@dzhechkov/harness-core 0.8.5 → 0.8.6

package/src/loop-blobs.generated.ts

@@ -42,7 +42,7 @@ export const BLOB_COVERAGE_MANIFEST: { coveredWorkflows: string[] } = {
 export const BLOBS: Record<string, LoopBlob> = {
   "checkpoints": {
     name: "checkpoints",
-    version: "1.1.0",
+    version: "1.2.0",
     contentHash: "a44560c6036fd143b7a3f125fec00fa8b91c3c06ac5b9e1ecfb83d27a5211e9b",
     sourcePath: "packages/@dzhechkov/harness-core/src/feature-adr-checkpoints.ts",
     requires: [],
@@ -51,30 +51,30 @@ export const BLOBS: Record<string, LoopBlob> = {
   },
   "training-pairs": {
     name: "training-pairs",
-    version: "1.1.0",
-    contentHash: "199eaaa8ce5dba4f54744b4a4f34eea32a3c33d4de8dbbddd3d119b70459361d",
+    version: "1.2.0",
+    contentHash: "7c836995b72f0b8fc69074cf6bb7b8a58fac609e4f5c365c82b8745c655da39c",
     sourcePath: "packages/@dzhechkov/harness-core/src/feature-adr-checkpoints.ts",
     requires: ["checkpoints"],
     exports: ["TRAINPAIR_SCHEMA_VERSION","TRAINPAIR_MAX_IO_CHARS","trainingPairFamily","trainingPairPath","TRAINPAIR_PRIVACY_NOTE","buildTrainingPair","serializeTrainingPair","trainingPairAppendCmd","decideCaptureMode","captureFailureRecord","trainingPairBackfillCmd","TP_BACKFILL_OK","TP_BACKFILL_SKIP"],
-    code: "function decideCaptureMode(opts) {\n    if (!opts.enabled)\n        return 'skip-disabled';\n    if (!Number.isInteger(opts.recordCount) || opts.recordCount <= 0)\n        return 'skip-empty';\n    return opts.resumed ? 'backfill' : 'capture';\n}\nfunction captureFailureRecord(stage, mode, reason, detail) {\n    const normalizedStage = typeof stage === 'string' && stage.trim() !== '' ? stage : 'unknown';\n    const normalizedMode = mode === 'capture' || mode === 'backfill' || mode === 'skip-disabled' || mode === 'skip-empty'\n        ? mode\n        : null;\n    const normalizedReason = reason === 'threw' || reason === 'unserializable' || reason === 'unverified' || reason === 'backfill-unverified' || reason === 'empty-output'\n        ? reason\n        : 'threw';\n    let normalizedDetail = null;\n    if (detail !== null && detail !== undefined) {\n        try {\n            const text = String(detail);\n            if (text !== '')\n                normalizedDetail = text.length > 500 ? text.slice(0, 500) + '…' : text;\n        }\n        catch {\n            normalizedDetail = null;\n        }\n    }\n    return { stage: normalizedStage, mode: normalizedMode, reason: normalizedReason, detail: normalizedDetail };\n}\nconst TRAINPAIR_SCHEMA_VERSION = 'fa-trainpair-2';\nconst TRAINPAIR_MAX_IO_CHARS = 48000;\nfunction trainingPairFamily(spec) {\n    return /codex|gpt|openai/i.test(String(spec ?? '')) ? 'codex' : 'claude';\n}\nfunction trainingPairPath(slug, stage) {\n    return '.dz/fa-training/' + slug + '/' + stage + '.jsonl';\n}\nconst TRAINPAIR_PRIVACY_NOTE = \"feature-adr TRAINING PAIRS (backlog 70e0f083): per-stage SFT records - STAGE INPUT (full prompt/context) -> STAGE OUTPUT (artifact/result) -> EVALUATION (QE grade + injected lessons) with model+family provenance; one JSONL file per stage per slug. PRIVACY: pairs may contain TARGET-REPO CODE and full prompts. This directory is NOT gitignored yet by explicit owner decision - review contents before sharing or publishing anything that embeds it. ts is the CAPTURE time. On a record with captureMode: 'backfill' that is the RECONSTRUCTION time, NOT the stage's observation time — the original stage's timing lives in that run's .fa-state checkpoint.\";\nconst TP_PROFILE_MARKER_START = '<!-- dz:profile:start -->';\nconst TP_PROFILE_MARKER_END = '<!-- dz:profile:end -->';\nconst TP_PROFILE_REDACTED = '[dz:profile REDACTED]';\nfunction redactProfileBlock(text) {\n    if (typeof text !== 'string' || text === '')\n        return typeof text === 'string' ? text : '';\n    let out = '';\n    let rest = text;\n    for (;;) {\n        const start = rest.indexOf(TP_PROFILE_MARKER_START);\n        if (start === -1)\n            return out + rest;\n        out += rest.slice(0, start) + TP_PROFILE_REDACTED;\n        const end = rest.indexOf(TP_PROFILE_MARKER_END, start + TP_PROFILE_MARKER_START.length);\n        if (end === -1)\n            return out;\n        rest = rest.slice(end + TP_PROFILE_MARKER_END.length);\n    }\n}\nfunction coerceText(v) {\n    if (typeof v === 'string')\n        return v;\n    if (v === null || v === undefined)\n        return '';\n    try {\n        const s = JSON.stringify(v);\n        return typeof s === 'string' ? s : String(v);\n    }\n    catch {\n        return String(v);\n    }\n}\nfunction buildTrainingPair(opts) {\n    let input = redactProfileBlock(coerceText(opts.input));\n    let output = redactProfileBlock(coerceText(opts.output));\n    let truncated = null;\n    if (input.length + output.length > TRAINPAIR_MAX_IO_CHARS) {\n        truncated = { inputChars: input.length, outputChars: output.length, inputHash: fnv1a64(input), outputHash: fnv1a64(output) };\n        const half = Math.floor(TRAINPAIR_MAX_IO_CHARS / 2);\n        let inKeep = input.length;\n        let outKeep = output.length;\n        if (outKeep <= half)\n            inKeep = TRAINPAIR_MAX_IO_CHARS - outKeep;\n        else if (inKeep <= half)\n            outKeep = TRAINPAIR_MAX_IO_CHARS - inKeep;\n        else {\n            inKeep = half;\n            outKeep = TRAINPAIR_MAX_IO_CHARS - half;\n        }\n        if (inKeep < input.length)\n            input = input.slice(0, inKeep) + '\\n…[TRUNCATED ' + (truncated.inputChars - inKeep) + ' chars — full-text fnv1a64=' + truncated.inputHash + ']';\n        if (outKeep < output.length)\n            output = output.slice(0, outKeep) + '\\n…[TRUNCATED ' + (truncated.outputChars - outKeep) + ' chars — full-text fnv1a64=' + truncated.outputHash + ']';\n    }\n    const ev = opts.evaluation || {};\n    const pv = opts.provenance || {};\n    return {\n        schema: TRAINPAIR_SCHEMA_VERSION,\n        slug: opts.slug,\n        stage: opts.stage,\n        ts: opts.ts === undefined ? null : opts.ts,\n        input,\n        output,\n        evaluation: {\n            grade: typeof ev.grade === 'string' && ev.grade.trim() !== '' ? ev.grade : null,\n            gradedBy: typeof ev.gradedBy === 'string' && ev.gradedBy !== '' ? ev.gradedBy : null,\n            lessonsInjected: Array.isArray(ev.lessonsInjected) ? ev.lessonsInjected.filter((s) => typeof s === 'string' && s !== '') : [],\n        },\n        provenance: {\n            model: typeof pv.model === 'string' && pv.model !== '' ? pv.model : 'unknown',\n            family: pv.family === 'claude' || pv.family === 'codex' ? pv.family : trainingPairFamily(pv.model),\n            role: typeof pv.role === 'string' && pv.role !== '' ? pv.role : 'unknown',\n            tokens: typeof pv.tokens === 'number' && Number.isFinite(pv.tokens) ? pv.tokens : null,\n            minutes: typeof pv.minutes === 'number' && Number.isFinite(pv.minutes) ? pv.minutes : null,\n        },\n        truncated,\n        captureMode: opts.captureMode === 'backfill' ? 'backfill' : 'capture',\n        resumed: opts.resumed === true,\n    };\n}\nfunction serializeTrainingPair(pair) {\n    try {\n        const line = JSON.stringify(pair);\n        return typeof line === 'string' ? line : null;\n    }\n    catch {\n        return null;\n    }\n}\nfunction trainingPairAppendCmd(repoAbs, slug, stage, line) {\n    const dirAbs = repoAbs + '/.dz/fa-training/' + slug;\n    const readmeAbs = repoAbs + '/.dz/fa-training/README.md';\n    const fileAbs = dirAbs + '/' + stage + '.jsonl';\n    return ('mkdir -p ' + shellQuote(dirAbs) +\n        ' && { [ -f ' + shellQuote(readmeAbs) + ' ] || printf \\'%s\\\\n\\' ' + shellQuote(TRAINPAIR_PRIVACY_NOTE) + ' > ' + shellQuote(readmeAbs) + '; }' +\n        \" && printf '%s\\\\n' \" + shellQuote(line) + ' >> ' + shellQuote(fileAbs));\n}\nconst TP_BACKFILL_OK = 'TP-BACKFILL-OK';\nconst TP_BACKFILL_SKIP = 'TP-BACKFILL-SKIP';\nconst TP_BACKFILL_DUP = 'TP-BACKFILL-DUP';\nfunction trainingPairBackfillCmd(repoAbs, slug, stage, lines, markKey) {\n    if (typeof repoAbs !== 'string' || repoAbs === '')\n        return null;\n    if (typeof slug !== 'string' || slug === '')\n        return null;\n    if (typeof stage !== 'string' || stage === '')\n        return null;\n    if (!Array.isArray(lines) || lines.length === 0 || !lines.every(line => typeof line === 'string' && line !== ''))\n        return null;\n    const dirAbs = repoAbs + '/.dz/fa-training/' + slug;\n    const readmeAbs = repoAbs + '/.dz/fa-training/README.md';\n    const fileAbs = dirAbs + '/' + stage + '.jsonl';\n    const markDir = repoAbs + '/.dz/fa-training/.backfill-marks';\n    const markStage = stage.replace(/\\.\\./g, '_').replace(/\\//g, '_');\n    const resolvedMarkKey = markKey === undefined ? fnv1a64(stage + '\\0' + lines.join('\\n')) : markKey;\n    const markPath = markDir + '/' + markStage + '-' + resolvedMarkKey;\n    const appends = lines\n        .map(line => \"printf '%s\\\\n' \" + shellQuote(line) + ' >> ' + shellQuote(fileAbs))\n        .join(' && ');\n    return ('mkdir -p ' + shellQuote(dirAbs) +\n        ' && { [ -f ' + shellQuote(readmeAbs) + ' ] || printf \\'%s\\\\n\\' ' + shellQuote(TRAINPAIR_PRIVACY_NOTE) + ' > ' + shellQuote(readmeAbs) + '; }' +\n        ' && mkdir -p ' + shellQuote(markDir) +\n        ' && if mkdir ' + shellQuote(markPath) + ' 2>/dev/null; then ' +\n        'if [ -f ' + shellQuote(fileAbs) + ' ]; then echo ' + shellQuote(TP_BACKFILL_SKIP) +\n        '; else { ' + appends + ' && echo ' + shellQuote(TP_BACKFILL_OK) + '; } || { rmdir ' + shellQuote(markPath) + ' 2>/dev/null; false; }; fi' +\n        '; else echo ' + shellQuote(TP_BACKFILL_DUP) + '; fi');\n}",
