@dzhechkov/keysarium 1.7.10 → 1.7.12

package/.dz-manifest.json

@@ -9,7 +9,7 @@
       },
       {
         "path": "README.md",
-        "sha256": "10e8e4f470823f26d20a8cb4b5680dde97fd9654f9545b81de099405bd2dba32"
+        "sha256": "0da5eb80b9be5aaadbc333ac83ba3aa9bd466cf548e52ae377576e17315a391c"
       },
       {
         "path": "README.ru.md",
@@ -21,7 +21,7 @@
       },
       {
         "path": "package.json",
-        "sha256": "fec2ebcb8a572ee95f1ac5b41264933d853a01d96b85a826e208a7bf4b49da1b"
+        "sha256": "5e602e8a73b42ba0fc9b449958e25a4f6730b3ec03cb301de4797b394a0eb9ab"
       },
       {
         "path": "src/cli.js",
@@ -373,7 +373,7 @@
       },
       {
         "path": "templates/.claude/skills/feature-adr/modules/03.5-ideation-swarm.md",
-        "sha256": "b6e505083c1b8bc92243379b72ff4667b5b91ef65fd9c2ef7407129018b3e56b"
+        "sha256": "798c04595c5b0f8c5688334413c744b6d1dda6f9ad9d4fab263c96dcc2c4187e"
       },
       {
         "path": "templates/.claude/skills/feature-adr/modules/04-ddd.md",
@@ -389,11 +389,11 @@
       },
       {
         "path": "templates/.claude/skills/feature-adr/modules/07-code.md",
-        "sha256": "db79f8d026cc47edd1e5d2f30d0e1455c55c570dd022d549d440985a3e5940a5"
+        "sha256": "d5c03890b2b3a34277c73a14d3d7c97741dec1d6c382e87ee4cc6a5a52d938d7"
       },
       {
         "path": "templates/.claude/skills/feature-adr/modules/08-qe.md",
-        "sha256": "4aa7ef1dea08b8d1995d968a317da5d36a4859ec299637bdc60170cf577c87af"
+        "sha256": "759e67695b5761ff5a80e0aa89dccf18d38807063c7d911f3a80fe03bd56b82a"
       },
       {
         "path": "templates/.claude/skills/feature-adr/modules/09-fleet-qe.md",
@@ -487,13 +487,17 @@
         "path": "templates/.claude/skills/feature-adr/scripts/build-coder-context.mjs",
         "sha256": "19c3991bfb5e88205c9ff6d4d44037c136a190581bab199d3928196e4616fe15"
       },
+      {
+        "path": "templates/.claude/skills/feature-adr/scripts/check-code-targets.mjs",
+        "sha256": "bfbad12b54508d5d4c71de640c5e19b3d19317f660e2986d02338ef502f8007e"
+      },
       {
         "path": "templates/.claude/skills/feature-adr/scripts/check-plan-completeness.mjs",
         "sha256": "8b93949ce4f671d932c5389050db3a3e2750efcbed69681d69f392ccf4d2a168"
       },
       {
         "path": "templates/.claude/skills/feature-adr/scripts/check-review-convergence.mjs",
-        "sha256": "09c74f1441d9c42603fbb84402e6826cf96535d209be9802e0e4b2fea01dac7d"
+        "sha256": "e903d0eb52a126db98a70d3851d3ed630598d10e843164683d6e48b29c93ff64"
       },
       {
         "path": "templates/.claude/skills/feature-adr/scripts/markdown-masker.mjs",
@@ -1001,5 +1005,5 @@
       }
     ]
   },
-  "signature": "wfYnIS4MAw7T3m282RmpXCeIUVVAi+TDfNI4DmRaHJEy3h/gpJdtlv1TMTRz6dVfMA0fOcxZrJKWBXO+JFEcCg=="
+  "signature": "e6DEbQ+EkBR8BvLrXC2dvo75iRBq/pS+F8XlSC6fmgKU3X7zs39Kdtr51+H8edGEeI/eAF6Um0MZvdTiotM9AQ=="
 }

package/README.md

@@ -1,6 +1,9 @@
 # @dzhechkov/keysarium
 
-Current package version: `1.7.10`. <!-- dz:version -->
+The bundled Feature ADR projection supports installed-CLI native QE history opt-in with a fixed three-cycle ceiling and explicit repair. Its canonical helper/guidance remain synchronized; compatible core/CLI capabilities are required, and historical bridge behavior remains available.
+
+
+Current package version: `1.7.12`. <!-- dz:version -->
 
 Site: https://aicoding.space · Source: https://github.com/djd1m/dz-harness/tree/main/packages/@dzhechkov/keysarium
 
@@ -34,6 +37,13 @@ Required missing or incomplete context refuses coding. This helper is separate f
 > whether a lesson describes a method or a person, and says so: that judgement is the agent's, per
 > the teach protocol. See `skills/goap-research-ed25519/SKILL.md`.
 
+Feature-adr structural `implementationVerified:true` has phase-specific meaning: ideation verifies
+corrected ADR, architecture and phase artifacts at the current revision/nonce, without claiming
+production code or implementation tests exist; QE requires actual implementation and relevant tests.
+False or missing structural verification still blocks. Receipt fields, boolean strength, originating
+reviewer ownership, phase/nonce/manifest binding and legacy receipt compatibility remain unchanged.
+The gate checks receipt consistency and freshness; independent reviewers judge the evidence.
+
 ## Growth engine (reverse-engineering-unicorn M5)
 ### What M5 produces, since 0.2.0 / 1.7.5 / 1.6.0
 
@@ -70,6 +80,11 @@ After installation, open Claude Code in your project directory and start using s
 
 ## What You Get
 
+MEASURED package inventory from `npm pack --dry-run --json` in this package directory.
+Skills are `templates/.claude/skills/*/SKILL.md`; commands are Markdown files in
+`templates/.claude/commands/`. Rules, shards and agent templates are beneath `templates/.claude/`; the library is
+`templates/lib/` and optional documentation is `templates/docs/`. Counts describe bundled files,
+not execution results.
 | Component | Count | Description |
 |-----------|-------|-------------|
 | **Skills** | 12 | `explore`, `frontend-design`, `goap-research-ed25519`, `presentation-storyteller`, `problem-solver-enhanced`, `reverse-engineering-unicorn`, `knowledge-extractor`, `ai-factory-mapper`, `analyst-manual-full`, `edu-site-generator`, `transcript-site-generator`, `feature-adr` |
@@ -84,9 +99,10 @@ After installation, open Claude Code in your project directory and start using s
 Everything is installed into your project's `.claude/` directory and works natively with Claude Code.
 
