@dzhechkov/harness-cli 0.8.22 → 0.8.24

package/src/cli.ts

@@ -19,6 +19,37 @@ import { createRequire } from 'node:module';
 import { isDeepStrictEqual } from 'node:util';
 import { JOURNAL_KINDS, formatLine, parseLine, selectWindow, appendWitnessed, type JournalKind, type JournalIo } from '@dzhechkov/harness-core';
 import { appendRunEvent, readRunRegistry, liveParents, liveness, probePid, settleDeadRuns, planRegistryArchive, planWorktreeCleanup, renderCleanupPlan, worktreeRemovalsToApply, type WorktreeFact, type RunEvent } from '@dzhechkov/harness-core';
+import {
+  openRound,
+  closeRound,
+  listRounds,
+  parseCodexTokens,
+  classifyRoundExecOutcome,
+  buildRoundExecRow,
+  type RoundLedgerRow,
+  type RoundExecLedgerRow,
+  type RoundState,
+} from '@dzhechkov/harness-core';
+
+// round-state-lock fix-round AM-1: augment (not fork) harness-core's `RoundState` with an opaque
+// per-open identity token. Module augmentation keeps this CLI-only (harness-core/src/round.ts is
+// out of this fix's scope — its own pure decisions never need to know the token exists) while still
+// letting every `RoundState`-typed value in this file carry `stateId` with full type-checking. The
+// field is OPTIONAL: a state written before this fix (or by a test's raw `writeFileSync`) parses
+// fine without it, and identity checks below treat a missing `stateId` as `undefined === undefined`
+// (matches only itself), never as a wildcard.
+declare module '@dzhechkov/harness-core' {
+  interface RoundState {
+    /** 16 random hex chars, minted once by `open`. The identity comparison `exec`/`close` use
+     * instead of pid: `process.ppid` coincides for two `dz` launched from the same shell, and every
+     * run-owned state carries pid 0 (teach:0ea46034 — pid is not identity). */
+    readonly stateId?: string;
+    /** Lead edit after Codex re-review: identity of ONE exec claim (two execs of the same round
+     * instance are different claims) and when it was taken — the stale-exec warning counts from it. */
+    readonly execClaimId?: string;
+    readonly execClaimedAt?: string;
+  }
+}
 
 import {
   createSkill,
@@ -61,6 +92,7 @@ import {
   generatePlugin,
   publishPackages,
   runSetup,
+  memoryBackendSourceLabel,
   runMigrate,
   searchRegistry,
   runSync,
@@ -98,10 +130,15 @@ import {
   hasPolicyFence,
   TARGET_NAMES,
   buildParityMatrix,
+  computeParity,
+  PARITY_FEATURES,
   downgradeForStaleEvidence,
   findStaleTranscriptEvidence,
   TARGET_CAPABILITIES,
   TARGET_SHORT_LABELS,
+  applyLegStatus,
+  applyLegReasonMessage,
+  resolveAgentdbPath,
   WORKFLOW_TEMPLATES_RETIRED_MESSAGE,
   parsePlan,
   isParseErrors,
@@ -174,7 +211,7 @@ import {
   type StoreCountSnapshot,
   type RunSegment,
   type StageSample,
-  computeUsage,
+  computeSpendReport,
   deriveCostLedger,
   planLedgerBackfill,
   listCostLedgerRuns,
@@ -186,10 +223,7 @@ import {
   verifyCostLedgerReport,
   writeCostLedgerJsonl,
   COST_LEDGER_SCOPE,
-  deriveUsageCalibration,
-  normalizeClaudeUsageModelKey,
-  readUsageLimits,
-  parseWeeklyResetAnchor,
+  spendReport,
   claimCheck,
   summarize,
   BUNDLED_SLOP_REGISTRY_URL,
@@ -210,6 +244,10 @@ import {
   recordToPattern,
   bundleSkills,
   brainHome,
+  brainAgentdbPath,
+  listPreReindexSnapshots,
+  rotatePreReindexSnapshots,
+  scanSnapshotDir,
   listBrain,
   bookKbPath,
   promoteProjectToBrain,
@@ -281,6 +319,11 @@ import {
   verifyManifest,
   hashPackBytes,
   rewriteWorkspaceSpecs,
+  detectSiblingDrift,
+  planPackedInstallSmoke,
+  judgePackedInstallSmoke,
+  type FetchPublished,
+  type PackedInstallExecution,
   listPackFiles,
   listSignablePackFiles,
   assertKeyOutsideTree,
@@ -418,6 +461,7 @@ import {
   countRecallEventsForRun,
   unknownFlagNotice,
   mirrorWriterExplanation,
+  mirrorWriterReason,
   appendRecallUsage,
   closenessLine,
   anyAboveFloor,
@@ -510,6 +554,8 @@ import {
   renderReqeList,
   REQE_SCOPE,
   // Mutation gate (feature ha-mutation-gate) — break each named protection, run the suite, require red.
+  REGISTRY_SELFCHECK_TESTS,
+  buildMutationTestCommand,
   parseMutationRegistry,
   applyMutationToText,
   attributeBaselineRedness,
@@ -593,7 +639,7 @@ import type { SetupSpec } from '@dzhechkov/harness-core';
 import type { LogTail } from '@dzhechkov/harness-core';
 import type { DeadwoodInventoryItem } from '@dzhechkov/harness-core';
 import type { ContractDiagnostic, ContractEvidenceReader } from '@dzhechkov/harness-core';
-import type { ProvenanceMode, PackVerdict, ClaudeUsageModel, PatternRecord, RecallPatternsOptions, TeachGuardResult, TargetName, IntegrationOutcome, BookKU, HarmonizeReport, UsageCalibrationPlan, ClaimFinding, RecallUsagePatternRow, GateExecution, GateStep, SlopFinding, SlopLintConfig, SlopRegistry } from '@dzhechkov/harness-core';
+import type { ProvenanceMode, PackVerdict, PatternRecord, RecallPatternsOptions, TeachGuardResult, TargetName, IntegrationOutcome, BookKU, HarmonizeReport, ClaimFinding, RecallUsagePatternRow, GateExecution, GateStep, SlopFinding, SlopLintConfig, SlopRegistry, PackedTarballArtifact, PackedTransportSmokeVerdict } from '@dzhechkov/harness-core';
 import { getPreset, PRESET_NAMES } from '@dzhechkov/harness-presets';
 import { scanGitHub, analyzeRepo, generateReport, deepAnalyze, scanAllSources, ScoutMemory } from '@dzhechkov/scout';
 
@@ -637,7 +683,7 @@ export const DZ_COMMANDS: readonly string[] = [
   'epoch-replay', 'score', 'recap', 'cadence', 'qe-rounds', 'restart-advisor', 'tg-post',
   'name-check', 'brief-check', 'provenance-check', 'journal', 'feature-adr-record', 'runs', 'runs-record', 'runs-clean', 'amendment-check', 'contract-check',
   'feature-adr-checkpoint', 'profile', 'reqe', 'qe-bridge', 'backlog', 'routing',
-  'bto-optimize', 'dashboard', 'roam', 'import-ecc', 'chain',
+  'bto-optimize', 'dashboard', 'roam', 'import-ecc', 'chain', 'round',
 ];
 
 const USAGE = `dz - DZ cross-platform harness CLI
@@ -699,7 +745,8 @@ Usage:
   dz amendment-check --slug <slug> | --feature-dir <dir> | --all [--json]   (the deterministic Step-8 amendment gate: every AM-N / AM-CP-N row must resolve to a test found INSIDE the file the row names (the challenge-panel prefix is part of the id: AM-CP-1 is never AM-1); the PLAN is authoritative when it carries rows, and an ideation amendment the plan drops is a failure. exit 0 pass/skip, 1 fail, 3 NOT-ESTABLISHED — a section that parsed ZERO rows is never a pass, UNLESS the plan explicitly declares \"None\"/\"нет\", which is an answer and reports skip. --all is a CENSUS and always exits 0. Does NOT prove non-vacuity — that is dz discrimination-check)
   dz contract-check --slug <s> [--json]   (read-only retrospective feature contract gate: extracts canonical AC-N + ADR Confirmation items, requires one artifact-anchored met|unmet|not-testable verdict per CC-N, and rejects A/B with unmet. exit 0 pass / 1 readable contract or verdict violation / 2 invalid invocation or unreadable/not-established artifacts)
   dz journal add --kind decision|verdict|run|error|block "<text>" [--ref <trace>] [--at <ISO>] [--quote <file>] [--commit-quote]; dz journal show [--day|--week] [--at <date>] [--kind <kind>] [--json]   (UTC day files, witnessed append; quotes stay local unless explicitly staged)
-  dz feature-adr-record --kind ledger|training-pair --stage <s> [--slug <s>] [--row|--pair <json>] [--mark <n>] [--once] [--json]   (the witnessed writer for the run-cost ledger and training pairs: the payload arrives as an ARGUMENT, never as shell; a malformed or wrong-kind payload is REFUSED before any write; the timestamp is stamped before serialising; the append is verified by re-reading the tail. exit 0 written|duplicate|skipped, 2 refused, 3 not-verified — a record failure is never blocking)
+  dz feature-adr-record --kind ledger|training-pair --stage <s> [--slug <s>] [--row|--pair <json>] [--run-id <id>] [--mark <n>] [--once] [--json]   (the witnessed writer for the run-cost ledger and training pairs: the payload arrives as an ARGUMENT, never as shell; a malformed or wrong-kind payload is REFUSED before any write; for a ledger row, 'ts' is ALWAYS the actual write instant (ledger-stage-minutes FR-1) — a payload-supplied 'ts' is never trusted for the delta below, and is preserved as 'payloadTs' rather than discarded; --run-id fills the payload's runId ONLY when it is a gap — absent, null, '', or non-string, the same 'missing when absent or blank' rule runnerId uses — and stamps runIdSource:'cli-flag' when it does; for an auto:true ledger row that carries a runId — from the payload, from --run-id, or resolved at write time — the append also carries minutesSincePrev/minutesSource:'ledger-ts-delta' measured against the LAST row of the same run found by a best-effort reverse scan that reports 'unavailable' (never a guess) on a missing prior row OR a corrupt/non-object ledger line anywhere between it and the file's end (ledger-corrupt-line); minutes itself stays untouched. New fields (ts, minutesSincePrev, minutesSource) are always appended after every existing key, never reordering one. The append is verified by re-reading the tail. exit 0 written|duplicate|skipped, 2 refused, 3 not-verified — a record failure is never blocking)
+  dz round open --slug <s> --round <n|auto> --topic <text> [--project <brain>] [--run <id>] [--owner-pid <n>|--owner-run <runId>] [--force] [--json]; dz round exec --slug <s> --round <n> --brief <file> [--log <file>] [--model gpt-5.6-sol] [--effort high] [--timeout-min 30] [--json]; dz round close --slug <s> --round <n> --outcome shipped|refuted|blocked|abandoned [--reason <text>] [--lesson teach:<id>...]|[--no-new-knowledge <reason>] [--tokens N] [--agents N] [--coder <spec>] [--reviewer <spec>] [--note <text>] [--no-cost] [--json]; dz round status [--older-than <minutes>] [--json]   (focused rounds outside feature-adr: open tracks the parent process by default, an explicit pid, or a registered run; live/stalled run owners stay live and missing registry evidence stays unknown; open --force refuses a live or unknown owner and archives a known-dead owner's state; recall precedes work, then the witnessed ledger is trusted only after reading it back)
   dz feature-adr-checkpoint (--slug <feature> | --feature-dir <abs>) --stage <s> --input-hash <h> --result <json> [--artifact a,b] [--json]   (record a pipeline stage ONLY after measuring its artifacts on disk; refuses a null result, an absent artifact, or a stage that declares none — the subagent runs a COMMAND instead of hand-writing durable state)
   dz profile [init|show|set|sync] [--json]   (WHO the assistant is talking to — per-user store at ~/.dz/profile.json (0600, NEVER in a project), delivered as a marked block in ~/.claude/CLAUDE.md so it loads in EVERY project, dz installed or not. init = five questions (language, register, deep/weak domains as comma lists — "networking (CCIE; NSX)" keeps the parenthetical as the note, Enter skips — teaches y/n with one re-ask, never a silent default); show ALWAYS prints the store path + age + drift verdict + the rendered block; set register|language|teaches <v> or set deep|weak add|rm <tag> [note] — register accepts the owner's own words (профи / профи лайт / просто), an unknown value is REFUSED naming the accepted set; sync re-writes the block (runs automatically after init/set; foreign content byte-for-byte, timestamped backup before every modifying write). The register changes FORM, never FACTS, and governs dialogue only — never ADRs/commits/QE reports; both rules are baked into the rendered block at every level. exit 0 done / 1 no profile or failed / 2 refused input)
   dz reqe [--slug <feature> [--done --report <f>]] [--json]   (the re-QE debt ledger: a usage-switched run whose Step-8 QE ran on the coder's OWN family records a debt; list debts, print the cross-family review brief, settle FAIL-CLOSED against a graded report — the settlement lands in 08_qe_report.md)
@@ -732,7 +779,8 @@ Usage:
   dz brain query "<q>" [--source <slug>] [--limit <N>] [--any] [--rerank] [--json]  (cross-source recall; --any = OR match; --rerank reorders top-K)
   dz brain add   [--source <slug>] [--project <dir>] [--from-slice <f>|--from-pack <p>|--from-kus <f> --slug <s>] [--kind <k>] [--license <spdx>] [--json]   (grow the brain: promote this project, or import a slice/pack/KU-array)
   dz brain update <slug> [--project <dir>] [--json]                    (non-destructive refresh: re-mirror a re-ingested source into the brain)
-  dz brain reindex [--json]                                            (snapshot, re-embed book-KU brain vectors, stamp current model)
+  dz brain reindex [--json]                                            (snapshot, re-embed book-KU brain vectors, stamp current model; also rotates old pre-reindex snapshots)
+  dz brain snapshots [--keep <N>] [--prune] [--json] [--project <dir>] (list — or, with --prune, rotate — pre-reindex snapshot families of the home brain, or of <dir>/.dz/agentdb.db; default keep 3)
   dz brain primer <slug> [--json]                                     (print a source's capability card — KU-type histogram + top decision moments)
   dz brain export --source <slug> --out <file>                        (export ONE source as a portable, lexical-only books.sqlite slice)
   dz brain ground [<prompt>] [--k <N>] [--source <slug>] [--text] [--budget <N>] [--full]  (UserPromptSubmit hook; --budget inlines top-K KUs within ~N tokens; --full = ~8000)
@@ -741,7 +789,7 @@ Usage:
   dz statusline [--json] [--install] [--project <dir>]                 (live self-learning panel for Claude Code's status bar; reads the CC JSON payload from STDIN)
   dz store-guard [--status|--reset] [--yes] [--project <dir>]          (show the monotonic external high-water mark; --reset is the only lowering path and requires confirmation or --yes)
   dz statusline --fa-record --slug <s> --step "<label>" [--kind <feature-adr|loop>] [--tier <S|M|L|XL>] [--run-id <id>] [--recalled <n>] [--stored <n>] [--mode <m>]   (feature-adr: record live per-run learning state + phase → 📐 SECOND-LINE phase panel; the monotone guard absorbs a backwards plain "Step <n>" only within the same non-empty run id, while an absent/empty id retains legacy fresh-slot behavior — prefix the label with ⛔ or ⏸ to record a legitimate regression)
-  dz usage [--json] [--project <dir>] | dz usage --calibrate --session <pct> --weekly <pct> [--model fable=<pct>] [--project <dir>]  (ESTIMATE Claude usage from fixed reset windows; optional per-model weekly binding; exit 0 ALWAYS; pct=null when limits unconfigured)
+  dz usage [--json] [--project <dir>]  (7-day UTC spend from local Claude Code + subagent transcripts; provider-limit routing disabled by design)
   dz usage --by-stage [--run <runId> | --slug <slug>] [--epsilon <0..1>] [--write <file.jsonl>] [--json]   (per-stage cost ledger for ONE feature-adr run + the reconciliation invariant: accounted + unaccounted = run total; verdict BALANCED | DEFECT | INSUFFICIENT_DATA; local transcript ESTIMATES — catches ATTRIBUTION errors, not pricing errors)
   dz chain [--project <dir>] [--json]   (verify EVERY hash-chained journal in ONE command: coverage is DERIVED from the CHAINED_JOURNALS registry, never typed, so a journal cannot be given a chain and checked by nobody. An ABSENT journal is NAMED absent, never omitted — omission and cleanliness are indistinguishable in a report. Statuses: ok | healed (defects the current unbroken run has outlived — verdicts over present records are sound) | unchained (present, no chained record yet — legal) | absent | broken | unreadable. Exit 1 on broken/unreadable: a verifier that reports damage and exits 0 is one no automation can act on)
   dz claim-check [paths...] [--json] [--fail-on high|medium|none] [--project <dir>]  (enforce the Integrity Rule: flag untagged/overstated accuracy claims; default scan = root README.md + every discovered package's README.md + features/*/08_qe_report.md + docs/**/*.md (historical feature artifacts are NOT scanned — pass paths explicitly); exit 1 only at/above --fail-on, default high)
@@ -801,7 +849,12 @@ export interface MutationGateRunnerObservation {
 
 export type MutationGateRunner = (
   command: string,
-  options: { readonly cwd: string; readonly timeoutMs: number },
+  options: {
+    readonly cwd: string;
+    readonly timeoutMs: number;
+    readonly phase: 'baseline' | 'mutation' | 'rebaseline' | 'final-rebaseline';
+    readonly entryId?: string;
+  },
 ) => MutationGateRunnerObservation;
 
 /** Output sink + working directory — injectable so the CLI is testable. */
@@ -830,10 +883,45 @@ export interface CliIo {
   readonly interactive?: boolean;
   /** Fault seam proving that class-form recall degrades to specific recall with a stderr receipt. */
   readonly classMatcher?: RecallPatternsOptions['classMatcher'];
+  /** Focused-round seams: production still uses the real store, writer, ledger tail and pid probe. */
+  readonly roundNow?: () => number;
+  readonly roundPid?: number;
+  readonly roundRecall?: (projectRoot: string, topic: string, options: {
+    readonly limit: number;
+    readonly runId?: string;
+  }) => Promise<readonly {
+    readonly id: string;
+    readonly reward: number;
+    readonly domain: string;
+    readonly text: string;
+  }[]>;
+  readonly roundLessonExists?: (projectRoot: string, id: string) => boolean;
+  readonly roundLedgerWriter?: (projectRoot: string, row: RoundLedgerRow | RoundExecLedgerRow) => unknown;
+  readonly roundLedgerReader?: (projectRoot: string) => string;
+  readonly roundPidProbe?: (pid: number) => boolean | null;
+  readonly roundRunRegistryReader?: (projectRoot: string) => string;
+  readonly roundKillGraceMs?: number;
+  /** round-state-lock NFR-2: overrides `withNamedLockSync`'s acquisition deadline for `dz round`
+   * mutations so a test can force `lock busy` deterministically. Omitted in production. */
+  readonly roundLockTimeoutMs?: number;
+  readonly roundSpawn?: (request: {
+    readonly command: 'codex';
+    readonly args: readonly string[];
+    readonly cwd: string;
+    readonly logPath: string;
+    readonly timeoutMs: number;
+    readonly killGraceMs?: number;
+  }) => Promise<{
+    readonly exitCode: number | null;
+    readonly timedOut: boolean;
+    readonly signal: NodeJS.Signals | null;
+    readonly errorCode?: string;
+    readonly error?: string;
+  }>;
   /** Guard decision seam; production always uses the real vector-backed teach guard. */
   readonly teachGuardRunner?: (projectRoot: string, text: string, opts: { readonly reward?: number }) => Promise<TeachGuardResult>;
   /** Reinforcement flush seam paired with `teachGuardRunner`; production uses the configured backend. */
-  readonly teachReinforceRunner?: (projectRoot: string, dzId: string, reward: number) => Promise<{ readonly flushed: number }>;
+  readonly teachReinforceRunner?: (projectRoot: string, dzId: string, reward?: number) => Promise<{ readonly flushed: number; readonly dzId?: string }>;
   /**
    * Test seam for `dz release`: overrides subprocess execution for gate steps and the
    * gh/git side channels (production leaves it unset → real `execSync`, stdio piped).
@@ -843,6 +931,30 @@ export interface CliIo {
   readonly releaseRunner?: ReleaseExecRunner;
   /** Post-publish mirror command seam; production uses synchronous shell execution. */
   readonly publishMirrorRunner?: PublishMirrorRunner;
+  /**
+   * Test seam for `dz publish`'s sibling-drift gate (feature publish-sibling-drift-gate):
+   * overrides the registry fetch (production leaves it unset → real `npm pack` + extract into a
+   * temp dir). Tests inject a local directory instead of hitting the real registry.
+   */
+  readonly publishSiblingDriftFetcher?: FetchPublished;
+  /**
+   * Test seam for `dz publish`'s packed-install smoke: overrides the pack/install/`--version`
+   * subprocesses (production leaves it unset → real `execSync`, stdio piped). Mirrors
+   * {@link CliIo.releaseRunner}.
+   */
+  readonly publishPackedInstallRunner?: ReleaseExecRunner;
+  /**
+   * AM-1 (feature publish-sibling-drift-gate): overrides EVERY subprocess `publishPackages` would
+   * run on a LIVE publish — build, the `npm pack`/`npm publish <tgz>` packedTransport commands, and
+   * the `npm view` registry probes (production leaves it unset → real `execSync`, stdio piped).
+   * Threaded into `publishPackages`'s `exec` option so a test can drive the FULL live+packedTransport
+   * `cmdPublish` path (pack → smoke → publish → registry-confirm) with zero network and zero real
+   * `npm publish`.
+   */
+  readonly publishExecRunner?: (
+    command: string,
+    options: { cwd?: string | URL | undefined; stdio?: unknown; encoding?: unknown; timeout?: number | undefined; env?: NodeJS.ProcessEnv | undefined },
+  ) => string;
   /**
    * Test seam for `dz install`: overrides the `npm install` subprocess (production leaves
    * it unset → real `execSync`, stdio piped). A stub runner that pre-stages a fixture
@@ -2994,10 +3106,13 @@ function cmdStatusline(
       : `🎓 dz: ${data.patterns} (${breakdown.active} active${breakdown.quarantined > 0
         ? ` · ${breakdown.quarantined} quarantined${breakdown.attention ? ' ⚠' : ''}`
         : ''})${breakdown.tierDelta !== undefined ? ` ⚠ tiers Δ${breakdown.tierDelta}` : ''}`;
-    // Показатель зеркала печатается и здесь: `dz statusline` — та же панель, и показатель,
-    // живущий только во вспомогательном скрипте, для этой поверхности просто не существовал.
-    if (data.patternMirror?.state === 'unavailable') line += ' (mirror unreadable ⚠)';
-    else if (data.patternMirror?.state === 'different') line += ` (mirror ${data.patternMirror.vector} ⚠)`;
+    // Зеркало — самостоятельный источник панели. Отсутствие печатается явно; нечитаемый файл
+    // сохраняет прежнее отдельное состояние, чтобы отказ инструмента не выглядел как настройка off.
+    line += data.patternMirror?.state === 'unavailable'
+      ? ' · mirror: unreadable ⚠'
+      : data.mirror.available
+        ? ` · mirror: ${data.mirror.lessons} lessons (pending ${data.mirror.pending})`
+        : ' · mirror: absent';
     if (data.storeHealth?.verdict === 'collapsed') {
       line += ` ⛔ COLLAPSE: was ${data.storeHealth.previousMax ?? '?'} · dz store-guard --reset`;
     } else if (data.storeHealth?.verdict === 'cold-start-over-existing') {
@@ -3041,172 +3156,6 @@ function cmdStatusline(
   }
 }
 
