.payload.base.sha: string",
     "$.lastEvent.payload.base.source: string",
     "$.lastEvent.payload.base: object",
+    "$.lastEvent.payload.base: string",
+    "$.lastEvent.payload.baseSha: string",
+    "$.lastEvent.payload.boundary: number",
     "$.lastEvent.payload.branch: string",
     "$.lastEvent.payload.cause: string",
-    "$.lastEvent.payload.cleanupPending: boolean",
-    "$.lastEvent.payload.command: string",
-    "$.lastEvent.payload.commandSeq: number",
-    "$.lastEvent.payload.commits.base: string",
-    "$.lastEvent.payload.commits.head: string",
-    "$.lastEvent.payload.commits: object",
     "$.lastEvent.payload.counters.claimed: number",
     "$.lastEvent.payload.counters.closed: number",
     "$.lastEvent.payload.counters.conflicted: number",
@@ -174,7 +175,6 @@ exports[`reducer registry accumulator shapes 1`] = `
     "$.lastEvent.payload.decision: string",
     "$.lastEvent.payload.defaultSeq: number",
     "$.lastEvent.payload.dependencyDiagnostics: array",
-    "$.lastEvent.payload.designationSeq: number",
     "$.lastEvent.payload.dispositions: array",
     "$.lastEvent.payload.dispositions[].action: string",
     "$.lastEvent.payload.dispositions[].occurrence.build: string",
@@ -185,15 +185,15 @@ exports[`reducer registry accumulator shapes 1`] = `
     "$.lastEvent.payload.effectiveConfig.kind: string",
     "$.lastEvent.payload.effectiveConfig.rev: number",
     "$.lastEvent.payload.effectiveConfig: object",
+    "$.lastEvent.payload.eligibleAfter: string",
     "$.lastEvent.payload.enabled: boolean",
     "$.lastEvent.payload.environmentId: string",
     "$.lastEvent.payload.error: string",
     "$.lastEvent.payload.escalation: number",
     "$.lastEvent.payload.execution: string",
-    "$.lastEvent.payload.exitStatus: number",
     "$.lastEvent.payload.filename: string",
-    "$.lastEvent.payload.files: array",
     "$.lastEvent.payload.findings: array",
+    "$.lastEvent.payload.generation: number",
     "$.lastEvent.payload.globs: array",
     "$.lastEvent.payload.globs[]: string",
     "$.lastEvent.payload.host: string",
@@ -207,37 +207,36 @@ exports[`reducer registry accumulator shapes 1`] = `
     "$.lastEvent.payload.kind: string",
     "$.lastEvent.payload.level: string",
     "$.lastEvent.payload.mediaType: string",
+    "$.lastEvent.payload.mergeCommit: string",
     "$.lastEvent.payload.message: string",
     "$.lastEvent.payload.observations: array",
     "$.lastEvent.payload.observations[].build: string",
     "$.lastEvent.payload.observations[].seq: number",
     "$.lastEvent.payload.observations[]: object",
+    "$.lastEvent.payload.occurrence: number",
     "$.lastEvent.payload.ok: boolean",
     "$.lastEvent.payload.operation: string",
     "$.lastEvent.payload.operator: string",
     "$.lastEvent.payload.outcome: string",
-    "$.lastEvent.payload.output: string",
     "$.lastEvent.payload.phase: string",
     "$.lastEvent.payload.pid: number",
-    "$.lastEvent.payload.policyCause: string",
     "$.lastEvent.payload.pr.headSha: string",
     "$.lastEvent.payload.pr.number: number",
     "$.lastEvent.payload.pr.url: string",
+    "$.lastEvent.payload.pr: number",
     "$.lastEvent.payload.pr: object",
     "$.lastEvent.payload.provider: string",
     "$.lastEvent.payload.question: string",
     "$.lastEvent.payload.queued: number",
     "$.lastEvent.payload.reason: string",
     "$.lastEvent.payload.ref: string",
-    "$.lastEvent.payload.refs: array",