 > Counts above are MEASURED from the shipped `templates/` tree — reproducer:
-> `npx @dzhechkov/keysarium init --dry-run` (the install plan prints the same numbers, computed at
-> runtime) or, on a real install, `npx @dzhechkov/keysarium list`. If a count here disagrees with the
-> CLI, trust the CLI — it counts files, this table is hand-written.
+> `npx @dzhechkov/keysarium init --dry-run --with-docs` prints these component counts, including
+> optional documentation. On an installed project, `npx @dzhechkov/keysarium list` reports recursive
+> file totals; its skills row counts skill assets, not skill directories, so its units differ from
+> this table. Compare matching units when checking an installed project.
 
 ---
 
@@ -245,7 +261,9 @@ The toolkit automatically detects the domain from the case description and appli
 - Visual palette: Blue / Navy / Silver
 
 ### Retail / E-commerce
-- Latency budget: < 200ms for real-time recommendations
+- ESTIMATED example design target: response latency below 200 ms for real-time recommendations.
+  This is a planning constraint for a retail case, not measured Keysarium performance; validate it
+  against the proposed system and its workload.
 - A/B testing as primary validation method
 - Personalization vs. privacy balance (GDPR / FZ-152)
 - Seasonality and cold-start handling
@@ -530,3 +548,15 @@ Before fallback, host prepare retains independently written pending receipt find
 After a reviewed artifact is renamed or removed, convergence keeps its previously host-bound condition scope in the measured manifest; an absent old path has a null digest. Current discovered paths remain measured. Both prepare and evaluate validate the retained snapshot and reject unbound or unsafe scope paths. The original condition and originating reviewer verification remain required; a rename alone does not close a finding.
 
 QE also measures the exact `.dz/guard.json` policy configuration when it is in the current Git index or selected review base. This includes newly staged and intent-to-add files; base-tracked deletions retain a null digest. Both declared targets and discovered changes use this rule. Untracked files absent from that base do not qualify through older history. Other `.dz/` runtime files remain excluded, and existing path, symlink, freshness and reviewer-ownership checks still apply.
+
+### Pre-code target admission
+
+Step 7 now runs the installed read-only `scripts/check-code-targets.mjs` before literal context,
+code-cache lookup or any coder route, on every entry including auto/force resume. It reuses the
+colocated review manifest authority: strict targets, circular exclusions, discovered source changes,
+path/Git safety and the exact `.dz/guard.json` index-or-selected-base exception are unchanged.
+Missing planned files remain admissible. Workflow requires admitted JSON plus the actual producer's
+terminal `RC_EXIT:0` witness; failure refuses coding/cache access. Admission preserves review state
+and existing `.fa-state/base-ref` (HEAD only when absent); actual coder initialization never resets
+an existing base. Plain uses the same executable helper and mandatory instructions, without an
+automatic dispatcher. Admission observes current bytes; final QE remains the freshness check.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dzhechkov/keysarium",
-  "version": "1.7.10",
+  "version": "1.7.12",
   "scripts": {},
   "description": "AI Case Research Toolkit for Claude Code — full 7-phase pipeline with feature-adr, dream cycles, background workers, multi-platform support, reward learning, and Cloud.ru AI Factory mapping (--ai-factory flag)",
   "main": "src/cli.js",

package/sbom.json

@@ -25,7 +25,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "10e8e4f470823f26d20a8cb4b5680dde97fd9654f9545b81de099405bd2dba32"
+          "content": "0da5eb80b9be5aaadbc333ac83ba3aa9bd466cf548e52ae377576e17315a391c"
         }
       ]
     },
@@ -59,7 +59,7 @@
         },
         {
           "name": "dz:canonical-json-sha256-v2",
-          "value": "fec2ebcb8a572ee95f1ac5b41264933d853a01d96b85a826e208a7bf4b49da1b"
+          "value": "5e602e8a73b42ba0fc9b449958e25a4f6730b3ec03cb301de4797b394a0eb9ab"
         }
       ]
     },
@@ -939,7 +939,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "b6e505083c1b8bc92243379b72ff4667b5b91ef65fd9c2ef7407129018b3e56b"
+          "content": "798c04595c5b0f8c5688334413c744b6d1dda6f9ad9d4fab263c96dcc2c4187e"
         }
       ]
     },
@@ -979,7 +979,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "db79f8d026cc47edd1e5d2f30d0e1455c55c570dd022d549d440985a3e5940a5"
+          "content": "d5c03890b2b3a34277c73a14d3d7c97741dec1d6c382e87ee4cc6a5a52d938d7"
         }
       ]
     },
@@ -989,7 +989,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "4aa7ef1dea08b8d1995d968a317da5d36a4859ec299637bdc60170cf577c87af"
+          "content": "759e67695b5761ff5a80e0aa89dccf18d38807063c7d911f3a80fe03bd56b82a"
         }
       ]
     },
@@ -1223,6 +1223,16 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "templates/.claude/skills/feature-adr/scripts/check-code-targets.mjs",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "bfbad12b54508d5d4c71de640c5e19b3d19317f660e2986d02338ef502f8007e"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "templates/.claude/skills/feature-adr/scripts/check-plan-completeness.mjs",
@@ -1239,7 +1249,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "09c74f1441d9c42603fbb84402e6826cf96535d209be9802e0e4b2fea01dac7d"
+          "content": "e903d0eb52a126db98a70d3851d3ed630598d10e843164683d6e48b29c93ff64"
         }
       ]
     },

package/templates/.claude/skills/feature-adr/modules/03.5-ideation-swarm.md

@@ -91,6 +91,15 @@ on every pass. Reviewer verifications have closed fields
 `{id, revision, classification, evidence, implementationVerified}`. Only the originating independent
 role can verify its own condition at the current revision; author/lead/scribe assertions cannot.
 