-function isJsonRecord(value: unknown): value is Record<string, unknown> {
-  return typeof value === 'object' && value !== null && !Array.isArray(value);
-}
-
-function usageConfigPath(projectRoot: string): string {
-  return join(projectRoot, '.dz', 'config.json');
-}
-
-function readProjectConfigForUsage(projectRoot: string): { config: Record<string, unknown>; warning?: string } {
-  const path = usageConfigPath(projectRoot);
-  try {
-    if (!existsSync(path)) return { config: {} };
-    const parsed = JSON.parse(readFileSync(path, 'utf-8')) as unknown;
-    if (isJsonRecord(parsed)) return { config: parsed };
-    return { config: {}, warning: 'existing config is not a JSON object; writing a minimal config' };
-  } catch {
-    return { config: {}, warning: 'existing config could not be parsed; writing a minimal config' };
-  }
-}
-
-function applyUsageCalibrationToConfig(config: Record<string, unknown>, plan: UsageCalibrationPlan): Record<string, unknown> {
-  const next: Record<string, unknown> = { ...config };
-  const memory = isJsonRecord(next['memory']) ? { ...next['memory'] } : {};
-  const usage = isJsonRecord(memory['usage']) ? { ...memory['usage'] } : {};
-
-  for (const change of plan.changes) {
-    if (change.key === 'session') {
-      usage['sessionTokenLimit'] = change.after;
-    } else if (change.key === 'weekly') {
-      usage['weeklyTokenLimit'] = change.after;
-    } else {
-      const model = normalizeClaudeUsageModelKey(change.key);
-      if (model) {
-        const existingByModel = isJsonRecord(usage['weeklyTokenLimitByModel']) ? { ...usage['weeklyTokenLimitByModel'] } : {};
-        existingByModel[model] = change.after;
-        usage['weeklyTokenLimitByModel'] = existingByModel;
-      }
-    }
-  }
-
-  if (plan.changes.length > 0) {
-    usage['calibratedAt'] = plan.after.calibratedAt;
-    usage['source'] = plan.after.source;
-    // A fresh calibration re-arms routing for THIS account and clears the legacy free-text switch:
-    // the calibration is the very act the disable-note demanded.
-    usage['calibrationAccount'] = plan.after.calibrationAccount ?? null;
-  }
-
-  memory['usage'] = usage;
-  next['memory'] = memory;
-  return next;
-}
-
-function parseUsageModelArgs(modelArgs: readonly string[]): { modelPct: Record<string, unknown>; skipped: string[] } {
-  const modelPct: Record<string, unknown> = {};
-  const skipped: string[] = [];
-  for (const raw of modelArgs) {
-    const eq = raw.indexOf('=');
-    if (eq <= 0 || eq === raw.length - 1) {
-      skipped.push(`model ${raw}: skipped malformed model=pct argument`);
-      continue;
-    }
-    const modelName = raw.slice(0, eq).trim();
-    const model = normalizeClaudeUsageModelKey(modelName);
-    if (!model) {
-      skipped.push(`model ${modelName}: skipped unknown model`);
-      continue;
-    }
-    modelPct[model] = raw.slice(eq + 1).trim();
-  }
-  return { modelPct, skipped };
-}
-
-function writeUsageCalibrationSummary(opts: {
-  projectRoot: string;
-  plan: UsageCalibrationPlan;
-  preSkipped: readonly string[];
-  configWarning?: string | undefined;
-  wrote: boolean;
-  write: Write;
-}): void {
-  opts.write('usage calibrate: estimated local transcript counts; claude.ai/settings/usage is authoritative');
-  opts.write(`usage calibrate: project ${opts.projectRoot}`);
-  if (opts.configWarning) opts.write(`usage calibrate: ${opts.configWarning}`);
-  for (const change of opts.plan.changes) {
-    opts.write(
-      `usage calibrate: ${change.key} tokens=${change.tokens} pct=${change.pct}% limit ${change.before ?? 'null'} -> ${change.after}`,
-    );
-  }
-  const skipped = [...opts.preSkipped, ...opts.plan.skipped];
-  for (const item of skipped) opts.write(`usage calibrate: skipped ${item}`);
-  if (opts.wrote) {
-    opts.write('usage calibrate: wrote .dz/config.json with source claude.ai/settings/usage');
-  } else {
-    opts.write('usage calibrate: no config changes written');
-  }
-}
-
-function cmdUsageCalibrate(
-  options: Map<string, string>,
-  optionLists: Map<string, string[]>,
-  cwd: string,
-  write: Write,
-): number {
-  const projectRoot = resolve(cwd, options.get('project') ?? '.');
-  const suppliedModels = optionLists.get('model') ?? [];
-  const parsedModels = parseUsageModelArgs(suppliedModels);
-  const modelPct = parsedModels.modelPct;
-  const hasModelPct = Object.keys(modelPct).length > 0;
-  const input = {
-    ...(options.has('session') ? { sessionPct: options.get('session') } : {}),
-    ...(options.has('weekly') ? { weeklyPct: options.get('weekly') } : {}),
-    ...(hasModelPct ? { modelPct } : {}),
-    calibratedAt: new Date().toISOString(),
-    source: 'claude.ai/settings/usage' as const,
-  };
-  const missingInputs: string[] = [];
-  if (!options.has('session') && !options.has('weekly') && !hasModelPct) {
-    missingInputs.push('no calibration percentages supplied');
-  }
-
-  try {
-    const current = computeUsage(projectRoot);
-    const before = readUsageLimits(projectRoot);
-    const plan = deriveUsageCalibration(current, before, input);
-    if (plan.changes.length === 0) {
-      writeUsageCalibrationSummary({
-        projectRoot,
-        plan,
-        preSkipped: [...parsedModels.skipped, ...missingInputs],
-        wrote: false,
-        write,
-      });
-      return 0;
-    }
-
-    const existing = readProjectConfigForUsage(projectRoot);
-    const nextConfig = applyUsageCalibrationToConfig(existing.config, plan);
-    try {
-      mkdirSync(join(projectRoot, '.dz'), { recursive: true });
-      writeFileSync(usageConfigPath(projectRoot), JSON.stringify(nextConfig, null, 2) + '\n');
-      writeUsageCalibrationSummary({
-        projectRoot,
-        plan,
-        preSkipped: [...parsedModels.skipped, ...missingInputs],
-        configWarning: existing.warning,
-        wrote: true,
-        write,
-      });
-    } catch {
-      writeUsageCalibrationSummary({
-        projectRoot,
-        plan,
-        preSkipped: [...parsedModels.skipped, ...missingInputs, 'write failed'],
-        configWarning: existing.warning,
-        wrote: false,
-        write,
-      });
-    }
-    return 0;
-  } catch {
-    write('usage calibrate: skipped internal error; no config changes written');
-    return 0;
-  }
-}
-
 /**
  * `dz usage --by-stage` — the per-stage cost ledger for one feature-adr run (feature `cost-ledger`).
  *
@@ -3265,17 +3214,6 @@ function cmdUsageByStage(
   return 0;
 }
 
-/**
- * `dz usage` — print an ESTIMATE of Claude session + weekly usage from fixed reset windows,
- * aggregated READONLY from the local transcript store (see {@link computeUsage}). `--json` emits
- * the single-line contract the feature-adr usage-probe agent parses; `--calibrate` is the only
- * write path and records human-transcribed claude.ai percentages in `.dz/config.json`.
- *
- * **Exit code is 0 ALWAYS** — including on internal error the whole body is guarded and prints the
- * all-null JSON, so a probe can NEVER distinguish "usage unknown" from "command failed" via a
- * non-zero exit. `--project <dir>` scopes ONLY the `.dz/config.json` read/write; measurement is
- * account-wide (all projects).
- */
 /**
  * dz qe-rounds — how many Step-8 review rounds has one feature already had?
  *
@@ -3454,6 +3392,52 @@ function cmdRestartAdvisor(options: Map<string, string>, flags: Set<string>, cwd
   }));
 }
 
+function packageCommitCount(root: string, sinceIso: string): number | null {
+  try {
+    // Assemble git's flag so the CLI flag-inventory scanner does not mistake a child-process option
+    // for a user-facing dz option. The argv delivered to git is still exactly `--count`.
+    const raw = execFileSync('git', ['rev-list', '--' + 'count', `--since=${sinceIso}`, 'HEAD', '--', 'packages/'], {
+      cwd: root,
+      encoding: 'utf8',
+      stdio: ['ignore', 'pipe', 'pipe'],
+    }).trim();
+    return /^\d+$/.test(raw) ? Number(raw) : null;
+  } catch {
+    return null;
+  }
+}
+
+function roundTraceSince(root: string): string | null {
+  let firstDate: string | null = null;
+  let lastRoundDate: string | null = null;
+  try {
+    const rows = readFileSync(join(root, '.dz', 'feature-adr', 'run-cost-ledger.jsonl'), 'utf8').split('\n');
+    for (const line of rows) {
+      if (line.trim() === '') continue;
+      let row: Record<string, unknown>;
+      try {
+        const parsed = JSON.parse(line) as unknown;
+        if (parsed === null || typeof parsed !== 'object' || Array.isArray(parsed)) continue;
+        row = parsed as Record<string, unknown>;
+      } catch { continue; }
+      const date = typeof row['date'] === 'string' && Number.isFinite(Date.parse(row['date'])) ? row['date'] : null;
+      if (date === null) continue;
+      if (firstDate === null) firstDate = date;
+      if (row['stage'] === 'round' || row['stage'] === 'round-exec') lastRoundDate = date;
+    }
+  } catch { return null; }
+  return lastRoundDate ?? firstDate;
+}
+
+function roundsTracingEnabled(root: string): boolean {
+  try {
+    const parsed = JSON.parse(readFileSync(join(root, '.dz', 'config.json'), 'utf8')) as { rounds?: { traced?: unknown } };
+    return parsed?.rounds?.traced !== false;
+  } catch {
+    return true;
+  }
+}
+
 function cmdCadence(options: Map<string, string>, flags: Set<string>, cwd: string, write: Write): number {
   const root = resolve(cwd, options.get('project') ?? '.');
   const windowRaw = (options.get('window') ?? 'week').trim() as CadenceWindow;
@@ -3461,7 +3445,9 @@ function cmdCadence(options: Map<string, string>, flags: Set<string>, cwd: strin
     write('dz cadence: --window must be one of ' + Object.keys(CADENCE_WINDOW_DAYS).join('|'));
     return 1;
   }
-  const r = buildCadenceReport(root, windowRaw);
+  const now = Date.now();
+  const windowStartIso = new Date(now - CADENCE_WINDOW_DAYS[windowRaw] * 86_400_000).toISOString();
+  const r = buildCadenceReport(root, windowRaw, now, packageCommitCount(root, windowStartIso));
   if (flags.has('json')) { write(JSON.stringify(r)); return r.decision.ok ? 0 : 2; }
   write('dz cadence — window ' + r.window + ', record depth ' + r.depthDays + ' day(s)');
   if (!r.decision.ok) {
@@ -3475,145 +3461,105 @@ function cmdCadence(options: Map<string, string>, flags: Set<string>, cwd: strin
     write('  ' + w.padEnd(12) + String(r.shipments.graded[w] ?? 0).padStart(15) + String(r.npmPublishes.weekly[w] ?? 0).padStart(15) + String(r.recalls.weekly[w] ?? 0).padStart(9));
   }
   write('  graded ' + r.shipments.gradedTotal + ' (' + Object.entries(r.shipments.byGrade).sort().map(([g, n]) => g + '×' + n).join(', ') + ') · UNGRADED ' + r.shipments.ungraded + ' (named, not hidden)');
+  const roundCount = r.rounds.byStage.round;
+  const roundPart = roundCount === 0
+    ? 'rounds 0 (ни одной строки круга в окне)'
+    : `rounds ${roundCount} (shipped ${r.rounds.byOutcome.shipped} · refuted ${r.rounds.byOutcome.refuted} · blocked ${r.rounds.byOutcome.blocked} · abandoned ${r.rounds.byOutcome.abandoned})`;
+  write(`  ${roundPart} · exec ${r.rounds.byStage['round-exec']} (done ${r.rounds.byOutcome.done} · timeout ${r.rounds.byOutcome.timeout} · session-limit ${r.rounds.byOutcome['session-limit']} · model-refused ${r.rounds.byOutcome['model-refused']} · failed ${r.rounds.byOutcome.failed} · empty ${r.rounds.byOutcome.empty}) · commits(packages/) ${r.rounds.commitsInWindow ?? 'not measured'}`);
+  for (const round of r.rounds.unfinished) {
+    write(`  ✗ ${round.slug}#${round.round} ${round.outcome} — ${round.reason ?? 'причина не названа'}`);
+  }
   if (r.guard.decay.length > 0) {
     write('  guard repeat decay (FIXED set — rules with pre-window history only):');
     for (const d of r.guard.decay.slice(0, 8)) write('    ' + d.rule.padEnd(28) + 'before×' + d.before + ' → in-window×' + d.inWindow);
   }
   if (r.guard.excludedNewborn.length > 0) write('  excluded newborn rule(s) (no pre-window history — a zero here would be youth, not virtue): ' + r.guard.excludedNewborn.join(', '));
-  for (const dgr of [r.npmPublishes.degraded, r.guard.degraded, r.recalls.degraded]) if (dgr) write('  DEGRADED: ' + dgr);
+  for (const dgr of [r.npmPublishes.degraded, r.guard.degraded, r.recalls.degraded, r.rounds.degraded]) if (dgr) write('  DEGRADED: ' + dgr);
   return 0;
 }
 
 function cmdUsage(
   options: Map<string, string>,
-  optionLists: Map<string, string[]>,
+  _optionLists: Map<string, string[]>,
   flags: Set<string>,
   cwd: string,
   write: Write,
 ): number {
   const projectRoot = resolve(cwd, options.get('project') ?? '.');
-  const nullContract = () =>
-    JSON.stringify({
-      sessionPct: null,
-      weeklyPct: null,
-      sessionTokens: 0,
-      weeklyTokens: 0,
-      resetsAt: { session: null, weekly: null },
-      limits: { session: null, weekly: null },
-      estimated: true,
-    });
+  const reqeDue = (): number => {
+    try {
+      return scanReqeDebts(projectRoot).debts.length;
+    } catch {
+      return 0;
+    }
+  };
+  const jsonContract = (spend: ReturnType<typeof computeSpendReport>): string => JSON.stringify({
+    sessionPct: null,
+    weeklyPct: null,
+    routing: 'disabled-by-design',
+    spend,
+    reqeDue: reqeDue(),
+  });
+  const number = (value: number): string =>
+    (Number.isInteger(value) ? String(value) : String(Math.round(value * 100) / 100));
   try {
-    if (flags.has('calibrate')) return cmdUsageCalibrate(options, optionLists, cwd, write);
+    if (flags.has('calibrate')) {
+      // Keep the retired mode's value flags known so its one-line removal receipt is not polluted
+      // by generic unknown-flag notices before dispatch.
+      void ['--session', '--weekly'];
+      write('dz usage --calibrate removed 2026-09-12: provider limits are not measurable (no API, per-account weekly resets, ad-hoc resets); dz usage reports spend only');
+      return 2;
+    }
     if (flags.has('by-stage')) return cmdUsageByStage(options, flags, write);
 
-    const u = computeUsage(projectRoot);
-    const lim = readUsageLimits(projectRoot);
-    const modelLimits = lim.weeklyTokenLimitByModel;
-    const hasModelLimits = modelLimits !== undefined && Object.keys(modelLimits).length > 0;
+    const spend = computeSpendReport();
     if (flags.has('json')) {
-      const limitsPayload: {
-        session: number | null;
-        weekly: number | null;
-        weeklyByModel?: Partial<Record<ClaudeUsageModel, number>>;
-      } = { session: lim.sessionTokenLimit ?? null, weekly: lim.weeklyTokenLimit ?? null };
-      if (hasModelLimits) limitsPayload.weeklyByModel = { ...modelLimits };
-      const payload: {
-        sessionPct: number | null;
-        weeklyPct: number | null;
-        sessionTokens: number;
-        weeklyTokens: number;
-        resetsAt: { session: string | null; weekly: string | null };
-        limits: typeof limitsPayload;
-        weeklyByModel?: typeof u.weeklyByModel;
-        estimated: true;
-        reqeDue?: number;
-        notEstablished?: readonly string[];
-        estimatesNotForRouting?: { sessionPct: number | null; weeklyPct: number | null };
-      } = {
-        sessionPct: u.sessionPct,
-        weeklyPct: u.weeklyPct,
-        sessionTokens: u.sessionTokens,
-        weeklyTokens: u.weeklyTokens,
-        resetsAt: { session: u.sessionResetsAt, weekly: u.weeklyResetsAt },
-        limits: limitsPayload,
-        estimated: true,
-      };
-      // ADR-001 usage-honesty: a consumer that reads null pcts deserves the WHY (closed reason
-      // set), and a human deserves the raw estimates when POLICY (not measurement) nulled them.
-      if (u.notEstablished.length > 0) payload.notEstablished = u.notEstablished;
-      if (u.estimatesNotForRouting !== undefined) payload.estimatesNotForRouting = u.estimatesNotForRouting;
-      if (hasModelLimits && u.weeklyByModel !== undefined) payload.weeklyByModel = u.weeklyByModel;
-      // re-QE debt surfacing (backlog 6b40e667 — QE #9: the json contract must carry the debt too,
-      // a probe is exactly the consumer that needs it). The field appears ONLY when a debt exists,
-      // so the zero-debt contract stays byte-identical to the pinned legacy shape. Best-effort.
-      try {
-        const reqeCount = scanReqeDebts(resolve(cwd, options.get('project') ?? '.')).debts.length;
-        if (reqeCount > 0) payload.reqeDue = reqeCount;
-      } catch { /* advisory only */ }
-      write(
-        JSON.stringify(payload),
-      );
+      write(jsonContract(spend));
       return 0;
     }
-    if (u.sessionPct === null && u.weeklyPct === null && u.notEstablished.length > 0) {
-      // Limits may be fully configured and the pcts STILL null — that is the honesty, not a config
-      // gap. Say why, and show the human the raw estimates when only policy nulled them.
-      write('usage: not established — ' + u.notEstablished.join(', '));
-      if (u.estimatesNotForRouting !== undefined) {
-        const e = u.estimatesNotForRouting;
-        write('  estimates (NOT for routing): session ~' + (e.sessionPct ?? '?') + '% · week ~' + (e.weeklyPct ?? '?') + '% — recalibrate on THIS account: dz usage --calibrate --session <pct> --weekly <pct>');
-      } else {
-        write('  the scan established nothing (' + u.sessionTokens + ' session / ' + u.weeklyTokens + ' weekly tokens counted) — a percentage would be a guess, and routing must not eat guesses');
+    write('usage spend — last 7 UTC days');
+    write('date        weighted  input  output  cache-read  cache-write  events');
+    for (const day of spend.days) {
+      write(`${day.date}  ${number(day.weightedTokens)}  ${number(day.input)}  ${number(day.output)}  ${number(day.cacheRead)}  ${number(day.cacheWrite)}  ${day.events}`);
+    }
+    const total = spend.total7d;
+    write(`7-day total  ${number(total.weightedTokens)}  ${number(total.input)}  ${number(total.output)}  ${number(total.cacheRead)}  ${number(total.cacheWrite)}  ${total.events}`);
+    // "unknown" = `event.model ?? 'unknown'` in `spendReport` — an event with NO model field AT
+    // ALL, or one whose model string matched none of the four recognized substrings (in practice
+    // almost always `<synthetic>`). Fix-round-1 (Codex review, MEDIUM #3): a prior wording here and
+    // in the README said "not an event without a model", which is the OPPOSITE of what the code
+    // does — corrected to name both causes.
+    write('by model — weighted  share (0..1) (7-day window; "unknown" = event with no model, or an unrecognized model string e.g. "<synthetic>")');
+    const models = Object.entries(spend.byModel);
+    if (models.length === 0) write('  (no events)');
+    for (const [model, row] of models) {
+      write(`  ${model}  ${number(row.weightedTokens)}  ${number(row.sharePct / 100)}`);
+    }
+    const today = spend.daysByModel.at(-1);
+    if (today !== undefined) {
+      // Fix-round-1 (Codex review, MEDIUM #1): this block used to print weighted tokens only, so
+      // AC-5's "today block shows Sonnet's share of today" had nothing to read it off of. The share
+      // denominator is TODAY's own total (`spend.days.at(-1)`, the same last entry as `today` by
+      // construction — both arrays are built from the same `days` in `spendReport`), not the 7-day
+      // total — a day's share of a week would silently understate every model.
+      write(`today (${today.date}) by model — weighted  share-of-day (0..1)`);
+      const todayModels = Object.entries(today.models);
+      const todayTotal = spend.days.at(-1)?.weightedTokens ?? 0;
+      if (todayModels.length === 0) write('  (no events)');
+      for (const [model, weightedTokens] of todayModels) {
+        const shareOfDay = todayTotal > 0 ? weightedTokens / todayTotal : 0;
+        write(`  ${model}  ${number(weightedTokens)}  ${number(shareOfDay)}`);
       }
-      try {
-        const reqe = scanReqeDebts(resolve(cwd, options.get('project') ?? '.'));
-        if (reqe.debts.length > 0) write('re-QE due: ' + reqe.debts.length + ' usage-switched run(s) kept same-family QE — run `dz reqe` for the cross-family pass');
-      } catch { /* advisory only */ }
-      return 0;
-    }
-    if (u.sessionPct === null && u.weeklyPct === null) {
-      write(
-        'usage: unconfigured — set memory.usage.sessionTokenLimit / weeklyTokenLimit in .dz/config.json (percentages are ESTIMATES calibrated from observed exhaustion)',
-      );
-      try {
-        const reqe = scanReqeDebts(resolve(cwd, options.get('project') ?? '.'));
-        if (reqe.debts.length > 0) write('re-QE due: ' + reqe.debts.length + ' usage-switched run(s) kept same-family QE — run `dz reqe` for the cross-family pass');
-      } catch { /* advisory only */ }
-      return 0;
     }
-    // Compact human line — a short HH:MM / weekday hint on the resets, best-effort.
-    const clock = (iso: string | null): string => {
-      if (!iso) return '?';
-      try {
-        return new Date(iso).toISOString().slice(11, 16);
-      } catch {
-        return '?';
-      }
-    };
-    const s = u.sessionPct === null ? 'n/a' : '~' + u.sessionPct + '%';
-    const binding = hasModelLimits && u.weeklyBindingModel !== undefined ? ' ' + u.weeklyBindingModel + '-bound' : '';
-    const w = u.weeklyPct === null ? 'n/a' : '~' + u.weeklyPct + '%' + binding;
-    // The weekly reset is WEEKLY: print the anchor verbatim (weekday + offset), not a bare clock
-    // time — 'resets 08:59' reads as daily and hides the weekday (idea c8513be9: the bare form
-    // misread a Monday reading as '41 minutes after the boundary' when the boundary was Wednesday's).
-    const weeklyAnchorLabel = typeof lim.weeklyResetAnchor === 'string' && lim.weeklyResetAnchor !== ''
-      ? lim.weeklyResetAnchor
-      : clock(u.weeklyResetsAt);
-    write('usage: session ' + s + ' (resets ' + clock(u.sessionResetsAt) + ') · week ' + w + ' (resets ' + weeklyAnchorLabel + ') · estimated');
-    if (typeof lim.weeklyResetAnchor === 'string' && parseWeeklyResetAnchor(lim.weeklyResetAnchor)?.offsetMinutes === undefined) {
-      write('  ⚠ weeklyResetAnchor has NO utc offset — the boundary follows the SERVER timezone, not your account\'s true reset instant (measured: the same moment lands a week apart under UTC vs +03:00). Pin it: "' + lim.weeklyResetAnchor + ' +03:00" (your offset) in .dz/config.json');
-    }
-    // re-QE debt surfacing (backlog 6b40e667): the moment someone checks usage is the moment a
-    // usage-switched self-review debt should be visible. Best-effort — never breaks the contract.
-    try {
-      const reqe = scanReqeDebts(resolve(cwd, options.get('project') ?? '.'));
-      if (reqe.debts.length > 0) write('re-QE due: ' + reqe.debts.length + ' usage-switched run(s) kept same-family QE — run `dz reqe` for the cross-family pass');
-    } catch { /* advisory only */ }
+    write('source: local Claude Code + subagent transcripts, cost-weighted');
     return 0;
   } catch {
-    // never let a probe see a non-zero exit — print the all-null contract and exit 0.
-    if (flags.has('json')) write(nullContract());
-    else write('usage: unconfigured — set memory.usage.sessionTokenLimit / weeklyTokenLimit in .dz/config.json');
+    const empty = spendReport([], { nowMs: Date.now(), days: 7 });
+    if (flags.has('json')) write(jsonContract(empty));
+    else {
+      write('usage spend — last 7 UTC days');
+      write('source: local Claude Code + subagent transcripts, cost-weighted');
+    }
     return 0;
   }
 }
@@ -3943,24 +3889,30 @@ async function cmdStoreGuard(
 async function runTeachGuardReinforcement(
   projectRoot: string,
   dzId: string,
-  reward: number,
+  reward?: number,
   preserveQuarantine = false,
-): Promise<{ readonly flushed: number }> {
+): Promise<{ readonly flushed: number; readonly dzId?: string }> {
+  const matchedDzId = loadStoreRecords(projectRoot)
+    .find((record) => record.id === dzId || record.text === dzId)?.id;
   const backend = resolveLearningBackend(projectRoot);
   backend.addSample({
     dzId,
     kind: preserveQuarantine ? 'recall-hit' : 'reinforce',
-    reward,
+    ...(reward !== undefined ? { reward } : {}),
     ts: new Date().toISOString(),
   });
-  return backend.train();
+  const trained = await backend.train();
+  return {
+    ...trained,
+    ...(trained.flushed > 0 && matchedDzId !== undefined ? { dzId: matchedDzId } : {}),
+  };
 }
 
