@deftai/directive-runtime 0.126.0-beta.1 → 0.126.0-beta.2

package/contracts/human-origin-authz.md

@@ -89,17 +89,21 @@ deft authz:uat-suspend
 deft authz:revoke -- grant-…
 ```
 
-## Gate-override hatch (#5542)
+## Gate-override hatch (#5542 / #5674)
 
 Mint + admission APIs for an audited interactive override bound to a coverage-
-applicability refuse. **This release ships grant minting and admission only.**
-Wiring that turns a live admission into a `waived` / exit-4 result on the pre-PR
-`coverage_headroom` / `deft coverage:hotspots` path is a follow-up PR; operators
-minting a grant here will still see the refuse until that consumer lands.
+applicability refuse (#5542). Consumer wiring on pre-PR `coverage_headroom` /
+`deft coverage:hotspots` lands as **exit 4** + distinct waived skip token with
+admission-receipt re-verify (#5674). Measured Istanbul floor/headroom failure
+still dominates when a coverage report exists. Exit 4 never maps to pass /
+exit 0. Residual deposit keep-unknowns (run / hooks / codeql / approved-scope)
+stay open on #5677. Classifier exact-path relief for ordinary managed
+stamps/ledgers is #5665 — not this hatch.
 
 ```bash
 deft authz:grant -- --template gate-override --target <refuseCode> \
   --plan-ref <attemptId> --base-sha <sha> --head-sha <sha> --tree-hash <hash> [--confirm]
+deft coverage:hotspots --attempt-id <attemptId>
 ```
 
 | Rule | Detail |
@@ -107,11 +111,11 @@ deft authz:grant -- --template gate-override --target <refuseCode> \
 | Mint provenance | `origin.kind=operator-cli` only via live `authz:grant` human-presence; `operator-session` non-admitting; refuse chat/parent/fixture consent |
 | Binding | gate id + refuse code + `baseSha+headSha+treeHash` + attempt id (+ optional worktree/evaluator) |
 | Admission | Atomic one-use via claim lock; inspection does **not** consume; same attempt reuses receipt; renew after revoke/expiry replaces under an attempt-id lock |
-| Result arms (follow-up) | Planned `waived` / `overridden` on coverage-applicability + pre-PR evidence — **never** map to pass / exit 0; not wired in this authz-only landing |
+| Result arms (#5674) | Live `waived` on coverage-hotspots + pre-PR evidence via exit 4 + waived skip token — **never** map to pass / exit 0; measured floor dominates when a report exists |
 | Eligible refuse codes | Closed set (`unknown-path`, `dirty-tree`, …); non-overridable authenticity codes (`tree-mismatch`, `invalid-*`) dominate |
 | Deferred peers | Empty list in v1 |
 | Push/merge | Grant is `settings` only — no independent push/merge permission |
-| Keep-outs | Does not fix #5541 classifier correctness; no fabricate green; no UAT silent suspend; no blanket env override |
+| Keep-outs | Does not fix #5541 / #5665 classifier correctness; no fabricate green; no UAT silent suspend; no blanket env override |
 
 Complementary hatches stay separate: `--allow-coverage-debt`, `policy:allow-*`,
 `DEFT_ALLOW_*`, delivery-attempt `recordOperatorOverride`, `spec-drift-override`.
@@ -125,8 +129,10 @@ Complementary hatches stay separate: `--allow-coverage-debt`, `policy:allow-*`,
 | Path write fence schema | #516 / #2443 |
 | AFK session-auth / release verbs | #1095 — see `content/contracts/closed-verb-authz.md` (Wave 4; consumes these grants) |
 | HMAC / hardware-keyed grants | non-goal for MVP |
-| Classifier false-refuse correctness | #5541 (not absorbed by gate-override) |
+| Classifier false-refuse correctness | #5541 / #5665 (not absorbed by gate-override) |
 | Interactive gate waiver audit | #5542 (this hatch) |
+| Pre-PR/hotspots waived-exit consumer + VERSION/lifecycle gitkeep inert | #5674 (leftover #5665/#5542) |
+| Residual deposit keep-unknowns (run / hooks / codeql / approved-scope) | #5677 |
 
 ## Wave 4 consumers
 

package/dist/coverage-hotspots.d.ts

@@ -6,6 +6,9 @@ interface ParsedArgs {
     baseRef: string | null;
     pathFilter: string[];
     useDiffPaths: boolean;
+    attemptId: string | null;
+    worktree: string | null;
+    evaluatorId: string | null;
     json: boolean;
     quiet: boolean;
     error?: string;

package/dist/coverage-hotspots.js

@@ -18,6 +18,9 @@ export function parseArgs(argv) {
         baseRef: null,
         pathFilter: [],
         useDiffPaths: true,
+        attemptId: null,
+        worktree: null,
+        evaluatorId: null,
         json: false,
         quiet: false,
     };
@@ -32,6 +35,39 @@ export function parseArgs(argv) {
         else if (arg === "--no-diff-filter") {
             parsed.useDiffPaths = false;
         }
+        else if (arg === "--attempt-id") {
+            const value = argv[i + 1];
+            if (value === undefined) {
+                return { ...parsed, error: "argument --attempt-id: expected one argument" };
+            }
+            parsed.attemptId = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--attempt-id=")) {
+            parsed.attemptId = arg.slice("--attempt-id=".length);
+        }
+        else if (arg === "--worktree") {
+            const value = argv[i + 1];
+            if (value === undefined) {
+                return { ...parsed, error: "argument --worktree: expected one argument" };
+            }
+            parsed.worktree = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--worktree=")) {
+            parsed.worktree = arg.slice("--worktree=".length);
+        }
+        else if (arg === "--evaluator-id") {
+            const value = argv[i + 1];
+            if (value === undefined) {
+                return { ...parsed, error: "argument --evaluator-id: expected one argument" };
+            }
+            parsed.evaluatorId = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--evaluator-id=")) {
+            parsed.evaluatorId = arg.slice("--evaluator-id=".length);
+        }
         else if (arg === "--project-root") {
             const value = argv[i + 1];
             if (value === undefined) {
@@ -126,9 +162,13 @@ export function run(argv) {
         baseRef: args.baseRef,
         pathFilter: args.pathFilter.length > 0 ? args.pathFilter : null,
         useDiffPaths: args.useDiffPaths,
+        attemptId: args.attemptId,
+        worktree: args.worktree,
+        evaluatorId: args.evaluatorId,
     });
-    // Exit 3 = authorized coverage N/A (#5421); keep machine-readable artifact on stdout for --json.