+`implementationVerified` is phase-specific for both condition verifications and
+`deltaVerification`. In phase `ideation`, structural `implementationVerified:true` means the
+originating independent reviewer verified the corrected ADR, architecture and phase artifacts at
+the current revision/nonce; it does not claim production code or implementation tests exist. In
+phase `qe`, structural `implementationVerified:true` requires independent verification of the
+actual implementation and relevant tests at the current revision/nonce. False or missing structural
+verification remains blocking in both phases. Field names, boolean strength, originating ownership,
+phase/nonce/manifest binding and legacy receipt compatibility are unchanged.
+
 Rework requires the actual author object
 `{addressed, changedScope, classification, delta, evidence, newRisks}`. Addressed IDs name prior
 conditions; changedScope includes ALL host-measured changes and affected dependencies. Delta/evidence
@@ -98,9 +107,9 @@ explain the actual fix. Both author and reviewer `newRisks` require explicit ass
 conditions array, including an explicit none-identified assessment when empty. The reviewer must set
 `authorAssessmentChecked:true` and supply independent
 `deltaVerification:{classification,evidence,implementationVerified}`. Structural changes affect
-behavior, contracts, safeguards, architecture or acceptance meaning and require affected implementation
-and test verification. Wording changes affect expression only; the independent reviewer checks that
-classification, so an author's wording label cannot weaken structural verification.
+behavior, contracts, safeguards, architecture or acceptance meaning and require phase-specific
+structural verification as defined above. Wording changes affect expression only; the independent
+reviewer checks that classification, so an author's wording label cannot weaken structural verification.
 
 Focused scope is outstanding conditions plus actual changes and affected dependencies. New serious
 risks always expand that scope. Retain ALL conditions and serious primary/precision findings until

package/templates/.claude/skills/feature-adr/modules/07-code.md

@@ -26,6 +26,40 @@ opus (complex code generation)
 
 ### 1. Pre-Implementation Checklist
 
+### Current target admission (before any coding)
+
+After prerequisite gates complete, and on **every** Step-7 entry (including auto/force resume),
+run the installed `scripts/check-code-targets.mjs` beside this module **before** context assembly,
+code-cache lookup, delegation or in-session edits. Set `TARGET_HELPER` to that installation's
+absolute helper path, `EXECUTION_PROJECT` to the absolute execution repository root, and
+`FEATURE_DIR` to its absolute `features/<slug>` directory:
+
+```bash
+node "$TARGET_HELPER" --repo "$EXECUTION_PROJECT" --feature "$FEATURE_DIR"
+```
+
+Require the actual command exit 0 and exactly one `fa-code-targets-1` JSON document with
+`status: "admitted"`, a SHA-256 `manifestDigest` and empty `reasons`. Any missing/broken helper,
+command failure, refused/unavailable status or malformed/contradictory output stops coding and
+cache access; repair the named cause first. Do not substitute a narrated success or saved admission.
+For a host relay, the shell must capture the producer's exit immediately and append one terminal
+`RC_EXIT:<integer>` line; Workflow requires both admitted JSON and observed `RC_EXIT:0` and refuses
+missing/duplicate/conflicting witnesses. Keep stderr separate from the bounded relay.
+
+The helper only calls the colocated review checker's `measureManifest(repo, feature, 'qe')`.
+Its strict `- ` target grammar, circular-root exclusions, discovered changed/untracked paths,
+filesystem/Git safety and exact `.dz/guard.json` index-or-selected-base authority remain unchanged.
+K2 remains an additional legacy Markdown-friendly check; admission does not normalize its bullets
+or backticks. Planned missing files/deletions can have null digests. The admission digest records
+this observation, not QE approval or a replacement cache key. Admission never prepares/evaluates
+review lineage or writes source, receipts or `.fa-state`.
+
+The selected baseline is existing `.fa-state/base-ref`, otherwise HEAD. Before actual coding,
+initialize HEAD only if that base file is absent; preserve an existing original selection through
+retries/re-entry. Refuse a failed initialization before edits. Admission does not initialize it.
+This is executable Plain guidance with mandatory orchestration, not an automatic Plain dispatcher.
+An unrelated process can change source after admission; ordinary final QE still checks freshness.
+
 ### Current literal context (plain and delegated coding)
 
 Before coding or delegating, run the installed helper beside this module. Set `CONTEXT_HELPER` to

package/templates/.claude/skills/feature-adr/modules/08-qe.md

@@ -1,5 +1,22 @@
 # Step 8: Quality Engineering
 
+### Native history through the installed CLI
+
+For an explicitly native review, use the actual installed producer before dispatching any formal QE role:
+
+```bash
+dz qe-rounds --source native --action prepare --project "$REPO" --feature-dir "$FEATURE" --reviewers '[{"id":"qe-primary","family":"codex"}]' --json
+```
+
+Bind the actual selected families and use the returned full roster, nonce and revision in the existing QE receipt at `feature/.fa-state/review-convergence-qe-review.json`. An owner-approved family exception must use `owner-exception` and preserve its explicit approval. Call `dz qe-rounds --source native --action evaluate --project "$REPO" --feature-dir "$FEATURE" --json` after actual independent review; missing or incompatible installed core/helper capabilities are NOT ESTABLISHED. No project-local module search, helper override, automatic installation or fake bridge evidence is allowed.
+
+Native history fixes the ceiling at three witnessed cycles, including partial and unresolved originating reviews. Multiple roles, fallback, repeated prepare/evaluate and restart share one cycle. Prepare may refresh artifacts before a review originates. After witnessing, a measured code/design change requires explicit `--action begin-repair` with the actual roster before another review; unchanged third-cycle completion may finish, while a fourth opening is refused. The ceiling applies to formal feature review as well as focused roles. Do not evade it by changing family, host, source or nonce. No-verdict attempts are reported separately. Native `--ceiling` is refused.
+
+Omit `--action` for read-only native reporting; omitted `--source` retains the historical bridge reader. Locally bound native/bridge collisions refuse either selection with both locations rather than unioning or resetting. A reviewed legacy QE host cannot retrospectively initialize a zero history. Initial admission allows only the documented surviving-evidence matrix; parseable ideation state alone is permitted.
+
+The helper runs at most four Git calls before locking (2s and 4 MiB per call), then rechecks bounded authoritative bytes, index, directory candidates and known artifacts in one short directory-lock transaction. Limits are 256 artifact paths, 2 MiB per artifact, 16 MiB aggregate artifacts, 256 KiB host/receipt/head, 2 MiB checkpoints, a separate 4 MiB index metadata fence, 8 MiB journal, 1024 events and 256 directory candidates. The 2s monotonic budget is checked before authoritative writes; lock stale/timeout are explicitly 30s/5s. Returned late I/O refuses, but synchronous I/O cannot be interrupted. This fenced observation does not serialize arbitrary external editors or prove reviewer authenticity or deletion of all writable evidence. Commit failures preserve paths and report possible partial writes; never delete authority or reconstruct zero to resume.
+
+
 > Verify the implementation through testing, review, and validation.
 