+    code: "function decideCaptureMode(opts) {\n    if (!opts.enabled)\n        return 'skip-disabled';\n    if (!Number.isInteger(opts.recordCount) || opts.recordCount <= 0)\n        return 'skip-empty';\n    return opts.resumed ? 'backfill' : 'capture';\n}\nfunction captureFailureRecord(stage, mode, reason, detail) {\n    const normalizedStage = typeof stage === 'string' && stage.trim() !== '' ? stage : 'unknown';\n    const normalizedMode = mode === 'capture' || mode === 'backfill' || mode === 'skip-disabled' || mode === 'skip-empty'\n        ? mode\n        : null;\n    const normalizedReason = reason === 'threw' || reason === 'unserializable' || reason === 'unverified' || reason === 'backfill-unverified' || reason === 'empty-output'\n        ? reason\n        : 'threw';\n    let normalizedDetail = null;\n    if (detail !== null && detail !== undefined) {\n        try {\n            const text = String(detail);\n            if (text !== '')\n                normalizedDetail = text.length > 500 ? text.slice(0, 500) + '…' : text;\n        }\n        catch {\n            normalizedDetail = null;\n        }\n    }\n    return { stage: normalizedStage, mode: normalizedMode, reason: normalizedReason, detail: normalizedDetail };\n}\nconst TRAINPAIR_SCHEMA_VERSION = 'fa-trainpair-3';\nconst TRAINPAIR_MAX_IO_CHARS = 48000;\nfunction trainingPairFamily(spec) {\n    return /codex|gpt|openai/i.test(String(spec ?? '')) ? 'codex' : 'claude';\n}\nfunction trainingPairPath(slug, stage) {\n    return '.dz/fa-training/' + slug + '/' + stage + '.jsonl';\n}\nconst TRAINPAIR_PRIVACY_NOTE = \"feature-adr TRAINING PAIRS (backlog 70e0f083): per-stage SFT records - STAGE INPUT (full prompt/context) -> STAGE OUTPUT (artifact/result) -> EVALUATION (QE grade + injected lessons) with model+family provenance; one JSONL file per stage per slug. PRIVACY: pairs may contain TARGET-REPO CODE and full prompts. This directory is NOT gitignored yet by explicit owner decision - review contents before sharing or publishing anything that embeds it. ts is the CAPTURE time. On a record with captureMode: 'backfill' that is the RECONSTRUCTION time, NOT the stage's observation time — the original stage's timing lives in that run's .fa-state checkpoint.\";\nconst TP_PROFILE_MARKER_START = '<!-- dz:profile:start -->';\nconst TP_PROFILE_MARKER_END = '<!-- dz:profile:end -->';\nconst TP_PROFILE_REDACTED = '[dz:profile REDACTED]';\nfunction redactProfileBlock(text) {\n    if (typeof text !== 'string' || text === '')\n        return typeof text === 'string' ? text : '';\n    let out = '';\n    let rest = text;\n    for (;;) {\n        const start = rest.indexOf(TP_PROFILE_MARKER_START);\n        if (start === -1)\n            return out + rest;\n        out += rest.slice(0, start) + TP_PROFILE_REDACTED;\n        const end = rest.indexOf(TP_PROFILE_MARKER_END, start + TP_PROFILE_MARKER_START.length);\n        if (end === -1)\n            return out;\n        rest = rest.slice(end + TP_PROFILE_MARKER_END.length);\n    }\n}\nfunction coerceText(v) {\n    if (typeof v === 'string')\n        return v;\n    if (v === null || v === undefined)\n        return '';\n    try {\n        const s = JSON.stringify(v);\n        return typeof s === 'string' ? s : String(v);\n    }\n    catch {\n        return String(v);\n    }\n}\nfunction normalizeTrainingPairBudget(raw) {\n    try {\n        if (raw === undefined)\n            return { primary: 'claude', claude: 'normal', codex: 'normal', preset: 'unset' };\n        if (raw === null || typeof raw !== 'object')\n            return null;\n        const value = raw;\n        const primary = value.primary;\n        const claude = value.claude;\n        const codex = value.codex;\n        if (primary !== 'claude' && primary !== 'codex')\n            return null;\n        if (claude !== 'normal' && claude !== 'eco')\n            return null;\n        if (codex !== 'normal' && codex !== 'eco')\n            return null;\n        if (value.preset === 'unset')\n            return { primary, claude, codex, preset: 'unset' };\n        let preset = 'custom';\n        if (claude === 'normal' && codex === 'normal')\n            preset = 'normal';\n        else if (claude === 'eco' && codex === 'eco')\n            preset = 'eco';\n        else if (claude === 'eco' && codex === 'normal')\n            preset = 'hybrid';\n        return { primary, claude, codex, preset };\n    }\n    catch {\n        return null;\n    }\n}\nfunction buildTrainingPair(opts) {\n    let input = redactProfileBlock(coerceText(opts.input));\n    let output = redactProfileBlock(coerceText(opts.output));\n    let truncated = null;\n    if (input.length + output.length > TRAINPAIR_MAX_IO_CHARS) {\n        truncated = { inputChars: input.length, outputChars: output.length, inputHash: fnv1a64(input), outputHash: fnv1a64(output) };\n        const half = Math.floor(TRAINPAIR_MAX_IO_CHARS / 2);\n        let inKeep = input.length;\n        let outKeep = output.length;\n        if (outKeep <= half)\n            inKeep = TRAINPAIR_MAX_IO_CHARS - outKeep;\n        else if (inKeep <= half)\n            outKeep = TRAINPAIR_MAX_IO_CHARS - inKeep;\n        else {\n            inKeep = half;\n            outKeep = TRAINPAIR_MAX_IO_CHARS - half;\n        }\n        if (inKeep < input.length)\n            input = input.slice(0, inKeep) + '\\n…[TRUNCATED ' + (truncated.inputChars - inKeep) + ' chars — full-text fnv1a64=' + truncated.inputHash + ']';\n        if (outKeep < output.length)\n            output = output.slice(0, outKeep) + '\\n…[TRUNCATED ' + (truncated.outputChars - outKeep) + ' chars — full-text fnv1a64=' + truncated.outputHash + ']';\n    }\n    const ev = opts.evaluation || {};\n    const pv = opts.provenance || {};\n    return {\n        schema: TRAINPAIR_SCHEMA_VERSION,\n        slug: opts.slug,\n        stage: opts.stage,\n        ts: opts.ts === undefined ? null : opts.ts,\n        input,\n        output,\n        evaluation: {\n            grade: typeof ev.grade === 'string' && ev.grade.trim() !== '' ? ev.grade : null,\n            gradedBy: typeof ev.gradedBy === 'string' && ev.gradedBy !== '' ? ev.gradedBy : null,\n            lessonsInjected: Array.isArray(ev.lessonsInjected) ? ev.lessonsInjected.filter((s) => typeof s === 'string' && s !== '') : [],\n        },\n        provenance: {\n            model: typeof pv.model === 'string' && pv.model !== '' ? pv.model : 'unknown',\n            family: pv.family === 'claude' || pv.family === 'codex' ? pv.family : trainingPairFamily(pv.model),\n            role: typeof pv.role === 'string' && pv.role !== '' ? pv.role : 'unknown',\n            tokens: typeof pv.tokens === 'number' && Number.isFinite(pv.tokens) ? pv.tokens : null,\n            minutes: typeof pv.minutes === 'number' && Number.isFinite(pv.minutes) ? pv.minutes : null,\n        },\n        budgetMode: normalizeTrainingPairBudget(opts.budgetMode),\n        truncated,\n        captureMode: opts.captureMode === 'backfill' ? 'backfill' : 'capture',\n        resumed: opts.resumed === true,\n    };\n}\nfunction serializeTrainingPair(pair) {\n    try {\n        const line = JSON.stringify(pair);\n        return typeof line === 'string' ? line : null;\n    }\n    catch {\n        return null;\n    }\n}\nfunction trainingPairAppendCmd(repoAbs, slug, stage, line) {\n    const dirAbs = repoAbs + '/.dz/fa-training/' + slug;\n    const readmeAbs = repoAbs + '/.dz/fa-training/README.md';\n    const fileAbs = dirAbs + '/' + stage + '.jsonl';\n    return ('mkdir -p ' + shellQuote(dirAbs) +\n        ' && { [ -f ' + shellQuote(readmeAbs) + ' ] || printf \\'%s\\\\n\\' ' + shellQuote(TRAINPAIR_PRIVACY_NOTE) + ' > ' + shellQuote(readmeAbs) + '; }' +\n        \" && printf '%s\\\\n' \" + shellQuote(line) + ' >> ' + shellQuote(fileAbs));\n}\nconst TP_BACKFILL_OK = 'TP-BACKFILL-OK';\nconst TP_BACKFILL_SKIP = 'TP-BACKFILL-SKIP';\nconst TP_BACKFILL_DUP = 'TP-BACKFILL-DUP';\nfunction trainingPairBackfillCmd(repoAbs, slug, stage, lines, markKey) {\n    if (typeof repoAbs !