 async function cmdTeach(
   options: Map<string, string>, flags: Set<string>, cwd: string, write: Write,
   writeErr: WriteErr = (line) => { console.error(line); }, interactive = false,
   guardRunner: (projectRoot: string, text: string, opts: { readonly reward?: number }) => Promise<TeachGuardResult> = teachGuard,
-  reinforceRunner: (projectRoot: string, dzId: string, reward: number, preserveQuarantine?: boolean) => Promise<{ readonly flushed: number }> = runTeachGuardReinforcement,
+  reinforceRunner: (projectRoot: string, dzId: string, reward?: number, preserveQuarantine?: boolean) => Promise<{ readonly flushed: number; readonly dzId?: string }> = runTeachGuardReinforcement,
 ): Promise<number> {
   // WHICH store this lesson belongs to, and WHO decided (teach-chooses-its-store).
   // `--to` → `DZ_LEARN` → `.dz/config.json` learning.teachTo → project. The owner asked for a
@@ -3996,20 +3948,58 @@ async function cmdTeach(
   // (D3) — an unconfigured project runs ZERO vector code and its output stays byte-identical
   // to the pre-feature baseline (AC-1). Failures are queued + logged by the service itself and
   // NOT printed on the default path (teach must stay quiet/scriptable); only success emits.
+  // AM-4 (dz-harness-hub issue #10 defect 4, feature setup-installs-apply-leg): a mirror attempt
+  // that produced ZERO rows, resolved NO working engine (`receipt.engine === undefined` — deps
+  // missing/unusable, the ABI-115 failure AM-2 fixes being the measured cause), AND left the
+  // agentdb store file still absent is not "nothing to report" — it is the vector tier having
+  // never come into being, and a lesson taught in that window has nowhere to mirror into until
+  // `dz consolidate`/a later teach (once the store exists) runs. BOTH signals are required so this
+  // never misfires for an rvf-configured project (whose store is not `.dz/agentdb.db` at all) or
+  // for the ordinary "already mirrored, nothing new" case (which resolves an engine successfully).
+  const emitVectorTierAbsentIfNeeded = (root: string, receipt: { readonly engine?: string | undefined }): void => {
+    if (receipt.engine === undefined && !existsSync(resolveAgentdbPath(root))) {
+      write('  ↳ vector tier absent — run dz consolidate');
+    }
+  };
+  // AM-9/AM-10 (issue #10 defect 6, feature setup-installs-apply-leg): `vectorMirrorEnabled(root)`
+  // alone used to decide "say nothing" for every disabled reason alike, including a config that
+  // CLAIMS agentdb via a top-level `backend` key (`{"backend":"agentdb"}` instead of
+  // `{"memory":{"backend":"agentdb"}}`) — a real, readable intent this silently dropped on the
+  // floor. Named for `config-unreadable` / `legacy-shape` — both are a config that TRIED to say
+  // something and got it wrong. THREE reasons stay silent: `engine-off` (deliberate), `no-config`
+  // (the pre-existing AC-1 contract — a NAMED test in `cli.test.ts`/`teach-chooses-its-store.test.ts`
+  // — printing there broke both, MEASURED), and `not-enabled` (AM-10, narrower than the amendment's
+  // literal instruction — MEASURED: `not-enabled` is ALSO the state of the ORDINARY, first-class
+  // jsonl backend `dz setup` produces by default, and printing there added a line to the single most
+  // common `dz teach` invocation shape, reproducer: `mkdir .dz && echo '{"memory":{"backend":
+  // "jsonl"}}' > .dz/config.json && dz teach "x"` → new line `↳ vector tier OFF: …` on the DEFAULT,
+  // fully-supported jsonl path. `not-enabled` cannot distinguish "chose jsonl on purpose" from "typo'd
+  // a backend name", so it is grouped with the other legitimate-quiet states rather than with the
+  // two states that are unambiguously a mistake.
+  const emitMirrorOffIfNeeded = (root: string): boolean => {
+    const reason = mirrorWriterReason(root);
+    if (reason.state !== 'config-unreadable' && reason.state !== 'legacy-shape') return false;
+    write(`  ↳ vector tier OFF: ${mirrorWriterExplanation(reason.state)}`);
+    return true;
+  };
   const emitMirror = async (root: string, records: readonly PatternRecord[], source: string): Promise<void> => {
-    if (flags.has('no-mirror') || records.length === 0 || !vectorMirrorEnabled(root)) return;
+    if (flags.has('no-mirror') || records.length === 0) return;
+    if (!vectorMirrorEnabled(root)) { emitMirrorOffIfNeeded(root); return; }
     const receipt = await mirrorPatternsToVector(root, records, source);
     if (receipt.mirrored > 0) write(`  ↳ mirrored to vector tier (${receipt.engine ?? 'vector'})`);
+    else emitVectorTierAbsentIfNeeded(root, receipt);
   };
   // lesson-quarantine FR-8: the fresh-teach mirror carries the qStatus marker so the hook daemon
   // (which reads only the mirror's metadata) can exclude unproven lessons from auto-inject.
   const emitMirrorQ = async (root: string, records: readonly PatternRecord[], source: string, quarantined: boolean): Promise<void> => {
-    if (flags.has('no-mirror') || records.length === 0 || !vectorMirrorEnabled(root)) return;
+    if (flags.has('no-mirror') || records.length === 0) return;
+    if (!vectorMirrorEnabled(root)) { emitMirrorOffIfNeeded(root); return; }
     const entries = records
       .map((r) => patternVectorEntry(r, source, quarantined ? { quarantined: true } : {}))
       .filter((e): e is NonNullable<typeof e> => e !== undefined);
     const receipt = await mirrorEntriesToVector(root, entries);
     if (receipt.mirrored > 0) write(`  ↳ mirrored to vector tier (${receipt.engine ?? 'vector'})${quarantined ? ' [quarantined]' : ''}`);
+    else emitVectorTierAbsentIfNeeded(root, receipt);
   };
 
   // `dz teach --harmonize` — documented ALIAS of `dz vector harmonize`: SEMANTIC dedup of the
@@ -4127,20 +4117,23 @@ async function cmdTeach(
 
   const reinforce = options.get('reinforce');
   if (reinforce !== undefined && reinforce.trim() !== '') {
-    const backend = resolveLearningBackend(storeRoot);
     const sampleReward = options.has('reward') ? parseFloat(options.get('reward') ?? '0.8') : undefined;
-    backend.addSample({
-      dzId: reinforce,
-      kind: 'reinforce',
-      ts: new Date().toISOString(),
-      ...(sampleReward !== undefined ? { reward: sampleReward } : {}),
-    });
-    const trained = await backend.train();
+    const trained = await reinforceRunner(storeRoot, reinforce, sampleReward);
     if (trained.flushed > 0) {
-      write(`↳ reinforced ${reinforce}`);
+      const records = loadStoreRecords(storeRoot);
+      const reinforcedDzId = trained.dzId
+        ?? findExactLesson(records, reinforce)?.id
+        ?? records.find((record) => record.id === reinforce)?.id;
+      write(reinforcedDzId !== undefined && reinforcedDzId !== reinforce
+        ? `↳ reinforced ${reinforcedDzId} (matched by text)`
+        : `↳ reinforced ${reinforcedDzId ?? reinforce}`);
       // lesson-quarantine: reinforcement IS promotion — keep the hook daemon's mirror in step.
-      const clearedQ = clearAgentdbQuarantine(storeRoot, [reinforce]);
-      if (clearedQ.cleared > 0) write(`  ↳ promoted out of quarantine (mirror updated)`);
+      if (reinforcedDzId === undefined) {
+        write('  ↳ mirror quarantine NOT cleared: matched pattern has no dzId');
+      } else {
+        const clearedQ = clearAgentdbQuarantine(storeRoot, [reinforcedDzId]);
+        if (clearedQ.cleared > 0) write(`  ↳ promoted out of quarantine (mirror updated)`);
+      }
       write(storeLine('written'));
       refreshLearningStoreMark(storeRoot, writeErr, 'dz teach --reinforce');
       return 0;
@@ -5492,6 +5485,7 @@ Usage:
   dz brain add    --from-kus   <file.json> --slug <s> [--kind repo|book|paper] [--license <spdx>] [--override] [--json]
   dz brain update <slug> [--project <dir>] [--json]
   dz brain reindex [--json]
+  dz brain snapshots [--keep <N>] [--prune] [--json] [--project <dir>]
   dz brain primer <slug> [--json]
   dz brain export --source <slug> --out <file>
   dz brain ground [<prompt>] [--k <N>] [--source <slug>] [--text] [--budget <N>] [--full]
@@ -5930,9 +5924,98 @@ async function cmdBrain(
     }
     write(`dz brain reindex: re-embedded ${result.reembedded} KU vector(s) with ${result.model} (manifest v${result.version})`);
     if (result.backupPath !== undefined) write(`  snapshot: ${result.backupPath}`);
+    if (result.snapshots !== undefined) {
+      const mb = (result.snapshots.removedBytes / (1024 * 1024)).toFixed(1);
+      write(`  ↳ snapshots: kept ${result.snapshots.kept.length}, removed ${result.snapshots.removed.length} (${mb} MB)`);
+      if (result.snapshots.errors !== undefined && result.snapshots.errors.length > 0) {
+        write(`  ⚠ snapshot rotation error(s): ${result.snapshots.errors.join('; ')}`);
+      }
+      if (result.snapshots.scanErrors !== undefined && result.snapshots.scanErrors.length > 0) {
+        write(`  ⚠ snapshot scan error(s), nothing removed this call: ${result.snapshots.scanErrors.join('; ')}`);
+      }
+      if (result.snapshots.partialFamilies !== undefined && result.snapshots.partialFamilies.length > 0) {
+        write(`  ⚠ .bak preserved after a sibling failure in famil(y/ies): ${result.snapshots.partialFamilies.join(', ')}`);
+      }
+    }
     return 0;
   }
 
+  // ── dz brain snapshots [--keep N] [--prune] [--json] ────────────────────────────────────────
+  // Manual rotation of the brain's OWN pre-reindex snapshots — independent of `dz brain reindex`
+  // (FR-7). The owner's hub forbids running a live reindex there today, and 13 snapshots / 50 MB
+  // sit unrotated regardless; this command reaches the same family-aware rotation without one.
+  // Without --prune it only LISTS families (dry, never deletes); --prune applies FR-1..FR-5.
+  if (sub === 'snapshots') {
+    // Lead edit after acceptance (2026-09-13): the owner's hub keeps its 13 families next to the
+    // PROJECT store (.dz/agentdb.db, written by the vector-tier reindex), not the home brain —
+    // `--project <dir>` addresses that store; without it the home brain is the target as before.
+    const projectArg = options.get('project');
+    const dbFile = projectArg !== undefined ? resolveAgentdbPath(resolve(cwd, projectArg)) : brainAgentdbPath(brainHome());
+    const keepRaw = options.get('keep');
+    let keep = 3;
+    if (keepRaw !== undefined) {
+      // AM-1 (fix-round, Codex review Grade D): `Number('')` is `0` and `Number(' 2')` is `2` —
+      // both used to validate as an ordinary non-negative integer, silently accepting empty/
+      // whitespace input. Only the literal digit-string shape is accepted; no trimming.
+      if (!/^(0|[1-9]\d*)$/.test(keepRaw)) {
+        write(`dz brain snapshots: --keep must be a non-negative integer (got '${keepRaw}')`);
+        return 2;
+      }
+      keep = Number(keepRaw);
+      // Lead edit after re-review (Codex C): a digit string can still overflow a safe integer.
+      if (!Number.isSafeInteger(keep)) {
+        write(`dz brain snapshots: --keep is out of range (got '${keepRaw}')`);
+        return 2;
+      }
+    }
+    if (!flags.has('prune')) {
+      // Lead edit after re-review: the list is only trustworthy when the scan was complete —
+      // an unreadable directory is reported with ⚠ and exit 1, never as "no families".
+      const { families, scanErrors } = scanSnapshotDir(dbFile);
+      if (asJson) {
+        write(JSON.stringify({ keep, families: families.map((f) => ({ ms: f.ms, files: f.files.map((file) => file.name), bytes: f.bytes })), scanErrors }));
+        return scanErrors.length > 0 ? 1 : 0;
+      }
+      if (scanErrors.length > 0) write(`  ⚠ scan error(s) — the list below may be incomplete: ${scanErrors.join('; ')}`);
+      if (families.length === 0) {
+        write(`dz brain snapshots: no pre-reindex snapshot families next to ${dbFile}`);
+        return scanErrors.length > 0 ? 1 : 0;
+      }
+      write(`dz brain snapshots — ${families.length} family(-ies) @ ${dbFile}`);
+      for (const f of families) {
+        const mb = (f.bytes / (1024 * 1024)).toFixed(1);
+        write(`  ${new Date(f.ms).toISOString()}  ms=${f.ms}  ${f.files.length} file(s)  ${mb} MB`);
+      }
+      write('  (dry run — pass --prune to remove families older than --keep)');
+      return scanErrors.length > 0 ? 1 : 0;
+    }
+    const report = rotatePreReindexSnapshots(dbFile, { keep });
+    const scanFailed = report.scanErrors !== undefined && report.scanErrors.length > 0;
+    // agentdb-snapshot-lock FR-4: a busy snapshot lock is reported exactly like a scan failure —
+    // nothing removed, ⚠, exit 1 — never a silent "kept N, removed 0" that reads like an empty rotation.
+    const lockBusy = report.errors !== undefined && report.errors.some((e) => e.startsWith('lock busy'));
+    if (asJson) { write(JSON.stringify(report)); return scanFailed || lockBusy ? 1 : 0; }
+    const mb = (report.removedBytes / (1024 * 1024)).toFixed(1);
+    write(`dz brain snapshots: kept ${report.kept.length}, removed ${report.removed.length} (${mb} MB)`);
+    if (report.removed.length > 0) write(`  removed: ${report.removed.join(', ')}`);
+    if (report.errors !== undefined && report.errors.length > 0) {
+      write(`  ⚠ ${report.errors.length} error(s): ${report.errors.join('; ')}`);
+    }
+    // AM-4: an incomplete scan means NOTHING was removed this call — say so, never silently.
+    if (report.scanErrors !== undefined && report.scanErrors.length > 0) {
+      write(`  ⚠ scan error(s), nothing removed this call: ${report.scanErrors.join('; ')}`);
+    }
+    // AM-2: a family whose .bak survived only because a sibling failed to unlink.
+    if (report.partialFamilies !== undefined && report.partialFamilies.length > 0) {
+      write(`  ⚠ .bak preserved after a sibling failure in famil(y/ies): ${report.partialFamilies.join(', ')}`);
+    }
+    // FR-3: a live reindex marker rescued a family, or an expired one was cleaned up — honest, never an error.
+    if (report.notes !== undefined && report.notes.length > 0) {
+      write(`  note: ${report.notes.join('; ')}`);
+    }
+    return scanFailed || lockBusy ? 1 : 0;
+  }
+
   // ── dz brain ground [<prompt>] ───────────────────────────────────────────────────────────────
   // The UserPromptSubmit hook entrypoint. ALWAYS exits 0 — grounding is advisory and must never
   // fail a prompt. Emits nothing (silent) unless the brain has relevant citations for the prompt.
@@ -6147,17 +6230,41 @@ async function cmdSetup(options: Map<string, string>, flags: Set<string>, cwd: s
 
   // Step 3: Run setup (hooks + memory + config)
   write(`║  3. Setting up learning environment...                ║`);
-  const memoryOpt = options.get('memory');
+  const memoryOptRaw = options.get('memory');
+  // FR-1/T3 (feature `setup-backend-from-config`): pass `--memory` through AS-IS — `agentdb`,
+  // `jsonl`, or `undefined` — never collapsed to `undefined` on anything but agentdb. The prior
+  // `memoryOpt === 'agentdb' ? 'agentdb' : undefined` made an explicit `--memory jsonl` INDISTINCT
+  // from "no flag at all", so `runSetup`'s config-aware default (FR-2's downgrade path) could never
+  // fire from the CLI. An unrecognised value (neither `agentdb` nor `jsonl`) still reads as
+  // "no flag" — the same permissive fallback as before.
+  const memoryOpt: 'agentdb' | 'jsonl' | undefined =
+    memoryOptRaw === 'agentdb' ? 'agentdb' : memoryOptRaw === 'jsonl' ? 'jsonl' : undefined;
+  // ADR-001 Decision 2 (feature setup-installs-apply-leg): bake THIS CLI's own installed
+  // @dzhechkov/harness-core into the generated apply-leg hooks — the installation actually running
+  // `dz setup` is the one a consumer's project can always reach, unlike a hard-coded npm prefix
+  // (FR-3). Best-effort: an unresolvable core (should not happen — the CLI depends on it) falls
+  // back to core's own self-resolution inside `runSetup`, never a crash.
+  let coreDistDir: string | undefined;
+  try {
+    const corePkgJson = createRequire(import.meta.url).resolve('@dzhechkov/harness-core/package.json');
+    coreDistDir = join(dirname(corePkgJson), 'dist');
+  } catch {
+    coreDistDir = undefined;
+  }
   const setupResult = runSetup({
     projectRoot,
     target,
     preset,
-    memory: memoryOpt === 'agentdb' ? 'agentdb' : undefined,
+    memory: memoryOpt,
     noHooks: flags.has('no-hooks'),
     noMemory: flags.has('no-memory'),
     force: flags.has('force'),
     installDriver: flags.has('install-driver'),
+    coreDistDir,
   });
+  // FR-3: name the source of the backend actually used — never left to be inferred from the flag
+  // alone, since the backend may now come from `.dz/config.json` or the jsonl default.
+  write(`dz setup: memory backend: ${setupResult.memoryBackend} (${memoryBackendSourceLabel(setupResult.memoryBackendSource)})`);
 
   for (const step of setupResult.steps) {
     const icon = step.status === 'done' ? '✓' : step.status === 'skipped' ? '○' : '✗';
@@ -6209,7 +6316,11 @@ async function cmdSetup(options: Map<string, string>, flags: Set<string>, cwd: s
   // not from package presence — a skipped hook/MCP step must not let the summary claim a store
   // nothing writes to (audit code#3).
   const wiring = setupResult.steps.find((s) => s.name === 'agentdb wiring');
-  const backendLabel = memoryOpt === 'agentdb'
+  // Keyed off the RESOLVED backend (setupResult.memoryBackend), not the raw flag: FR-1 means the
+  // flag can be absent while the actual backend is still agentdb (config-sourced) — the old
+  // `memoryOpt === 'agentdb'` check would have mislabeled that run as jsonl right after fixing the
+  // underlying steps to keep it agentdb.
+  const backendLabel = setupResult.memoryBackend === 'agentdb'
     ? (wiring?.status === 'done' ? 'agentdb (.dz/agentdb.db + .dz/agentdb-mcp.db, separate stores)' : `agentdb INCOMPLETE — see setup steps`)
     : 'sessions.jsonl + patterns.jsonl';
   write(`║  Learning: ${backendLabel.padEnd(41)}║`);
@@ -6909,12 +7020,33 @@ function mirrorFailureMessage(error: unknown): string {
   return String(error);
 }
 