 ## When
@@ -84,6 +101,15 @@ on every pass. Reviewer verifications have closed fields
 `{id, revision, classification, evidence, implementationVerified}`. Only the originating independent
 role can verify its own condition at the current revision; author/lead/scribe assertions cannot.
 
+`implementationVerified` is phase-specific for both condition verifications and
+`deltaVerification`. In phase `ideation`, structural `implementationVerified:true` means the
+originating independent reviewer verified the corrected ADR, architecture and phase artifacts at
+the current revision/nonce; it does not claim production code or implementation tests exist. In
+phase `qe`, structural `implementationVerified:true` requires independent verification of the
+actual implementation and relevant tests at the current revision/nonce. False or missing structural
+verification remains blocking in both phases. Field names, boolean strength, originating ownership,
+phase/nonce/manifest binding and legacy receipt compatibility are unchanged.
+
 Rework requires the actual author object
 `{addressed, changedScope, classification, delta, evidence, newRisks}`. Addressed IDs name prior
 conditions; changedScope includes ALL host-measured changes and affected dependencies. Delta/evidence
@@ -91,9 +117,9 @@ explain the actual fix. Both author and reviewer `newRisks` require explicit ass
 conditions array, including an explicit none-identified assessment when empty. The reviewer must set
 `authorAssessmentChecked:true` and supply independent
 `deltaVerification:{classification,evidence,implementationVerified}`. Structural changes affect
-behavior, contracts, safeguards, architecture or acceptance meaning and require affected implementation
-and test verification. Wording changes affect expression only; the independent reviewer checks that
-classification, so an author's wording label cannot weaken structural verification.
+behavior, contracts, safeguards, architecture or acceptance meaning and require phase-specific
+structural verification as defined above. Wording changes affect expression only; the independent
+reviewer checks that classification, so an author's wording label cannot weaken structural verification.
 
 Focused scope is outstanding conditions plus actual changes and affected dependencies. New serious
 risks always expand that scope. Retain ALL conditions and serious primary/precision findings until

package/templates/.claude/skills/feature-adr/scripts/check-code-targets.mjs

@@ -0,0 +1,28 @@
+#!/usr/bin/env node
+// Read-only current source admission. This is neither a QE receipt nor a cache key.
+import { createHash } from 'node:crypto'
+import { realpathSync } from 'node:fs'
+import { resolve } from 'node:path'
+import { measureManifest } from './check-review-convergence.mjs'
+
+const schema = 'fa-code-targets-1'
+let result
+try {
+  const args = process.argv.slice(2)
+  if (args.length !== 4 || args[0] !== '--repo' || !args[1] || args[2] !== '--feature' || !args[3]) throw Error('invalid-arguments: expected --repo <project> --feature <feature>')
+  // Match the checker: real execution root, feature resolved from that root, then
+  // its own inside-repo/path/Git checks. Do not reinterpret feature from cwd.
+  const repo = realpathSync(args[1])
+  const feature = resolve(repo, args[3])
+  const manifest = measureManifest(repo, feature, 'qe')
+  result = { schema, status: 'admitted', manifestDigest: createHash('sha256').update(JSON.stringify(manifest)).digest('hex'), reasons: [] }
+} catch (error) {
+  // execFileSync errors include raw subprocess output in message. Keep that out
+  // of the wire; ordinary checker diagnostics are bounded and carry no contents.
+  const reason = error && (error.stdout !== undefined || error.stderr !== undefined)
+    ? 'git-evidence-unavailable: exit=' + String(error.status ?? error.code ?? 'unknown')
+    : String(error?.message || 'measurement-unavailable').slice(0, 4096)
+  result = { schema, status: 'refused', manifestDigest: null, reasons: [reason] }
+}
+process.stdout.write(JSON.stringify(result) + '\n')
+process.exitCode = result.status === 'admitted' ? 0 : 1

package/templates/.claude/skills/feature-adr/scripts/check-review-convergence.mjs