-    if (result.exitCode === 3) {
+    // Exit 3 = authorized coverage N/A (#5421); exit 4 = gate-override waived (#5674).
+    // Keep machine-readable artifact on stdout for --json. Never map waived to exit 0.
+    if (result.exitCode === 3 || result.exitCode === 4) {
         if (args.json && result.applicability) {
             process.stdout.write(`${JSON.stringify(result.applicability, null, 2)}\n`);
         }

package/dist/occupancy-release.d.ts

@@ -5,6 +5,11 @@
  * claim-over and deny-embedded copy-paste remain. host:none / address:none
  * are unset metadata, not the lock cause. Does not reopen anonymous live
  * auto-release (#3954).
+ *
+ * #5544 Prefer-A: pass the supplied --project-root through to releaseOccupancy
+ * so the consumer AGENTS.md header check stays at the project directory.
+ * Lease file / lock resolution stays inside releaseOccupancy (shared with the
+ * Write-hook lease view); denials / already-free print occupancyFile=.
  */
 export declare const ABANDONED_OCCUPANCY_LEASE_RECOVERY: string;
 export declare function formatOccupancyReleaseHelp(): string;

package/dist/occupancy-release.js

@@ -1,5 +1,4 @@
 #!/usr/bin/env node
-import { resolve } from "node:path";
 import { releaseOccupancy } from "../vendor/directive-core/dist/session/index.js";
 import { occupancyUnrecognizedArgument } from "./occupancy-unrecognized.js";
 /**
@@ -8,17 +7,24 @@ import { occupancyUnrecognizedArgument } from "./occupancy-unrecognized.js";
  * claim-over and deny-embedded copy-paste remain. host:none / address:none
  * are unset metadata, not the lock cause. Does not reopen anonymous live
  * auto-release (#3954).
+ *
+ * #5544 Prefer-A: pass the supplied --project-root through to releaseOccupancy
+ * so the consumer AGENTS.md header check stays at the project directory.
+ * Lease file / lock resolution stays inside releaseOccupancy (shared with the
+ * Write-hook lease view); denials / already-free print occupancyFile=.
  */
 export const ABANDONED_OCCUPANCY_LEASE_RECOVERY = "Abandoned live occupancy lease: bare session:end / occupancy:release without a presented " +
     "session identity refuses while the lease is live. Immediate recovery: " +
     "occupancy:release --session-id=<id from .deft/occupancy.json> " +
     "(read session_id from that file). Or wait for TTL claim-over. " +
-    "host:none / address:none are ordinary unset metadata, not the lock cause.";
+    "host:none / address:none are ordinary unset metadata, not the lock cause. " +
+    "Denials and already-free print occupancyFile= for the lease root this CLI resolved.";
 export function formatOccupancyReleaseHelp() {
     return [
         "Usage: deft occupancy:release [--project-root <path>] [--session-id <id>]",
         "",
         "Release this worktree occupancy lease (owner live, or expired residue).",
+        "Pass the consumer project directory as --project-root (header check uses it; lease file resolves to the Git toplevel when available).",
         "",
         ABANDONED_OCCUPANCY_LEASE_RECOVERY,
         "",
@@ -83,7 +89,9 @@ export function run(argv) {
         process.stdout.write(formatOccupancyReleaseHelp());
         return 0;
     }
-    const result = releaseOccupancy(resolve(args.projectRoot), {
+    // Keep the supplied project directory for the consumer header check; lease
+    // root resolution happens inside releaseOccupancy (#5544 Greptile P1).
+    const result = releaseOccupancy(args.projectRoot, {
         sessionId: args.sessionId,
         env: process.env,
     });

package/dist/policy.d.ts

@@ -23,6 +23,8 @@ interface SetArgs {
     ceremonyEnabled?: boolean;
     /** #5350 driftGuard.enforcement target for set-spec-guard-enforcement. */
     specGuardEnforcement?: SpecGuardEnforcement;
+    /** #4375 audited setter for valueFeedback.upstreamPrompt. */
+    upstreamPrompt?: boolean;
     error?: string;
 }
 /** Parse policy:show flags (mirrors _policy_show_cli.py). */

package/dist/policy.js

@@ -261,11 +261,15 @@ export function parseArgs(argv) {
         let host;
         let ceremonyOverride;
         let ceremonyEnabled;
+        let upstreamPrompt;
         for (let i = 1; i < argv.length; i += 1) {
             const arg = argv[i];
             if (arg === "--confirm") {
                 confirm = true;
             }
+            else if (cmd === "enable-value-feedback" && arg === "--upstream-prompt") {
+                upstreamPrompt = true;
+            }
             else if (arg === "--actor") {
                 const v = argv[i + 1];
                 if (v === undefined)
@@ -377,6 +381,7 @@ export function parseArgs(argv) {
             host,
             ceremonyOverride,
             ceremonyEnabled,
+            upstreamPrompt,
         };
     }
     return makeSetError(`unknown subcommand: ${cmd}`);
@@ -457,6 +462,7 @@ function runEnableValueFeedback(args) {
         confirm: args.confirm,
         actor: args.actor,
         note: args.note,
+        subFlags: args.upstreamPrompt === true ? { upstreamPrompt: true } : undefined,
     });
     process.stdout.write(result.stdout);
     return result.exitCode;

package/dist/triage-actions.js

@@ -152,13 +152,21 @@ export function run(argv) {
     const repo = args.repo;
     try {
         if (args.cmd === "accept") {
-            const decisionId = accept(n, repo, deps, {
+            const outcome = accept(n, repo, deps, {
                 actor: args.actor,
                 projectRoot,
                 autoPromote: args.autoPromote === true,
                 force: args.force === true,
             });
-            process.stdout.write(`${formatAcceptOutput(n, repo, decisionId, { autoPromote: args.autoPromote === true })}\n`);
+            process.stdout.write(`${formatAcceptOutput(n, repo, outcome.decisionId, {
+                autoPromote: args.autoPromote === true,
+                disposition: outcome.disposition,
+                relativePath: outcome.relativePath,
+                ingestMessage: outcome.ingestMessage,
+            })}\n`);
+            if (outcome.disposition === "refused") {
+                return 1;
+            }
         }
         else if (args.cmd === "reject") {
             const decisionId = reject(n, repo, args.reason ?? "", deps, {

package/docs/framework-gap-filing.md

@@ -0,0 +1,85 @@
+# Framework-gap filing (consumer → deftai/directive)
+
+Durable house style for consumer framework-gap issues filed against
+`deftai/directive`. Mirrors the shipped builders `buildFrameworkGapTitle` and
+`buildFrameworkGapBody` in the value-feedback engine. This document is
+**gate-free**: agents may read it while `plan.policy.valueFeedback.upstreamPrompt`
+is OFF.