+/**
+ * Scratch root for the packed-install smoke's pack/install dirs (feature
+ * publish-sibling-drift-gate). MEASURED 2026-09-13: npm resolves a LOCAL tarball path (`npm
+ * install <path-to.tgz>`) relative to `os.tmpdir()` — not to cwd — whenever that path sits
+ * INSIDE `os.tmpdir()`, and does the same for the install dir; put pack and install dirs both
+ * under `tmpdir()` and the recorded `file:` spec loses its `tmpdir()` prefix entirely (reproducer:
+ * a fresh `npm pack <src> --pack-destination "$T/pack"` + `cd "$T/install" && npm install
+ * "$T/pack/x.tgz"` with `$T` under `/tmp` silently installs NOTHING — "changed 1 package", empty
+ * node_modules, `reify moves {}` in `--loglevel silly`; the identical commands under `/var/tmp`
+ * install correctly). A directory outside `os.tmpdir()` sidesteps the quirk entirely.
+ */
+function packedInstallScratchRoot(): string {
+  return existsSync('/var/tmp') ? '/var/tmp' : tmpdir();
+}
+
 function cmdPublish(
   options: Map<string, string>,
   flags: Set<string>,
   cwd: string,
   writeOutput: Write,
   mirrorRunner?: PublishMirrorRunner,
+  siblingDriftFetcher?: FetchPublished,
+  packedInstallRunner?: ReleaseExecRunner,
+  publishExecRunner?: (
+    command: string,
+    options: { cwd?: string | URL | undefined; stdio?: unknown; encoding?: unknown; timeout?: number | undefined; env?: NodeJS.ProcessEnv | undefined },
+  ) => string,
 ): number {
   const json = flags.has('json');
   // Under --json stdout carries exactly one JSON document, so every human line — guard notes, refusals,
@@ -6923,9 +7055,9 @@ function cmdPublish(
   const write: Write = json ? (line) => { process.stderr.write(`${line}\n`); } : writeOutput;
   // Reject unknown flags/options so a typo (e.g. `--dry-rum`) can NEVER be
   // silently swallowed and flip the command into live-publish mode.
-  const allowedFlags = new Set(['dry-run', 'no-dry-run', 'yes', 'confirm', 'bump-only', 'help', 'require-signing', 'provenance', 'no-provenance', 'json', 'no-mirror']);
+  const allowedFlags = new Set(['dry-run', 'no-dry-run', 'yes', 'confirm', 'bump-only', 'help', 'require-signing', 'provenance', 'no-provenance', 'json', 'no-mirror', 'allow-sibling-drift', 'include-drifted']);
   const allowedOptions = new Set(['filter', 'claim-check', 'no-guard', 'sign-key', 'mirror-cmd']);
-  const allowedHelp = '  allowed: --dry-run (default), --yes/--confirm/--no-dry-run (go live), --bump-only, --filter <substr>, --claim-check <off|warn|error>, --mirror-cmd <cmd>, --no-mirror, --no-guard "<reason>" (skip the guard pre-flight; logged)';
+  const allowedHelp = '  allowed: --dry-run (default), --yes/--confirm/--no-dry-run (go live), --bump-only, --filter <substr>, --claim-check <off|warn|error>, --mirror-cmd <cmd>, --no-mirror, --no-guard "<reason>" (skip the guard pre-flight; logged), --allow-sibling-drift (override the sibling-drift gate; logged), --include-drifted (auto-extend the batch with a drifted sibling)';
   for (const flag of flags) {
     if (!allowedFlags.has(flag)) {
       write(`dz publish: unknown option --${flag}`);
@@ -7007,12 +7139,269 @@ function cmdPublish(
   const claimCheckOpt = (claimCheckRaw as 'off' | 'warn' | 'error' | undefined) ?? 'warn';
 
   const bumpOnly = flags.has('bump-only');
-
   // SAFETY: dry-run is the DEFAULT. A real publish requires an EXPLICIT opt-in
   // via --yes, --confirm, or --no-dry-run. Without one, we never bump or publish.
+  // Computed HERE (moved up from below the gates, AM-5) so both gates can see it: a dry run keeps
+  // previewing packed-install with the CURRENT pre-bump tarball (nothing to compare a LIVE publish
+  // against yet), while a live run defers the real packed-install-smoke into `publishPackages`'s
+  // `packedTransport` — the one that tests the ACTUAL bytes about to ship (AM-1).
   const wantsLive = flags.has('yes') || flags.has('confirm') || flags.has('no-dry-run');
   const dryRun = !wantsLive;
 
+  // ── FR-1..FR-4 — sibling-drift gate, then packed-install smoke (feature
+  // publish-sibling-drift-gate, ADR-001). The sibling-drift gate runs before the signature gate
+  // and the live-publish banner (so a --include-drifted-expanded batch is checked and shown too).
+  // AM-5: on a DRY RUN both gates always print their verdict, even once sibling-drift already
+  // blocks — the whole point of a preview is full information before anything ships. On a LIVE
+  // run, sibling-drift still refuses immediately (packing/installing a doomed batch wastes real
+  // time); its own packed-install smoke is deferred into `publishPackages`'s `packedTransport`
+  // (AM-1) — the one gate that tests the tarball bytes actually handed to `npm publish`.
+  const allowSiblingDrift = flags.has('allow-sibling-drift');
+  const includeDrifted = flags.has('include-drifted');
+  const allPackages = discoverPackages(cwd);
+  const workspaceVersions = new Map(allPackages.map((p) => [p.name, p.version]));
+  const workspaceDirs = new Map(allPackages.map((p) => [p.name, p.dir]));
+  const matchesFilter = (pk: { name: string; dir: string }): boolean =>
+    filter === undefined || filter.length === 0 || filter.some((f) => pk.name.includes(f) || pk.dir.includes(f));
+  let targets = allPackages.filter(matchesFilter);
+  let batchNames = new Set(targets.map((p) => p.name));
+
+  // Production default: `npm pack <name>@<version>` into a temp dir, extracted. Tests inject a
+  // local directory (ADR-001, "fetchPublished … в тестах — локальный каталог").
+  const fetchPublished: FetchPublished =
+    siblingDriftFetcher ??
+    ((name, version) => {
+      try {
+        const tmp = mkdtempSync(join(tmpdir(), 'dz-sibling-drift-'));
+        execSync(`npm pack ${name}@${version} --pack-destination ${JSON.stringify(tmp)}`, {
+          stdio: 'pipe',
+          encoding: 'utf-8',
+          timeout: 60_000,
+        });
+        const tarball = readdirSync(tmp).find((f) => f.endsWith('.tgz'));
+        if (tarball === undefined) return null;
+        execSync(`tar -xzf ${JSON.stringify(join(tmp, tarball))} -C ${JSON.stringify(tmp)}`, { stdio: 'pipe', timeout: 60_000 });
+        return { dir: join(tmp, 'package') };
+      } catch {
+        return null;
+      }
+    });
+
+  // AM-6: an override (--allow-sibling-drift) is only real once its audit row is DURABLE. A write
+  // failure must refuse the publish rather than print "(logged)" about a log entry that never
+  // landed — the same "absence of a receipt is not success" lesson the registry-probe gate already
+  // enforces for a publish's own confirmation.
+  const auditedOverride = (detail: string, humanMessage: string, pkgNameForBlock: string): boolean => {
+    const wrote = appendPublishGateAudit(cwd, 'sibling-drift', 'warn', detail, '--allow-sibling-drift');
+    if (wrote) {
+      write(`dz publish: ⚠ ${humanMessage} — allowed via --allow-sibling-drift (logged)`);
+      return false;
+    }
+    write(`dz publish: BLOCKED ${pkgNameForBlock} — ${humanMessage}, and the override could not be recorded (audit write failed); refusing rather than proceeding unlogged`);
+    return true;
+  };
+
+  let driftBlocked = 0;
+  const extraBatch = new Set<string>();
+  // AM-2: --include-drifted must reach a FIXED POINT over transitive drifted siblings — a sibling
+  // folded into the batch can itself depend on a drifted sibling outside it, and the round-1 review
+  // (finding 2) showed the single pass never re-checked an EXPANDED batch's own new edges. Capped at
+  // `allPackages.length + 1` rounds (the plan's own "цикл с потолком = число пакетов").
+  const maxRounds = allPackages.length + 1;
+  for (let round = 0; round < maxRounds; round++) {
+    let addedThisRound = false;
+    for (const pk of targets) {
+      let manifestObj: {
+        dependencies?: Record<string, string>;
+        peerDependencies?: Record<string, string>;
+        optionalDependencies?: Record<string, string>;
+      } | undefined;
+      try {
+        manifestObj = JSON.parse(readFileSync(join(pk.dir, 'package.json'), 'utf-8'));
+      } catch (err) {
+        // AM-3: an unreadable/invalid package.json for a BATCH package is an input this HARD gate
+        // cannot build — it must BLOCK, never silently degrade to "no dependencies" (which used to
+        // read as a clean n/a).
+        const reason = `package.json unreadable/invalid (${(err as Error).message.split('\n')[0]})`;
+        if (allowSiblingDrift) {
+          if (auditedOverride(`${pk.name}: ${reason}`, `sibling drift check unavailable for ${pk.name} (${reason})`, pk.name)) driftBlocked++;
+        } else {
+          write(`dz publish: BLOCKED ${pk.name} — sibling drift check unavailable (${reason}); add --allow-sibling-drift to override (logged) or fix the manifest`);
+          driftBlocked++;
+        }
+        continue;
+      }
+      const deps = manifestObj?.dependencies ?? {};
+      const peerDeps = manifestObj?.peerDependencies ?? {};
+      const optionalDeps = manifestObj?.optionalDependencies ?? {};
+
+      // AM-6: a package with no workspace: dependency at all is n/a for THIS gate — recorded as a
+      // pass note, not silence (FR-6 compatibility: output stays unchanged for such a batch).
+      const anyWorkspaceDep = [...Object.values(deps), ...Object.values(peerDeps), ...Object.values(optionalDeps)]
+        .some((spec) => String(spec).startsWith('workspace:'));
+      if (!anyWorkspaceDep) {
+        appendPublishGateAudit(cwd, 'sibling-drift', 'pass', `${pk.name}: n/a — no workspace: dependency declared`);
+        continue;
+      }
+
+      const drifts = detectSiblingDrift({
+        dependencies: deps,
+        peerDependencies: peerDeps,
+        optionalDependencies: optionalDeps,
+        workspaceVersions,
+        workspaceDirs,
+        batch: batchNames,
+        fetchPublished,
+      });
+
+      for (const r of drifts) {
+        if (r.status === 'same') {
+          appendPublishGateAudit(cwd, 'sibling-drift', 'pass', `${r.name}@${r.version} = workspace (dependent: ${pk.name})`);
+          write(`dz publish: ✓ sibling drift: none (${r.name}@${r.version} = workspace)`);
+        } else if (r.status === 'unavailable') {
+          if (allowSiblingDrift) {
+            if (auditedOverride(`${r.name}@${r.version}: ${r.reason}`, `sibling drift check unavailable for ${r.name}@${r.version} (${r.reason})`, pk.name)) driftBlocked++;
+          } else {
+            write(`dz publish: BLOCKED ${pk.name} — sibling drift check unavailable (${r.reason}); add --allow-sibling-drift to override (logged) or check network/registry access`);
+            driftBlocked++;
+          }
+        } else if (includeDrifted) {
+          if (!batchNames.has(r.name) && !extraBatch.has(r.name)) {
+            extraBatch.add(r.name);
+            addedThisRound = true;
+            write(`dz publish: → sibling drift: ${r.name}@${r.version} differs from the workspace (${r.changedFiles.length} file(s)) — adding to the batch via --include-drifted${r.missingExports.length > 0 ? ` (missing exports: ${r.missingExports.join(', ')})` : ''}`);
+          }
+        } else if (allowSiblingDrift) {
+          if (auditedOverride(`${r.name}@${r.version}: ${r.changedFiles.length} file(s) differ from the workspace`, `sibling drift: ${r.name}@${r.version} differs from the workspace (${r.changedFiles.length} file(s))`, pk.name)) driftBlocked++;
+        } else {
+          appendPublishGateAudit(cwd, 'sibling-drift', 'block', `${pk.name} depends on ${r.name}@${r.version}; ${r.changedFiles.length} file(s) differ from the workspace`);
+          const suggestFilter = filterStr !== undefined ? `${filterStr},${r.name}` : `${pk.name},${r.name}`;
+          write(`dz publish: BLOCKED ${pk.name} — sibling drift: @dzhechkov/${r.name.replace(/^@dzhechkov\//, '')}@${r.version} on the registry differs from the workspace (${r.changedFiles.length} file(s)); add ${r.name} to the batch (--filter ${suggestFilter}) or publish it first`);
+          driftBlocked++;
+        }
+      }
+    }
+
+    if (driftBlocked > 0) break; // nothing to expand into a run that already refuses
+    if (!includeDrifted || !addedThisRound) break; // no auto-expand requested, or fixed point reached
+
+    // FR-4: --include-drifted folds the drifted sibling(s) into the batch — they bump patch like
+    // any other package in `publishPackages`' own (unchanged) bump logic. Re-loop: the newly
+    // folded-in sibling(s) may themselves depend on a drifted sibling outside the (now bigger) batch.
+    filter = filter === undefined ? [...batchNames, ...extraBatch] : [...filter, ...extraBatch];
+    targets = allPackages.filter(matchesFilter);
+    batchNames = new Set(targets.map((p) => p.name));
+  }
+
+  const siblingDriftFailed = driftBlocked > 0;
+  if (siblingDriftFailed && !dryRun) {
+    write(`dz publish: refusing to publish (${driftBlocked} sibling-drift violation(s))`);
+    return 1;
+  }
+
+  // FR-3 — packed-install smoke: pack the WHOLE (possibly --include-drifted-expanded) batch,
+  // install every tarball together in a CLEAN dir (out-of-batch siblings resolve from the
+  // registry, exactly like a fresh user's install), then boot every bin with --version.
+  // "n/a" (FR-6) when nothing in the batch has a bin. AM-8: a bin is collected here whether or not
+  // its target file exists YET — a manifest that declares one but ships nothing must BLOCK after a
+  // real install, never silently vanish from the plan (which used to read as n/a, or even skip the
+  // whole gate when it was the batch's only bin).
+  const bins: { pkg: string; binName: string; relPath: string }[] = [];
+  for (const pk of targets) {
+    let manifest: { bin?: string | Record<string, string> } = {};
+    try { manifest = JSON.parse(readFileSync(join(pk.dir, 'package.json'), 'utf-8')); } catch { /* no bin info available */ }
+    if (typeof manifest.bin === 'string') {
+      bins.push({ pkg: pk.name, binName: pk.name.split('/').pop() ?? pk.name, relPath: manifest.bin.replace(/^\.\//, '') });
+    } else if (manifest.bin !== undefined && manifest.bin !== null && typeof manifest.bin === 'object') {
+      for (const [name, relRaw] of Object.entries(manifest.bin)) {
+        bins.push({ pkg: pk.name, binName: name, relPath: String(relRaw).replace(/^\.\//, '') });
+      }
+    }
+  }
+
+  // AM-1/AM-5: the packed-install-smoke PREVIEW below runs on a DRY RUN only, against whatever is
+  // CURRENTLY on disk (pre-bump) — it cannot be the "same bytes that ship" gate AM-1 requires,
+  // because a dry run never bumps/builds/packs anything real to compare against. On a LIVE run the
+  // real gate is `packedTransport` (wired at the `publishPackages` call below), which packs ONCE
+  // post-bump and smokes exactly those tarballs — this preview is skipped entirely then, so its
+  // digest is never confused with the one that actually ships.
+  let packedInstallSmokePreviewFailed = false;
+  if (dryRun) {
+    if (bins.length === 0) {
+      appendPublishGateAudit(cwd, 'packed-install-smoke', 'pass', 'n/a — nothing in the batch declares a bin');
+      write('dz publish: ○ packed install smoke: n/a (nothing in the batch declares a bin)');
+    } else {
+      const scratchRoot = packedInstallScratchRoot();
+      const packDir = mkdtempSync(join(scratchRoot, 'dz-publish-pack-'));
+      const installDir = mkdtempSync(join(scratchRoot, 'dz-publish-install-'));
+      const runSmoke: ReleaseExecRunner =
+        packedInstallRunner ??
+        ((cmd, o) => {
+          try {
+            const stdout = execSync(cmd, { cwd: o.cwd, stdio: 'pipe', encoding: 'utf-8', timeout: o.timeoutMs });
+            return { exitCode: 0, stdout: stdout == null ? '' : String(stdout), stderr: '' };
+          } catch (err) {
+            const e = err as Error & { status?: number | null; signal?: string | null; killed?: boolean; stdout?: unknown; stderr?: unknown };
+            const timedOut = (e.status === null || e.status === undefined) && (e.signal != null || e.killed === true);
+            return {
+              exitCode: typeof e.status === 'number' ? e.status : 1,
+              stdout: e.stdout == null ? '' : String(e.stdout),
+              stderr: e.stderr == null || String(e.stderr).trim() === '' ? formatPublishError(e) : String(e.stderr),
+              timedOut,
+            };
+          }
+        });
+      const smokePlan = planPackedInstallSmoke({
+        packages: targets.map((p) => ({ name: p.name, dir: p.dir, version: p.version })),
+        bins,
+        packDir,
+        installDir,
+      });
+      const smokeExecutions: PackedInstallExecution[] = [];
+      // Lead edit after the live dry-run (13.09 12:05): the preview packed the WORKING directory with
+      // `workspace:^` specs still inside, so `npm install <tgz>` died with EUNSUPPORTEDPROTOCOL — the
+      // preview must stage package.json exactly as the live packedTransport does (sibling pins via
+      // rewriteWorkspaceSpecs, prepublishOnly dropped) and restore the originals afterwards.
+      const stagedOriginals: Array<{ path: string; text: string }> = [];
+      try {
+        for (const p of targets) {
+          const pkgJsonPath = join(p.dir, 'package.json');
+          const original = readFileSync(pkgJsonPath, 'utf-8');
+          const rewritten = JSON.parse(rewriteWorkspaceSpecs(original, workspaceVersions)) as Record<string, unknown>;
+          const scripts = rewritten['scripts'];
+          if (scripts !== null && typeof scripts === 'object' && !Array.isArray(scripts)) delete (scripts as Record<string, unknown>)['prepublishOnly'];
+          stagedOriginals.push({ path: pkgJsonPath, text: original });
+          writeFileSync(pkgJsonPath, JSON.stringify(rewritten, null, 2) + '\n');
+        }
+        for (const step of smokePlan.steps) {
+          const r = runSmoke(step.cmd, { cwd: step.cwd, timeoutMs: step.timeoutMs });
+          smokeExecutions.push({ stepId: step.id, exitCode: r.exitCode, stdout: r.stdout, stderr: r.stderr, ...(r.timedOut !== undefined ? { timedOut: r.timedOut } : {}) });
+        }
+      } finally {
+        for (const o of stagedOriginals) { try { writeFileSync(o.path, o.text); } catch (err) { write(`dz publish: ⚠ could not restore ${o.path} after the preview smoke: ${formatPublishError(err)}`); } }
+      }
+      const smokeVerdict = judgePackedInstallSmoke(smokePlan, smokeExecutions);
+      try { rmSync(packDir, { recursive: true, force: true }); } catch { /* best-effort cleanup */ }
+      try { rmSync(installDir, { recursive: true, force: true }); } catch { /* best-effort cleanup */ }
+
+      if (smokeVerdict.ok) {
+        appendPublishGateAudit(cwd, 'packed-install-smoke', 'pass', 'preview: pack/install/--version all clean');
+        write('dz publish: ✓ packed install smoke (preview)');
+      } else {
+        const detail = smokeVerdict.failureDetail ?? smokeVerdict.bins.find((b) => !b.ok)?.detail ?? '(no detail)';
+        appendPublishGateAudit(cwd, 'packed-install-smoke', 'block', detail);
+        write(`dz publish: BLOCKED — packed install smoke failed (preview): ${detail}`);
+        for (const b of smokeVerdict.bins.filter((b) => !b.ok)) write(`  ✗ ${b.pkg} (${b.binName}): ${b.detail ?? '(no detail)'}`);
+        packedInstallSmokePreviewFailed = true;
+      }
+    }
+  }
+
+  if (siblingDriftFailed || packedInstallSmokePreviewFailed) {
+    write(`dz publish: refusing to publish (${driftBlocked} sibling-drift violation(s)${packedInstallSmokePreviewFailed ? ', packed install smoke failed' : ''})`);
+    return 1;
+  }
+
   if (!dryRun) {
     // Loud confirmation banner listing exactly what is about to be published.
     const targets = discoverPackages(cwd).filter((p) =>
@@ -7105,12 +7494,77 @@ function cmdPublish(
   // longer exist. Default to the same path `dz sign --init` writes, so the ordinary operator needs no
   // new flag; `--sign-key` overrides it.
   const signKey = (options.get('sign-key') ?? join(homedir(), '.dz', 'keys', 'dz.key')).trim();
+  // AM-1: the packedTransport smoke closure and the actual `npm publish <tgz>` inside
+  // `publishPackages` both read from THIS SAME directory — created once, cleaned up once, after
+  // publishPackages returns (it needs the tarballs on disk through its own publish step).
+  const packedTransportPackDestDir = mkdtempSync(join(packedInstallScratchRoot(), 'dz-publish-packed-'));
   const publishReport = publishPackages(cwd, {
     provenance,
     dryRun,
     filter,
     bumpOnly,
     claimGate: claimCheckOpt,
+    exec: publishExecRunner,
+    packedTransport: {
+      packDestDir: packedTransportPackDestDir,
+      // AM-1: judged ONCE, over every package's packed artifact — nothing in the batch publishes
+      // until this returns ok:true. `bins` (AM-8-fixed: declared bins are collected whether or not
+      // their target file exists yet) was already computed above from the same `targets` this
+      // batch resolves to.
+      smoke: (artifacts): { ok: boolean; reason?: string } => {
+        for (const a of artifacts) write(`dz publish: tarball ${a.name}@${a.newVersion} sha256:${a.sha256}`);
+        if (bins.length === 0) {
+          appendPublishGateAudit(cwd, 'packed-install-smoke', 'pass', 'n/a — nothing in the batch declares a bin');
+      write('dz publish: ○ packed install smoke: n/a (nothing in the batch declares a bin)');
+          return { ok: true };
+        }
+        const scratchRoot = packedInstallScratchRoot();
+        const installDir = mkdtempSync(join(scratchRoot, 'dz-publish-install-'));
+        const runSmoke: ReleaseExecRunner =
+          packedInstallRunner ??
+          ((cmd, o) => {
+            try {
+              const stdout = execSync(cmd, { cwd: o.cwd, stdio: 'pipe', encoding: 'utf-8', timeout: o.timeoutMs });
+              return { exitCode: 0, stdout: stdout == null ? '' : String(stdout), stderr: '' };
+            } catch (err) {
+              const e = err as Error & { status?: number | null; signal?: string | null; killed?: boolean; stdout?: unknown; stderr?: unknown };
+              const timedOut = (e.status === null || e.status === undefined) && (e.signal != null || e.killed === true);
+              return {
+                exitCode: typeof e.status === 'number' ? e.status : 1,
+                stdout: e.stdout == null ? '' : String(e.stdout),
+                stderr: e.stderr == null || String(e.stderr).trim() === '' ? formatPublishError(e) : String(e.stderr),
+                timedOut,
+              };
+            }
+          });
+        const smokePlan = planPackedInstallSmoke({
+          // skipPack (AM-1): these tarballs are ALREADY packed (by publishPackages, above) — a
+          // second, different pack here would smoke bytes other than the ones about to publish.
+          packages: artifacts.map((a) => ({ name: a.name, dir: '(packed already — see skipPack)', version: a.newVersion })),
+          bins,
+          packDir: packedTransportPackDestDir,
+          installDir,
+          skipPack: true,
+        });
+        const smokeExecutions: PackedInstallExecution[] = [];
+        for (const step of smokePlan.steps) {
+          const r = runSmoke(step.cmd, { cwd: step.cwd, timeoutMs: step.timeoutMs });
+          smokeExecutions.push({ stepId: step.id, exitCode: r.exitCode, stdout: r.stdout, stderr: r.stderr, ...(r.timedOut !== undefined ? { timedOut: r.timedOut } : {}) });
+        }
+        const verdict = judgePackedInstallSmoke(smokePlan, smokeExecutions);
+        try { rmSync(installDir, { recursive: true, force: true }); } catch { /* best-effort cleanup */ }
+        if (verdict.ok) {
+          appendPublishGateAudit(cwd, 'packed-install-smoke', 'pass', 'pack/install/--version all clean (live, packedTransport)');
+          write('dz publish: ✓ packed install smoke');
+          return { ok: true };
+        }
+        const detail = verdict.failureDetail ?? verdict.bins.find((b) => !b.ok)?.detail ?? '(no detail)';
+        appendPublishGateAudit(cwd, 'packed-install-smoke', 'block', detail);
+        write(`dz publish: BLOCKED — packed install smoke failed: ${detail}`);
+        for (const b of verdict.bins.filter((b) => !b.ok)) write(`  ✗ ${b.pkg} (${b.binName}): ${b.detail ?? '(no detail)'}`);
+        return { ok: false, reason: detail };
+      },
+    },
     signKey: signKey === '' ? undefined : resolve(cwd, signKey),
     verifyAfterSign: (packDir: string): { ok: boolean; trustRootPresent: boolean; pack?: string } => {
       // Verify the OUTCOME against the trust root a CONSUMER would use — an existing key may be the
@@ -7184,6 +7638,7 @@ function cmdPublish(
       }
     },
   });
+  try { rmSync(packedTransportPackDestDir, { recursive: true, force: true }); } catch { /* best-effort cleanup */ }
 