== 'string' || repoAbs === '')\n        return null;\n    if (typeof slug !== 'string' || slug === '')\n        return null;\n    if (typeof stage !== 'string' || stage === '')\n        return null;\n    if (!Array.isArray(lines) || lines.length === 0 || !lines.every(line => typeof line === 'string' && line !== ''))\n        return null;\n    const dirAbs = repoAbs + '/.dz/fa-training/' + slug;\n    const readmeAbs = repoAbs + '/.dz/fa-training/README.md';\n    const fileAbs = dirAbs + '/' + stage + '.jsonl';\n    const markDir = repoAbs + '/.dz/fa-training/.backfill-marks';\n    const markStage = stage.replace(/\\.\\./g, '_').replace(/\\//g, '_');\n    const resolvedMarkKey = markKey === undefined ? fnv1a64(stage + '\\0' + lines.join('\\n')) : markKey;\n    const markPath = markDir + '/' + markStage + '-' + resolvedMarkKey;\n    const appends = lines\n        .map(line => \"printf '%s\\\\n' \" + shellQuote(line) + ' >> ' + shellQuote(fileAbs))\n        .join(' && ');\n    return ('mkdir -p ' + shellQuote(dirAbs) +\n        ' && { [ -f ' + shellQuote(readmeAbs) + ' ] || printf \\'%s\\\\n\\' ' + shellQuote(TRAINPAIR_PRIVACY_NOTE) + ' > ' + shellQuote(readmeAbs) + '; }' +\n        ' && mkdir -p ' + shellQuote(markDir) +\n        ' && if mkdir ' + shellQuote(markPath) + ' 2>/dev/null; then ' +\n        'if [ -f ' + shellQuote(fileAbs) + ' ]; then echo ' + shellQuote(TP_BACKFILL_SKIP) +\n        '; else { ' + appends + ' && echo ' + shellQuote(TP_BACKFILL_OK) + '; } || { rmdir ' + shellQuote(markPath) + ' 2>/dev/null; false; }; fi' +\n        '; else echo ' + shellQuote(TP_BACKFILL_DUP) + '; fi');\n}",
   },
   "model-resolver": {
     name: "model-resolver",
     version: "1.0.0",
-    contentHash: "e82ac2137279537f5b65725cbd8de5817fcbc89571068e2df843587352fa83f5",
+    contentHash: "fcf8c1dfc4b5364adb6e532565953ef30d94a45070b2b903411170965a1fb372",
     sourcePath: "packages/@dzhechkov/harness-core/src/feature-adr-routing.ts",
     requires: [],
     exports: ["specToOpts","resolveStageModel","KNOWN_CODEX","mergeOpts","stageLabel","modelLabel"],
-    code: "const OVERRIDE_REASONING = {\n    router: 'high',\n    requirements: 'xhigh',\n    research: 'xhigh',\n    adr: 'xhigh',\n    ideation: 'xhigh',\n    ddd: 'xhigh',\n    architecture: 'xhigh',\n    plan: 'xhigh',\n    code: 'xhigh',\n    qe: 'high',\n    fleet: 'high',\n};\nfunction topCodexId(env) {\n    let top = env.CODEX_MODEL;\n    if (top === 'auto') {\n        const ids = Object.keys(KNOWN_CODEX);\n        for (let i = 0; i < ids.length; i++) {\n            if (ids[i] !== 'auto')\n                top = ids[i] || top;\n        }\n    }\n    return top;\n}\nconst KNOWN_CODEX = { auto: 1, 'gpt-5.5': 1, 'gpt-5.6': 1, 'gpt-5.6-luna': 1, 'gpt-5.6-terra': 1, 'gpt-5.6-sol': 1 };\nconst CLAUDE_NAMES = { fable: 1, opus: 1, sonnet: 1, haiku: 1 };\nconst VALID_REASONING = { none: 1, minimal: 1, low: 1, medium: 1, high: 1, xhigh: 1 };\nconst DEFAULT_MODELS = {\n    router: 'fable',\n    requirements: 'sonnet',\n    research: 'sonnet',\n    adr: 'opus',\n    ideation: 'sonnet',\n    ddd: 'opus',\n    architecture: 'opus',\n    plan: 'sonnet',\n    code: null,\n    qe: null,\n    fleet: 'sonnet',\n};\nfunction specToOpts(spec, env) {\n    const log = env.log || function () { };\n    if (!spec)\n        return {};\n    const parts = String(spec).split(':');\n    const head = parts[0] || '';\n    if (head === 'codex') {\n        let id = parts[1] || env.CODEX_MODEL;\n        if (id !== 'auto' && !KNOWN_CODEX[id]) {\n            log('models: unknown codex id ' + id + ' — using ' + env.CODEX_MODEL);\n            id = env.CODEX_MODEL;\n        }\n        let reasoning = parts[2] || 'high';\n        if (!VALID_REASONING[reasoning]) {\n            log('models: unknown reasoning ' + reasoning + ' — using high');\n            reasoning = 'high';\n        }\n        return { agentType: 'codex:codex-rescue', codexModel: id, _reasoning: reasoning };\n    }\n    if (CLAUDE_NAMES[head])\n        return { model: head };\n    log('models: unknown spec ' + spec + ' — session-inherited');\n    return {};\n}\nfunction resolveCoderSpec(env) {\n    if (env.CODER === 'codex' || env.CODER === 'codex-fallback')\n        return 'codex:' + env.CODEX_MODEL + ':high';\n    return 'opus';\n}\nfunction coderIsCodex(env) {\n    if (env.CODER === 'codex' || env.CODER === 'codex-fallback')\n        return true;\n    const codeSpec = env.MODELS.code;\n    if (codeSpec && String(codeSpec).split(':')[0] === 'codex')\n        return true;\n    return false;\n}\nfunction resolveQeSpec(env) {\n    if (coderIsCodex(env))\n        return 'opus';\n    const CODEX_AVAILABLE = env.codexAvailable !== false;\n    if (!CODEX_AVAILABLE)\n        return 'opus';\n    return 'codex:' + topCodexId(env) + ':high';\n}\nfunction routingRequested(env) {\n    return (Object.keys(env.MODELS).length > 0 ||\n        env.PLANNER === 'codex' ||\n        env.CODER === 'codex' ||\n        env.CODER === 'codex-fallback' ||\n        env.QE_REVIEWER === 'codex' ||\n        env.QE_REVIEWER === 'codex-fallback');\n}\nfunction resolveStageModel(stage, env) {\n    if (env.usageOverride) {\n        const r = (env.usageReasoning && env.usageReasoning[stage]) || OVERRIDE_REASONING[stage] || 'high';\n        const o = specToOpts('codex:' + topCodexId(env) + ':' + r, env);\n        o._usageSwitched = true;\n        return o;\n    }\n    let spec = env.MODELS[stage];\n    if (spec === undefined) {\n        if (!routingRequested(env))\n            return {};\n        spec = DEFAULT_MODELS[stage];\n    }\n    if (stage === 'code' && (spec === null || spec === undefined))\n        return specToOpts(resolveCoderSpec(env), env);\n    if (stage === 'qe' && (spec === null || spec === undefined))\n        return specToOpts(resolveQeSpec(env), env);\n    return specToOpts(spec, env);\n}\nfunction modelLabel(opts) {\n    if (opts && opts.agentType === 'codex:codex-rescue') {\n        const base = 'codex:' + opts.codexModel + ':' + opts._reasoning;\n        return opts._usageSwitched ? base + ' (usage-switched)' : base;\n    }\n    if (opts && opts.model)\n        return opts.model;\n    return 'session';\n}\nfunction stageLabel(base, opts) {\n    const m = modelLabel(opts);\n    return m === 'session' ? base : base + ' · ' + m;\n}\nfunction mergeOpts(base, extra) {\n    const out = {};\n    for (const k in base)\n        out[k] = base[k];\n    for (const k in extra)\n        out[k] = extra[k];\n    return out;\n}",
+    code: "const STAGE_EFFORT = { override: {\n        router: 'medium',\n        requirements: 'medium',\n        research: 'medium',\n        adr: 'high',\n        ideation: 'medium',\n        ddd: 'high',\n        architecture: 'high',\n        plan: 'high',\n        code: 'medium',\n        qe: 'high',\n        fleet: 'medium',\n    } };\nfunction topCodexId(env) {\n    return env.CODEX_MODEL !== 'auto' ? env.CODEX_MODEL : CODEX_TIERS.flagship;\n}\nconst KNOWN_CODEX = { auto: 1, 'gpt-5.5': 1, 'gpt-5.6': 1, 'gpt-5.6-luna': 1, 'gpt-5.6-terra': 1, 'gpt-5.6-sol': 1 };\nconst CODEX_TIERS = {\n    flagship: 'gpt-5.6-sol',\n    workhorse: 'gpt-5.6-terra',\n    'high-volume': 'gpt-5.6-luna',\n};\nfunction codexIdForTier(tier, env) {\n    return env.CODEX_MODEL !== 'auto' ? env.CODEX_MODEL : CODEX_TIERS[tier];\n}\nconst BUDGET_PRESETS = {\n    normal: { claude: 'normal', codex: 'normal' },\n    eco: { claude: 'eco', codex: 'eco' },\n    hybrid: { claude: 'eco', codex: 'normal' },\n};\nfunction resolveBudgetMode(raw) {\n    if (raw === undefined)\n        return BUDGET_PRESETS.normal;\n    if (typeof raw === 'string') {\n        const preset = BUDGET_PRESETS[raw];\n        if (!preset)\n            throw new RangeError('budget: unknown preset \"' + raw + '\" — valid: normal|eco|hybrid');\n        return preset;\n    }\n    if (raw && typeof raw === 'object') {\n        const value = raw;\n        for (const key of Object.keys(value)) {\n            if (key !== 'claude' && key !== 'codex') {\n                throw new RangeError('budget: unknown family key \"' + key + '\" — valid: claude|codex');\n            }\n        }\n        for (const key of ['claude', 'codex']) {\n            const level = value[key];\n            if (level !== undefined && level !== 'normal' && level !