@@ -1,8 +1,14 @@
 #!/usr/bin/env node
 // Host checkpoint lineage, not a reviewer-supplied prior array, owns historical conditions.
 // This checks consistency/freshness; it does not authenticate models or judge their evidence.
+// For structural condition/delta verification, implementationVerified:true is phase-specific:
+// ideation = independently verified corrected ADR, architecture and phase artifacts at the
+// current revision/nonce, without claiming production code or implementation tests exist;
+// qe = independently verified actual implementation and relevant tests at that revision/nonce.
+// False/missing remains blocking in both phases; field names, boolean strength, origin ownership,
+// phase/nonce/manifest binding and legacy receipt compatibility are unchanged.
 import { createHash, randomUUID } from 'node:crypto'
-import { existsSync, lstatSync, mkdirSync, readFileSync, readdirSync, realpathSync, renameSync, writeFileSync } from 'node:fs'
+import { closeSync, constants, existsSync, fstatSync, lstatSync, mkdirSync, openSync, opendirSync, readSync, readFileSync, readdirSync, realpathSync, renameSync, writeFileSync } from 'node:fs'
 import { dirname, relative, resolve, sep } from 'node:path'
 import { execFileSync } from 'node:child_process'
 import { fileURLToPath } from 'node:url'
@@ -47,7 +53,7 @@ function hostProblem(host) {
   if (host.conditions.some(c => c.scope.some(path => !manifest.some(p => p.path === path)))) return 'host-condition-scope-unbound'
   return null
 }
-export function evaluateReviewConvergence(host, receipt, currentManifest) {
+export function evaluateReviewConvergence(host, receipt, currentManifest, originOnly = false) {
   const phase = host?.phase
   const refuse = reason => result(phase || 'qe', 'not-established', host?.snapshot?.revision || null, [reason], (array(host?.conditions) ? host.conditions : []).map(c => c?.id))
   const problem = hostProblem(host)
@@ -55,7 +61,7 @@ export function evaluateReviewConvergence(host, receipt, currentManifest) {
   const owners = host.reviewers.map(r => r.id)
   if (!same(host.snapshot.manifest, currentManifest) || digest(JSON.stringify(currentManifest)) !== host.snapshot.revision) return refuse('artifact-manifest-changed')
   if (!dictionary(receipt, ['schema', 'phase', 'nonce', 'revision', 'reviews', 'author']) || receipt.schema !== SCHEMA || receipt.phase !== phase || receipt.nonce !== host.snapshot.nonce || receipt.revision !== host.snapshot.revision) return refuse('receipt-phase-or-revision-invalid')
-  if (!array(receipt.reviews, 16) || receipt.reviews.length !== owners.length || new Set(receipt.reviews.map(r => r?.reviewer)).size !== owners.length) return refuse('reviewer-set-invalid')
+  if (!array(receipt.reviews, 16) || (originOnly ? !receipt.reviews.length || receipt.reviews.length > owners.length : receipt.reviews.length !== owners.length) || new Set(receipt.reviews.map(r => r?.reviewer)).size !== receipt.reviews.length) return refuse('reviewer-set-invalid')
   const all = new Map(host.conditions.map(c => [c.id, c]))
   const verified = new Set()
   const reasons = []
@@ -129,7 +135,7 @@ function writeJson(path, value) {
   writeFileSync(temporary, JSON.stringify(value, null, 2) + '\n', { flag: 'wx' })
   renameSync(temporary, path)
 }
-function pathsFor(repo, feature, phase) {
+function pathsFor(repo, feature, phase, native = false) {
   const prefix = relative(repo, feature).split(sep).join('/')
   if (!prefix || prefix.startsWith('../')) throw Error('feature-must-be-inside-repo')
   safePath(repo, prefix, false)
@@ -137,12 +143,13 @@ function pathsFor(repo, feature, phase) {
   if (phase === 'qe') targets.push('06_implementation_plan.md', '03.5_ideation_report.md')
   const adr = safePath(repo, prefix + '/03_adr')
   if (existsSync(adr) && !lstatSync(adr).isDirectory()) throw Error('adr-not-directory')
-  const decisions = existsSync(adr) ? readdirSync(adr).filter(p => /^[0-9]{3}-.+\.md$/.test(p)).sort() : []
+  const decisions = existsSync(adr) ? (native ? nativeNames(adr) : readdirSync(adr)).filter(p => /^[0-9]{3}-.+\.md$/.test(p)).sort() : []
   if (phase === 'ideation' && !decisions.length) throw Error('adr-missing')
   const paths = targets.filter(p => existsSync(resolve(feature, p))).concat(decisions.map(p => '03_adr/' + p)).map(p => prefix + '/' + p)