-    "$.lastEvent.payload.refs[]: string",
     "$.lastEvent.payload.remote: boolean",
     "$.lastEvent.payload.report.kind: string",
     "$.lastEvent.payload.report.rev: number",
     "$.lastEvent.payload.report: object",
     "$.lastEvent.payload.request: number",
     "$.lastEvent.payload.resetAt: string",
-    "$.lastEvent.payload.retryable: boolean",
+    "$.lastEvent.payload.resolution: string",
     "$.lastEvent.payload.role: string",
     "$.lastEvent.payload.roleWarnings: array",
     "$.lastEvent.payload.roleWarnings[]: string",
@@ -253,10 +252,8 @@ exports[`reducer registry accumulator shapes 1`] = `
     "$.lastEvent.payload.snapshots.outcome: string",
     "$.lastEvent.payload.snapshots: object",
     "$.lastEvent.payload.source: string",
-    "$.lastEvent.payload.stage: string",
     "$.lastEvent.payload.step: string",
     "$.lastEvent.payload.stream: string",
-    "$.lastEvent.payload.summary: string",
     "$.lastEvent.payload.text: string",
     "$.lastEvent.payload.ticket.id: string",
     "$.lastEvent.payload.ticket.source: string",
@@ -324,7 +321,6 @@ exports[`reducer registry accumulator shapes 1`] = `
     "$.pending.abort[].actor.user: string",
     "$.pending.abort[].actor: object",
     "$.pending.abort[].command: string",
-    "$.pending.abort[].reason: string",
     "$.pending.abort[].reason: undefined",
     "$.pending.abort[].seq: number",
     "$.pending.abort[]: object",
@@ -393,7 +389,6 @@ exports[`reducer registry accumulator shapes 1`] = `
     "$.terminal: string",
     "$.terminal: undefined",
     "$.verify.currentStep: string",
-    "$.verify.currentStep: undefined",
     "$.verify.cycleSince: number",
     "$.verify.maxAttemptSeen: number",
     "$.verify.results: array",
@@ -520,19 +515,11 @@ exports[`reducer registry accumulator shapes 1`] = `
     "$.intervals.reconcile.open: object",
     "$.intervals.reconcile: object",
     "$.intervals.verify:types.closed: array",
-    "$.intervals.verify:types.closed[].end: number",
-    "$.intervals.verify:types.closed[].start: number",
-    "$.intervals.verify:types.closed[].startSeq: number",
-    "$.intervals.verify:types.closed[]: object",
     "$.intervals.verify:types.open.start: number",
     "$.intervals.verify:types.open.startSeq: number",
     "$.intervals.verify:types.open: object",
     "$.intervals.verify:types: object",
     "$.intervals.verify:unit.closed: array",
-    "$.intervals.verify:unit.closed[].end: number",
-    "$.intervals.verify:unit.closed[].start: number",
-    "$.intervals.verify:unit.closed[].startSeq: number",
-    "$.intervals.verify:unit.closed[]: object",
     "$.intervals.verify:unit.open.start: number",
     "$.intervals.verify:unit.open.startSeq: number",
     "$.intervals.verify:unit.open: object",
@@ -587,6 +574,23 @@ exports[`reducer registry accumulator shapes 1`] = `
     "$.workspaceReleased: number",
     "$: object",
   ],
+  "dispatchFailureBudget": [
+    "$.aborted: boolean",
+    "$.failures: array",
+    "$.failures[].actor.kind: string",
+    "$.failures[].actor: object",
+    "$.failures[].build: string",
+    "$.failures[].payload.attempt: number",
+    "$.failures[].payload.error: string",
+    "$.failures[].payload.stage: string",
+    "$.failures[].payload: object",
+    "$.failures[].seq: number",
+    "$.failures[].ts: string",
+    "$.failures[].type: string",
+    "$.failures[]: object",
+    "$.open: array",
+    "$: object",