== 'eco') {\n                throw new RangeError('budget.' + key + ': unknown level \"' + level + '\" — valid: normal|eco');\n            }\n        }\n        return {\n            claude: value.claude || 'normal',\n            codex: value.codex || 'normal',\n        };\n    }\n    throw new RangeError('budget: expected a preset name or {claude,codex} object, got ' + typeof raw);\n}\nconst CLAUDE_NAMES = { fable: 1, opus: 1, sonnet: 1, haiku: 1 };\nconst VALID_REASONING = { none: 1, minimal: 1, low: 1, medium: 1, high: 1, xhigh: 1, max: 1 };\nconst DEFAULT_MODELS = {\n    router: 'fable',\n    requirements: 'sonnet',\n    research: 'sonnet',\n    adr: 'opus',\n    ideation: 'sonnet',\n    ddd: 'opus',\n    architecture: 'opus',\n    plan: 'sonnet',\n    code: null,\n    qe: null,\n    fleet: 'sonnet',\n};\nconst ROUTING_TABLES = {\n    claude: {\n        claude: {\n            normal: { router: 'sonnet', requirements: 'sonnet', research: 'sonnet', adr: 'fable', ideation: 'sonnet', ddd: 'fable', architecture: 'fable', plan: 'opus', code: 'sonnet', fleet: 'sonnet' },\n            eco: { router: 'sonnet', requirements: 'sonnet', research: 'sonnet', adr: 'opus', ideation: 'sonnet', ddd: 'opus', architecture: 'opus', plan: 'sonnet', code: 'sonnet', fleet: 'sonnet' },\n        },\n        codex: { normal: {}, eco: {} },\n    },\n    codex: {\n        claude: {\n            normal: { router: 'sonnet', qe: 'sonnet', fleet: 'sonnet' },\n            eco: { router: 'sonnet', qe: 'sonnet', fleet: 'sonnet' },\n        },\n        codex: { normal: {}, eco: {} },\n    },\n};\nfunction codexCell(tier, effort, env) {\n    return 'codex:' + codexIdForTier(tier, env) + ':' + effort;\n}\nfunction budgetTable(primary, mode, env) {\n    const claudeHalf = ROUTING_TABLES[primary].claude[mode.claude];\n    let codexHalf;\n    if (primary === 'claude') {\n        const qeSpec = mode.codex === 'normal'\n            ? codexCell('flagship', 'high', env)\n            : codexCell('workhorse', 'medium', env);\n        codexHalf = { ...ROUTING_TABLES.claude.codex[mode.codex], qe: env.codexAvailable === false ? 'opus' : qeSpec };\n    }\n    else {\n        const normal = mode.codex === 'normal';\n        const design = codexCell(normal ? 'flagship' : 'workhorse', normal ? 'high' : 'medium', env);\n        codexHalf = {\n            requirements: design,\n            research: design,\n            adr: design,\n            ideation: design,\n            ddd: design,\n            architecture: design,\n            plan: codexCell(normal ? 'flagship' : 'workhorse', normal ? 'high' : 'low', env),\n            code: codexCell(normal ? 'flagship' : 'workhorse', 'medium', env),\n        };\n    }\n    return { ...claudeHalf, ...codexHalf };\n}\nfunction specToOpts(spec, env) {\n    const log = env.log || function () { };\n    if (!spec)\n        return {};\n    const parts = String(spec).split(':');\n    const head = parts[0] || '';\n    if (head === 'codex') {\n        let id = parts[1] || env.CODEX_MODEL;\n        if (id !== 'auto' && !KNOWN_CODEX[id]) {\n            log('models: unknown codex id ' + id + ' — using ' + env.CODEX_MODEL);\n            id = env.CODEX_MODEL;\n        }\n        let reasoning = parts[2] || 'high';\n        if (!VALID_REASONING[reasoning]) {\n            throw new RangeError('models: invalid reasoning \"' + reasoning + '\" — valid: ' + Object.keys(VALID_REASONING).join('|'));\n        }\n        return { agentType: 'codex:codex-rescue', codexModel: id, _reasoning: reasoning };\n    }\n    if (CLAUDE_NAMES[head])\n        return { model: head };\n    log('models: unknown spec ' + spec + ' — session-inherited');\n    return {};\n}\nfunction resolveCoderSpec(env) {\n    if (env.CODER === 'codex' || env.CODER === 'codex-fallback')\n        return 'codex:' + env.CODEX_MODEL + ':high';\n    return 'opus';\n}\nfunction coderIsCodex(env) {\n    const codeSpec = env.MODELS.code;\n    if (codeSpec !== undefined && codeSpec !== null)\n        return String(codeSpec).split(':')[0] === 'codex';\n    if (env.CODER === 'codex' || env.CODER === 'codex-fallback')\n        return true;\n    return env.primary === 'codex';\n}\nfunction resolveQeSpecForCoder(coderCodex, env) {\n    if (coderCodex)\n        return 'sonnet';\n    const CODEX_AVAILABLE = env.codexAvailable !== false;\n    if (!CODEX_AVAILABLE)\n        return 'opus';\n    const budget = resolveBudgetMode(env.budget);\n    return budget.codex === 'eco'\n        ? 'codex:' + codexIdForTier('workhorse', env) + ':medium'\n        : 'codex:' + codexIdForTier('flagship', env) + ':high';\n}\nfunction resolveQeSpec(env) {\n    return resolveQeSpecForCoder(coderIsCodex(env), env);\n}\nfunction routingRequested(env) {\n    return (Object.keys(env.MODELS).length > 0 ||\n        env.primary !== undefined ||\n        env.budget !== undefined ||\n        env.PLANNER === 'codex' ||\n        env.CODER === 'codex' ||\n        env.CODER === 'codex-fallback' ||\n        env.QE_REVIEWER === 'codex' ||\n        env.QE_REVIEWER === 'codex-fallback');\n}\nfunction resolveStageModel(stage, env) {\n    if (env.usageOverride) {\n        const r = (env.usageReasoning && env.usageReasoning[stage]) || STAGE_EFFORT.override[stage] || 'medium';\n        const o = specToOpts('codex:' + topCodexId(env) + ':' + r, env);\n        o._usageSwitched = true;\n        return o;\n    }\n    let spec = env.MODELS[stage];\n    if (spec === undefined) {\n        if (!routingRequested(env))\n            return {};\n        if (stage === 'code' && (env.CODER === 'codex' || env.CODER === 'codex-fallback')) {\n            return specToOpts(resolveCoderSpec(env), env);\n        }\n        if (stage === 'plan' && env.PLANNER === 'codex') {\n            return specToOpts('codex:' + env.CODEX_MODEL + ':high', env);\n        }\n        if (stage === 'qe') {\n            return specToOpts(resolveQeSpec(env), env);\n        }\n        const resolvedPrimary = env.primary || 'claude';\n        const cell = budgetTable(resolvedPrimary, resolveBudgetMode(env.budget), env)[stage];\n        spec = cell !== undefined ? cell : DEFAULT_MODELS[stage];\n    }\n    if (stage === 'code' && (spec === null || spec === undefined))\n        return specToOpts(resolveCoderSpec(env), env);\n    if (stage === 'qe' && (spec === null || spec === undefined))\n        return specToOpts(resolveQeSpec(env), env);\n    return specToOpts(spec, env);\n}\nfunction modelLabel(opts) {\n    if (opts && opts.agentType === 'codex:codex-rescue') {\n        const base = 'codex:' + opts.codexModel + ':' + opts._reasoning;\n        return opts._usageSwitched ? base + ' (usage-switched)' : base;\n    }\n    if (opts && opts.model)\n        return opts.model;\n    return 'session';\n}\nfunction stageLabel(base, opts) {\n    const m = modelLabel(opts);\n    return m === 'session' ? base : base + ' · ' + m;\n}\nfunction mergeOpts(base, extra) {\n    const out = {};\n    for (const k in base)\n        out[k] = base[k];\n    for (const k in extra)\n        out[k] = extra[k];\n    return out;\n}",
   },
   "usage-probes": {
     name: "usage-probes",
     version: "1.0.0",
-    contentHash: "4ae2504a50fe05aad4383e223d460b21396805b17dfefab50e60022d58cdd19d",
+    contentHash: "a7d7fecc30202595c05cd31d5c36ee3bfa59f803f3e707e3c28c3ae372bc373b",
     sourcePath: "packages/@dzhechkov/harness-core/src/feature-adr-routing.ts",
     requires: ["model-resolver"],
     exports: ["decideUsageAction","OVERRIDE_REASONING","topCodexId"],
-    code: "function decideUsageAction(prevOverride, signal, threshold) {\n    if (signal === null || signal === undefined) {\n        if (prevOverride)\n            return { override: true, action: 'keep' };\n        return { override: true, action: 'fail-safe-switch' };\n    }\n    const s = signal.sessionPct;\n    const w = signal.weeklyPct;\n    const sKnown = typeof s === 'number' && isFinite(s) && s >= 0;\n    const wKnown = typeof w === 'number' && isFinite(w) && w >= 0;\n    if ((sKnown && s >= threshold) || (wKnown && w >= threshold)) {\n        return { override: true, action: prevOverride ? 'keep' : 'switch' };\n    }\n    if (sKnown && wKnown) {\n        return { override: false, action: prevOverride ? 'restore' : 'none' };\n    }\n    return { override: prevOverride, action: prevOverride ? 'keep' : 'none' };\n}",
+    code: "const OVERRIDE_REASONING = Object.freeze(STAGE_EFFORT.override);\nfunction decideUsageAction(prevOverride, signal, threshold) {\n    if (signal === null || signal === undefined) {\n        if (prevOverride)\n            return { override: true, action: 'keep' };\n        return { override: true, action: 'fail-safe-switch' };\n    }\n    const s = signal.sessionPct;\n    const w = signal.weeklyPct;\n    const sKnown = typeof s === 'number' && isFinite(s) && s >= 0;\n    const wKnown = typeof w === 'number' && isFinite(w) && w >= 0;\n    if ((sKnown && s >= threshold) || (wKnown && w >= threshold)) {\n        return { override: true, action: prevOverride ? 'keep' : 'switch' };\n    }\n    if (sKnown && wKnown) {\n        return { override: false, action: prevOverride ? 'restore' : 'none' };\n    }\n    return { override: prevOverride, action: prevOverride ? 'keep' : 'none' };\n}",
   },
   "codex-dispatch": {
     name: "codex-dispatch",