   for (const required of phase === 'ideation' ? ['01_requirements.md', '05_architecture.md'] : ['01_requirements.md', '06_implementation_plan.md']) if (!paths.includes(prefix + '/' + required)) throw Error('design-input-missing:' + required)
   if (phase === 'qe') {
-    const plan = readFileSync(safePath(repo, prefix + '/06_implementation_plan.md', false), 'utf8')
+    const planFile = safePath(repo, prefix + '/06_implementation_plan.md', false)
+    const plan = native ? new TextDecoder('utf-8', { fatal: true }).decode(nativeBytes(planFile, 2 * 1024 * 1024)) : readFileSync(planFile, 'utf8')
     const block = plan.split(/^EXPECTED_CODE_TARGETS:\s*$/m)
     if (block.length !== 2) throw Error('target-block-missing-or-duplicate')
     const planned = block[1].split('\n').filter(line => line.trim()).map(line => {
@@ -152,19 +159,19 @@ function pathsFor(repo, feature, phase) {
     })
     if (!planned.length) throw Error('target-block-empty')
     const baseFile = resolve(feature, '.fa-state/base-ref')
-    const base = existsSync(baseFile) ? readFileSync(baseFile, 'utf8').trim() : 'HEAD'
+    const base = existsSync(baseFile) ? (native ? nativeBytes(baseFile, 256 * 1024).toString('utf8') : readFileSync(baseFile, 'utf8')).trim() : 'HEAD'
     if (!/^[A-Za-z0-9_./:-]+$/.test(base) || base.startsWith('-')) throw Error('base-ref-invalid')
     const guard = '.dz/guard.json'
     // Exact index membership includes staged additions/intent-to-add. The selected
     // base proves deletions; descendants and unrelated history confer no authority.
     const proof = [['ls-files', '--cached', '-z', '--', guard], ['ls-tree', '-r', '--name-only', '-z', base, '--', guard]].map(command =>
-      execFileSync('git', command, { cwd: repo, encoding: 'utf8', maxBuffer: 4 * 1024 * 1024 }).split('\0').includes(guard))
+      execFileSync('git', command, { cwd: repo, encoding: 'utf8', maxBuffer: 4 * 1024 * 1024, ...(native ? { timeout: 2000, env: { ...process.env, GIT_OPTIONAL_LOCKS: '0' } } : {}) }).split('\0').includes(guard))
     const allowedGuard = p => p === guard && proof.some(Boolean)
     if (planned.some(p => /^(features|\.dz|\.agentic-qe|roam)\//.test(p) && !allowedGuard(p))) throw Error('circular-review-target')
     paths.push(...planned)
     // Additions/deletions are discovered by the host, not the author delta request.
     for (const command of [['diff', '--no-renames', '--name-only', '-z', base, '--'], ['ls-files', '--others', '--exclude-standard', '-z']]) {
-      const names = execFileSync('git', command, { cwd: repo, encoding: 'utf8', maxBuffer: 4 * 1024 * 1024 }).split('\0').filter(Boolean)
+      const names = execFileSync('git', command, { cwd: repo, encoding: 'utf8', maxBuffer: 4 * 1024 * 1024, ...(native ? { timeout: 2000, env: { ...process.env, GIT_OPTIONAL_LOCKS: '0' } } : {}) }).split('\0').filter(Boolean)
       paths.push(...names.filter(p => allowedGuard(p) || !p.startsWith('features/') && !p.startsWith('.dz/') && !p.startsWith('.agentic-qe/') && !p.startsWith('roam/') && p !== 'architecture/map.json'))
     }
   }
@@ -201,7 +208,7 @@ function qeCheckpoint(repo, feature) {
 function seriousFindings(source) {
   return (array(source?.gaps) ? source.gaps : []).filter(gap => [gap.sev, gap.severity, gap.priority].some(v => /(?:^|[^A-Z0-9])(BLOCKER|CRITICAL|HIGH|P0|P1)(?:$|[^A-Z0-9])/.test(String(v || '').toUpperCase())))
 }
-function reconcileCheckpoint(host, receipt, measured, repo, feature) {
+function reconcileCheckpoint(host, receipt, measured, repo, feature, knownReport) {
   if (!measured) return null
   const stage = measured.checkpoint
   for (const [base, source, family, missing] of [
@@ -222,7 +229,8 @@ function reconcileCheckpoint(host, receipt, measured, repo, feature) {
     }
     if (base === 'qe-precision' && missing) {
       const file = safePath(repo, relative(repo, feature).split(sep).join('/') + '/08_qe_report.md', false)
-      const report = readFileSync(file)
+      const report = knownReport === undefined ? readFileSync(file) : knownReport
+      if (report === null) return null
       if (digest(report) !== proof.reportDigest || !/## Primary QE pass/.test(report.toString()) || !/## Precision QE pass/.test(report.toString()) || !/Combined Step-8 grade:/.test(report.toString())) return null
     }
   }
@@ -322,6 +330,154 @@ export function runGate({ action, repo, feature, phase, reviewers }) {
   return verdict
 }
 