+
+Primary command: `deft feedback:file` (optional Taskfile wrapper when
+go-task is installed). Skill: `deft-directive-feedback`.
+
+Legend (from RFC2119): !=MUST, ~=SHOULD, ≉=SHOULD NOT, ⊗=MUST NOT, ?=MAY.
+
+## Title
+
+- ! Prefix with `[framework-gap]` (the builder adds it when missing).
+- ! Consumer hard-stop classification uses the sole title token `BLOCKER`
+  (`--blocker`). Example: `[framework-gap] BLOCKER Missing decompose hint`.
+- ⊗ Invent other title classifications. Label-only classes stay labels.
+- ⊗ Treat absence of `BLOCKER` as "not a blocker" — absence means not classified.
+
+## Body sections
+
+The builder emits this shape (placeholders when a field is omitted):
+
+1. `## Summary` — one-line sanitized summary
+2. `## Context`
+3. `## Expected behavior`
+4. `## Actual behavior / gap`
+5. `## Session notes`
+6. When `--blocker`: `## Adoption impact` with affected flow/version,
+   documented alternatives, observed recovery cost, and a triage owner/date
+   placeholder for a privileged actor
+7. Footer separator + `_Filed via \`deft feedback:file\` … (Refs #1709 …)_`
+
+Free-text fields fence line-leading `#` and `---` (indent) so operator paste
+cannot break the markdown skeleton.
+
+## Labels at create
+
+- ! Pass an **empty** label list at issue create. Consumers generally lack
+  push access to set labels.
+- ! Maintainer triage applies labels afterward from the maintainer catalog
+  (`.github/ISSUE_LABELS.md`) and `content/scm/github.md`.
+- ~ `docs/consumer-issue-label-kit.md` is contrast only for consumer-kit
+  repos — not the privileged upstream `adoption-blocker` SoT.
+- ⊗ Cite the consumer label kit as authority for upstream
+  `adoption-blocker`.
+
+## Privileged `adoption-blocker`
+
+- ! `adoption-blocker` is a **privileged write** after the body-evidence test
+  in `content/scm/github.md` § Consumer hard-blocker.
+- ! The `BLOCKER` title token is an inbound flare only; it never writes the
+  ranking label.
+- ⊗ Auto-apply or request `adoption-blocker` from a consumer-authored title alone.
+
+## Dedup
+
+- ! Normalize titles by stripping `[framework-gap]` and optional `BLOCKER`
+  before comparison so marked/unmarked drafts collide.
+- ! When an open upstream issue matches, STOP and link it — do not file again.
+
+## Tracking footer
+
+- ! Use `Refs #1709` (value-feedback gap escalation) only.
+- ⊗ Use `Closes` / `Fixes` / `Resolves` in the upstream body.
+
+## Draft → confirm
+
+1. Draft / readout: `deft feedback:file --summary "…" …` (optional
+   `--dry-run` / `--json`). Gate-OFF still returns title+body for template
+   readout; filing stays blocked until consent.
+2. Enable upstream path when needed:
+   `deft policy:enable-value-feedback --confirm --upstream-prompt`
+   (audited setter; bare `--confirm` does not silently enable
+   `upstreamPrompt`). ⊗ Hand-edit PROJECT-DEFINITION as the primary setter.
+3. Confirm: re-run the **same report fields and target repo** with `--confirm`
+   added and without `--dry-run` or `--json`.