   const configMirror = mirrorCommandFromConfig(cwd);
   const configuredCommand = (options.get('mirror-cmd') ?? configMirror.command ?? '').trim();
@@ -7274,6 +7729,9 @@ function cmdPublish(
       ? ` (confirmed by registry after ${pkg.registryProbes} probes)`
       : '';
     write(`  ${icon} ${pkg.name.padEnd(35)} ${pkg.oldVersion} → ${pkg.newVersion}  ${pkg.status}${receipt}${detail}`);
+    // AM-1: the digest of the EXACT tarball bytes that were smoke-tested AND published — present
+    // only for a packedTransport publish, so "the smoke tested what shipped" is checkable here too.
+    if (pkg.status === 'published' && pkg.sha256 !== undefined) write(`      sha256:${pkg.sha256}`);
     if (pkg.status === 'error' && pkg.error) {
       for (const line of pkg.error.split('\n')) write(`      ${line}`);
     }
@@ -7332,7 +7790,7 @@ function cmdPublish(
 /*  ADR-001): computed from the declarative model, never hand-written  */
 /* ------------------------------------------------------------------ */
 
-function cmdParity(options: Map<string, string>, flags: Set<string>, write: Write, writeErr: WriteErr): number {
+function cmdParity(options: Map<string, string>, flags: Set<string>, write: Write, writeErr: WriteErr, cwd: string): number {
   const json = flags.has('json');
   if (flags.has('help')) {
     write('dz parity [--target <name>] [--json] — the computed feature×target map (never hand-written)');
@@ -7360,7 +7818,31 @@ function cmdParity(options: Map<string, string>, flags: Set<string>, write: Writ
     }
   }
 
-  const matrix = buildParityMatrix();
+  // ADR-001 Decision 3 (feature setup-installs-apply-leg): `learning-apply` on `claude-code` is
+  // MEASURED, not declared — `hooks-prompt` is present for that ONE target only when
+  // `applyLegStatus(root).installed`. `computeParity` itself is untouched (FR-5); only the
+  // capability SET fed into it for this one cell differs from the static `TARGET_CAPABILITIES`.
+  // `applyLegStatus` never throws (fix round 1, Q3 finding: an unreadable helper used to be able to
+  // crash this command rather than degrade to a named remedy).
+  const applyLegStatusVal = applyLegStatus(cwd);
+  const applyLegInstalled = applyLegStatusVal.installed;
+  const matrix = buildParityMatrix().map((row) => {
+    if (row.feature.id !== 'learning-apply' || applyLegInstalled) return row;
+    const claudeCodeCaps = TARGET_CAPABILITIES['claude-code'].filter((c) => c !== 'hooks-prompt');
+    return { feature: row.feature, cells: { ...row.cells, 'claude-code': computeParity(row.feature, claudeCodeCaps) } };
+  });
+  // The "not installed" remedy — named ONLY for the one cell whose grant is a live measurement,
+  // never a blanket note for every `manual` cell (most targets are manual by DESIGN, not absence).
+  // `stale-version`/`unreadable` route through `applyLegReasonMessage` — the SAME text-producing
+  // function `dz doctor` uses for those two reasons (fix round 1, HIGH finding 2 / Q3 finding 7), so
+  // the two instruments cannot disagree about WHY a stale or broken install is not "full".
+  const applyLegRemedy = (featureId: string, t: TargetName): string => {
+    if (featureId !== 'learning-apply' || t !== 'claude-code' || applyLegInstalled) return '';
+    if (applyLegStatusVal.reason === 'stale-version' || applyLegStatusVal.reason === 'unreadable') {
+      return ` — ${applyLegReasonMessage(applyLegStatusVal)}`;
+    }
+    return ' — not installed — run dz setup --target claude-code --memory agentdb';
+  };
   // EVIDENCE staleness, folded into the report (fix round 2, R2-3). Derived from the records
   // themselves — no `codex --version`, no subprocess, so `dz parity` stays a deterministic function
   // of the model. A cell whose deciding form rests on a transcript that is older than the newest
@@ -7402,8 +7884,12 @@ function cmdParity(options: Map<string, string>, flags: Set<string>, write: Writ
   if (json) {
     const shown = target !== undefined ? [target] : TARGET_NAMES;
     const rows = matrix.map((r) => {
-      const cells: Record<string, ParityReportCell> = {};
-      for (const t of shown) cells[t] = reportCell(r.feature, t, r.cells[t]);
+      const cells: Record<string, ParityReportCell & { note?: string }> = {};
+      for (const t of shown) {
+        const cell = reportCell(r.feature, t, r.cells[t]);
+        const remedy = applyLegRemedy(r.feature.id, t);
+        cells[t] = remedy === '' ? cell : { ...cell, note: remedy.replace(/^ — /, '') };
+      }
       return { id: r.feature.id, title: r.feature.title, cells };
     });
     // A filtered response stays internally consistent: capabilities are filtered too (Codex QE gap 9).
@@ -7430,7 +7916,7 @@ function cmdParity(options: Map<string, string>, flags: Set<string>, write: Writ
         : c.level === 'inconclusive'
           ? `via ${c.via ?? ''} — INCONCLUSIVE: stale evidence for ${(c.staleEvidence ?? []).join(', ')}`
           : `via ${c.via ?? ''}`;
-      write(`  ${icon} ${r.feature.title.padEnd(58)} ${detail}`);
+      write(`  ${icon} ${r.feature.title.padEnd(58)} ${detail}${applyLegRemedy(r.feature.id, t)}`);
     }
     write('\n  ✓ full (the complete experience)   ◐ manual (works, you drive it by hand)   ? evidence stale (re-probe)   — not available');
     for (const line of staleNote(t)) write(line);
@@ -7582,14 +8068,31 @@ function cmdRelease(options: Map<string, string>, flags: Set<string>, cwd: strin
     factsList = selected;
   }
 
+  // FR-6 (feature publish-sibling-drift-gate): real tmp dirs for the packed-install smoke — only
+  // when something in the set actually has a bin to boot (packing bin-less siblings proves
+  // nothing this gate exists to catch). Planning stays pure (planReleaseGates never mkdtemps
+  // itself); these are cleaned up on every exit path below, dry-run included.
+  const packedInstallEligible = factsList.some((f) => f.bins.some((b) => b.exists));
+  const releaseScratchRoot = packedInstallScratchRoot();
+  const packedInstallDirs = packedInstallEligible
+    ? { packDir: mkdtempSync(join(releaseScratchRoot, 'dz-release-pack-')), installDir: mkdtempSync(join(releaseScratchRoot, 'dz-release-install-')) }
+    : undefined;
+  const cleanupPackedInstallDirs = (): void => {
+    if (packedInstallDirs === undefined) return;
+    try { rmSync(packedInstallDirs.packDir, { recursive: true, force: true }); } catch { /* best-effort cleanup */ }
+    try { rmSync(packedInstallDirs.installDir, { recursive: true, force: true }); } catch { /* best-effort cleanup */ }
+  };
+
   const plan = planReleaseGates(factsList, {
     monorepoRoot: cwd,
     pnpmLockPresent: existsSync(join(cwd, 'pnpm-lock.yaml')),
     includeDevDeps: flags.has('audit-dev'),
+    packedInstall: packedInstallDirs,
   });
 
   // --dry-run: print the full plan, execute NOTHING (deterministic, byte-testable preview).
   if (flags.has('dry-run')) {
+    cleanupPackedInstallDirs();
     if (json) {
       write(JSON.stringify({ dryRun: true, packages: plan.packages, steps: plan.steps, skips: plan.skips, warnings }, null, 2));
       return 0;
@@ -7634,6 +8137,7 @@ function cmdRelease(options: Map<string, string>, flags: Set<string>, cwd: strin
   if (smokeTmp !== undefined) {
     try { rmSync(smokeTmp, { recursive: true, force: true }); } catch { /* best-effort cleanup */ }
   }
+  cleanupPackedInstallDirs();
 
   const verdict = classifyGateExecutions(plan, executions);
 
@@ -9667,6 +10171,36 @@ function gatherGuardFacts(op: string, root: string, text: string | undefined, st
   const facts: Record<string, unknown> = { op };
   const publishPackageRoots: string[] = [];
   if (op === 'publish') {
+    try {
+      const roundsDir = join(root, '.dz', 'rounds');
+      const states = readdirSync(roundsDir)
+        .filter((name) => name.endsWith('.json'))
+        .map((name) => readRoundState(join(roundsDir, name)))
+        .filter((state): state is RoundState => state !== null);
+      facts['openRounds'] = listRounds(states, {
+        now: Date.now(),
+        olderThanMinutes: 120,
+        isPidAlive: probePid,
+        isRunAlive: (runId) => roundRunOwnerAlive(root, runId, Date.now()),
+      }).map((row) => ({
+        slug: row.state.slug,
+        round: row.state.round,
+        ageMinutes: row.ageMinutes,
+        pidAlive: row.pidAlive,
+      }));
+    } catch { /* absent/unreadable round state is no fabricated violation */ }
+    const since = roundTraceSince(root);
+    const enabled = roundsTracingEnabled(root);
+    if (!enabled) {
+      facts['codeCommitsSinceLastRound'] = { commits: null, since, enabled: false };
+    } else if (since !== null) {
+      facts['codeCommitsSinceLastRound'] = { commits: packageCommitCount(root, since), since };
+    } else if (existsSync(join(root, '.dz', 'feature-adr', 'run-cost-ledger.jsonl'))) {
+      // The ledger EXISTS but carries no dated row: that is a measurable absence and gets a note.
+      // No ledger file at all is a fresh project — the rule stays not-established silently, so a
+      // note that every new repo would carry does not drown the ones that mean something.
+      facts['codeCommitsSinceLastRound'] = { commits: null, since: null };
+    }
     // Advisory I/O: unreadable telemetry or fed state is absence of evidence, never a fabricated
     // stale finding and never a publish blocker.
     try {
@@ -10331,19 +10865,56 @@ function runGuardEvaluation(root: string, op: string, text: string | undefined,
   return result;
 }
 
-function renderGuardObservation(observation: GuardObservation): string {
-  const tag = observation.status === 'unknown' ? 'note' : 'observe';
-  return `  [${tag}] ${observation.rule} ${observation.scope}: ${observation.detail} [${observation.status}]`;
-}
-
 /**
- * The tail facts of an append-only log, read from its END — O(1) in the file size, which is what
- * lets the chain be extended on every append without a full-file scan (FR-2). Anything unreadable
- * yields {@link EMPTY_LOG_TAIL}; the caller then starts a marked segment rather than blocking.
+ * Feature `publish-sibling-drift-gate` (FR-5/AM-6): both the sibling-drift and packed-install-smoke
+ * gates write to the SAME append-only, hash-chained `.dz/guard-audit.jsonl` the declarative
+ * `dz guard` rules use — visibility for `dz guard promote`/`dz compounding` never depends on
+ * which mechanism produced the finding. `pass` records go through as an informational `note`
+ * (never a violation, so they can never flip the row's own verdict) so a clean check is ALSO on
+ * the record, not just a block or an override (AM-6: "аудит без записи = не аудит").
+ *
+ * Returns whether the write actually landed. Most callers are best-effort (a write failure never
+ * blocks a verdict already decided) — the one exception is an `--allow-sibling-drift` OVERRIDE,
+ * whose caller MUST check this return value: an override is not real without a durable row behind
+ * it (AM-6's load-bearing property — see `auditedOverride` in `cmdPublish`).
  */
-function readLogTail(path: string): LogTail {
-  let fd: number | undefined;
-  try {
+function appendPublishGateAudit(
+  root: string,
+  rule: 'sibling-drift' | 'packed-install-smoke',
+  verdict: 'pass' | 'warn' | 'block',
+  detail: string,
+  overrideReason?: string,
+): boolean {
+  try {
+    const rec = auditRecord(
+      verdict === 'pass'
+        ? { op: 'publish', verdict, violations: [], checked: [rule], notEstablished: [], notes: [`${rule}: ${detail}`] }
+        : { op: 'publish', verdict, violations: [{ rule, severity: 'hard', detail }], checked: [rule], notEstablished: [] },
+      new Date().toISOString(),
+      overrideReason !== undefined ? { reason: overrideReason } : undefined,
+    );
+    mkdirSync(join(root, '.dz'), { recursive: true });
+    const auditPath = join(root, '.dz', 'guard-audit.jsonl');
+    writeFileSync(auditPath, appendChainedLines([rec], readLogTail(auditPath)), { flag: 'a' });
+    return true;
+  } catch {
+    return false; // audit write failed — the caller decides whether that itself is refusable (AM-6)
+  }
+}
+
+function renderGuardObservation(observation: GuardObservation): string {
+  const tag = observation.status === 'unknown' ? 'note' : 'observe';
+  return `  [${tag}] ${observation.rule} ${observation.scope}: ${observation.detail} [${observation.status}]`;
+}
+
+/**
+ * The tail facts of an append-only log, read from its END — O(1) in the file size, which is what
+ * lets the chain be extended on every append without a full-file scan (FR-2). Anything unreadable
+ * yields {@link EMPTY_LOG_TAIL}; the caller then starts a marked segment rather than blocking.
+ */
+function readLogTail(path: string): LogTail {
+  let fd: number | undefined;
+  try {
     if (!existsSync(path)) return EMPTY_LOG_TAIL;
     fd = openSync(path, 'r');
     const size = fstatSync(fd).size;
@@ -11879,6 +12450,118 @@ function parseCheckMutatedFile(absFile: string, text: string): MutationParseChec
   }
 }
 
+const MUTATION_GATE_OUTPUT_TAIL_MAX_LINES = 20;
+const MUTATION_GATE_OUTPUT_TAIL_MAX_BYTES = 2 * 1024;
+
+export function boundedMutationGateOutputTail(output: string): string | undefined {
+  const normalized = output.replace(/\r\n?/g, '\n').replace(/\n+$/, '');
+  if (normalized === '') return undefined;
+
+  let tail = normalized.split('\n').slice(-MUTATION_GATE_OUTPUT_TAIL_MAX_LINES).join('\n');
+  const encoded = Buffer.from(tail, 'utf8');
+  if (encoded.byteLength <= MUTATION_GATE_OUTPUT_TAIL_MAX_BYTES) return tail;
+
+  const codePoints = Array.from(tail);
+  let start = codePoints.length;
+  let byteLength = 0;
+  while (start > 0) {
+    const nextByteLength = Buffer.byteLength(codePoints[start - 1]!, 'utf8');
+    if (byteLength + nextByteLength > MUTATION_GATE_OUTPUT_TAIL_MAX_BYTES) break;
+    byteLength += nextByteLength;
+    start -= 1;
+  }
+  return codePoints.slice(start).join('');
+}
+
+// ── Full-output capture for a RED baseline/rebaseline line (gate-stability, 2026-09-12) ────────
+// The bounded tail above is a diagnostic teaser (3-20 lines); under a multi-entry gate run the
+// tail was measured to hand back an unrelated neighbour's stderr, leaving OVER_FAILING/
+// INCONCLUSIVE undiagnosable. Only the baseline and rebaseline lines write here — the per-entry
+// mutation run is EXPECTED to redden and already carries a bounded tail; this is for the lines
+// whose redness means "the copy itself is broken", where the full transcript is the only way to
+// tell what actually happened.
+
+const MUTATION_GATE_OUTPUT_FILE_RETENTION_MS = 7 * 24 * 60 * 60 * 1000;
+
+function mutationGateOutputDir(): string {
+  return process.env.DZ_MUTGATE_OUTPUT_DIR ?? join(tmpdir(), 'dz-mutgate-output');
+}
+
+/** own filename prefix (fix-round-1 HIGH finding) — see isMutationGateOutputFile. */
+const MUTATION_GATE_OUTPUT_FILE_PREFIX = 'dz-mutgate-';
+/** exact shape of `new Date().toISOString().replace(/:/g, '-')`, e.g. `2026-09-12T20-00-00.000Z`. */
+const MUTATION_GATE_OUTPUT_TS_PATTERN = String.raw`\d{4}-\d{2}-\d{2}T\d{2}-\d{2}-\d{2}\.\d{3}Z`;
+const MUTATION_GATE_OUTPUT_FILE_RE = new RegExp(
+  `^${MUTATION_GATE_OUTPUT_FILE_PREFIX}.+-(baseline|rebaseline|final-rebaseline)-${MUTATION_GATE_OUTPUT_TS_PATTERN}\\.log$`,
+);
+
+/**
+ * true only for a filename THIS executor could have written — rotation never touches a foreign
+ * file. Fix-round-1 HIGH finding (Codex review, gate-stability): the prior
+ * `^.+-(baseline|rebaseline|final-rebaseline)-.+\.log$` had no own prefix and accepted ANY
+ * trailing text as the "timestamp", so a pre-existing unrelated file dropped into a shared
+ * `DZ_MUTGATE_OUTPUT_DIR` (e.g. `service-baseline-backup.log`) matched and could be rotated away.
+ * Now BOTH the `dz-mutgate-` prefix AND the exact ISO-timestamp shape we ourselves write are
+ * required — a foreign file can accidentally share the prefix but essentially never our precise
+ * timestamp format, and a file we did NOT write never carries both.
+ */
+function isMutationGateOutputFile(name: string): boolean {
+  return MUTATION_GATE_OUTPUT_FILE_RE.test(name);
+}
+
+function rotateMutationGateOutputDir(dir: string): void {
+  let names: string[];
+  try { names = readdirSync(dir); } catch { return; }
+  const cutoff = Date.now() - MUTATION_GATE_OUTPUT_FILE_RETENTION_MS;
+  for (const name of names) {
+    if (!isMutationGateOutputFile(name)) continue; // "чужие файлы не трогаются" — own prefix only
+    const full = join(dir, name);
+    try {
+      if (statSync(full).mtimeMs < cutoff) rmSync(full, { force: true });
+    } catch { /* best effort — a listing race is not this executor's problem */ }
+  }
+}
+
+/** Discriminated outcome of a save attempt — a red run either saved (path) or did not (error);
+ *  never both. See writeMutationGateOutputOnRed. */
+type MutationGateOutputWrite = { readonly path: string } | { readonly error: string };
+
+/**
+ * Saves the FULL stdout+stderr of a RED baseline/rebaseline run and returns `{ path }`, or
+ * `{ error }` on any I/O failure (EACCES/ENOSPC/EROFS/ENOTDIR and the like — never blocks the gate
+ * on a logging problem: fix-round-1 MEDIUM finding, the prior silent `catch { return undefined; }`
+ * made a failed save indistinguishable from "nothing to save"), or `undefined` when exitCode is 0
+ * (nothing written on green — NFR-1 byte-identity).
+ */
+function writeMutationGateOutputOnRed(
+  entryId: string | undefined,
+  phase: 'baseline' | 'rebaseline' | 'final-rebaseline',
+  exitCode: number | null,
+  output: string,
+): MutationGateOutputWrite | undefined {
+  if (exitCode === 0) return undefined;
+  try {
+    const dir = mutationGateOutputDir();
+    mkdirSync(dir, { recursive: true });
+    rotateMutationGateOutputDir(dir);
+    const ts = new Date().toISOString().replace(/:/g, '-');
+    const full = join(dir, `${MUTATION_GATE_OUTPUT_FILE_PREFIX}${entryId ?? 'baseline'}-${phase}-${ts}.log`);
+    writeFileSync(full, output);
+    return { path: full };
+  } catch (e) {
+    return { error: String((e as Error)?.message ?? e) };
+  }
+}
+
+/** Unpacks a `writeMutationGateOutputOnRed` result into the `{outputPath, outputError}` shape the
+ *  pure engine (classifyBaseline / MutationObservation) consumes. */
+function splitMutationGateOutputWrite(
+  result: MutationGateOutputWrite | undefined,
+): { outputPath?: string; outputError?: string } {
+  if (result === undefined) return {};
+  return 'path' in result ? { outputPath: result.path } : { outputError: result.error };
+}
+
 function cmdMutationGate(
   options: Map<string, string>,
   flags: Set<string>,
@@ -11943,6 +12626,12 @@ function cmdMutationGate(
   const testCmdRaw = options.get('test-cmd') ?? parsed.registry.testCommand ?? 'npm test';
   if (/[\0\n\r]/.test(testCmdRaw)) return fail('--test-cmd may not contain NUL or newline characters');
   const testCmd = testCmdRaw;
+  const excludedSelfChecks = REGISTRY_SELFCHECK_TESTS.filter((testFile) =>
+    entries.some((entry) => buildMutationTestCommand(testCmd, entry).excluded.includes(testFile)),
+  );
+  if (!json) {
+    write(`mutation-gate: self-check excluded from mutant runs: ${excludedSelfChecks.join(', ') || '(none)'}`);
+  }
 