+// Only the CLI supplies this capability. The default standalone runGate remains synchronous.
+export const NATIVE_REVIEW_API_VERSION = 1
+function nativeNames(dir) {
+  if (!existsSync(dir)) return []
+  const st = lstatSync(dir)
+  if (!st.isDirectory() || st.isSymbolicLink()) throw Error('native-directory-unsafe:' + dir)
+  const names = [], fd = opendirSync(dir)
+  try { let entry; while ((entry = fd.readSync())) { names.push(entry.name); if (names.length > 256) throw Error('native-directory-candidate-limit:' + dir) } }
+  finally { fd.closeSync() }
+  return names.sort()
+}
+function nativeBytes(file, limit) {
+  let st
+  try { st = lstatSync(file) } catch (error) { if (error.code === 'ENOENT') return null; throw error }
+  if (!st.isFile() || st.isSymbolicLink()) throw Error('native-file-unsafe:' + file)
+  if (st.size > limit) throw Error('native-file-limit:' + file)
+  const fd = openSync(file, constants.O_RDONLY | constants.O_NOFOLLOW)
+  try {
+    const opened = fstatSync(fd)
+    if (!opened.isFile() || opened.ino !== st.ino || opened.dev !== st.dev) throw Error('native-file-changed:' + file)
+    const bytes = Buffer.alloc(limit + 1); let n = 0
+    while (n <= limit) { const got = readSync(fd, bytes, n, bytes.length - n, null); if (!got) break; n += got }
+    if (n > limit) throw Error('native-file-limit:' + file)
+    return bytes.subarray(0, n)
+  } finally { closeSync(fd) }
+}
+function nativeManifest(repo, paths) {
+  if (new Set(paths).size > 256) throw Error('native-artifact-path-limit')
+  let total = 0
+  return [...new Set(paths)].sort().map(path => {
+    const bytes = nativeBytes(safePath(repo, path), 2 * 1024 * 1024)
+    total += bytes?.length || 0
+    if (total > 16 * 1024 * 1024) throw Error('native-artifact-aggregate-limit')
+    return { path, digest: bytes === null ? null : digest(bytes) }
+  })
+}
+function nativeReceipt(host, receipt, manifest) {
+  // Reuse the unchanged strong aggregate gate with just the originating subset roster.
+  // Missing reviewers can prevent closure without invalidating a structurally valid partial origin.
+  if (!host || host.phase !== 'qe' || !dictionary(receipt, ['schema', 'phase', 'nonce', 'revision', 'reviews', 'author']) || receipt.schema !== SCHEMA || receipt.phase !== 'qe' || receipt.nonce !== host.snapshot.nonce || receipt.revision !== host.snapshot.revision || !array(receipt.reviews, 16) || !receipt.reviews.length || new Set(receipt.reviews.map(r => r?.reviewer)).size !== receipt.reviews.length) return null
+  if (!receipt.reviews.every(r => reviewerEntry(r, host.reviewers))) return null
+  const checked = evaluateReviewConvergence(host, receipt, manifest, true)
+  if (checked.verdict === 'not-established') return null
+  return receipt.reviews.map(r => ({ reviewer: r.reviewer, family: r.family }))
+}
+export function runNativeReviewGate({ action, repo, feature, reviewers, api }) {
+  if (!api || api.version !== 1 || typeof api.transact !== 'function') throw Error('native-core-capability-not-established')
+  if (!['prepare', 'evaluate', 'begin-repair'].includes(action)) throw Error('native-action-invalid')
+  repo = realpathSync(repo); feature = realpathSync(resolve(repo, feature))
+  const prefix = relative(repo, feature).split(sep).join('/')
+  if (!prefix || prefix.startsWith('../') || api.projectRoot !== repo || api.featurePath !== feature) throw Error('native-feature-binding-invalid')
+  safePath(repo, prefix, false)
+  const stateDir = safePath(repo, prefix + '/.fa-state')
+  const hostFile = safePath(repo, prefix + '/.fa-state/review-convergence-qe-host.json')
+  const receiptFile = safePath(repo, prefix + '/.fa-state/review-convergence-qe-review.json')
+  const checkpointFile = safePath(repo, prefix + '/.fa-state/checkpoints.jsonl')
+  const baseFile = safePath(repo, prefix + '/.fa-state/base-ref')
+  // Index bytes fence staging changes; no Git is run by the locked callback.
+  let gitDir = resolve(repo, '.git')
+  const gitStat = lstatSync(gitDir)
+  if (gitStat.isFile()) {
+    const match = /^gitdir: ([^\r\n]+)\r?\n?$/.exec(nativeBytes(gitDir, 256 * 1024).toString('utf8'))
+    if (!match) throw Error('native-gitdir-invalid')
+    gitDir = realpathSync(resolve(repo, match[1]))
+  } else if (!gitStat.isDirectory() || gitStat.isSymbolicLink()) throw Error('native-gitdir-invalid')
+  const indexFile = resolve(gitDir, 'index')
+  const measuredFiles = [hostFile, receiptFile, checkpointFile, baseFile, indexFile,
+    safePath(repo, prefix + '/.fa-state/review-convergence-ideation-host.json'),
+    safePath(repo, prefix + '/.fa-state/review-convergence-ideation-review.json'),
+    safePath(repo, prefix + '/08_qe_report.md'),
+    ...(gitStat.isFile() ? [resolve(repo, '.git')] : []), resolve(gitDir, 'HEAD')]
+  const limits = measuredFiles.map(f => f === indexFile ? 4 * 1024 * 1024 : f === checkpointFile ? 2 * 1024 * 1024 : 256 * 1024)
+  const observed = measuredFiles.map((f, i) => nativeBytes(f, limits[i]))
+  const json = (index) => observed[index] === null ? null : JSON.parse(new TextDecoder('utf-8', { fatal: true }).decode(observed[index]))
+  const host = json(0)
+  let receipt = null, receiptProblem = null
+  try { receipt = json(1) } catch { receiptProblem = 'reviewer-receipt-malformed' }
+  if (observed[0] !== null && (hostProblem(host) || host.phase !== 'qe')) throw Error(hostProblem(host) || 'native-host-phase-invalid')
+  if (observed[3] !== null && !/^[A-Za-z0-9_./:-]+$/.test(observed[3].toString('utf8').trim())) throw Error('native-base-ref-invalid')
+  const ideationHost = json(5), ideationReceipt = json(6)
+  if (observed[5] !== null && (hostProblem(ideationHost) || ideationHost.phase !== 'ideation')) throw Error('native-ideation-state-invalid')
+  if (observed[6] !== null) {
+    if (!ideationHost || !dictionary(ideationReceipt, ['schema', 'phase', 'nonce', 'revision', 'reviews', 'author']) || ideationReceipt.schema !== SCHEMA || ideationReceipt.phase !== 'ideation' || !text(ideationReceipt.nonce) || !hash(ideationReceipt.revision) || !array(ideationReceipt.reviews, 16) || !ideationReceipt.reviews.length || new Set(ideationReceipt.reviews.map(r => r?.reviewer)).size !== ideationReceipt.reviews.length || !ideationReceipt.reviews.every(r => reviewerEntry(r, ideationHost.reviewers) && (!Object.hasOwn(r, 'checkpointVerification') || checkpointProof(r.checkpointVerification)))) throw Error('native-ideation-receipt-invalid')
+    const owners = ideationHost.reviewers.map(r => r.id), author = ideationReceipt.author
+    if (author !== null && (!dictionary(author, ['addressed', 'changedScope', 'classification', 'delta', 'evidence', 'newRisks']) || !strings(author.addressed) || !strings(author.changedScope, true) || !kinds.includes(author.classification) || !text(author.delta) || !text(author.evidence) || !risks(author.newRisks, owners))) throw Error('native-ideation-author-invalid')
+    for (const r of ideationReceipt.reviews) {
+      if (author ? !dictionary(r.deltaVerification, ['classification', 'evidence', 'implementationVerified']) || !kinds.includes(r.deltaVerification.classification) || !text(r.deltaVerification.evidence) || typeof r.deltaVerification.implementationVerified !== 'boolean' : r.deltaVerification !== null) throw Error('native-ideation-delta-invalid')