+
+## Related
+
+- Skill: `skills/deft-directive-feedback/SKILL.md`
+- SCM hard-stop rules: `scm/github.md` § Consumer hard-blocker
+- Maintainer label catalog: `.github/ISSUE_LABELS.md` (repo-only; not deposited)

package/docs/product-signal.md

@@ -54,6 +54,6 @@ Agents: `deft-directive-product-signal` — triggers `product check-in`, `produc
 
 ## Related
 
-- Public gap escalation: `deft-directive-feedback` / `task feedback:file` (hard confirm)
+- Public gap escalation: `deft-directive-feedback` / `deft feedback:file` (hard confirm)
 - Skill telemetry emit: #829 (optional `skillsSummary` hook only; not required for pulse)
 - HTTP transport: #2697 (Phase 2)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deftai/directive-runtime",
-  "version": "0.126.0-beta.1",
+  "version": "0.126.0-beta.2",
   "description": "Directive runtime — pinned product commands, hooks, content, and engine.",
   "license": "MIT",
   "homepage": "https://deftai.github.io/directive/",

package/packs/skills/skills-pack-0.1.json

@@ -94,17 +94,20 @@
     },
     {
       "id": "deft-directive-feedback",
-      "description": "Batched session-end gap escalation for directive consumers. Collects friction/gap reports, drafts deduped framework-gap issues against deftai/directive, and files upstream only after explicit operator confirmation. Gated on plan.policy.valueFeedback upstreamPrompt.",
+      "description": "Mid-session and session-end framework-gap escalation for directive consumers. Collects friction/gap reports, drafts deduped framework-gap issues against deftai/directive, and files upstream only after explicit operator confirmation. Use when the operator says \"file a directive issue\", \"file this upstream\", or \"report a framework gap\".",
       "triggers": [
         "feedback",
         "framework gap",
         "file upstream",
+        "file this upstream",
+        "file a directive issue",
+        "report a framework gap",
         "gap escalation",
         "directive feedback"
       ],
       "path": "skills/deft-directive-feedback/SKILL.md",
       "version": "0.1",
-      "body": "# Deft Directive Feedback -- gap escalation to upstream\n\nConversational batched flow for filing framework gaps discovered during consumer sessions. Mirrors the confirmation gate from `deft-directive-article-review` -- the agent drafts and dedups; the operator approves before any upstream issue is created.\n\nLegend (from RFC2119): !=MUST, ~=SHOULD, ≉=SHOULD NOT, ⊗=MUST NOT, ?=MAY.\n\n## When to Use\n\n- Session end when `friction:*` ledger signals or operator reports a directive shortfall\n- Operator says \"file this upstream\", \"report a framework gap\", or \"directive feedback\"\n- After enabling `plan.policy.valueFeedback.upstreamPrompt` during onboarding\n\n## Preconditions\n\n- ! Run only from a **consumer project** -- the filing path no-ops inside the directive maintainer repo\n- ! `plan.policy.valueFeedback.upstreamPrompt` MUST be ON (`task policy:show --field=valueFeedback`)\n- ⊗ File upstream issues without explicit operator confirmation\n- ⊗ Invoke when `valueFeedback.enabled` is OFF\n\n## Phase 1 -- Collect (batched)\n\n- ! Gather concrete gap reports from the session: what was expected, what happened, and minimal reproduction context\n- ! Batch multiple friction items into one upstream issue when they share a root cause; otherwise prepare separate drafts\n- ~ Prefer attributed phrasing (\"encoding gate blocked a valid file\") over vague quality claims\n\n## Phase 1.5 -- Adoption-blocker judgment\n\n- ! Ask whether the gap blocks adoption. A gap blocks adoption when the consumer cannot complete an intended Directive flow and has no reasonable workaround.\n- ! When the answer is yes, collect the body evidence a privileged actor needs before applying `adoption-blocker`: affected consumer flow and version; documented alternatives attempted, or why they are not a reasonable workaround; observed recovery cost. Pass `--blocker` (and `--flow`, `--alternatives`, `--recovery-cost` when known) so the title carries `BLOCKER` and the body carries those sections.\n- ! When the answer is no or unknown, omit `--blocker`. Absence of the token does not mean \"not a blocker\" -- it means not classified.\n- ⊗ Apply or request the `adoption-blocker` ranking label from a consumer-authored title. The label is a privileged write after the body-evidence test.\n\n## Phase 2 -- Draft + dedup\n\n- ! For each candidate report, run a dry draft:\n\n```bash\ntask feedback:file -- --summary \"<one-line summary>\" --context \"<session context>\" --expected \"<expected>\" --actual \"<actual>\" --notes \"<optional>\" [--blocker --flow \"<flow and version>\" --alternatives \"<alts>\" --recovery-cost \"<cost>\"]\n```\n\n- ! Read the printed draft title/body with the operator before proceeding\n- ! If the command reports a duplicate open issue, STOP and link the existing issue instead of filing again\n- ⊗ Proceed past a duplicate-detection block without operator override\n\n## Phase 3 -- Confirm + file\n\n- ! Present the final draft and ask for explicit yes/no confirmation\n- ! Only after approval, re-run with `--confirm`:\n\n```bash\ntask feedback:file -- --summary \"<one-line summary>\" --context \"<session context>\" --expected \"<expected>\" --actual \"<actual>\" --confirm [--blocker]\n```\n\n- ! Print the filed issue URL to the operator\n- ⊗ Use `Closes`/`Fixes`/`Resolves` in the upstream body -- use `Refs #1709` only\n\n## Phase 4 -- Handoff\n\n- ~ Record the upstream issue URL in the session handoff or continue checkpoint if the operator tracks follow-ups locally\n- ~ Return to the prior workflow; gap escalation does not block story completion\n\n## Anti-Patterns\n\n- ⊗ Filing from the maintainer framework repo (consumer-only guard)\n- ⊗ Skipping dedup review when the command reports an existing open issue\n- ⊗ Treating `--confirm` as implicit from broad session approval -- require an explicit filing confirmation step\n- ⊗ Infer \"not a blocker\" from an unmarked report -- absence of `BLOCKER` means not classified\n- ⊗ Auto-apply `adoption-blocker` from a consumer-authored title\n",