package/src/loop-plan.ts

@@ -150,6 +150,11 @@ export interface LoopFanout {
   registry: string[];
   /** Hard concurrency bound — REQUIRED, >= 1 (INV-2; unbounded fanout is unrepresentable-invalid). */
   maxFanout: number;
+  /** Admission policy when registry length exceeds maxFanout. Absent means window: dispatch all,
+   * while maxFanout bounds only concurrent work. */
+  overflow?: 'window' | 'truncate';
+  /** Mandatory human-readable receipt when overflow:'truncate' deliberately drops work. */
+  truncateReason?: string;
   dedup?: boolean;
   reasonRequired?: boolean;
   /** Per-item step chain (pipeline shape) — stepIds run in sequence per member. */
@@ -371,6 +376,8 @@ export const FIELD_DOMAINS: Record<string, FieldDomain> = {
   'LoopFanout.stage': { t: 'string' },
   'LoopFanout.registry': { t: 'string[]' },
   'LoopFanout.maxFanout': { t: 'number' },
+  'LoopFanout.overflow': { t: 'enum', values: ['window', 'truncate'] },
+  'LoopFanout.truncateReason': { t: 'string' },
   'LoopFanout.dedup': { t: 'boolean' },
   'LoopFanout.reasonRequired': { t: 'boolean' },
   'LoopFanout.chain': { t: 'string[]' },
@@ -992,6 +999,11 @@ export function validatePlan(plan: LoopPlan): Diagnostic[] {
     if (!Array.isArray(f.registry) || f.registry.length === 0) {
       out.push({ invariant: 'INV-2', path: `$.fanouts[${f.stage}].registry`, message: 'a fanout requires a non-empty member registry' });
     }
+    if (f.overflow !== undefined && f.overflow !== 'window' && f.overflow !== 'truncate') {
+      out.push({ invariant: 'INV-2b', path: `$.fanouts[${f.stage}].overflow`, message: `overflow must be one of window|truncate (received ${JSON.stringify(f.overflow)})` });
+    } else if (f.overflow === 'truncate' && (typeof f.truncateReason !== 'string' || f.truncateReason.trim() === '')) {
+      out.push({ invariant: 'INV-2b', path: `$.fanouts[${f.stage}].overflow`, message: 'overflow:"truncate" requires a non-blank truncateReason — deliberate dropped work needs a receipt' });
+    }
   });
 
   // INV-3: every fanout (parallel region) names an explicit join with a closed-set joinPolicy.
@@ -1388,7 +1400,7 @@ export function toLintProjection(plan: LoopPlan): LintProjection {
 }
 
 export interface TraceProjection {
-  kind: 'trace-projection/1';
+  kind: 'trace-projection/2';
   /** Expected happens-before edges: every dispatch of `step` must come after the settle of each
    * dep. Only DISPATCHING step kinds (agent/gate) appear — fanout/join/pause are structural
    * pseudo-steps that emit no trace events of their own (their ordering lives in `regions`). */
@@ -1396,7 +1408,20 @@ export interface TraceProjection {
   /** Parallel regions with the runtime bound + concurrency shape the trace must exhibit.
    * `after` = the dispatching steps that depend on the region (fanout or join) — the trace-visible
    * witnesses of the barrier. */
-  regions: { fanout: string; join: string; joinPolicy: string; maxFanout: number; members: string[]; shape: ConcurrencyShape; after: string[] }[];
+  regions: {
+    fanout: string;
+    join: string;
+    joinPolicy: string;
+    maxFanout: number;
+    members: string[];
+    shape: ConcurrencyShape;
+    after: string[];
+    /** Projection/2 evidence used to prove positional dispatch coverage. */
+    registry: string[];
+    registrySize: number;
+    overflow: 'window' | 'truncate';
+    dedup: boolean;
+  }[];
   /** Steps expected to appear in the trace, keyed by stepId (iteration/attempt keys are runtime axes). */
   expectedSteps: string[];
 }
@@ -1432,10 +1457,14 @@ export function toTraceProjection(plan: LoopPlan): TraceProjection {
       members: [...(f.chain ?? [])],
       shape: shapes.get(f.stage) ?? 'barrier',
       after,
+      registry: [...f.registry],
+      registrySize: f.registry.length,
+      overflow: f.overflow ?? 'window',
+      dedup: f.dedup === true,
     };
   });
   return {
-    kind: 'trace-projection/1',
+    kind: 'trace-projection/2',
     happensBefore,
     regions,
     expectedSteps: norm.steps.filter((s) => s.kind === 'agent' || s.kind === 'gate').map((s) => s.stepId),
@@ -1501,6 +1530,8 @@ export interface RunBoundary {
     maxFanout: number;
     registry: string[];
     dedup: boolean;
+    overflow: 'window' | 'truncate';
+    truncateReason: string | null;
     shape: ConcurrencyShape;
     chain: RunStepSpec[];
   };
@@ -1586,6 +1617,8 @@ export function toRunProjection(plan: LoopPlan): RunProjection {
           maxFanout: typeof f?.maxFanout === 'number' ? f.maxFanout : 0,
           registry: [...(f?.registry ?? [])],
           dedup: f?.dedup === true,
+          overflow: f?.overflow ?? 'window',
+          truncateReason: typeof f?.truncateReason === 'string' ? f.truncateReason : null,
           shape: s.concurrency ?? 'barrier',
           chain: (f?.chain ?? []).map((c) => byId.get(c)).filter((c): c is LoopStep => c !== undefined).map(specOf),
         },