+      if (!r.verifications.every(v => dictionary(v, ['id', 'revision', 'classification', 'evidence', 'implementationVerified']) && text(v.id) && hash(v.revision) && kinds.includes(v.classification) && text(v.evidence) && typeof v.implementationVerified === 'boolean') || new Set(r.verifications.map(v => v.id)).size !== r.verifications.length) throw Error('native-ideation-verification-invalid')
+    }
+  }
+  let checkpoint = null
+  if (observed[2] !== null) {
+    if (observed[2].length && observed[2][observed[2].length - 1] !== 10) throw Error('native-checkpoint-candidate-torn')
+    for (const line of new TextDecoder('utf-8', { fatal: true }).decode(observed[2]).split('\n').filter(Boolean)) {
+      const entry = JSON.parse(line)
+      if (!entry || typeof entry !== 'object' || typeof entry.stage !== 'string' || !entry.stage || typeof entry.inputHash !== 'string' || !entry.inputHash || !Object.hasOwn(entry, 'result') || entry.result === null) throw Error('native-checkpoint-candidate-invalid')
+      if (entry.stage === 'qe') checkpoint = { checkpointDigest: digest(JSON.stringify(entry.result)), checkpoint: entry.result }
+    }
+  }
+  const directoryFence = () => ({ adr: nativeNames(safePath(repo, prefix + '/03_adr')), bridge: nativeNames(safePath(repo, prefix + '/.fa-state/qe-bridge')), fragments: nativeNames(stateDir).filter(n => /^native-qe-(history\.jsonl|head\.json)\..*\.tmp$/.test(n)) })
+  const membership = directoryFence()
+  const paths = pathsFor(repo, feature, 'qe', true).concat((host?.conditions || []).flatMap(c => c.scope))
+  const manifest = nativeManifest(repo, paths)
+  if (action !== 'evaluate' && (!array(reviewers, 16) || !reviewers.length || !reviewers.every(r => dictionary(r, ['id', 'family']) && text(r.id) && ['codex', 'claude', 'owner-exception'].includes(r.family)) || new Set(reviewers.map(r => r.id)).size !== reviewers.length)) throw Error('reviewers-invalid')
+  const observationDigest = digest(JSON.stringify({ files: observed.slice(1).map(b => b === null ? null : digest(b)), membership, manifest }))
+  const checkpointClosure = host && receipt && checkpoint ? reconcileCheckpoint(host, receipt, checkpoint, repo, feature, observed[7]) : null
+  return api.transact(action, active => {
+    if (realpathSync(repo) !== repo || realpathSync(feature) !== feature) throw Error('native-project-feature-observation-changed')
+    const currentGit = lstatSync(resolve(repo, '.git'))
+    if (currentGit.ino !== gitStat.ino || currentGit.dev !== gitStat.dev) throw Error('native-gitdir-observation-changed')
+    // Only descriptor/known-path work here; no discovery through runGate, Git, model or network.
+    measuredFiles.forEach((file, i) => { const bytes = nativeBytes(file, limits[i]); if ((bytes === null) !== (observed[i] === null) || bytes !== null && !bytes.equals(observed[i])) throw Error('native-observation-changed:' + file) })
+    const currentMembership = directoryFence()
+    if (currentMembership.bridge.some(n => /^(signoff-|failed-).*\.json$/.test(n))) throw Error('native-bridge-source-collision:' + stateDir + '/native-qe-history.jsonl:' + stateDir + '/qe-bridge')
+    if (!same(membership, currentMembership)) throw Error('native-candidate-membership-changed')
+    if (!same(manifest, nativeManifest(repo, paths))) throw Error('native-artifact-observation-changed')
+    if (membership.bridge.some(n => /^(signoff-|failed-).*\.json$/.test(n))) throw Error('native-bridge-source-collision:' + stateDir + '/native-qe-history.jsonl:' + stateDir + '/qe-bridge')
+    if (membership.fragments.length) throw Error('native-temporary-fragment')
+    if (!active && (observed[1] !== null || host && (host.reviewSeen || host.rework || host.conditions.length) || checkpoint)) throw Error('native-surviving-review-evidence-refuses-admission')
+    if (active && (!host || !same(host.snapshot, active.snapshot))) throw Error('native-host-admitted-snapshot-mismatch')
+    const revision = digest(JSON.stringify(manifest))
+    const priorOrigins = nativeReceipt(host, receipt, host?.snapshot.manifest)
+    if (action === 'prepare' && host && host.snapshot.revision !== revision && (active?.witnessed || priorOrigins)) throw Error('native-repair-required')
+    if (action === 'evaluate') {
+      if (!active || !host) throw Error('native-prepare-required')
+      if (!same(manifest, host.snapshot.manifest)) throw Error('native-repair-required')
+      const origins = nativeReceipt(host, receipt, manifest)
+      let verdict = receipt === null ? result('qe', 'not-established', revision, [receiptProblem || 'reviewer-receipt-missing']) : evaluateReviewConvergence(host, receipt, manifest)
+      // Closure is deliberately stronger than originating partial/unresolved evidence.
+      if (verdict.verdict === 'closed' && checkpoint && !checkpointClosure) verdict = result('qe', 'not-established', revision, ['historical-checkpoint-own-verification-missing'])
+      const preserved = new Map(host.conditions.map(c => [c.id, c]))
+      if (origins) {
+        for (const r of receipt.reviews) for (const c of r.conditions.concat(r.newRisks.conditions)) preserved.set(c.id, c)
+        if (receipt.author) for (const c of receipt.author.newRisks.conditions) if (c.scope.every(path => manifest.some(p => p.path === path))) preserved.set(c.id, c)
+      }
+      if (verdict.verdict === 'closed' && checkpointClosure) verdict = { ...verdict, checkpointClosure }
+      const next = { ...host, conditions: [...preserved.values()], reviewSeen: host.reviewSeen || Boolean(origins), changedPaths: verdict.verdict === 'closed' ? [] : host.changedPaths }
+      return { host: next, snapshot: host.snapshot, origins: origins || [], receiptDigest: observed[1] === null ? null : digest(observed[1]), reason: origins ? null : verdict.reasons[0] || 'native-no-valid-origin', observationDigest, result: verdict, admission: false }
+    }
+    const bound = bindReviewers(host, reviewers, checkpoint)
+    const snapshot = active?.snapshot.revision === revision ? active.snapshot : host?.snapshot.revision === revision ? host.snapshot : { nonce: randomUUID(), revision, manifest }
+    const old = new Map((host?.snapshot.manifest || []).map(p => [p.path, p.digest])), current = new Map(manifest.map(p => [p.path, p.digest]))
+    const changedPaths = host && host.snapshot.revision !== revision ? [...new Set([...old.keys(), ...current.keys()])].filter(p => old.get(p) !== current.get(p)).sort() : host?.changedPaths || []
+    const next = { schema: SCHEMA, phase: 'qe', reviewers: bound, snapshot, conditions: host?.conditions || [], reviewSeen: host?.reviewSeen || false, rework: Boolean(host && (host.rework || host.reviewSeen && host.snapshot.revision !== revision)), changedPaths }
+    return { host: next, snapshot, origins: [], receiptDigest: null, reason: null, observationDigest, result: { ...result('qe', 'prepared', revision, []), nonce: snapshot.nonce, manifest, reviewers: bound, conditions: next.conditions, checkpointDigest: checkpoint?.checkpointDigest || null }, admission: !active }
+  })
+}
+
 if (process.argv[1] && resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
   let phase = 'qe'
   try {