+      "body": "# Deft Directive Feedback -- gap escalation to upstream\n\nConversational batched flow for filing framework gaps discovered during consumer sessions. Mirrors the confirmation gate from `deft-directive-article-review` -- the agent drafts and dedups; the operator approves before any upstream issue is created. House style for title/body/labels/dedup lives in [`docs/framework-gap-filing.md`](../../docs/framework-gap-filing.md).\n\nLegend (from RFC2119): !=MUST, ~=SHOULD, ≉=SHOULD NOT, ⊗=MUST NOT, ?=MAY.\n\n## When to Use\n\n- Mid-session when the operator says \"file a directive issue\", \"file this upstream\", \"report a framework gap\", or \"directive feedback\" -- even while `plan.policy.valueFeedback.upstreamPrompt` is OFF\n- Session end when `friction:*` ledger signals or the operator reports a directive shortfall\n- After the operator opts into upstream filing via the audited setter below\n\n## Preconditions\n\n- ! Run only from a **consumer project** -- the filing path no-ops inside the directive maintainer repo\n- ! Filing requires `plan.policy.valueFeedback.upstreamPrompt` ON. If OFF, draft with `deft feedback:file --dry-run` / `--json` (title+body still print), then ask the operator to enable via `deft policy:enable-value-feedback --confirm --upstream-prompt`. If declined, STOP safely -- do not hand-edit PROJECT-DEFINITION.\n- ! Inspect current state with `deft policy:show --field=valueFeedback`\n- ⊗ File upstream issues without explicit operator confirmation\n- ⊗ Treat handwritten typed-block / PROJECT-DEFINITION edits as the primary audited setter\n\n## Phase 1 -- Collect (batched)\n\n- ! Gather concrete gap reports from the session: what was expected, what happened, and minimal reproduction context\n- ! Batch multiple friction items into one upstream issue when they share a root cause; otherwise prepare separate drafts\n- ~ Prefer attributed phrasing (\"encoding gate blocked a valid file\") over vague quality claims\n- ! Follow [`docs/framework-gap-filing.md`](../../docs/framework-gap-filing.md) for title/BLOCKER, section shape, empty create labels, privileged `adoption-blocker`, dedup, and Refs\n\n## Phase 1.5 -- Adoption-blocker judgment\n\n- ! Ask whether the gap blocks adoption. A gap blocks adoption when the consumer cannot complete an intended Directive flow and has no reasonable workaround.\n- ! When the answer is yes, collect the body evidence a privileged actor needs before applying `adoption-blocker`: affected consumer flow and version; documented alternatives attempted, or why they are not a reasonable workaround; observed recovery cost. Pass `--blocker` (and `--flow`, `--alternatives`, `--recovery-cost` when known) so the title carries `BLOCKER` and the body carries those sections.\n- ! When the answer is no or unknown, omit `--blocker`. Absence of the token does not mean \"not a blocker\" -- it means not classified.\n- ⊗ Apply or request the `adoption-blocker` ranking label from a consumer-authored title. The label is a privileged write after the body-evidence test.\n\n## Phase 2 -- Draft + dedup\n\n- ! For each candidate report, run a dry draft (reuse the same report fields and target repo in Phase 3; confirmation adds `--confirm` and drops `--dry-run`/`--json`):\n\n```bash\ndeft feedback:file --summary \"<one-line summary>\" --context \"<session context>\" --expected \"<expected>\" --actual \"<actual>\" --notes \"<optional>\" [--blocker --flow \"<flow and version>\" --alternatives \"<alts>\" --recovery-cost \"<cost>\"] [--dry-run|--json]\n```\n\n- ! Read the printed draft title/body with the operator before proceeding\n- ! If the command reports a duplicate open issue, STOP and link the existing issue instead of filing again\n- ⊗ Proceed past a duplicate-detection block without operator override\n- ~ When go-task is installed, the Taskfile may wrap the same verb; prefer `deft feedback:file` as primary\n\n## Phase 3 -- Confirm + file\n\n- ! Present the final draft and ask for explicit yes/no confirmation\n- ! Only after approval, re-run the **same report fields and target repo** with `--confirm` added and without `--dry-run` or `--json`:\n\n```bash\ndeft feedback:file --summary \"<one-line summary>\" --context \"<session context>\" --expected \"<expected>\" --actual \"<actual>\" --confirm [--blocker]\n```\n\n- ! Print the filed issue URL to the operator\n- ⊗ Use `Closes`/`Fixes`/`Resolves` in the upstream body -- use `Refs #1709` only\n\n## Phase 4 -- Handoff\n\n- ~ Record the upstream issue URL in the session handoff or continue checkpoint if the operator tracks follow-ups locally\n- ~ Return to the prior workflow; gap escalation does not block story completion\n\n## Anti-Patterns\n\n- ⊗ Filing from the maintainer framework repo (consumer-only guard)\n- ⊗ Skipping dedup review when the command reports an existing open issue\n- ⊗ Treating `--confirm` as implicit from broad session approval -- require an explicit filing confirmation step\n- ⊗ Infer \"not a blocker\" from an unmarked report -- absence of `BLOCKER` means not classified\n- ⊗ Auto-apply `adoption-blocker` from a consumer-authored title\n- ⊗ Hand-editing PROJECT-DEFINITION to flip `upstreamPrompt` instead of the audited setter\n",
       "frontmatter_extra": null
     },
     {
@@ -233,7 +236,7 @@
       ],
       "path": "skills/deft-directive-product-signal/SKILL.md",
       "version": "0.1",
-      "body": "# Deft Directive Product Signal — consented check-in (#2693)\n\nAgent-driven qualitative product-improvement signal for partner/trial installs. Lightweight interview, minimized local summaries (value/health/helped), optional skillsSummary hook — submits to private `deftai/product-signal` when enable + consent gates pass.\n\nLegend (from RFC2119): !=MUST, ~=SHOULD, ≉=SHOULD NOT, ⊗=MUST NOT, ?=MAY.