   const timeoutOpt = Number(options.get('timeout') ?? '300000');
   const timeout = Number.isFinite(timeoutOpt) && timeoutOpt > 0 ? timeoutOpt : 300000;
@@ -12021,11 +12710,20 @@ function cmdMutationGate(
     const requireCompletionReceipt = parsed.registry.requireCompletionReceipt === true;
 
     type SuiteRun = MutationGateRunnerObservation & { readonly internalAttemptLog?: string };
-    const invokeSuite = (): MutationGateRunnerObservation => {
+    const invokeSuite = (
+      suiteCommand: string,
+      phase: 'baseline' | 'mutation' | 'rebaseline' | 'final-rebaseline',
+      entryId?: string,
+    ): MutationGateRunnerObservation => {
       if (injectedRunner !== undefined) {
-        return injectedRunner(testCmd, { cwd: copyDir, timeoutMs: timeout });
+        return injectedRunner(suiteCommand, {
+          cwd: copyDir,
+          timeoutMs: timeout,
+          phase,
+          ...(entryId !== undefined ? { entryId } : {}),
+        });
       }
-      const run = spawnSync(testCmd, {
+      const run = spawnSync(suiteCommand, {
         cwd: copyDir,
         shell: true,
         encoding: 'utf-8',
@@ -12061,8 +12759,9 @@ function cmdMutationGate(
     const runSuite = (
       phase: 'baseline' | 'mutation' | 'rebaseline' | 'final-rebaseline',
       entryId?: string,
+      suiteCommand = testCmd,
     ): SuiteRun => {
-      const retried = runWithOneInternalRetry(invokeSuite);
+      const retried = runWithOneInternalRetry(() => invokeSuite(suiteCommand, phase, entryId));
       const loggedAttempts = retried.attempts.map((attempt) => {
         if (attempt.outcome !== 'completed' || retried.value === null) return attempt;
         const outcome = retried.value.exitCode === null
@@ -12098,12 +12797,16 @@ function cmdMutationGate(
     // result would be this gate shipping the defect class it exists to catch.
     if (!json) write(`mutation-gate: baseline suite in scratch copy of ${pkgDir} …`);
     const base = runSuite('baseline');
+    const { outputPath: baseOutputPath, outputError: baseOutputError } =
+      splitMutationGateOutputWrite(writeMutationGateOutputOnRed(undefined, 'baseline', base.exitCode, base.output));
     baseline = classifyBaseline(
       base.exitCode,
       base.failureReason,
       base.exitCode !== null && base.exitCode !== 0
         ? attributeBaselineRedness(base.output, entries.map((entry) => entry.file))
         : undefined,
+      baseOutputPath,
+      baseOutputError,
     );
     if (!baseline.ok) {
       if (json) { write(JSON.stringify({ packageDir: pkgDir, registryPath, testCommand: testCmd, baseline, results, internalRetries, exitCode: 1 }, null, 2)); return 1; }
@@ -12165,7 +12868,7 @@ function cmdMutationGate(
         if (check.error !== undefined) {
           parseError = check.error; // no suite run: the verdict is MUTATION_UNPARSEABLE regardless
         } else if (parseInternalFailureReason === undefined) {
-          run = runSuite('mutation', entry.id);
+          run = runSuite('mutation', entry.id, buildMutationTestCommand(testCmd, entry).testCommand);
         }
       } finally {
         writeFileSync(filePath, sourceText); // restore the COPY so the next entry starts pristine
@@ -12200,6 +12903,9 @@ function cmdMutationGate(
       let rebaselineExitCode: number | null | undefined;
       let rebaselineFailureReason: string | undefined;
       let rebaselineAttribution: ReturnType<typeof attributeBaselineRedness> | undefined;
+      let rebaselineOutputTail: string | undefined;
+      let rebaselineOutputPath: string | undefined;
+      let rebaselineOutputError: string | undefined;
       let rebaselineInternalAttemptLog: string | undefined;
       if (rebaselineMode === 'per-entry' && run !== null && run.exitCode !== null && run.exitCode !== 0
         && fileLoadFailure === undefined && outputUnrecognised === undefined && receiptMismatch === undefined) {
@@ -12208,11 +12914,16 @@ function cmdMutationGate(
         rebaselineExitCode = rebaselineRun.exitCode;
         rebaselineFailureReason = rebaselineRun.failureReason;
         rebaselineInternalAttemptLog = rebaselineRun.internalAttemptLog;
-        if (rebaselineRun.exitCode !== null && rebaselineRun.exitCode !== 0) {
-          rebaselineAttribution = attributeBaselineRedness(
-            rebaselineRun.output,
-            entries.map((candidate) => candidate.file),
-          );
+        if (rebaselineRun.exitCode !== 0) {
+          rebaselineOutputTail = boundedMutationGateOutputTail(rebaselineRun.output);
+          ({ outputPath: rebaselineOutputPath, outputError: rebaselineOutputError } =
+            splitMutationGateOutputWrite(writeMutationGateOutputOnRed(entry.id, 'rebaseline', rebaselineRun.exitCode, rebaselineRun.output)));
+          if (rebaselineRun.exitCode !== null) {
+            rebaselineAttribution = attributeBaselineRedness(
+              rebaselineRun.output,
+              entries.map((candidate) => candidate.file),
+            );
+          }
         }
       }
       const entryRunFailureReason = run?.failureReason ?? parseInternalFailureReason;
@@ -12233,6 +12944,9 @@ function cmdMutationGate(
         ...(rebaselineExitCode !== undefined ? { rebaselineExitCode } : {}),
         ...(rebaselineFailureReason !== undefined ? { rebaselineFailureReason } : {}),
         ...(rebaselineAttribution !== undefined ? { rebaselineAttribution } : {}),
+        ...(rebaselineOutputTail !== undefined ? { rebaselineOutputTail } : {}),
+        ...(rebaselineOutputPath !== undefined ? { outputPath: rebaselineOutputPath } : {}),
+        ...(rebaselineOutputError !== undefined ? { outputError: rebaselineOutputError } : {}),
       };
       observations.push(obs);
       results.push(classifyMutationOutcome(obs));
@@ -12248,6 +12962,9 @@ function cmdMutationGate(
       const finalRun = runSuite('final-rebaseline');
       const finalExit = finalRun.exitCode;
       if (finalExit !== 0) {
+        const finalOutputTail = boundedMutationGateOutputTail(finalRun.output);
+        const { outputPath: finalOutputPath, outputError: finalOutputError } =
+          splitMutationGateOutputWrite(writeMutationGateOutputOnRed(undefined, 'final-rebaseline', finalExit, finalRun.output));
         const what = finalExit === null ? `no exit code: ${finalRun.failureReason ?? 'unknown timeout / spawn failure'}` : `exit ${finalExit}`;
         warnings.push(`final re-baseline NOT green (${what}) — the suite is flaky; red-based verdicts downgraded to INCONCLUSIVE`);
         if (!json) write(`mutation-gate: final re-baseline NOT green (${what}) — red-based verdicts downgraded to INCONCLUSIVE`);
@@ -12261,6 +12978,9 @@ function cmdMutationGate(
           ...(finalExit !== null && finalExit !== 0
             ? { rebaselineAttribution: attributeBaselineRedness(finalRun.output, entries.map((entry) => entry.file)) }
             : {}),
+          ...(finalOutputTail !== undefined ? { rebaselineOutputTail: finalOutputTail } : {}),
+          ...(finalOutputPath !== undefined ? { outputPath: finalOutputPath } : {}),
+          ...(finalOutputError !== undefined ? { outputError: finalOutputError } : {}),
         }));
         results.length = 0;
         results.push(...reclassified);
@@ -14222,6 +14942,928 @@ function cmdRunsRecord(options: Map<string, string>, flags: Set<string>, cwd: st
   }
 }
 