package/src/loop-render.ts

@@ -431,9 +431,18 @@ function renderFanout(plan: LoopPlan, fanoutStep: LoopStep): string {
   lines.push(G(`step:${id} kind=fanout shape=${shape} maxFanout=${f.maxFanout}`));
   for (const ms of members) lines.push(...stepPromptAssembly(ms, plan));
   lines.push(`const REGISTRY_${ident(id)} = ${JSON.stringify(f.registry)}`);
-  // dedup (enacted — QE round-3 B1): a declared dedup DEDUPLICATES the registry before the cap.
+  // dedup (enacted — QE round-3 B1): a declared dedup DEDUPLICATES the registry before admission.
   const registryExpr = f.dedup === true ? `REGISTRY_${ident(id)}.filter(function (x, i) { return REGISTRY_${ident(id)}.indexOf(x) === i })` : `REGISTRY_${ident(id)}`;
-  lines.push(`const MEMBERS_${ident(id)} = ${registryExpr}.slice(0, ${f.maxFanout}) // bounded fanout (INV-2): never args-derived, never uncapped`);
+  if (f.overflow === 'truncate') {
+    const reason = f.truncateReason ?? '';
+    const commentReason = reason.replace(/\r?\n/g, ' ').replace(/\*\//g, '* /');
+    lines.push(`// ==================== FANOUT TRUNCATION DECLARED: ${commentReason} ====================`);
+    lines.push(`const MEMBERS_${ident(id)} = ${registryExpr}.slice(0, ${f.maxFanout}) // declared truncation (INV-2b): intentionally drops registry positions beyond maxFanout`);
+    lines.push(`console.error('[fanout-truncated] ${id}: ' + MEMBERS_${ident(id)}.length + ' of ' + REGISTRY_${ident(id)}.length + ' items — ' + ${jsString(reason)})`);
+    lines.push(`if (__hooks.onFanoutTruncated) { __hooks.onFanoutTruncated({ stage: ${jsString(id)}, registrySize: REGISTRY_${ident(id)}.length, dispatched: MEMBERS_${ident(id)}.length, reason: ${jsString(reason)} }) }`);
+  } else {
+    lines.push(`const MEMBERS_${ident(id)} = ${registryExpr} // full registry (INV-2b): every item dispatched; maxFanout bounds CONCURRENCY, not work`);
+  }
   // ROUND-6 B3 SHAPE: the region's awaits (member dispatches via parallel + the join) ride ONE
   // settle-routed try, mirroring the per-step shape. Member runStep failures settle themselves
   // durably before rejecting; the outer catch is the structural belt for the region as a whole.
@@ -445,7 +454,7 @@ function renderFanout(plan: LoopPlan, fanoutStep: LoopStep): string {
     // dispatch(B:item1) is allocated a seq before settle(A:item3). Predecessor by POSITION (G15),
     // qualified by the branch OCCURRENCE (round 7 — duplicate registry values are distinct
     // branches, so a chain predecessor is looked up per occurrence, never per value).
-    lines.push(`  R_${ident(id)} = await __drainAll(MEMBERS_${ident(id)}.map((it, __ix) => async () => {`);
+    lines.push(`  R_${ident(id)} = await __drainAllWindowed(MEMBERS_${ident(id)}.map((it, __ix) => async () => {`);
     let prev: string | null = null;
     for (let ci = 0; ci < members.length; ci++) {
       const cs = members[ci] as LoopStep;
@@ -457,13 +466,13 @@ function renderFanout(plan: LoopPlan, fanoutStep: LoopStep): string {
       prev = `v_${ident(cs.stepId)}`;
     }
     lines.push(`    return ${prev ?? 'null'}`);
-    lines.push(`  }))`);
+    lines.push(`  }), ${f.maxFanout})`);
   } else {
     // BARRIER shape: all members dispatched, one join closes the region (exactly one member step —
     // MEMBER-2; extra barrier chain entries used to be silently never dispatched).
     const ms = members[0] as LoopStep;
     const call = stepCallExpr(ms, memberDeps(ms), { chainCausedBy: null, inputExpr: null });
-    lines.push(`  R_${ident(id)} = await __drainAll(MEMBERS_${ident(id)}.map((it, __ix) => () => ${call}))`);
+    lines.push(`  R_${ident(id)} = await __drainAllWindowed(MEMBERS_${ident(id)}.map((it, __ix) => () => ${call}), ${f.maxFanout})`);
   }
   lines.push(`  J_${ident(id)} = await __joinSettled(${jsString(j.stage)}, ${jsString(fanoutStep.phase)}, R_${ident(id)}, { policy: ${jsString(j.joinPolicy)}, onInvalid: ${jsString(j.onInvalid ?? 'named-failure')}, region: ${jsString(id)} })`);
   lines.push(`} catch (__stepErr) { await __settleStep({ stepId: ${jsString(id)}, phase: ${jsString(fanoutStep.phase)}, outcome: 'failed', error: __stepErr }) }`);
@@ -478,6 +487,7 @@ function renderFanout(plan: LoopPlan, fanoutStep: LoopStep): string {
  * attach hooks INSIDE it, and when opted out the hook sites are no-ops). */
 function renderRuntime(plan: LoopPlan, planDig: string, execFp: string, blobs: LoopBlob[]): string {
   const traceOn = plan.trace?.emit === true;
+  const hasDeclaredTruncation = (plan.fanouts ?? []).some((f) => f.overflow === 'truncate');
   const ckptOn = plan.checkpointing?.enabled === true || plan.subsystems?.checkpoints === true;
   // budget: declared per-step budgets PLUS the declared gate-redo allowance (QE round-3 B1 — a
   // plan-declared redo must be affordable; an undeclared one still hits the guard loudly). The
@@ -505,7 +515,7 @@ function renderRuntime(plan: LoopPlan, planDig: string, execFp: string, blobs: L
   lines.push(`let __ledgerDone = false`);
   if (traceOn) lines.push(`let __faLegWarned = false`);
   lines.push(`function __spendBudget(stepId) { if (__budget.left <= 0) { throw new Error('loop budget exhausted before ' + stepId) } __budget.left-- }`);
-  lines.push(`const __hooks = { onDispatch: null, onSettle: null }`);
+  lines.push(`const __hooks = { onDispatch: null, onSettle: null${hasDeclaredTruncation ? ', onFanoutTruncated: null' : ''} }`);
   lines.push(`const __settled = {}`);
   lines.push(`// settle identity is PER-OCCURRENCE (round-7; Codex round-6 R2: with dedup:false and a`);
   lines.push(`// duplicated registry value, two branches shared one (stepId,itemKey) slot — the second`);
@@ -650,12 +660,46 @@ function renderRuntime(plan: LoopPlan, planDig: string, execFp: string, blobs: L
     lines.push(`  if (__primary !== null) { throw __primary.error } // drained FIRST, then the primary failure propagates`);
     lines.push(`  return __results`);
     lines.push(`}`);
+    lines.push(`async function __drainAllWindowed(thunks, limit) {`);
+    lines.push(`  const __limit = Math.max(1, Math.floor(Number(limit) || 1))`);
+    lines.push(`  if (thunks.length <= __limit) { return __drainAll(thunks) }`);
+    lines.push(`  const __out = new Array(thunks.length)`);
+    lines.push(`  const __values = new Array(thunks.length)`);
+    lines.push(`  let __next = 0`);
+    lines.push(`  let __order = 0`);
+    lines.push(`  const __workers = []`);
+    lines.push(`  const __workerCount = Math.min(__limit, thunks.length)`);
+    lines.push(`  for (let w = 0; w < __workerCount; w++) {`);
+    lines.push(`    __workers.push(async function () {`);
+    lines.push(`      while (__next < thunks.length) {`);
+    lines.push(`        const i = __next++`);
+    lines.push(`        try { const v = await thunks[i](); __values[i] = v; __out[i] = { ok: true, value: v, at: __order++ } }`);
+    lines.push(`        catch (e) { __out[i] = { ok: false, error: e, at: __order++ } }`);
+    lines.push(`      }`);
+    lines.push(`    })`);
+    lines.push(`  }`);
+    lines.push(`  await parallel(__workers) // workers never reject ⇒ all registry positions drain to SETTLEMENT`);
+    lines.push(`  let __primary = null`);
+    lines.push(`  for (let i = 0; i < __out.length; i++) {`);
+    lines.push(`    const o = __out[i]`);
+    lines.push(`    if (o && o.ok !== true && (__primary === null || o.at < __primary.at)) { __primary = o }`);
+    lines.push(`  }`);
+    lines.push(`  if (__primary !== null) { throw __primary.error }`);
+    lines.push(`  return __values`);
+    lines.push(`}`);
   }
   if (traceOn) {
     lines.push(`// trace wiring (blob-provided emitter; hooks INSIDE runStep — ADR-003)`);
     lines.push(`const __traceState = traceInit(RUN_ID, PLAN_DIGEST, EXEC_FP, 'rendered-script')`);
     lines.push(`__hooks.onDispatch = function (e) { return traceOnDispatch(__traceState, e) }`);
     lines.push(`__hooks.onSettle = function (e) { return traceOnSettle(__traceState, e) }`);
+    if (hasDeclaredTruncation) {
+      lines.push(`__hooks.onFanoutTruncated = function (e) {`);
+      lines.push(`  const ev = { v: 1, runId: __traceState.runId, seq: ++__traceState.seq, event: 'fanout-truncated', stage: e.stage, registrySize: e.registrySize, dispatched: e.dispatched, reason: e.reason }`);
+      lines.push(`  __traceState.buffer.push(JSON.stringify(ev))`);
+      lines.push(`  return ev.seq`);
+      lines.push(`}`);
+    }
     lines.push(`async function __traceFlushNow(phaseName, stepLabel) {`);
     lines.push(`  if (TRACE_FILE === null) { return }`);
     lines.push(`  // cmd must be let: the trace payload stays LEFT and must never be replaced by the fa-record panel leg; both ride the SAME writer agent.`);