\n\n## When to Use\n\n- Operator says `product check-in`, `product pulse`, `partner feedback`, or `product signal`\n- Partner onboarding after ops enables `plan.policy.productSignal`\n- ⊗ Do NOT invoke from session:start or ambient rituals when disabled (#2693 D3)\n\n## Preconditions\n\n- ! `plan.policy.productSignal.enabled` MUST be true (`task policy:show --field=productSignal`)\n- ! Install-level consent MUST be recorded before outbound submit (`task product-signal:status`)\n- ! Consent schema v2 binds to the configured sinkRepo; legacy v1 consent authorizes only `deftai/product-signal` (#2767)\n- ! Re-consent after changing `plan.policy.productSignal.sinkRepo`; mismatch soft-skips as sink-unconsented\n- ⊗ Prompt or submit when `enabled` is false\n- ⊗ Block story work on sink errors — fail open (#2693 D16/D18)\n\n## Phase 1 — Gate\n\n```bash\ntask product-signal:status\ntask policy:show -- --field=productSignal\n```\n\n- ! If disabled: soft-skip with one line; exit skill\n- ! If headless/CI: fail open — no consent/interview prompts (#2693 D16)\n\n## Phase 2 — First-time consent (interactive only, D17)\n\nWhen enabled, interactive, and consent missing/revoked, ask:\n\n> May we collect usage metrics and related session signal from this install to improve Directive? This can include a short check-in plus minimized local summaries (value/health and related ledgers). Nothing is sent while this path is off or without your consent.\n>\n> If you are unsure, please check with your company before saying no — they are a Directive partner and may already expect this signal to be shared.\n>\n> Reply **yes** to consent, or **no** to decline.\n\n- **yes** → `task product-signal:consent -- --grant` (pass `--project-root` when using a custom sinkRepo); continue\n- **no** → soft-skip; do not badger every turn\n\n## Phase 3 — Interview (≤3 answers + optional NPS)\n\n- ! Ask at most three short questions plus optional NPS (0–10)\n- ~ Target ≤30s human time beyond first-time consent\n- ⊗ Paste secrets, paths, raw logs, or full USER.md into answers\n\n## Phase 4 — Assemble + validate + submit\n\n```bash\ntask product-signal:submit -- --surface pulse --dry-run\ntask product-signal:submit -- --surface pulse --nps 9\n```\n\n- ! On validation failure: show reason; no partial write\n- ! On sink ACL/network errors: soft-skip with hint; do not fail caller (#2693 D18)\n- ! Report issue URL on success\n\n## Private gaps (D19)\n\n- ! Record bugs/gaps as `Gap:` comments on the standing **pulse** thread (enable+consent sufficient)\n- ! Public promote to `deftai/directive` remains hard-confirm via `deft-directive-feedback` / `task feedback:file`\n\n## Revoke\n\n```bash\ntask product-signal:consent -- --revoke\n# and/or disable: set plan.policy.productSignal.enabled false\n```\n\n## Anti-Patterns\n\n- ⊗ Ambient consent nag when disabled\n- ⊗ Fail-closed headless behavior\n- ⊗ Sticky forever-fail when sink is down\n- ⊗ Auto-file public framework-gap issues from pulses\n\n## Exit\n\ndeft-directive-product-signal complete — exiting skill.\n",
+      "body": "# Deft Directive Product Signal — consented check-in (#2693)\n\nAgent-driven qualitative product-improvement signal for partner/trial installs. Lightweight interview, minimized local summaries (value/health/helped), optional skillsSummary hook — submits to private `deftai/product-signal` when enable + consent gates pass.\n\nLegend (from RFC2119): !=MUST, ~=SHOULD, ≉=SHOULD NOT, ⊗=MUST NOT, ?=MAY.\n\n## When to Use\n\n- Operator says `product check-in`, `product pulse`, `partner feedback`, or `product signal`\n- Partner onboarding after ops enables `plan.policy.productSignal`\n- ⊗ Do NOT invoke from session:start or ambient rituals when disabled (#2693 D3)\n\n## Preconditions\n\n- ! `plan.policy.productSignal.enabled` MUST be true (`task policy:show --field=productSignal`)\n- ! Install-level consent MUST be recorded before outbound submit (`task product-signal:status`)\n- ! Consent schema v2 binds to the configured sinkRepo; legacy v1 consent authorizes only `deftai/product-signal` (#2767)\n- ! Re-consent after changing `plan.policy.productSignal.sinkRepo`; mismatch soft-skips as sink-unconsented\n- ⊗ Prompt or submit when `enabled` is false\n- ⊗ Block story work on sink errors — fail open (#2693 D16/D18)\n\n## Phase 1 — Gate\n\n```bash\ntask product-signal:status\ntask policy:show -- --field=productSignal\n```\n\n- ! If disabled: soft-skip with one line; exit skill\n- ! If headless/CI: fail open — no consent/interview prompts (#2693 D16)\n\n## Phase 2 — First-time consent (interactive only, D17)\n\nWhen enabled, interactive, and consent missing/revoked, ask:\n\n> May we collect usage metrics and related session signal from this install to improve Directive? This can include a short check-in plus minimized local summaries (value/health and related ledgers). Nothing is sent while this path is off or without your consent.\n>\n> If you are unsure, please check with your company before saying no — they are a Directive partner and may already expect this signal to be shared.\n>\n> Reply **yes** to consent, or **no** to decline.\n\n- **yes** → `task product-signal:consent -- --grant` (pass `--project-root` when using a custom sinkRepo); continue\n- **no** → soft-skip; do not badger every turn\n\n## Phase 3 — Interview (≤3 answers + optional NPS)\n\n- ! Ask at most three short questions plus optional NPS (0–10)\n- ~ Target ≤30s human time beyond first-time consent\n- ⊗ Paste secrets, paths, raw logs, or full USER.md into answers\n\n## Phase 4 — Assemble + validate + submit\n\n```bash\ntask product-signal:submit -- --surface pulse --dry-run\ntask product-signal:submit -- --surface pulse --nps 9\n```\n\n- ! On validation failure: show reason; no partial write\n- ! On sink ACL/network errors: soft-skip with hint; do not fail caller (#2693 D18)\n- ! Report issue URL on success\n\n## Private gaps (D19)\n\n- ! Record bugs/gaps as `Gap:` comments on the standing **pulse** thread (enable+consent sufficient)\n- ! Public promote to `deftai/directive` remains hard-confirm via `deft-directive-feedback` / `deft feedback:file`\n\n## Revoke\n\n```bash\ntask product-signal:consent -- --revoke\n# and/or disable: set plan.policy.productSignal.enabled false\n```\n\n## Anti-Patterns\n\n- ⊗ Ambient consent nag when disabled\n- ⊗ Fail-closed headless behavior\n- ⊗ Sticky forever-fail when sink is down\n- ⊗ Auto-file public framework-gap issues from pulses\n\n## Exit\n\ndeft-directive-product-signal complete — exiting skill.\n",
       "frontmatter_extra": null
     },
     {

package/scm/github.md

@@ -531,7 +531,7 @@ Agent `edit_files` operations can fail when structured file sections contain Uni
 
 This is the canonical ranking label for **a Directive consumer cannot complete an intended flow and has no reasonable workaround**. The range is install, first session, update, `task check`, and ship -- not onboarding alone. Do not invent a second ranking label for that class.