+  ],
   "dispatchSettings": [
     "$.autoMergeSeq: number",
     "$.defaultAutoMerge: boolean",
@@ -719,20 +723,6 @@ exports[`reducer registry accumulator shapes 1`] = `
     "$.byKind.screenshot.type: string",
     "$.byKind.screenshot: object",
     "$.byKind: object",
-    "$.hostedByDesignation.1.actor.kind: string",
-    "$.hostedByDesignation.1.actor: object",
-    "$.hostedByDesignation.1.build: string",
-    "$.hostedByDesignation.1.payload.asset.assetId: number",
-    "$.hostedByDesignation.1.payload.asset.provider: string",
-    "$.hostedByDesignation.1.payload.asset.releaseId: number",
-    "$.hostedByDesignation.1.payload.asset.repository: string",
-    "$.hostedByDesignation.1.payload.asset.url: string",
-    "$.hostedByDesignation.1.payload.asset: object",
-    "$.hostedByDesignation.1.payload.designationSeq: number",
-    "$.hostedByDesignation.1.payload: object",
-    "$.hostedByDesignation.1.seq: number",
-    "$.hostedByDesignation.1.ts: string",
-    "$.hostedByDesignation.1.type: string",
     "$.hostedByDesignation.12.actor.kind: string",
     "$.hostedByDesignation.12.actor: object",
     "$.hostedByDesignation.12.build: string",
@@ -748,37 +738,36 @@ exports[`reducer registry accumulator shapes 1`] = `
     "$.hostedByDesignation.12.ts: string",
     "$.hostedByDesignation.12.type: string",
     "$.hostedByDesignation.12: object",
-    "$.hostedByDesignation.15.actor.kind: string",
-    "$.hostedByDesignation.15.actor: object",
-    "$.hostedByDesignation.15.build: string",
-    "$.hostedByDesignation.15.payload.asset.assetId: number",
-    "$.hostedByDesignation.15.payload.asset.provider: string",
-    "$.hostedByDesignation.15.payload.asset.releaseId: number",
-    "$.hostedByDesignation.15.payload.asset.repository: string",
-    "$.hostedByDesignation.15.payload.asset.url: string",
-    "$.hostedByDesignation.15.payload.asset: object",
-    "$.hostedByDesignation.15.payload.designationSeq: number",
-    "$.hostedByDesignation.15.payload: object",
-    "$.hostedByDesignation.15.seq: number",
-    "$.hostedByDesignation.15.ts: string",
-    "$.hostedByDesignation.15.type: string",
-    "$.hostedByDesignation.15: object",
-    "$.hostedByDesignation.1: object",
-    "$.hostedByDesignation.2.actor.kind: string",
-    "$.hostedByDesignation.2.actor: object",
-    "$.hostedByDesignation.2.build: string",
-    "$.hostedByDesignation.2.payload.asset.assetId: number",
-    "$.hostedByDesignation.2.payload.asset.provider: string",
-    "$.hostedByDesignation.2.payload.asset.releaseId: number",
-    "$.hostedByDesignation.2.payload.asset.repository: string",
-    "$.hostedByDesignation.2.payload.asset.url: string",
-    "$.hostedByDesignation.2.payload.asset: object",
-    "$.hostedByDesignation.2.payload.designationSeq: number",
-    "$.hostedByDesignation.2.payload: object",
-    "$.hostedByDesignation.2.seq: number",
-    "$.hostedByDesignation.2.ts: string",
-    "$.hostedByDesignation.2.type: string",
-    "$.hostedByDesignation.2: object",
+    "$.hostedByDesignation.13.actor.kind: string",
+    "$.hostedByDesignation.13.actor: object",
+    "$.hostedByDesignation.13.build: string",
+    "$.hostedByDesignation.13.payload.asset.assetId: number",
+    "$.hostedByDesignation.13.payload.asset.provider: string",
+    "$.hostedByDesignation.13.payload.asset.releaseId: number",
+    "$.hostedByDesignation.13.payload.asset.repository: string",