+const ROUND_LEDGER_REL = join('.dz', 'feature-adr', 'run-cost-ledger.jsonl');
+
+/**
+ * round-state-root FR-1/FR-2: where `dz round` state (and its ledger, FR-4) lives — flag beats env
+ * beats cwd. `--project` is untouched by this and stays recall-only (lesson 2ac30a70). Only an
+ * EXPLICIT flag/env value is validated for absoluteness; the cwd fallback is `resolve(cwd)`, exactly
+ * what every subcommand used before this feature (NFR-1: byte-identical when neither is set).
+ */
+function resolveRoundStateRoot(
+  options: Map<string, string>,
+  env: NodeJS.ProcessEnv,
+  cwd: string,
+): { readonly ok: true; readonly root: string; readonly source: 'flag' | 'env' | 'cwd' }
+  | { readonly ok: false; readonly reason: string } {
+  const flagRaw = options.get('state-root');
+  if (flagRaw !== undefined) {
+    if (!isAbsolute(flagRaw)) return { ok: false, reason: `--state-root должен быть абсолютным путём: ${flagRaw}` };
+    return { ok: true, root: flagRaw, source: 'flag' };
+  }
+  const envRaw = env['DZ_ROUND_STATE_ROOT'];
+  if (envRaw !== undefined) {
+    // A variable that is SET but blank is a misconfiguration, not an absence: falling back to cwd
+    // here would be exactly the stray-write this flag exists to prevent (Codex review, 2026-09-13).
+    if (envRaw.trim() === '') return { ok: false, reason: 'DZ_ROUND_STATE_ROOT задана, но пуста — укажите абсолютный путь или снимите переменную' };
+    if (!isAbsolute(envRaw)) return { ok: false, reason: `DZ_ROUND_STATE_ROOT должен быть абсолютным путём: ${envRaw}` };
+    return { ok: true, root: envRaw, source: 'env' };
+  }
+  return { ok: true, root: resolve(cwd), source: 'cwd' };
+}
+
+function roundStatePath(root: string, slug: string, round: number): string {
+  return join(root, '.dz', 'rounds', `${slug}-${round}.json`);
+}
+
+/** round-state-lock T2: parses raw JSON text into a `RoundState`, shared by `readRoundState` (reads
+ * from disk) and the AC-1 recheck-under-lock (compares a raw string captured before recall against
+ * one read again inside the lock, so it needs to parse the SAME raw text twice without a third
+ * disk read). */
+function parseRoundState(raw: string): RoundState | null {
+  try {
+    const row = JSON.parse(raw) as Partial<RoundState>;
+    if (typeof row.slug !== 'string' || !Number.isInteger(row.round) || typeof row.topic !== 'string'
+      || typeof row.startedAt !== 'string' || !Number.isInteger(row.pid) || !Array.isArray(row.recalled)
+      || row.recalled.some((id) => typeof id !== 'string')) return null;
+    if (row.execs !== undefined && (!Array.isArray(row.execs) || row.execs.some((entry) =>
+      typeof entry.startedAt !== 'string' || typeof entry.endedAt !== 'string'
+      || (entry.exitCode !== null && !Number.isInteger(entry.exitCode))
+      || typeof entry.outcome !== 'string'
+      || (entry.tokens !== null && !Number.isInteger(entry.tokens))))) return null;
+    return row as RoundState;
+  } catch {
+    return null;
+  }
+}
+
+function readRoundState(path: string): RoundState | null {
+  try {
+    return parseRoundState(readFileSync(path, 'utf8'));
+  } catch {
+    return null;
+  }
+}
+
+/** round-state-lock: the raw bytes at `path`, or `null` when absent/unreadable. Used to detect
+ * whether the state file changed between a check made BEFORE the (long, unlocked) recall and one
+ * made again INSIDE the round-state lock — a byte-identical read means nothing raced us. */
+function readRawRoundState(path: string): string | null {
+  try {
+    return readFileSync(path, 'utf8');
+  } catch {
+    return null;
+  }
+}
+
+/** round-state-lock fix-round AM-1: 16 random hex chars, minted once per `open`. */
+function generateRoundStateId(): string {
+  return randomBytes(8).toString('hex');
+}
+
+/** Refusal shape shared by `exec`'s claim AND restore sections (AM-1): the state this section
+ * expected to still be there — identified by `expectedStateId`, not by pid or by "did the file
+ * change" — is either gone (`'gone'`) or has been replaced by something with a DIFFERENT identity
+ * (`'replaced'`). Both cases leave the file untouched: writing over either would be exactly the
+ * lost-update/resurrection bug this fix-round exists to close. */
+type RoundStateGone = { readonly refused: 'gone' };
+type RoundStateReplaced = { readonly refused: 'replaced'; readonly stateId: string | undefined; readonly execClaimId?: string | undefined };
+
+/** Lead edit after Codex re-review: a LEGACY state (written before stateId existed) must not be
+ * matched by `undefined === undefined` — under the lock, the first exec/close that meets it mints
+ * an id, writes it back, and continues with that id as the identity of THIS operation. */
+function ensureStateId(path: string, fresh: RoundState): RoundState {
+  if (fresh.stateId !== undefined) return fresh;
+  const minted = { ...fresh, stateId: randomBytes(8).toString('hex') };
+  writeJsonAtomic(path, minted);
+  return minted;
+}
+
+function readStateOrRefuse(
+  path: string,
+  expectedStateId: string | undefined,
+): RoundState | RoundStateGone | RoundStateReplaced {
+  const fresh = readRoundState(path);
+  if (fresh === null) return { refused: 'gone' };
+  if (expectedStateId === undefined && fresh.stateId === undefined) return ensureStateId(path, fresh);
+  if (fresh.stateId !== expectedStateId) return { refused: 'replaced', stateId: fresh.stateId };
+  return fresh;
+}
+
+/** round-state-lock fix-round AM-2: the same "gone vs replaced" shape as `readStateOrRefuse`, but
+ * `close`'s missing-file case is NOT a failure — a round the ledger row was already witnessed for,
+ * whose state file is already gone, is exactly `close`'s own success postcondition reached by a
+ * different path (e.g. a prior invocation's delete step landed after this one read the ledger tail).
+ * Kept as a separate type (not reused from `readStateOrRefuse`) because the two `refused` tags carry
+ * different exit codes and messages — collapsing them would make a future edit to one silently reuse
+ * the other's wording. */
+type RoundStateAlreadyClosed = { readonly refused: 'closed-already' };
+
+function readStateForCloseOrRefuse(
+  path: string,
+  expectedStateId: string | undefined,
+): RoundState | RoundStateAlreadyClosed | RoundStateReplaced {
+  const fresh = readRoundState(path);
+  if (fresh === null) return { refused: 'closed-already' };
+  if (expectedStateId === undefined && fresh.stateId === undefined) return ensureStateId(path, fresh);
+  if (fresh.stateId !== expectedStateId) return { refused: 'replaced', stateId: fresh.stateId };
+  return fresh;
+}
+
+/** round-state-lock fix-round AM-4: the exact ledger-row marker `closeRound` (harness-core) will
+ * compute for THIS close attempt, predicted from the same three inputs (slug, round, closedAt)
+ * BEFORE calling it — so a retried `close` with the same injected `roundNow` (same `closedAt`) can
+ * detect "the ledger already carries this attempt's row" and skip writing a duplicate. Mirrors
+ * `closeRound`'s own marker formula in harness-core/src/round.ts exactly; a drift between the two
+ * would only defeat the RETRY-dedup check (closeRound's own success postcondition, verified by
+ * rereading the ledger tail, is unaffected either way). Deliberately NOT keyed on `stateId`: the
+ * run-cost ledger row schema (`RoundLedgerRow`) has no such column, and adding one is out of this
+ * fix's scope (round.ts stays untouched) — (slug, round, closedAt) is the identity already exposed
+ * through the marker, and it is exactly as unique for a genuine retry (same close command, same
+ * injected clock) as a `stateId` would be. */
+function predictedRoundCloseMarker(slug: string, round: number, closedAtIso: string): string {
+  const closedMs = Date.parse(closedAtIso);
+  const compactTs = new Date(closedMs).toISOString().replace(/[-:.]/g, '');
+  return `round-${slug}-${round}-${compactTs}`;
+}
+
+/** round-state-lock fix-round AM-5: `open`/`status` warn when a round has been sitting with
+ * `ownerKind: 'exec'` for more than this many minutes — the shape of a restore-section that
+ * exhausted its lock-busy retries (see `ROUND_RESTORE_LOCK_ATTEMPTS`) and left the round claimed by
+ * an `exec` that already finished. There is no separate "since when has this been exec" timestamp on
+ * `RoundState`, so this measures from `startedAt` (the round's own start) — a deliberate
+ * approximation: an `exec` that ran briefly near round-open would read as "young" even if its
+ * restore failed just now. Good enough to surface the stuck case at all; not a claim of precision. */
+const ROUND_EXEC_STALE_MINUTES = 10;
+
+function roundExecStaleAgeMinutes(state: RoundState, now: number): number | null {
+  if (state.ownerKind !== 'exec') return null;
+  // Lead edit after Codex re-review: count from the exec claim, not from the round's own start —
+  // a fresh exec inside an old round is not stuck. Legacy states without the field fall back.
+  const claimedMs = Date.parse(state.execClaimedAt ?? state.startedAt);
+  if (!Number.isFinite(claimedMs)) return null;
+  const minutes = Math.floor((now - claimedMs) / 60_000);
+  return minutes >= ROUND_EXEC_STALE_MINUTES ? minutes : null;
+}
+
+function readRoundLedgerTail(root: string): string {
+  try {
+    const body = readFileSync(join(root, ROUND_LEDGER_REL), 'utf8');
+    return body.slice(-64 * 1024);
+  } catch {
+    return '';
+  }
+}
+
+function readRoundLedger(root: string): string {
+  try {
+    return readFileSync(join(root, ROUND_LEDGER_REL), 'utf8');
+  } catch {
+    return '';
+  }
+}
+
+function roundRunOwnerAlive(
+  root: string,
+  runId: string,
+  now: number,
+  registryReader?: (projectRoot: string) => string,
+  pidProbe: (pid: number) => boolean | null = probePid,
+): boolean | null {
+  const registry = readRunRegistry(root, registryReader === undefined
+    ? runRegistryIO
+    : { ...runRegistryIO, read: () => registryReader(root) });
+  if (registry.status !== 'readable') return null;
+  const decision = liveness(registry.runs.find((run) => run.runId === runId), now, pidProbe);
+  return decision.state === 'live' || decision.state === 'stalled' ? true : decision.state === 'orphaned' ? false : null;
+}
+
+function nextRoundNumber(ledger: string, slug: string): number {
+  let count = 0;
+  for (const line of ledger.split('\n')) {
+    try {
+      const row = JSON.parse(line) as { slug?: unknown; stage?: unknown };
+      if (row.slug === slug && row.stage === 'round') count++;
+    } catch { /* malformed and torn rows are not completed rounds */ }
+  }
+  return count + 1;
+}
+
+type RoundSpawnReceipt = {
+  readonly exitCode: number | null;
+  readonly timedOut: boolean;
+  readonly signal: NodeJS.Signals | null;
+  readonly errorCode?: string;
+  readonly error?: string;
+};
+
+export async function spawnRoundCodex(request: {
+  readonly command: string;
+  readonly args: readonly string[];
+  readonly cwd: string;
+  readonly logPath: string;
+  readonly timeoutMs: number;
+  readonly killGraceMs?: number;
+}): Promise<RoundSpawnReceipt> {
+  mkdirSync(dirname(request.logPath), { recursive: true });
+  const logFd = openSync(request.logPath, 'w');
+  return await new Promise<RoundSpawnReceipt>((resolveRun) => {
+    let settled = false;
+    let timedOut = false;
+    let escalation: NodeJS.Timeout | undefined;
+    let child: ChildProcess | undefined;
+    const finish = (receipt: Omit<RoundSpawnReceipt, 'timedOut'>): void => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(deadline);
+      if (escalation !== undefined) clearTimeout(escalation);
+      try { closeSync(logFd); } catch { /* the subprocess receipt remains authoritative */ }
+      resolveRun({ ...receipt, timedOut });
+    };
+    const deadline = setTimeout(() => {
+      timedOut = true;
+      try { child?.kill('SIGTERM'); } catch { /* SIGKILL below is the bounded fallback */ }
+      escalation = setTimeout(() => {
+        try { child?.kill('SIGKILL'); } catch { /* close/error decides the receipt */ }
+      }, request.killGraceMs ?? 10_000);
+    }, request.timeoutMs);
+    try {
+      child = spawn(request.command, [...request.args], {
+        cwd: request.cwd,
+        stdio: ['ignore', logFd, logFd],
+      });
+    } catch (error) {
+      const err = error as NodeJS.ErrnoException;
+      finish({ exitCode: null, signal: null, ...(err.code === undefined ? {} : { errorCode: err.code }), error: err.message });
+      return;
+    }
+    child.on('error', (error: NodeJS.ErrnoException) => {
+      finish({ exitCode: null, signal: null, ...(error.code === undefined ? {} : { errorCode: error.code }), error: error.message });
+    });
+    child.on('close', (code, signal) => finish({ exitCode: code, signal }));
+  });
+}
+
+function roundExecReceiptFound(tail: string, expected: RoundExecLedgerRow): boolean {
+  for (const line of tail.split('\n')) {
+    try {
+      const row = JSON.parse(line) as Partial<RoundExecLedgerRow>;
+      if (row.stage === 'round-exec' && row.slug === expected.slug && row.round === expected.round
+        && row.startedAt === expected.startedAt && row.endedAt === expected.endedAt
+        && row.outcome === expected.outcome && row.exitCode === expected.exitCode) return true;
+    } catch { /* a torn or unrelated line is not this receipt */ }
+  }
+  return false;
+}
+
+/** Refusal shape returned by {@link withRoundStateLock} in place of throwing, so every `dz round`
+ * mutation observes the SAME lock-busy contract (FR-4): a `NamedLockTimeoutError` becomes `exit 1`,
+ * a `lock busy: …` message, and a `{ refused: 'lock-busy' }` JSON field — never a bare stack trace,
+ * and never a silent fall-through that would let a caller mistake absence-of-error for success. */
+type RoundLockBusy = { readonly refused: 'lock-busy'; readonly reason: string };
+
+/**
+ * round-state-lock T1 — the one named lock every `.dz/rounds/*.json` mutation goes through
+ * (`<stateRoot>/.dz/locks/round-state.lock`, `withNamedLockSync` from `@dzhechkov/harness-core`).
+ *
+ * `fn` MUST be short and synchronous (the same caveat `withNamedLockSync` itself carries): it may
+ * reread state and write it, never spawn a subprocess or await anything — the recall step and the
+ * ledger write stay OUTSIDE the lock by design (teach:0ea46034), and the long-running `codex exec`
+ * child in `round exec` runs between two separate short lock holds, not inside one.
+ *
+ * `io.roundLockTimeoutMs` (NFR-2) lets tests force a small deadline instead of the real default;
+ * omitting it keeps production behaviour (and every existing test) byte-identical.
+ */
+function withRoundStateLock<T>(stateRoot: string, fn: () => T, io: CliIo): T | RoundLockBusy {
+  try {
+    return withNamedLockSync(
+      stateRoot,
+      'round-state',
+      fn,
+      io.roundLockTimeoutMs === undefined ? {} : { timeoutMs: io.roundLockTimeoutMs },
+    );
+  } catch (error) {
+    if (error instanceof NamedLockTimeoutError) {
+      return { refused: 'lock-busy', reason: error.message };
+    }
+    throw error;
+  }
+}
+
+/** round-state-lock fix-round AM-5: the restore-section retry budget — `exec`'s SECOND lock hold
+ * (returning ownership after the codex child exits) tries up to this many times, with the SAME
+ * per-attempt timeout, before it gives up and leaves the round `ownerKind: 'exec'` for a human to
+ * notice (via the `open`/`status` staleness warning) rather than looping forever against a lock that
+ * may never free up. */
+const ROUND_RESTORE_LOCK_ATTEMPTS = 4; // 1 attempt + 3 retries (AM-5; lead edit after re-review)
+
+function withRoundStateLockRetried<T>(stateRoot: string, fn: () => T, io: CliIo, attempts: number): T | RoundLockBusy {
+  let lastBusy: RoundLockBusy | null = null;
+  for (let attempt = 0; attempt < attempts; attempt++) {
+    const result = withRoundStateLock(stateRoot, fn, io);
+    if (!(typeof result === 'object' && result !== null && 'refused' in result && result.refused === 'lock-busy')) {
+      return result;
+    }
+    lastBusy = result;
+  }
+  return lastBusy!;
+}
+
+async function cmdRound(
+  options: Map<string, string>,
+  optionLists: Map<string, string[]>,
+  flags: Set<string>,
+  cwd: string,
+  write: Write,
+  io: CliIo,
+): Promise<number> {
+  const sub = options.get('_positional_0') ?? '';
+  const json = flags.has('json');
+  const stateRootResolution = resolveRoundStateRoot(options, process.env, cwd);
+  if (!stateRootResolution.ok) {
+    write(json ? JSON.stringify({ message: stateRootResolution.reason }) : stateRootResolution.reason);
+    return 2;
+  }
+  const stateRoot = stateRootResolution.root;
+  const stateRootExplicit = stateRootResolution.source !== 'cwd';
+  const projectRoot = resolve(cwd, options.get('project') ?? '.');
+  const now = io.roundNow?.() ?? Date.now();
+  const emit = (message: string, extra: Record<string, unknown> = {}): void => {
+    write(json ? JSON.stringify({ message, ...extra }) : message);
+  };
+  const address = (roundOverride?: number): { slug: string; round: number } | null => {
+    const slug = options.get('slug') ?? '';
+    const round = roundOverride ?? Number(options.get('round'));
+    if (!/^[a-z0-9][a-z0-9._-]*$/i.test(slug) || !Number.isInteger(round) || round < 1) return null;
+    return { slug, round };
+  };
+
+  if (sub === 'open') {
+    const slug = options.get('slug') ?? '';
+    const roundRaw = options.get('round');
+    const autoRound = roundRaw === 'auto'
+      ? nextRoundNumber(io.roundLedgerReader?.(stateRoot) ?? readRoundLedger(stateRoot), slug)
+      : undefined;
+    const at = address(autoRound);
+    const topic = options.get('topic') ?? '';
+    if (at === null || topic.trim() === '') {
+      emit('нужны --slug --round --topic');
+      return 2;
+    }
+    const ownerPidRaw = options.get('owner-pid');
+    const ownerRunRaw = options.get('owner-run');
+    if (ownerPidRaw !== undefined && ownerRunRaw !== undefined) {
+      emit('--owner-pid и --owner-run взаимоисключающие');
+      return 2;
+    }
+    if (ownerRunRaw !== undefined && ownerRunRaw.trim() === '') {
+      emit('--owner-run пуст');
+      return 2;
+    }
+    const ownerRun = ownerRunRaw?.trim();
+    const ownerPid = ownerRunRaw !== undefined ? 0 : ownerPidRaw === undefined ? process.ppid : Number(ownerPidRaw);
+    const ownerKind = ownerRunRaw !== undefined ? 'run' as const : ownerPidRaw === undefined ? 'parent' as const : 'explicit' as const;
+    const path = roundStatePath(stateRoot, at.slug, at.round);
+    // round-state-lock FR-3/AC-1: captured BEFORE the (long, unlocked) recall below, so the
+    // recheck under the lock can tell "unchanged since this snapshot" from "a different process
+    // opened it while we were recalling".
+    const beforeRaw = readRawRoundState(path);
+    const existing = beforeRaw === null
+      ? null
+      : parseRoundState(beforeRaw) ?? {
+          slug: at.slug, round: at.round, topic: '', startedAt: new Date(now).toISOString(),
+          pid: 1, ownerKind: 'explicit', recalled: [],
+        };
+    let existingOwnerAlive: boolean | null = null;
+    if (existing !== null && flags.has('force') && existing.ownerKind !== 'run') {
+      try { existingOwnerAlive = (io.roundPidProbe ?? probePid)(existing.pid); } catch { /* unavailable is unknown and refuses */ }
+    }
+    const isRunAlive = (runId: string): boolean | null => roundRunOwnerAlive(
+      stateRoot, runId, now, io.roundRunRegistryReader, io.roundPidProbe ?? probePid,
+    );
+    const runId = options.get('run')?.trim();
+    const recallOptions = { limit: 5, ...(runId === undefined || runId === '' ? {} : { runId }) };
+    const preflight = openRound({
+      ...at, topic, startedAt: new Date(now).toISOString(), ownerPid, ownerKind,
+      ...(ownerRun === undefined || ownerRun === '' ? {} : { ownerRun }),
+      ...(runId === undefined || runId === '' ? {} : { run: runId }), recalled: [], existing,
+      force: flags.has('force'), existingOwnerAlive, isRunAlive,
+    });
+    if (!preflight.ok) {
+      // AM-5: the round we are refusing to touch may itself be a stuck `exec` claim (its restore
+      // section exhausted its lock-busy retries and left `ownerKind: 'exec'`) — name that out loud
+      // rather than leaving the operator to guess why a pid that "shouldn't" be alive is blocking.
+      const staleMinutes = existing === null ? null : roundExecStaleAgeMinutes(existing, now);
+      const reason = staleMinutes === null
+        ? preflight.reason
+        : `${preflight.reason} (владелец завис в exec ${staleMinutes} мин)`;
+      emit(reason, { round: at.round, ...(staleMinutes === null ? {} : { staleExecMinutes: staleMinutes }) });
+      return preflight.exit;
+    }
+
+    let lessons: readonly { id: string; reward: number; domain: string; text: string }[] = [];
+    try {
+      lessons = io.roundRecall !== undefined
+        ? await io.roundRecall(projectRoot, topic, recallOptions)
+        : (await recallHybrid(projectRoot, topic, recallOptions)).hits.slice(0, 5).map((hit) => ({
+            id: patternRecordId(hit.pattern),
+            reward: hit.pattern.reward,
+            domain: hit.pattern.domain,
+            text: hit.pattern.pattern,
+          }));
+    } catch {
+      lessons = [];
+    }
+    const opened = openRound({
+      ...at, topic, startedAt: new Date(now).toISOString(), ownerPid, ownerKind,
+      ...(ownerRun === undefined || ownerRun === '' ? {} : { ownerRun }),
+      ...(runId === undefined || runId === '' ? {} : { run: runId }),
+      recalled: lessons.slice(0, 5).map((lesson) => lesson.id), existing: null,
+      force: false, existingOwnerAlive: null, isRunAlive,
+    });
+    if (!opened.ok) { emit(opened.reason); return opened.exit; }
+    const openedState: RoundState = { ...opened.state, execs: [], stateId: generateRoundStateId() };
+    let archived: string | undefined;
+    try {
+      const locked = withRoundStateLock(stateRoot, () => {
+        // AM-3/AM-6: recall ran unlocked and may have taken a while — reread NOW, under the lock,
+        // and decide fresh from what is ACTUALLY there rather than from the pre-recall snapshot.
+        //
+        // AM-3 (was: refuse only when the bytes changed AND the foreign pid differed from ours):
+        // `ppid` coincides for two `dz` launched from the same shell, and every run-owned state
+        // carries pid 0 — so "same pid" proved nothing about identity. ANY change in raw bytes since
+        // `beforeRaw` is now the refusal trigger; the foreign pid is reported for diagnostics only,
+        // never consulted for the decision.
+        //
+        // AM-6 (was: an unconditional `readFileSync(path)` while archiving threw a bare ENOENT if
+        // the target vanished mid-recall): a state that is simply GONE now is not a race to refuse —
+        // it is exactly the "no existing round" case, --force or not. Re-decide fresh: no file under
+        // the lock ⇒ ordinary open, no archive, regardless of what `beforeRaw`/`existing` said.
+        const nowRaw = readRawRoundState(path);
+        if (nowRaw === beforeRaw) {
+          // Unchanged since the pre-recall snapshot: proceed exactly as `preflight` planned —
+          // including the --force archive-a-dead-owner flow, which is safe here because nothing
+          // touched `existing`'s bytes while we were recalling.
+          if (preflight.archiveExisting && existing !== null) {
+            const compactStartedAt = new Date(existing.startedAt).toISOString().replace(/[-:.]/g, '');
+            archived = join(stateRoot, '.dz', 'rounds', 'archive', `${at.slug}-${at.round}-${compactStartedAt}.json`);
+            mkdirSync(dirname(archived), { recursive: true });
+            writeFileSync(archived, readFileSync(path), { flag: 'wx' });
+          }
+          writeJsonAtomic(path, openedState);
+          return { ok: true as const };
+        }
+        if (nowRaw === null) {
+          // AM-6: vanished under us — nothing left to conflict with or to archive.
+          writeJsonAtomic(path, openedState);
+          return { ok: true as const };
+        }
+        // Something is there now, and it is byte-different from what we planned around: refuse.
+        // The pid below is diagnostic only (AM-3) — it never gates the decision.
+        const foreign = parseRoundState(nowRaw);
+        return { refused: 'already-open' as const, pid: foreign?.pid ?? -1 };
+      }, io);
+      if ('refused' in locked) {
+        if (locked.refused === 'lock-busy') {
+          emit(`lock busy: ${locked.reason}`, { refused: 'lock-busy' });
+          return 1;
+        }
+        emit(`круг уже открыт (pid ${locked.pid}) — состояние не перезаписано`, { refused: 'already-open', pid: locked.pid });
+        return 1;
+      }
+    } catch (error) {
+      emit(`круг не открыт: ${error instanceof Error ? error.message : String(error)}`);
+      return 1;
+    }
+    const owner = openedState.ownerKind === 'run'
+      ? `владелец: run ${openedState.ownerRun} (run)`
+      : `владелец: pid ${openedState.pid} (${openedState.ownerKind})`;
+    if (json) {
+      emit('круг открыт', { state: openedState, owner, stateRoot, lessons: lessons.slice(0, 5), ...(archived === undefined ? {} : { archived }) });
+    } else {
+      if (archived !== undefined) write(`архивировано: ${archived}`);
+      write(`=== КРУГ ОТКРЫТ: ${at.slug} круг ${at.round}`);
+      write(`state root: ${stateRoot}`);
+      write(owner);
+      write(`--- уроки для брифа (${lessons.slice(0, 5).length} поднято):`);
+      for (const lesson of lessons.slice(0, 5)) {
+        const oneLine = lesson.text.replace(/[\r\n\u2028\u2029\u0085\v\f]+/g, ' ⏎ ');
+        write(`  [${lesson.reward.toFixed(2)}] (${lesson.domain}) ${oneLine.slice(0, 160)}`);
+      }
+    }
+    return 0;
+  }
+
+  if (sub === 'exec') {
+    const at = address();
+    const briefArg = options.get('brief') ?? '';
+    const timeoutRaw = options.get('timeout-min') ?? '30';
+    const timeoutMinutes = Number(timeoutRaw);
+    if (at === null || briefArg.trim() === '' || !Number.isInteger(timeoutMinutes) || timeoutMinutes <= 0) {
+      emit('нужны --slug --round --brief; --timeout-min должен быть целым числом больше нуля');
+      return 2;
+    }
+    const briefPath = resolve(cwd, briefArg);
+    let briefText: string;
+    try {
+      briefText = readFileSync(briefPath, 'utf8');
+    } catch {
+      emit(`brief не читается: ${briefArg}`);
+      return 2;
+    }
+    const path = roundStatePath(stateRoot, at.slug, at.round);
+    let state = readRoundState(path);
+    if (state === null) {
+      emit(existsSync(path) ? 'состояние круга не читается' : 'круг не открыт');
+      return 1;
+    }
+
+    const model = options.get('model') ?? 'gpt-5.6-sol';
+    const effort = options.get('effort') ?? 'high';
+    const logArg = options.get('log') ?? join('.dz', 'rounds', `${at.slug}-${at.round}.exec.log`);
+    const logPath = resolve(cwd, logArg);
+    const startedMs = io.roundNow?.() ?? Date.now();
+    const startedAt = new Date(startedMs).toISOString();
+    const request = {
+      command: 'codex' as const,
+      args: [
+        'exec',
+        '-c', `model=${model}`,
+        '-c', `model_reasoning_effort=${effort}`,
+        '--dangerously-bypass-approvals-and-sandbox',
+        briefText,
+      ],
+      cwd: stateRoot,
+      logPath,
+      timeoutMs: timeoutMinutes * 60_000,
+      killGraceMs: io.roundKillGraceMs ?? 10_000,
+    };
+    let execClaimId = '';
+    try {
+      // T3/FR-1, fix-round AM-1: reread state under the lock immediately before claiming ownership
+      // — a short, synchronous critical section, released before the (possibly long) codex child
+      // below runs. NO fallback to the pre-lock `state` snapshot (that was the resurrection bug:
+      // `readRoundState(path) ?? state!` would recreate a round that had been closed in the
+      // meantime). The claim proceeds ONLY when the state currently under the lock still carries the
+      // exact `stateId` we read before acquiring it — pid/ppid can coincide across processes, but a
+      // `stateId` never does.
+      execClaimId = randomBytes(8).toString('hex');
+      const claimed = withRoundStateLock(stateRoot, () => {
+        const outcome = readStateOrRefuse(path, state!.stateId);
+        if ('refused' in outcome) return outcome;
+        if (outcome.ownerKind === 'exec' && outcome.execClaimId !== undefined) {
+          return { refused: 'exec-in-progress' as const, execClaimId: outcome.execClaimId };
+        }
+        writeJsonAtomic(path, { ...outcome, pid: io.roundPid ?? process.pid, ownerKind: 'exec', execClaimId, execClaimedAt: new Date(io.roundNow?.() ?? Date.now()).toISOString() });
+        return { ok: true as const, base: outcome };
+      }, io);
+      if ('refused' in claimed) {
+        if (claimed.refused === 'lock-busy') {
+          emit(`exec не запущен: владелец круга не обновлён: lock busy: ${claimed.reason}`, { refused: 'lock-busy' });
+          return 1;
+        }
+        if (claimed.refused === 'gone') {
+          emit('exec не запущен: круг закрыт во время exec, владелец не менялся', { refused: 'gone' });
+          return 1;
+        }
+        if (claimed.refused === 'exec-in-progress') {
+          emit(`exec не запущен: у круга уже идёт exec (claim ${claimed.execClaimId})`, { refused: 'exec-in-progress', execClaimId: claimed.execClaimId });
+          return 1;
+        }
+        const replaced = claimed as RoundStateReplaced;
+        emit(
+          `exec не запущен: состояние круга заменено (stateId ${replaced.stateId ?? 'unknown'}), возврат владельца пропущен`,
+          { refused: 'replaced', stateId: replaced.stateId },
+        );
+        return 1;
+      }
+      state = claimed.base;
+    } catch (error) {
+      emit(`exec не запущен: владелец круга не обновлён: ${error instanceof Error ? error.message : String(error)}`);
+      return 1;
+    }
+    let receipt: RoundSpawnReceipt;
+    try {
+      try {
+        receipt = await (io.roundSpawn ?? spawnRoundCodex)(request);
+      } catch (error) {
+        const err = error as NodeJS.ErrnoException;
+        receipt = { exitCode: null, timedOut: false, signal: null, ...(err.code === undefined ? {} : { errorCode: err.code }), error: err.message };
+      }
+    } finally {
+      try {
+        // T3/FR-1, fix-round AM-1/AM-5: the return leg — a second short lock hold, symmetric with
+        // the claim above, and gated by the SAME stateId check (the child may have run long enough
+        // for someone else to close or replace this round while it was running). AM-5: a busy lock
+        // here gets up to ROUND_RESTORE_LOCK_ATTEMPTS tries with the same timeout before giving up —
+        // a codex child can legitimately run for a while, so ownership recovery deserves more than
+        // one attempt before leaving the round stuck at `ownerKind: 'exec'`.
+        const restored = withRoundStateLockRetried(stateRoot, () => {
+          const outcome = readStateOrRefuse(path, state!.stateId);
+          if ('refused' in outcome) return outcome;
+          // Lead edit after Codex re-review: restore only OUR claim — another exec of the same round
+          // instance has its own execClaimId and must not be wiped by our base state.
+          if (outcome.execClaimId !== execClaimId) {
+            return { refused: 'replaced' as const, stateId: outcome.stateId, execClaimId: outcome.execClaimId };
+          }
+          writeJsonAtomic(path, state);
+          return { ok: true as const };
+        }, io, ROUND_RESTORE_LOCK_ATTEMPTS);
+        if ('refused' in restored) {
+          if (restored.refused === 'lock-busy') {
+            // AM-5: no new flag or command is added — this names the manual remedy in prose (a
+            // literal `--flag`-shaped token here would be caught by known-flags-drift.test.ts as an
+            // undocumented flag, which would be exactly the wrong signal for text naming no flag at
+            // all). The durable fix is that `open`/`status` surface the resulting stuck
+            // `ownerKind: 'exec'` on their own (roundExecStaleAgeMinutes), so it is never silently
+            // left for someone to trip over.
+            emit(
+              'владелец круга не восстановлен (ownerKind=exec остался): повторите dz round exec для этого круга, когда блокировка освободится',
+              { refused: 'lock-busy', ownerKind: 'exec' },
+            );
+            return 1;
+          }
+          if (restored.refused === 'gone') {
+            emit('круг закрыт во время exec, владелец не менялся', { refused: 'gone' });
+            return 1;
+          }
+          emit(
+            `состояние круга заменено (stateId ${restored.stateId ?? 'unknown'}), возврат владельца пропущен`,
+            { refused: 'replaced', stateId: restored.stateId },
+          );
+          return 1;
+        }
+      } catch (error) {
+        emit(`exec завершён, но владелец круга не восстановлен: ${error instanceof Error ? error.message : String(error)}`);
+        return 1;
+      }
+    }
+    const endedMs = io.roundNow?.() ?? Date.now();
+    const endedAt = new Date(endedMs).toISOString();
+    let logBuffer = Buffer.alloc(0);
+    try { logBuffer = readFileSync(logPath); } catch { /* no output is an empty receipt */ }
+    const logText = logBuffer.toString('utf8');
+    const bytes = logBuffer.byteLength;
+    const tokens = parseCodexTokens(logText);
+    const outcome = classifyRoundExecOutcome({
+      exitCode: receipt.exitCode,
+      timedOut: receipt.timedOut,
+      bytes,
+      tail: logBuffer.subarray(Math.max(0, bytes - 4096)).toString('utf8'),
+    });
+    const row = buildRoundExecRow({
+      ...at,
+      model,
+      effort,
+      minutes: Math.max(0, Math.floor((endedMs - startedMs) / 60_000)),
+      tokens,
+      outcome,
+      exitCode: receipt.exitCode,
+      bytes,
+      startedAt,
+      endedAt,
+      log: logArg,
+      brief: briefArg,
+    });
+    if (io.roundLedgerWriter !== undefined) io.roundLedgerWriter(stateRoot, row);
+    else cmdFeatureAdrRecord(new Map([
+      ['kind', 'ledger'], ['stage', 'round-exec'], ['slug', state.slug], ['row', JSON.stringify(row)], ['project', stateRoot],
+    ]), new Set(), stateRoot, () => undefined);
+    const ledgerTail = io.roundLedgerReader?.(stateRoot) ?? readRoundLedgerTail(stateRoot);
+    if (!roundExecReceiptFound(ledgerTail, row)) {
+      emit('строка round-exec не найдена — результат НЕ подтверждён');
+      return 1;
+    }
+    try {
+      writeJsonAtomic(path, {
+        ...state,
+        execs: [...(state.execs ?? []), { startedAt, endedAt, exitCode: receipt.exitCode, outcome, tokens }],
+      });
+    } catch (error) {
+      emit(`строка round-exec подтверждена, но состояние не обновлено: ${error instanceof Error ? error.message : String(error)}`);
+      return 1;
+    }
+    if (receipt.errorCode === 'ENOENT') emit('codex не найден', { row });
+    else emit(`round exec: ${row.minutes} min; exit ${row.exitCode ?? 'null'}; ${row.bytes} bytes; tokens ${row.tokens ?? 'не найдены'}; ${row.outcome}`, { row });
+    return outcome === 'done' ? 0 : 1;
+  }
+
+  if (sub === 'close') {
+    const at = address();
+    if (at === null || !options.has('outcome')) {
+      emit('нужны --slug --round --outcome');
+      return 2;
+    }
+    const path = roundStatePath(stateRoot, at.slug, at.round);
+    const state = readRoundState(path);
+    if (state === null) {
+      emit(existsSync(path) ? 'состояние круга не читается — круг НЕ закрыт' : 'круг не открыт');
+      return 1;
+    }
+    const lessons = optionLists.get('lesson') ?? [];
+    const knownLessonIds = lessons.filter((id) => {
+      try {
+        return io.roundLessonExists !== undefined
+          ? io.roundLessonExists(projectRoot, id)
+          : loadStoreRecords(projectRoot).some((record) => record.id === id);
+      } catch { return false; }
+    });
+    const numeric = (key: string): number | undefined => options.has(key) ? Number(options.get(key)) : undefined;
+    const closedAtIso = new Date(now).toISOString();
+    // AM-4: predict the marker `closeRound` will compute for THIS attempt (same slug/round/closedAt
+    // it will use) and check whether the ledger already carries it BEFORE calling `closeRound` —
+    // this is what makes a retried `close` idempotent: if a prior invocation's write already landed
+    // (this run's own tail read, not trusted from the earlier failed attempt's own belief), skip the
+    // write below instead of appending a duplicate row.
+    const predictedMarker = predictedRoundCloseMarker(at.slug, at.round, closedAtIso);
+    const tailBeforeWrite = io.roundLedgerReader?.(stateRoot) ?? readRoundLedgerTail(stateRoot);
+    // Lead edit after Codex re-review: a retried close carries a NEW clock, so the marker alone never
+    // matches — the row's stateId (identity of the state instance) is what makes the retry idempotent.
+    const alreadyRecorded = tailBeforeWrite.includes(predictedMarker)
+      || (state.stateId !== undefined && tailBeforeWrite.includes(`"stateId":"${state.stateId}"`));
+    // Lead edit after Codex re-review: a retry whose row is already in the ledger (same stateId) must
+    // not re-run closeRound's postcondition against a marker computed from the NEW clock — the earlier
+    // row is the receipt; only the state-file removal remains.
+    const closed = alreadyRecorded
+      ? { ok: true as const, row: undefined, marker: `already-recorded:${state.stateId ?? predictedMarker}` }
+      : closeRound({
+      state,
+      outcome: options.get('outcome') ?? '',
+      ...(options.has('reason') ? { reason: options.get('reason') } : {}),
+      lessons,
+      knownLessonIds,
+      ...(options.has('no-new-knowledge') ? { noNewKnowledge: options.get('no-new-knowledge') } : {}),
+      ...(options.has('tokens') ? { tokens: numeric('tokens') } : {}),
+      ...(options.has('agents') ? { agents: numeric('agents') } : {}),
+      ...(options.has('coder') ? { coder: options.get('coder') } : {}),
+      ...(options.has('reviewer') ? { reviewer: options.get('reviewer') } : {}),
+      ...(options.has('note') ? { note: options.get('note') } : {}),
+      ...(flags.has('no-cost') ? { noCost: true } : {}),
+      closedAt: closedAtIso,
+      ...(state.stateId !== undefined ? { stateId: state.stateId } : {}),
+    }, {
+      writeLedger: (row) => {
+        // AM-4 idempotent retry: the row for this attempt was already witnessed in the tail read
+        // above — do not append a second one. `closeRound`'s own postcondition (rereading the tail
+        // and checking it contains the marker) still passes, because the marker is already there.
+        if (alreadyRecorded) return undefined;
+        if (io.roundLedgerWriter !== undefined) return io.roundLedgerWriter(stateRoot, row);
+        return cmdFeatureAdrRecord(new Map([
+          ['kind', 'ledger'], ['stage', 'round'], ['slug', state.slug], ['row', JSON.stringify(row)], ['project', stateRoot],
+        ]), new Set(), stateRoot, () => undefined);
+      },
+      readLedgerTail: () => io.roundLedgerReader?.(stateRoot) ?? readRoundLedgerTail(stateRoot),
+    });
+    if (!closed.ok) { emit(closed.reason); return closed.exit; }
+    try {
+      // T4/FR-1/FR-2, fix-round AM-2: the ledger write above (via `closed`) stays OUTSIDE the lock
+      // (teach:0ea46034); only the final reread-and-delete is a lock-guarded critical section, and it
+      // now deletes ONLY the exact state instance the ledger row above was written for — identified
+      // by `state.stateId`, read before the lock was ever taken.
+      const deleted = withRoundStateLock(stateRoot, () => {
+        const outcome = readStateForCloseOrRefuse(path, state.stateId);
+        if ('refused' in outcome) return outcome;
+        unlinkSync(path);
+        return { ok: true as const };
+      }, io);
+      if ('refused' in deleted) {
+        if (deleted.refused === 'lock-busy') {
+          // AM-4: the ledger row is ALREADY written by the time this lock is even attempted (see
+          // above) — so a busy lock here never leaves the outcome unrecorded, only the round's OWN
+          // state file open. Say exactly that, and make the retry path explicit.
+          emit(
+            'строка леджера записана, состояние круга осталось открытым — повторите close',
+            { refused: 'lock-busy', ledgerWritten: true },
+          );
+          return 1;
+        }
+        if (deleted.refused === 'closed-already') {
+          // AM-2: the state file is already gone — this close's own ledger row is written (above, or
+          // by a previous invocation of this same idempotent attempt), so this is the same round
+          // reaching its already-closed postcondition by a different path, not a failure.
+          emit('круг уже закрыт (строка леджера записана)', { closed: true, alreadyClosed: true, marker: closed.marker });
+          return 0;
+        }
+        // AM-2: something else's state sits at this path now (a different stateId) — never delete it.
+        emit('состояние заменено, не удалено', { refused: 'replaced', stateId: deleted.stateId });
+        return 1;
+      }
+    } catch (error) {
+      emit(`строка подтверждена, но состояние не удалено — круг НЕ закрыт: ${error instanceof Error ? error.message : String(error)}`);
+      return 1;
+    }
+    emit(`✓ строка круга в леджере подтверждена чтением (${closed.marker})`, { row: closed.row, marker: closed.marker });
+    return 0;
+  }
+
+  if (sub === 'status') {
+    const rawThreshold = options.get('older-than') ?? '120';
+    const olderThan = Number(rawThreshold);
+    if (!Number.isInteger(olderThan) || olderThan < 0) {
+      emit('--older-than должен быть целым числом минут не меньше нуля', { open: [] });
+      return 0;
+    }
+    const dir = join(stateRoot, '.dz', 'rounds');
+    const states: RoundState[] = [];
+    try {
+      for (const name of readdirSync(dir).filter((entry) => entry.endsWith('.json')).sort()) {
+        const state = readRoundState(join(dir, name));
+        if (state !== null) states.push(state);
+      }
+    } catch { /* no state directory is an honestly empty report */ }
+    const rows = listRounds(states, {
+      now,
+      olderThanMinutes: olderThan,
+      isPidAlive: io.roundPidProbe ?? probePid,
+      isRunAlive: (runId) => roundRunOwnerAlive(
+        stateRoot, runId, now, io.roundRunRegistryReader, io.roundPidProbe ?? probePid,
+      ),
+    });
+    // AM-5: independent of the `--older-than` filter above (a stuck exec claim is worth flagging at
+    // 10 minutes regardless of the round's own age threshold) — computed over ALL open states, and
+    // additive: when none apply, neither branch below emits anything extra, so the two byte-pinned
+    // zero-rounds lines (NFR-1, see the comment below) stay untouched.
+    const staleExec = states
+      .map((state) => {
+        const minutes = roundExecStaleAgeMinutes(state, now);
+        return minutes === null ? null : { slug: state.slug, round: state.round, minutes };
+      })
+      .filter((warning): warning is { slug: string; round: number; minutes: number } => warning !== null);
+    if (json) {
+      emit(rows.length > 0 ? `⚠ ${rows.length} open round(s) older than ${olderThan} min` : 'нет старых открытых кругов', {
+        stateRoot, olderThan, open: rows, ...(staleExec.length === 0 ? {} : { staleExec }),
+      });
+    } else {
+      // FR-3 prints `state root: <dir>` on open unconditionally; here it is printed only when the
+      // root was EXPLICITLY chosen (--state-root / DZ_ROUND_STATE_ROOT). Printing it unconditionally
+      // would change the two default-cwd zero-rounds lines pinned exactly by
+      // round-cli.test.ts ("status reports a fresh open round…" / "…no open rounds"), which NFR-1
+      // requires to stay byte-identical and unmodified.
+      if (stateRootExplicit) write(`state root: ${stateRoot}`);
+      write(states.length === 0
+        ? 'открытых кругов нет'
+        : `открытых кругов: ${states.length}, старше ${olderThan} мин: ${rows.length}`);
+      for (const row of rows) {
+        const live = row.pidAlive === true ? 'alive' : row.pidAlive === false ? 'dead' : 'unknown';
+        write(`${row.state.slug}#${row.state.round} · ${row.ageMinutes} min · pid ${row.state.pid} ${live} · ${row.state.topic}`);
+      }
+      for (const warning of staleExec) {
+        write(`⚠ ${warning.slug}#${warning.round}: владелец завис в exec ${warning.minutes} мин — восстановите вручную (dz round exec вернул lock-busy при возврате владельца)`);
+      }
+    }
+    return 0;
+  }
+
+  emit('использование: dz round open|exec|close|status');
+  return 2;
+}
+
+/**
+ * ledger-stage-minutes T2: the `ts` of the LAST ledger row (scanning from the end, so a duplicate
+ * or out-of-order runId still finds the truly latest one) that carries the given `runId`. Every
+ * failure mode — the file does not exist yet, a permission error — returns `null` rather than
+ * throwing: this is a BEST-EFFORT observability lookup feeding a non-blocking field (ADR-003), never
+ * a gate the write must pass.
+ *
+ * fix-round-1/AM-n (cross-family review B, MEDIUM): a torn or non-object line — `ledger-corrupt-line`
+ * — is NOT silently skipped past. The original code `continue`d over it and kept scanning further
+ * back, which could return an OLDER valid row for this `runId` while a NEWER one for the same run
+ * sat hidden on the other side of the corrupt line (or was itself the corrupt line). Once the scan
+ * hits a line it cannot parse as a JSON object, it can no longer prove which row is truly LAST for
+ * this run, so it stops and reports `null` (⇒ `minutesSource: 'unavailable'`) rather than risk an
+ * UNDERSTATED delta computed against a stale row.
+ */
+function findPreviousLedgerRowTs(ledgerPath: string, runId: string): string | null {
+  if (runId === '') return null;
+  let body: string;
+  try {
+    body = readFileSync(ledgerPath, 'utf-8');
+  } catch {
+    return null;
+  }
+  const lines = body.split('\n').filter((l) => l !== '');
+  for (let i = lines.length - 1; i >= 0; i--) {
+    let parsed: unknown;
+    try {
+      parsed = JSON.parse(lines[i] as string);
+    } catch {
+      // ledger-corrupt-line: everything from here to the start of the file is unprovable — a real
+      // match further back cannot be trusted to still be the LAST one, so this is `unavailable`,
+      // never a guess made by skipping past what we could not read.
+      return null;
+    }
+    if (parsed === null || typeof parsed !== 'object' || Array.isArray(parsed)) {
+      // Same reasoning as the parse failure above: a non-object line is exactly as untrustworthy.
+      return null;
+    }
+    const row = parsed as Record<string, unknown>;
+    if (typeof row['runId'] === 'string' && row['runId'].trim() === runId) {
+      return typeof row['ts'] === 'string' && row['ts'].trim() !== '' ? row['ts'] : null;
+    }
+  }
+  return null;
+}
+
 function cmdFeatureAdrRecord(options: Map<string, string>, flags: Set<string>, cwd: string, write: Write): number {
   const json = flags.has('json');
   // `--backfill` is a different verb on the same store: it fills the ledger's null cost fields from
@@ -14260,10 +15902,73 @@ function cmdFeatureAdrRecord(options: Map<string, string>, flags: Set<string>, c
   const markName = (options.get('mark') ?? '').trim();
   const markPath = markName === '' ? null : join(markDir, markName.replace(/[^\w.-]/g, '_'));
 