 
-**Title classification (the one sanctioned exception, #3713):** `BLOCKER` in the title is permitted for this class, and is the **only** classification allowed in an issue title. Every other classification stays label-only. Reason: the filing population cannot apply labels -- GitHub requires push access to set them at issue creation. The token is an inbound flare; it never writes `adoption-blocker`. A privileged actor applies the label after the body-evidence test below. Absence of the token does not mean "not a blocker." `task feedback:file --blocker` is the consumer filing path that carries the token and this evidence.
+**Title classification (the one sanctioned exception, #3713):** `BLOCKER` in the title is permitted for this class, and is the **only** classification allowed in an issue title. Every other classification stays label-only. Reason: the filing population cannot apply labels -- GitHub requires push access to set them at issue creation. The token is an inbound flare; it never writes `adoption-blocker`. A privileged actor applies the label after the body-evidence test below. Absence of the token does not mean "not a blocker." `deft feedback:file --blocker` is the consumer filing path that carries the token and this evidence. See also [`docs/framework-gap-filing.md`](../docs/framework-gap-filing.md).
 
 **Release census (#3969 / #4917):** `task verify:consumer-hard-stops` blocks a cut only for open `blocks-release-tag`. `adoption-blocker` is the punch list and does not block a tag. The BLOCKER title flare does not by itself block a cut. Issue bodies are not read into the verdict.
 

package/skills/deft-directive-feedback/SKILL.md

@@ -1,10 +1,11 @@
 ---
 name: deft-directive-feedback
 description: >-
-  Batched session-end gap escalation for directive consumers. Collects
-  friction/gap reports, drafts deduped framework-gap issues against
-  deftai/directive, and files upstream only after explicit operator
-  confirmation. Gated on plan.policy.valueFeedback upstreamPrompt.
+  Mid-session and session-end framework-gap escalation for directive
+  consumers. Collects friction/gap reports, drafts deduped framework-gap
+  issues against deftai/directive, and files upstream only after explicit
+  operator confirmation. Use when the operator says "file a directive issue",
+  "file this upstream", or "report a framework gap".
 ---
 <!-- AUTO-GENERATED by task packs:render -- DO NOT EDIT MANUALLY -->
 <!-- Purpose: rendered skill -->
@@ -14,28 +15,30 @@ description: >-
 
 # Deft Directive Feedback -- gap escalation to upstream
 
-Conversational batched flow for filing framework gaps discovered during consumer sessions. Mirrors the confirmation gate from `deft-directive-article-review` -- the agent drafts and dedups; the operator approves before any upstream issue is created.
+Conversational batched flow for filing framework gaps discovered during consumer sessions. Mirrors the confirmation gate from `deft-directive-article-review` -- the agent drafts and dedups; the operator approves before any upstream issue is created. House style for title/body/labels/dedup lives in [`docs/framework-gap-filing.md`](../../docs/framework-gap-filing.md).
 
 Legend (from RFC2119): !=MUST, ~=SHOULD, ≉=SHOULD NOT, ⊗=MUST NOT, ?=MAY.
 
 ## When to Use
 
-- Session end when `friction:*` ledger signals or operator reports a directive shortfall
-- Operator says "file this upstream", "report a framework gap", or "directive feedback"
-- After enabling `plan.policy.valueFeedback.upstreamPrompt` during onboarding
+- Mid-session when the operator says "file a directive issue", "file this upstream", "report a framework gap", or "directive feedback" -- even while `plan.policy.valueFeedback.upstreamPrompt` is OFF
+- Session end when `friction:*` ledger signals or the operator reports a directive shortfall
+- After the operator opts into upstream filing via the audited setter below
 
 ## Preconditions
 
 - ! Run only from a **consumer project** -- the filing path no-ops inside the directive maintainer repo
-- ! `plan.policy.valueFeedback.upstreamPrompt` MUST be ON (`task policy:show --field=valueFeedback`)
+- ! Filing requires `plan.policy.valueFeedback.upstreamPrompt` ON. If OFF, draft with `deft feedback:file --dry-run` / `--json` (title+body still print), then ask the operator to enable via `deft policy:enable-value-feedback --confirm --upstream-prompt`. If declined, STOP safely -- do not hand-edit PROJECT-DEFINITION.
+- ! Inspect current state with `deft policy:show --field=valueFeedback`
 - ⊗ File upstream issues without explicit operator confirmation
-- ⊗ Invoke when `valueFeedback.enabled` is OFF
+- ⊗ Treat handwritten typed-block / PROJECT-DEFINITION edits as the primary audited setter
 
 ## Phase 1 -- Collect (batched)
 
 - ! Gather concrete gap reports from the session: what was expected, what happened, and minimal reproduction context
 - ! Batch multiple friction items into one upstream issue when they share a root cause; otherwise prepare separate drafts
 - ~ Prefer attributed phrasing ("encoding gate blocked a valid file") over vague quality claims
+- ! Follow [`docs/framework-gap-filing.md`](../../docs/framework-gap-filing.md) for title/BLOCKER, section shape, empty create labels, privileged `adoption-blocker`, dedup, and Refs
 
 ## Phase 1.5 -- Adoption-blocker judgment
 
@@ -46,23 +49,24 @@ Legend (from RFC2119): !=MUST, ~=SHOULD, ≉=SHOULD NOT, ⊗=MUST NOT, ?=MAY.