+    "$.hostedByDesignation.13.payload.asset.url: string",
+    "$.hostedByDesignation.13.payload.asset: object",
+    "$.hostedByDesignation.13.payload.designationSeq: number",
+    "$.hostedByDesignation.13.payload: object",
+    "$.hostedByDesignation.13.seq: number",
+    "$.hostedByDesignation.13.ts: string",
+    "$.hostedByDesignation.13.type: string",
+    "$.hostedByDesignation.13: object",
+    "$.hostedByDesignation.19.actor.kind: string",
+    "$.hostedByDesignation.19.actor: object",
+    "$.hostedByDesignation.19.build: string",
+    "$.hostedByDesignation.19.payload.asset.assetId: number",
+    "$.hostedByDesignation.19.payload.asset.provider: string",
+    "$.hostedByDesignation.19.payload.asset.releaseId: number",
+    "$.hostedByDesignation.19.payload.asset.repository: string",
+    "$.hostedByDesignation.19.payload.asset.url: string",
+    "$.hostedByDesignation.19.payload.asset: object",
+    "$.hostedByDesignation.19.payload.designationSeq: number",
+    "$.hostedByDesignation.19.payload: object",
+    "$.hostedByDesignation.19.seq: number",
+    "$.hostedByDesignation.19.ts: string",
+    "$.hostedByDesignation.19.type: string",
+    "$.hostedByDesignation.19: object",
     "$.hostedByDesignation.3.actor.kind: string",
     "$.hostedByDesignation.3.actor: object",
     "$.hostedByDesignation.3.build: string",
@@ -809,6 +798,36 @@ exports[`reducer registry accumulator shapes 1`] = `
     "$.hostedByDesignation.4.ts: string",
     "$.hostedByDesignation.4.type: string",
     "$.hostedByDesignation.4: object",
+    "$.hostedByDesignation.5.actor.kind: string",
+    "$.hostedByDesignation.5.actor: object",
+    "$.hostedByDesignation.5.build: string",
+    "$.hostedByDesignation.5.payload.asset.assetId: number",
+    "$.hostedByDesignation.5.payload.asset.provider: string",
+    "$.hostedByDesignation.5.payload.asset.releaseId: number",
+    "$.hostedByDesignation.5.payload.asset.repository: string",
+    "$.hostedByDesignation.5.payload.asset.url: string",
+    "$.hostedByDesignation.5.payload.asset: object",
+    "$.hostedByDesignation.5.payload.designationSeq: number",
+    "$.hostedByDesignation.5.payload: object",
+    "$.hostedByDesignation.5.seq: number",
+    "$.hostedByDesignation.5.ts: string",
+    "$.hostedByDesignation.5.type: string",
+    "$.hostedByDesignation.5: object",
+    "$.hostedByDesignation.6.actor.kind: string",
+    "$.hostedByDesignation.6.actor: object",
+    "$.hostedByDesignation.6.build: string",
+    "$.hostedByDesignation.6.payload.asset.assetId: number",
+    "$.hostedByDesignation.6.payload.asset.provider: string",
+    "$.hostedByDesignation.6.payload.asset.releaseId: number",
+    "$.hostedByDesignation.6.payload.asset.repository: string",
+    "$.hostedByDesignation.6.payload.asset.url: string",
+    "$.hostedByDesignation.6.payload.asset: object",
+    "$.hostedByDesignation.6.payload.designationSeq: number",
+    "$.hostedByDesignation.6.payload: object",
+    "$.hostedByDesignation.6.seq: number",
+    "$.hostedByDesignation.6.ts: string",
+    "$.hostedByDesignation.6.type: string",
+    "$.hostedByDesignation.6: object",
     "$.hostedByDesignation.8.actor.kind: string",
     "$.hostedByDesignation.8.actor: object",
     "$.hostedByDesignation.8.build: string",
@@ -1025,16 +1044,15 @@ exports[`reducer registry accumulator shapes 1`] = `
     "$.hosted[].type: string",
     "$.hosted[]: object",
     "$.reclaimedAt.10: number",
-    "$.reclaimedAt.11: number",