+  // ledger-stage-minutes T2/FR-2: `--run-id` fills the payload's `runId` ONLY WHEN the payload does
+  // not already carry one — the same gap-only stamping discipline `decideRecordWrite` already uses
+  // for `runnerId`. "Absent" is deliberately wider than "missing key": `runId: null`, `runId: ''`
+  // and a non-string `runId` (a number, an object — never a real join key) are ALL gaps too, exactly
+  // the `isRunnerGap` rule one seam over — fixed-round-1/AM-n confirmed this is the INTENDED contract
+  // ("missing when absent or blank"), not a bug: only a genuine non-empty string counts as "the
+  // caller already knew it", so any of those gap shapes are correctly overwritten by the flag. A
+  // malformed --row is left untouched here: decideRecordWrite reports the real JSON parse error,
+  // this merge step must never invent a different one.
+  const isRunIdArgGap = (v: unknown): boolean => v === null || v === undefined || typeof v !== 'string' || v.trim() === '';
+  let effectivePayloadRaw = payloadRaw;
+  const explicitRunId = (options.get('run-id') ?? '').trim();
+  if (kind === 'ledger' && explicitRunId !== '') {
+    try {
+      const parsed: unknown = JSON.parse(payloadRaw);
+      if (parsed !== null && typeof parsed === 'object' && !Array.isArray(parsed)) {
+        const rowObj = parsed as Record<string, unknown>;
+        if (isRunIdArgGap(rowObj['runId'])) {
+          // fix-round-1/AM-n (cross-family review B, MEDIUM): the flag-filled runId now carries its
+          // provenance, the same discipline `resolved-at-write` already applies to the OTHER runId
+          // source (write-time auto-resolution below) — an un-sourced runId looked exactly like one
+          // the caller supplied. A non-empty `runIdSource` the payload already carries (an odd shape,
+          // since `runId` itself was a gap) is left alone rather than overwritten with a guess.
+          const hasRunIdSource = typeof rowObj['runIdSource'] === 'string' && rowObj['runIdSource'].trim() !== '';
+          effectivePayloadRaw = JSON.stringify({
+            ...rowObj,
+            runId: explicitRunId,
+            ...(hasRunIdSource ? {} : { runIdSource: 'cli-flag' }),
+          });
+        }
+      }
+    } catch { /* decideRecordWrite reports the parse error itself */ }
+  }
+
+  // FR-2/FR-3: find the runId this row will carry (explicit flag, or one the payload already had),
+  // then read the ledger BEST-EFFORT for the last row of that same run and its `ts`. A read failure
+  // (file absent, unreadable, a torn or malformed line) is an honest `previousRowTs: null` — never
+  // a thrown error, because a record write must never fail on an OBSERVABILITY lookup (ADR-003).
+  let runIdForLookup = '';
+  try {
+    const parsed: unknown = JSON.parse(effectivePayloadRaw);
+    if (parsed !== null && typeof parsed === 'object' && !Array.isArray(parsed)) {
+      const v = (parsed as Record<string, unknown>)['runId'];
+      if (typeof v === 'string' && v.trim() !== '') runIdForLookup = v.trim();
+    }
+  } catch { /* decideRecordWrite reports the parse error itself */ }
+  // Lead edit after re-review (Codex B): the pipeline's own rows have no runId in the payload — it is
+  // resolved at write time below. Resolve it HERE as well (same resolver, same registry) so the
+  // previous-row lookup and the minutes delta cover the main path, not only explicit ids.
+  let resolvedRunIdPre: string | null = null;
+  if (kind === 'ledger' && runIdForLookup === '') {
+    try {
+      const parsed: unknown = JSON.parse(effectivePayloadRaw);
+      if (parsed !== null && typeof parsed === 'object' && !Array.isArray(parsed)) {
+        resolvedRunIdPre = resolveLedgerRunId(parsed as Record<string, unknown>, listCostLedgerRuns());
+        if (resolvedRunIdPre !== null) runIdForLookup = resolvedRunIdPre.trim();
+      }
+    } catch { /* resolution is an ENRICHMENT; the row is written regardless */ }
+  }
+  const previousRowTs = kind === 'ledger' && runIdForLookup !== '' ? findPreviousLedgerRowTs(target, runIdForLookup) : null;
+
   const decision = decideRecordWrite({
     kind,
-    payloadRaw,
+    payloadRaw: effectivePayloadRaw,
     stage,
+    previousRowTs,
+    effectiveRunId: runIdForLookup !== '' ? runIdForLookup : null,
     stageProducedResult: flags.has('no-result') ? false : true,
     markExists: markPath !== null && existsSync(markPath),
     targetExists: existsSync(target),
@@ -14317,10 +16022,23 @@ function cmdFeatureAdrRecord(options: Map<string, string>, flags: Set<string>, c
         const parsed: unknown = JSON.parse(decision.line);
         if (parsed !== null && typeof parsed === 'object' && !Array.isArray(parsed)) {
           const rowObj = parsed as Record<string, unknown>;
-          const resolved = resolveLedgerRunId(rowObj, listCostLedgerRuns());
+          // Lead edit after review #3 (Codex B): ONE resolution per write — reuse the id resolved
+          // before the decision (the same one the minutes delta was measured against) instead of
+          // resolving again; two resolutions could disagree if the run registry moved in between.
+          const resolved = resolvedRunIdPre !== null ? resolvedRunIdPre : resolveLedgerRunId(rowObj, listCostLedgerRuns());
           if (resolved !== null) {
             // Marked, because a resolved run id is our inference, not something the pipeline knew.
-            lineToWrite = JSON.stringify({ ...rowObj, runId: resolved, runIdSource: 'resolved-at-write' });
+            // Keep the minutes fields LAST (NFR-1 of ledger-stage-minutes): splice runId/runIdSource in
+            // right before `ts` when the decided row already carries the stamped tail.
+            const ordered: Record<string, unknown> = {};
+            let spliced = false;
+            for (const [k, v] of Object.entries(rowObj)) {
+              if (k === 'ts' && !spliced) { ordered['runId'] = resolved; ordered['runIdSource'] = 'resolved-at-write'; spliced = true; }
+              if (k === 'runId' || k === 'runIdSource') continue;
+              ordered[k] = v;
+            }
+            if (!spliced) { ordered['runId'] = resolved; ordered['runIdSource'] = 'resolved-at-write'; }
+            lineToWrite = JSON.stringify(ordered);
           }
         }
       } catch { /* resolution is an ENRICHMENT; a failure must never cost the row itself */ }
@@ -15632,7 +17350,17 @@ async function cmdQeBridge(options: Map<string, string>, flags: Set<string>, cwd
       );
     }
 
-    const recordText = (reportWritten: boolean): string => `${JSON.stringify(buildBridgeSignoffRecord(signoff, {
+    // writeSequence (qe-bridge-signoff-order): diagnostic sequencing metadata — a self-reported
+    // process-local trace with monotonic stamps taken at each named event (start of the first record
+    // write; after the report landed; just before the atomic update). It replaces a wall-clock
+    // mtime comparison that was a race (the record is rewritten AFTER the report by design). It does
+    // NOT prove write order or crash safety: those are proven by the failpoint test (R4-1) and the
+    // report-failure test. Lead edit after Codex review 2026-09-13: honest step names.
+    const seq: Array<{ step: 'signoff-write-started' | 'report-written' | 'record-update-prepared'; monotonicNs: string }> = [
+      { step: 'signoff-write-started', monotonicNs: String(process.hrtime.bigint()) },
+    ];
+
+    const recordText = (reportWritten: boolean, writeSequence: typeof seq): string => `${JSON.stringify(buildBridgeSignoffRecord(signoff, {
       runId,
       claudeBin: resolvedBin,
       binOverride,
@@ -15641,12 +17369,13 @@ async function cmdQeBridge(options: Map<string, string>, flags: Set<string>, cwd
       rawStdoutFile,
       promptSha256,
       ...(parsed.channels === undefined ? {} : { channels: parsed.channels }),
+      writeSequence,
     }), null, 2)}\n`;
 
     let signoffPath: string;
     try {
       signoffPath = uniquePath(join(stateDir, `signoff-${runId}`), '.json');
-      writeNewFileOrThrow(signoffPath, recordText(false));
+      writeNewFileOrThrow(signoffPath, recordText(false, seq));
     } catch (error) {
       return failRun(
         'audit-write-failed',
@@ -15664,6 +17393,10 @@ async function cmdQeBridge(options: Map<string, string>, flags: Set<string>, cwd
     }
 
     if (reportError === null) {
+      // the report is on disk: the sequence gains a step BEFORE the `reportWritten:true` record
+      // write, not after — an observer reading the eventual writeSequence must see the report step
+      // land before the record-update step that persists it.
+      seq.push({ step: 'report-written', monotonicNs: String(process.hrtime.bigint()) });
       // the ONLY moment `reportWritten:true` may appear: after the report is on disk
       try {
         // ATOMIC (R4-1): write a sibling temp file, then rename() over the original. On the same
@@ -15672,7 +17405,8 @@ async function cmdQeBridge(options: Map<string, string>, flags: Set<string>, cwd
         // which made the "a crash leaves a record that is true or pessimistic" claim untrue in the
         // one case it was about.
         const tmpPath = `${signoffPath}.tmp.${process.pid}`;
-        writeNewFileOrThrow(tmpPath, recordText(true));
+        seq.push({ step: 'record-update-prepared', monotonicNs: String(process.hrtime.bigint()) });
+        writeNewFileOrThrow(tmpPath, recordText(true, seq));
         if (process.env[QE_BRIDGE_FAILPOINT_ENV] === 'hang-before-rename') {
           // test-only: stop dead INSIDE the window, so a SIGKILL can prove the property
           Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, 600_000);
@@ -18410,11 +20144,11 @@ export async function runCli(argv: string[], io: CliIo = {}): Promise<number> {
       case 'auto-canonicalize':
         return await cmdAutoCanonicalize(options, cwd, write);
       case 'publish':
-        return cmdPublish(options, flags, cwd, write, io.publishMirrorRunner);
+        return cmdPublish(options, flags, cwd, write, io.publishMirrorRunner, io.publishSiblingDriftFetcher, io.publishPackedInstallRunner, io.publishExecRunner);
       case 'release':
         return cmdRelease(options, flags, cwd, write, io.releaseRunner);
       case 'parity':
-        return cmdParity(options, flags, write, writeErr);
+        return cmdParity(options, flags, write, writeErr, cwd);
       case 'registry':
         return cmdRegistry(options, cwd, write);
       case 'benchmark':
@@ -18499,6 +20233,8 @@ export async function runCli(argv: string[], io: CliIo = {}): Promise<number> {
         return cmdJournal(options, flags, cwd, write, io.journalIo);
       case 'feature-adr-record':
         return cmdFeatureAdrRecord(options, flags, cwd, write);
+      case 'round':
+        return await cmdRound(options, optionLists, flags, cwd, write, io);
       case 'runs':
         return cmdRuns(options, flags, cwd, write);
       case 'runs-clean':