 
 ## Phase 2 -- Draft + dedup
 
-- ! For each candidate report, run a dry draft:
+- ! For each candidate report, run a dry draft (reuse the same report fields and target repo in Phase 3; confirmation adds `--confirm` and drops `--dry-run`/`--json`):
 
 ```bash
-task feedback:file -- --summary "<one-line summary>" --context "<session context>" --expected "<expected>" --actual "<actual>" --notes "<optional>" [--blocker --flow "<flow and version>" --alternatives "<alts>" --recovery-cost "<cost>"]
+deft feedback:file --summary "<one-line summary>" --context "<session context>" --expected "<expected>" --actual "<actual>" --notes "<optional>" [--blocker --flow "<flow and version>" --alternatives "<alts>" --recovery-cost "<cost>"] [--dry-run|--json]
 ```
 
 - ! Read the printed draft title/body with the operator before proceeding
 - ! If the command reports a duplicate open issue, STOP and link the existing issue instead of filing again
 - ⊗ Proceed past a duplicate-detection block without operator override
+- ~ When go-task is installed, the Taskfile may wrap the same verb; prefer `deft feedback:file` as primary
 
 ## Phase 3 -- Confirm + file
 
 - ! Present the final draft and ask for explicit yes/no confirmation
-- ! Only after approval, re-run with `--confirm`:
+- ! Only after approval, re-run the **same report fields and target repo** with `--confirm` added and without `--dry-run` or `--json`:
 
 ```bash
-task feedback:file -- --summary "<one-line summary>" --context "<session context>" --expected "<expected>" --actual "<actual>" --confirm [--blocker]
+deft feedback:file --summary "<one-line summary>" --context "<session context>" --expected "<expected>" --actual "<actual>" --confirm [--blocker]
 ```
 
 - ! Print the filed issue URL to the operator
@@ -80,3 +84,4 @@ task feedback:file -- --summary "<one-line summary>" --context "<session context
 - ⊗ Treating `--confirm` as implicit from broad session approval -- require an explicit filing confirmation step
 - ⊗ Infer "not a blocker" from an unmarked report -- absence of `BLOCKER` means not classified
 - ⊗ Auto-apply `adoption-blocker` from a consumer-authored title
+- ⊗ Hand-editing PROJECT-DEFINITION to flip `upstreamPrompt` instead of the audited setter

package/skills/deft-directive-product-signal/SKILL.md

@@ -75,7 +75,7 @@ task product-signal:submit -- --surface pulse --nps 9
 ## Private gaps (D19)
 
 - ! Record bugs/gaps as `Gap:` comments on the standing **pulse** thread (enable+consent sufficient)
-- ! Public promote to `deftai/directive` remains hard-confirm via `deft-directive-feedback` / `task feedback:file`
+- ! Public promote to `deftai/directive` remains hard-confirm via `deft-directive-feedback` / `deft feedback:file`
 
 ## Revoke
 

package/vendor/directive-content/contracts/human-origin-authz.md

@@ -89,17 +89,21 @@ deft authz:uat-suspend
 deft authz:revoke -- grant-…
 ```
 
-## Gate-override hatch (#5542)
+## Gate-override hatch (#5542 / #5674)
 
 Mint + admission APIs for an audited interactive override bound to a coverage-
-applicability refuse. **This release ships grant minting and admission only.**
-Wiring that turns a live admission into a `waived` / exit-4 result on the pre-PR
-`coverage_headroom` / `deft coverage:hotspots` path is a follow-up PR; operators
-minting a grant here will still see the refuse until that consumer lands.
+applicability refuse (#5542). Consumer wiring on pre-PR `coverage_headroom` /
+`deft coverage:hotspots` lands as **exit 4** + distinct waived skip token with
+admission-receipt re-verify (#5674). Measured Istanbul floor/headroom failure
+still dominates when a coverage report exists. Exit 4 never maps to pass /
+exit 0. Residual deposit keep-unknowns (run / hooks / codeql / approved-scope)
+stay open on #5677. Classifier exact-path relief for ordinary managed
+stamps/ledgers is #5665 — not this hatch.
 
 ```bash
 deft authz:grant -- --template gate-override --target <refuseCode> \
   --plan-ref <attemptId> --base-sha <sha> --head-sha <sha> --tree-hash <hash> [--confirm]
+deft coverage:hotspots --attempt-id <attemptId>
 ```
 
 | Rule | Detail |
@@ -107,11 +111,11 @@ deft authz:grant -- --template gate-override --target <refuseCode> \
 | Mint provenance | `origin.kind=operator-cli` only via live `authz:grant` human-presence; `operator-session` non-admitting; refuse chat/parent/fixture consent |
 | Binding | gate id + refuse code + `baseSha+headSha+treeHash` + attempt id (+ optional worktree/evaluator) |
 | Admission | Atomic one-use via claim lock; inspection does **not** consume; same attempt reuses receipt; renew after revoke/expiry replaces under an attempt-id lock |
-| Result arms (follow-up) | Planned `waived` / `overridden` on coverage-applicability + pre-PR evidence — **never** map to pass / exit 0; not wired in this authz-only landing |
+| Result arms (#5674) | Live `waived` on coverage-hotspots + pre-PR evidence via exit 4 + waived skip token — **never** map to pass / exit 0; measured floor dominates when a report exists |
 | Eligible refuse codes | Closed set (`unknown-path`, `dirty-tree`, …); non-overridable authenticity codes (`tree-mismatch`, `invalid-*`) dominate |
 | Deferred peers | Empty list in v1 |
 | Push/merge | Grant is `settings` only — no independent push/merge permission |
-| Keep-outs | Does not fix #5541 classifier correctness; no fabricate green; no UAT silent suspend; no blanket env override |
+| Keep-outs | Does not fix #5541 / #5665 classifier correctness; no fabricate green; no UAT silent suspend; no blanket env override |
 
 Complementary hatches stay separate: `--allow-coverage-debt`, `policy:allow-*`,
 `DEFT_ALLOW_*`, delivery-attempt `recordOperatorOverride`, `spec-drift-override`.
@@ -125,8 +129,10 @@ Complementary hatches stay separate: `--allow-coverage-debt`, `policy:allow-*`,
 | Path write fence schema | #516 / #2443 |
 | AFK session-auth / release verbs | #1095 — see `content/contracts/closed-verb-authz.md` (Wave 4; consumes these grants) |
 | HMAC / hardware-keyed grants | non-goal for MVP |
-| Classifier false-refuse correctness | #5541 (not absorbed by gate-override) |
+| Classifier false-refuse correctness | #5541 / #5665 (not absorbed by gate-override) |
 | Interactive gate waiver audit | #5542 (this hatch) |
+| Pre-PR/hotspots waived-exit consumer + VERSION/lifecycle gitkeep inert | #5674 (leftover #5665/#5542) |
+| Residual deposit keep-unknowns (run / hooks / codeql / approved-scope) | #5677 |
 
 ## Wave 4 consumers