-    "$.reclaimedAt.15: number",
+    "$.reclaimedAt.12: number",
     "$.reclaimedAt.16: number",
-    "$.reclaimedAt.18: number",
-    "$.reclaimedAt.1: number",
+    "$.reclaimedAt.17: number",
+    "$.reclaimedAt.19: number",
     "$.reclaimedAt.20: number",
-    "$.reclaimedAt.3: number",
+    "$.reclaimedAt.2: number",
     "$.reclaimedAt.6: number",
-    "$.reclaimedAt.7: number",
     "$.reclaimedAt.8: number",
+    "$.reclaimedAt.9: number",
     "$.reclaimedAt: object",
     "$: object",
   ],
@@ -1164,6 +1182,7 @@ exports[`reducer registry accumulator shapes 1`] = `
     "$.retained[].payload.base: string",
     "$.retained[].payload.baseBranch: string",
     "$.retained[].payload.baseSha: string",
+    "$.retained[].payload.boundary: number",
     "$.retained[].payload.branch: string",
     "$.retained[].payload.cause: string",
     "$.retained[].payload.cleanupPending: boolean",
@@ -1188,6 +1207,7 @@ exports[`reducer registry accumulator shapes 1`] = `
     "$.retained[].payload.defaultSeq: number",
     "$.retained[].payload.dependencyDiagnostics: array",
     "$.retained[].payload.designationSeq: number",
+    "$.retained[].payload.disposition: string",
     "$.retained[].payload.dispositions: array",
     "$.retained[].payload.dispositions[].action: string",
     "$.retained[].payload.dispositions[].occurrence.build: string",
@@ -1198,6 +1218,7 @@ exports[`reducer registry accumulator shapes 1`] = `
     "$.retained[].payload.effectiveConfig.kind: string",
     "$.retained[].payload.effectiveConfig.rev: number",
     "$.retained[].payload.effectiveConfig: object",
+    "$.retained[].payload.eligibleAfter: string",
     "$.retained[].payload.enabled: boolean",
     "$.retained[].payload.environmentId: string",
     "$.retained[].payload.error: string",
@@ -1227,6 +1248,7 @@ exports[`reducer registry accumulator shapes 1`] = `
     "$.retained[].payload.observations[].build: string",
     "$.retained[].payload.observations[].seq: number",
     "$.retained[].payload.observations[]: object",
+    "$.retained[].payload.occurrence: number",
     "$.retained[].payload.ok: boolean",
     "$.retained[].payload.operation: string",
     "$.retained[].payload.operator: string",
@@ -1239,6 +1261,7 @@ exports[`reducer registry accumulator shapes 1`] = `
     "$.retained[].payload.pr.headSha: string",
     "$.retained[].payload.pr.number: number",
     "$.retained[].payload.pr.url: string",
+    "$.retained[].payload.pr: number",
     "$.retained[].payload.pr: object",
     "$.retained[].payload.provider: string",
     "$.retained[].payload.question: string",
@@ -1368,6 +1391,30 @@ exports[`reducer registry accumulator shapes 1`] = `
     "$.failures[]: number",
     "$: object",
   ],
+  "summaryBoundary": [
+    "$.boundary: number",
+    "$.occurrence: number",
+    "$.sessions.s_a: boolean",
+    "$.sessions.s_b: boolean",
+    "$.sessions: object",
+    "$: object",
+  ],
+  "summaryRequests": [
+    "$.requests: array",
+    "$.requests[].actor.kind: string",
+    "$.requests[].actor: object",
+    "$.requests[].build: string",
+    "$.requests[].payload.boundary: number",
+    "$.requests[].payload.occurrence: number",
+    "$.requests[].payload: object",
+    "$.requests[].seq: number",
+    "$.requests[].ts: string",
+    "$.requests[].type: string",
+    "$.requests[]: object",
+    "$.settled: array",
+    "$.settled[]: number",
+    "$: object",
+  ],