package/src/loop-trace.ts

@@ -89,7 +89,19 @@ export interface TraceRunClosed {
   counts: { dispatched: number; settled: number };
 }
 
-export type TraceEvent = TraceDispatchEvent | TraceSettleEvent | TraceRunOpened | TraceRunClosed;
+/** A deliberate work-dropping receipt. Its presence is required for overflow:'truncate' to grade. */
+export interface TraceFanoutTruncatedEvent {
+  v: 1;
+  runId: string;
+  seq: number;
+  event: 'fanout-truncated';
+  stage: string;
+  registrySize: number;
+  dispatched: number;
+  reason: string;
+}
+
+export type TraceEvent = TraceDispatchEvent | TraceSettleEvent | TraceRunOpened | TraceRunClosed | TraceFanoutTruncatedEvent;
 
 export interface TraceState {
   runId: string;
@@ -148,6 +160,20 @@ export function traceValidateEvent(e: unknown): string | null {
   return 'unknown event kind';
 }
 
+/** Reader extension kept outside the generated emitter slice: the two locked feature-adr workflow
+ * copies embed the v1 emitter byte-for-byte and cannot be rewritten during this parallel Step 7. */
+function traceValidateReaderEvent(e: unknown): string | null {
+  const base = traceValidateEvent(e);
+  if (base !== 'unknown event kind') return base;
+  const ev = e as Record<string, unknown>;
+  if (ev['event'] !== 'fanout-truncated') return base;
+  if (typeof ev['stage'] !== 'string' || !TRACE_KEY_RE.test(ev['stage'])) return 'fanout-truncated stage fails its VO regex';
+  if (typeof ev['registrySize'] !== 'number' || !Number.isInteger(ev['registrySize']) || ev['registrySize'] < 0) return 'fanout-truncated registrySize must be a non-negative integer';
+  if (typeof ev['dispatched'] !== 'number' || !Number.isInteger(ev['dispatched']) || ev['dispatched'] < 0 || ev['dispatched'] > ev['registrySize']) return 'fanout-truncated dispatched must be an integer within registrySize';
+  if (typeof ev['reason'] !== 'string' || ev['reason'].trim() === '') return 'fanout-truncated reason required';
+  return null;
+}
+
 /**
  * Open a trace state and buffer the run.opened frame. Throws on an invalid runId (fail-closed).
  *
@@ -204,6 +230,20 @@ export function traceOnSettle(state: TraceState, e: { invocationId: string; outc
   return seq;
 }
 
+/** Emit the trace half of the loud truncation receipt. This is not a dispatch and does not alter
+ * run.closed invocation counts. */
+export function traceOnFanoutTruncated(
+  state: TraceState,
+  e: { stage: string; registrySize: number; dispatched: number; reason: string },
+): number {
+  const seq = ++state.seq;
+  const event: TraceFanoutTruncatedEvent = { v: 1, runId: state.runId, seq, event: 'fanout-truncated', ...e };
+  const err = traceValidateReaderEvent(event);
+  if (err !== null) throw new Error('loop-trace: refusing non-conforming event (' + err + ') — the authoritative ordering source is never repaired later');
+  state.buffer.push(JSON.stringify(event));
+  return seq;
+}
+
 /** Buffer the run.closed frame (a trace without it parses as incomplete). */
 export function traceClose(state: TraceState): void {
   const closed: TraceRunClosed = {
@@ -378,7 +418,7 @@ export function parseTrace(text: string): TraceRun {
       run.parseErrors.push('unparseable line: ' + t.slice(0, 120));
       continue;
     }
-    const err = traceValidateEvent(e);
+    const err = traceValidateReaderEvent(e);
     if (err !== null) {
       run.parseErrors.push('invalid event (' + err + '): ' + t.slice(0, 120));
       continue;
@@ -646,6 +686,53 @@ export function runInvariants(projection: TraceProjection, run: TraceRun): Invar
       if (peak > bound) out.push({ id: idC, status: 'fail', message: `observed scheduling concurrency ${peak} exceeds maxFanout ${bound}` });
       else out.push({ id: idC, status: 'pass', message: `peak scheduled concurrency ${peak} <= maxFanout ${bound}` });
     }
+
+    // ADR-001: coverage is matched to registry POSITIONS, never inferred from equal totals. A
+    // duplicate-valued registry therefore owns two independent expected slots. Retries do not
+    // manufacture coverage: only attempt 1 of the first member stage witnesses branch admission.
+    const idD = 'region-dispatch-completeness:' + region.fanout;
+    if ((projection as { kind: string }).kind === 'trace-projection/1' || !Array.isArray(region.registry) || typeof region.registrySize !== 'number' || region.overflow === undefined) {
+      out.push({ id: idD, status: 'inconclusive', message: 'trace-projection/1 region has no positional registry evidence — dispatch completeness cannot be proved' });
+    } else {
+      const registry = region.dedup === true
+        ? region.registry.filter((key, index, all) => all.indexOf(key) === index)
+        : region.registry;
+      const expected = region.overflow === 'truncate' ? registry.slice(0, Math.max(0, region.maxFanout)) : registry;
+      const witness = region.members[0];
+      const observed = witness === undefined
+        ? []
+        : run.events.filter((e): e is TraceDispatchEvent => e.event === 'dispatched' && e.stepId === witness && e.attempt === 1).map((e) => e.itemKey);
+      const unmatched = new Set(expected.map((_key, index) => index));
+      const extras: (string | null)[] = [];
+      for (const key of observed) {
+        const position = [...unmatched].find((index) => expected[index] === key);
+        if (position === undefined) extras.push(key);
+        else unmatched.delete(position);
+      }
+      const missing = [...unmatched].map((index) => `#${index + 1}:${expected[index]}`);
+      const receipt = run.events.find((e): e is TraceFanoutTruncatedEvent =>
+        e.event === 'fanout-truncated' && e.stage === region.fanout,
+      );
+      const badReceipt = region.overflow === 'truncate' && (
+        receipt === undefined ||
+        receipt.registrySize !== region.registrySize ||
+        receipt.dispatched !== expected.length ||
+        receipt.reason.trim() === ''
+      );
+      if (missing.length > 0 || extras.length > 0 || badReceipt) {
+        const parts: string[] = [];
+        if (missing.length > 0) parts.push('missing registry position(s) ' + missing.join(', '));
+        if (extras.length > 0) parts.push('unexpected dispatch key(s) ' + extras.map((x) => String(x)).join(', '));
+        if (badReceipt) parts.push('missing or mismatched fanout-truncated trace receipt');
+        out.push({
+          id: idD,
+          status: run.incomplete && region.overflow === 'window' && missing.length > 0 && extras.length === 0 ? 'inconclusive' : 'fail',
+          message: parts.join('; ') + (run.incomplete ? ' (trace incomplete)' : ''),
+        });
+      } else {
+        out.push({ id: idD, status: 'pass', message: `every one of ${expected.length} expected registry position(s) has exactly one first-attempt dispatch${region.overflow === 'truncate' ? ' and a matching truncation receipt' : ''}` });
+      }
+    }
     // Join coverage: the join itself is a structural pseudo-step (no trace event of its own), so
     // its trace-visible witnesses are (a) every dispatched member settles (a dispatched branch is
     // never skippable) and (b) every post-region dispatching step (`after`) dispatches AFTER every
@@ -833,6 +920,8 @@ export function assembleTimeline(input: {
       rows.push({ seq: e.seq, kind: 'trace', label: `settle ${e.invocationId}`, detail: `outcome=${e.outcome}`, wallTime: e.wallTime ?? null });
     } else if (e.event === 'run.opened') {
       rows.push({ seq: e.seq, kind: 'trace', label: 'run.opened', detail: `plan=${e.planDigest.slice(0, 12)} exec-fp=${e.execFp.slice(0, 12)}`, wallTime: null });
+    } else if (e.event === 'fanout-truncated') {
+      rows.push({ seq: e.seq, kind: 'trace', label: `fanout-truncated ${e.stage}`, detail: `${e.dispatched} of ${e.registrySize} — ${e.reason}`, wallTime: null });
     } else {
       rows.push({ seq: e.seq, kind: 'trace', label: 'run.closed', detail: JSON.stringify(e.counts), wallTime: null });
     }