   "ticketSourceHealth": [
     "$.active.cause: string",
     "$.active.message: string",

package/packages/core/src/kernel/engine.ts

@@ -55,6 +55,7 @@ export type VerifyAction =
 export type FinalizeAction = { kind: 'check'; command: string } | { kind: 'agent'; skill: string }
 
 export type Decision =
+  | { kind: 'capture-reconcile-policy'; reconcileSeq: number }
   | { kind: 'wait'; reason: WaitReason }
   | { kind: 'acknowledge'; command: 'pause' | 'resume' | 'abort' }
   | {
@@ -80,6 +81,7 @@ export type Decision =
       step: string
       attempt: number
       reason: string
+      skipCause?: 'post-reconcile-policy'
     }
   | { kind: 'run-finalize-step'; step: string; action: FinalizeAction }
   | {
@@ -313,6 +315,18 @@ export function decideNextFromFacts(state: BuildState, log: LogIndex, config: Co
   const cycleAttempts = [...cycleResults, ...cycleStarted].map((v) => v.attempt)
   const attempt =
     cycleAttempts.length > 0 ? Math.max(...cycleAttempts) : log.maxVerifyAttemptEver + 1
+  // Freeze only a fresh reconcile cycle. A newer code-review approval restores
+  // ordinary verification. Already-started historical cycles have no snapshot:
+  // preserve their rerun-all policy, including after a crashed verify start.
+  const reconcileCycle =
+    log.lastReconcileCompletedSeq > Math.max(log.code.latestApproveSeq, log.restartSeq)
+  const policy =
+    reconcileCycle && log.reconcilePolicy?.reconcileSeq === cycleBoundary
+      ? log.reconcilePolicy
+      : undefined
+  if (reconcileCycle && policy === undefined && cycleAttempts.length === 0) {
+    return { kind: 'capture-reconcile-policy', reconcileSeq: cycleBoundary }
+  }
   const approvedPlan = log.plan.approvedPlan
   const approvedSelection =
     approvedPlan?.verifySteps === undefined
@@ -333,6 +347,16 @@ export function decideNextFromFacts(state: BuildState, log: LogIndex, config: Co
     const stepConfig = config.verify.stepConfigs[step]
     if (stepConfig === undefined) continue // unreachable: configSchema cross-validates (§16.1)
 
+    const exclusion = policy?.steps.find((s) => s.step === step && !s.enabled)
+    if (exclusion !== undefined)
+      return {
+        kind: 'skip-verify',
+        step,
+        attempt,
+        skipCause: 'post-reconcile-policy',
+        reason: `skipped by post-reconcile policy: ${exclusion.source} = false`,
+      }
+
     // Missing selection data is the historical default-all behavior. For a
     // current explicit selection, exclusion precedes path evaluation and any
     // verifier construction. Mandatory gates remain selected defensively even

package/packages/core/src/kernel/generators/build-log.ts

@@ -207,6 +207,16 @@ function randomWrite(rand: () => number): EventWrite {
         },
       }),
     () => w('pr-attachment.reclaimed', { hostedSeq: 1 + Math.floor(rand() * 20) }),
+    () => w('pr-summary.requested', { occurrence: round, boundary: round + 1 }),
+    () => w('pr-summary.settled', { request: round, disposition: 'attempted' }),
+    () => w('pr-summary.attempted', { occurrence: round, boundary: round + 1, pr: 7 }),
+    () =>
+      w('pr-summary.result', {
+        attempt: round,
+        outcome: 'rate-limited',
+        eligibleAfter: '2026-10-15T00:01:00.000Z',
+      }),
+    () => w('finalize.step-started', { step: 'notes' }),
     () => w('build.auto-merge-default-observed', { defaultSeq: round }),
     () =>
       w('observation.recorded', {