package/src/model-recommender.ts

@@ -92,7 +92,9 @@ export function harvestStageOutcomes(records: readonly unknown[]): Harvest {
     if (!isRecord(modelsUsed)) { skipped.noModels += 1; continue; }
     const grade = extractGrade(result);
     if (grade === null) { skipped.noGrade += 1; continue; }
-    const runId = typeof source['runId'] === 'string' ? source['runId'] : JSON.stringify(modelsUsed).slice(0, 40);
+    // Full canonical JSON is intentional: the former 40-character prefix merged distinct records
+    // whose stage names shared a long prefix, manufacturing idempotency across different runs.
+    const runId = typeof source['runId'] === 'string' ? source['runId'] : `models:${JSON.stringify(modelsUsed)}`;
     const ts = typeof source['timestamp'] === 'string' ? source['timestamp'] : null;
     const tier = typeof result['tier'] === 'string' && result['tier'] !== '' ? result['tier'] : 'unknown';
     let contributed = false;
@@ -138,6 +140,8 @@ export interface Recommendation {
     readonly rule: string;
     readonly skipped: Harvest['skipped'];
     readonly crossFamilyNote: string;
+    readonly unfed: { readonly count: number; readonly runIds: string[] };
+    readonly freshness: 'current' | 'stale' | 'unfed';
   };
 }
 
@@ -154,7 +158,7 @@ const CROSS_NOTE =
   'the qe pick is computed with the family FORCED to the cross of the code pick — a same-family qe recommendation is unrepresentable (ADR-001 D3)';
 
 /** Recommend per stage over the harvested samples (optionally one tier's slice). */
-export function recommendModels(harvest: Harvest, opts: { tier?: string; qualityBar?: number; minSamples?: number } = {}): Recommendation {
+export function recommendModels(harvest: Harvest, opts: { tier?: string; qualityBar?: number; minSamples?: number; alreadyFed?: readonly string[] } = {}): Recommendation {
   const slice = opts.tier === undefined ? harvest.samples : harvest.samples.filter((s) => s.tier === opts.tier);
   const tierLabel = opts.tier ?? 'all';
   const byStage = new Map<string, HarvestSample[]>();
@@ -197,9 +201,21 @@ export function recommendModels(harvest: Harvest, opts: { tier?: string; quality
     }
   }
   if (!stages.includes('code')) perStage.unshift(code);
+  const pending = unfedRuns(harvest.samples, opts.alreadyFed ?? []);
+  const harvestRunIds = [...new Set(harvest.samples.map((s) => s.runId))];
+  const fed = new Set(opts.alreadyFed ?? []);
+  const fedInHarvest = harvestRunIds.filter((runId) => fed.has(runId)).length;
   return {
     perStage,
-    basis: { runsUsed: harvest.runsUsed, window: harvest.window, rule: harvest.rule, skipped: harvest.skipped, crossFamilyNote: CROSS_NOTE },
+    basis: {
+      runsUsed: harvest.runsUsed,
+      window: harvest.window,
+      rule: harvest.rule,
+      skipped: harvest.skipped,
+      crossFamilyNote: CROSS_NOTE,
+      unfed: { count: pending.length, runIds: pending },
+      freshness: pending.length === 0 ? 'current' : fedInHarvest === 0 ? 'unfed' : 'stale',
+    },
   };
 }
 
@@ -213,15 +229,30 @@ export interface FeedPlan {
   readonly fedAfter: string[];
 }
 
+/** One shared definition of the telemetry/store gap, used by recommendation, apply and guard. */
+export function unfedRuns(samples: readonly HarvestSample[], alreadyFed: readonly string[]): string[] {
+  const fed = new Set(alreadyFed);
+  return [...new Set(samples.map((s) => s.runId))].filter((runId) => !fed.has(runId)).sort();
+}
+
 /** A run feeds ONCE. Double-feeding the same telemetry manufactures confidence the data does not
  * contain — the second `--apply` must feed 0 and say which runs it skipped. */
 export function planFeed(samples: readonly HarvestSample[], alreadyFed: readonly string[]): FeedPlan {
   const fed = new Set(alreadyFed);
   const toFeed: HarvestSample[] = [];
   const skippedRuns = new Set<string>();
+  const seenSamples = new Set<string>();
   for (const s of samples) {
     if (fed.has(s.runId)) skippedRuns.add(s.runId);
-    else toFeed.push(s);
+    else {
+      // A multi-stage run legitimately feeds one sample per stage. Only a repeated sample from a
+      // duplicated record is suppressed within this harvest.
+      const sampleKey = JSON.stringify([s.runId, s.stage]);
+      if (!seenSamples.has(sampleKey)) {
+        seenSamples.add(sampleKey);
+        toFeed.push(s);
+      }
+    }
   }
   const fedAfter = [...new Set([...alreadyFed, ...toFeed.map((s) => s.runId)])].sort();
   return { toFeed, skippedRuns: [...skippedRuns].sort(), fedAfter };

package/src/workflow-run.ts

@@ -33,6 +33,7 @@ import {
   traceInit,
   traceLedgerLine,
   traceOnDispatch,
+  traceOnFanoutTruncated,
   traceOnSettle,
   traceShellQuote,
   TRACE_KEY_RE,
@@ -336,7 +337,7 @@ export function computeBoundaryReservations(
     if (b.kind === 'region') {
       const r = b.region;
       if (r === undefined) continue;
-      const members = activatedMembers(r.registry, r.dedup, r.maxFanout).length;
+      const members = activatedMembers(r.registry, r.dedup, r.maxFanout, r.overflow).length;
       const perItem = r.chain.reduce((n, s) => n + worstCaseInvocations(s), 0);
       const perItemWall = r.chain.reduce((n, s) => n + worstCaseInvocations(s) * timeoutMsFor(s), 0);
       out.push({
@@ -366,17 +367,14 @@ export function computeBoundaryReservations(
 /**
  * The members a fanout actually ACTIVATES.
  *
- * `maxFanout` caps ACTIVATION, not merely concurrency — the rendered script emits
- * `registry.slice(0, maxFanout)` ("bounded fanout (INV-2): never args-derived, never uncapped").
- * Getting this wrong is a STRUCTURAL-EQUIVALENCE break, not a performance detail: a runner that
- * treated the bound as a concurrency limit would dispatch all six entries of a six-item registry
- * where the Claude host dispatched three, and the two hosts' traces would disagree on dispatch
- * multiplicity for the same plan. (MEASURED: that is exactly what the F5 equivalence leg caught
- * against the committed `pkg-audit-1` run — 6 lanes here, 3 there.)
+ * `maxFanout` caps CONCURRENCY under the default/window policy. Only the explicitly declared
+ * `overflow:'truncate'` escape hatch caps activation, and that path owes stderr + trace receipts.
+ * This function is shared by reservation arithmetic and enactment so neither can silently retain
+ * the old prefix-only interpretation.
  */
-function activatedMembers(registry: string[], dedup: boolean, maxFanout: number): string[] {
+function activatedMembers(registry: string[], dedup: boolean, maxFanout: number, overflow: 'window' | 'truncate'): string[] {
   const base = dedup ? [...new Set(registry)] : [...registry];
-  return maxFanout > 0 ? base.slice(0, maxFanout) : base;
+  return overflow === 'truncate' && maxFanout > 0 ? base.slice(0, maxFanout) : base;
 }
 
 /**
@@ -1605,7 +1603,16 @@ async function runStage(ctx: RunCtx, b: RunBoundary): Promise<string | null> {
 async function runRegion(ctx: RunCtx, b: RunBoundary): Promise<void> {
   const r = b.region;
   if (r === undefined) return;
-  const members = activatedMembers(r.registry, r.dedup, r.maxFanout);
+  const members = activatedMembers(r.registry, r.dedup, r.maxFanout, r.overflow);
+  if (r.overflow === 'truncate') {
+    traceOnFanoutTruncated(ctx.trace, {
+      stage: r.fanout,
+      registrySize: r.registry.length,
+      dispatched: members.length,
+      reason: r.truncateReason ?? '',
+    });
+    flush(ctx);
+  }
   for (const k of members) {
     if (!safeItemKey(k)) {
       throw new RunFailure(