@event4u/agent-config 15.0.0 → 16.1.0

package/CHANGELOG.md

@@ -30,6 +30,46 @@ Entry-shape contract: [`docs/contracts/CHANGELOG-conventions.md`](docs/contracts
 
 ## [Unreleased]
 
+### Changed
+
+- **`agent-config init` no longer overwrites a managed file you have edited.**
+  Owner ruling, 2026-09-21, taken after an AI council split 1/1 on it. Until
+  now the installer's `_resolve_file_conflict` returned `write` for every
+  deployed file and its header recorded `--force` as an accepted no-op
+  "because installs always overwrite" — while the planner had, since the
+  preceding change, produced a list naming exactly the files you had edited.
+  The report named the file and the next install replaced it.
+  A managed file whose bytes diverge from the SHA-256 the install manifest
+  recorded is now **preserved**, and the package content it would have been
+  replaced with is staged beside it as `<path>.agent-config.new` — a
+  tool-owned suffix, not a bare `.new`, so the installer never claims a
+  namespace other tools already write into.
+  **The staleness is deliberately loud, and that is the load-bearing half.**
+  Preserving an edit leaves the active installation not-current, and a stale
+  install exiting `0` would make that silent. So a run that preserved anything
+  exits **`3`** (new, distinct from `0` success, `1` failure and `2` usage),
+  names each preserved file on stderr with the sentence "the active
+  installation is not current", and prints a count. Under `--progress-ndjson`
+  the count also rides on the terminal `done` frame, which the wizard's apply
+  route forwards as `summary.conflicts`; a zero-conflict run's frames are
+  byte-identical to before. **`--force` is now a real escape hatch** — it
+  replaces the managed file and exits `0`.
+  Scripts that treat any non-zero exit from `init` as a failure will see `3`
+  on a tree with local edits. That is the intended signal, not a regression:
+  the install did complete, and the tree is not current.
+  Three things are deliberately absent. There is **no semantic
+  classification** — one byte of divergence from the recorded digest is the
+  whole test, because a format-aware diff would pull per-format parsers into
+  the installer's trusted computing base and a syntactically trivial edit can
+  still be intentional. There is **no fallback to overwriting** under conflict
+  volume or resource pressure, and no bulk accept flag. And an **existing
+  sidecar is never clobbered**: identical bytes are a no-op, anything else
+  fails the run with the package content staged nowhere, because a pathname
+  matching the convention is not proof the installer wrote it.
+  The verdict is computed from a re-hash of the destination **at the moment of
+  the write**, not from the plan: the planner's conflict list is advisory
+  state, and a plan-time verdict is blind to an edit made in between.
+
 ### Fixed
 
 - **The self-review gate reviews again — it had reviewed nothing for four
@@ -659,390 +699,304 @@ Entry-shape contract: [`docs/contracts/CHANGELOG-conventions.md`](docs/contracts
 > keeps the active era under the 250-line drift cap enforced by
 > `tests/test_changelog_eras.py`.
 
-# Era: 14.23.x — current
-
-> Started at `14.23.0`. Full entries live inline below.
-> The drift test caps this era at 250 lines of entry body; growth past
-> that forces a new era split (`# Era: 14.24.x`, etc.) — see
-> [`docs/contracts/CHANGELOG-conventions.md § Era splits`](docs/contracts/CHANGELOG-conventions.md).
-
-## [15.0.0](https://github.com/event4u-app/agent-config/compare/14.23.0...15.0.0) (2026-09-10)
-
-### Release highlights
-
-- **Behaviour changes:** retire /chat-history and /chat-history import (removes src/domains/meta/chat-history/command.md, src/domains/meta/chat-history/import/command.md) (8b5226a); the deny stays — the replacement was refused 2/2 (03e4eb7); stop asserting a mechanism that no longer exists (9c3f86b); retire the kernel-rule tool-call deny and the 24h soak (288190b); the reuse qualification, condensed then paid for (db46568); four red jobs, all four consequences of projecting docs/guidelines (c4d9ef2); +4 more.
-- **Default changes + migration:** arm the automatic record by default, retire the recycle advisory (956954c).
-- **Security and correctness:** make the settings writers idempotent, and repair what the old one broke (#2000) (a063516); repair a file the old writer already corrupted, or say why not (7f3a8c3); ask whether a key is present, never infer it from the write (aea618a); name the payload job what it does, before the name is pinned (#1999) (5d58896); make the payload check report on every PR, so it can be required (#1998) (97466af); tell an unverifiable bound apart from a risen one (#1994) (f01f85f); +28 more.
-- **Honest nulls:** the drain-run summary, as the last commit of the run (ef06ab8).
-- **Known limitations:** _none_
-
-> **Governance mix:** governance-only 76 vs consumer-only 10 (taxonomy 1.1.0).
-
-### BREAKING CHANGES
-
-* **commands:** retire /chat-history and /chat-history import ([8b5226a](https://github.com/event4u-app/agent-config/commit/8b5226aff24d93f8a5fecfa7525b9419d58524af))
-* **governance:** retire the kernel-rule tool-call deny and the 24h soak ([288190b](https://github.com/event4u-app/agent-config/commit/288190b1a5a09a964cf4cc29fa356791bbfb8069))
-
-### Features
-
-* **release:** prove the release can read local settings before the bump ([4ee7eb8](https://github.com/event4u-app/agent-config/commit/4ee7eb86fe881eb7230d53f99e080f53a114bb69))
-* **ci:** wire the platform anchor now that the forge satisfies it ([8924414](https://github.com/event4u-app/agent-config/commit/8924414f533ec54293c1fab19f397570b28e636e))
-* **continuity:** arm the automatic record by default, retire the recycle advisory ([956954c](https://github.com/event4u-app/agent-config/commit/956954c91d851976ccd77eb08a4eac8cb172d02a))
-* **governance:** measure the platform anchor instead of assuming it ([11bd907](https://github.com/event4u-app/agent-config/commit/11bd907d0a9030394b2571f0143b00f786f3cc70))
-* **chain-nudge:** carry the write-through-shell shape, and latch per class ([c68b0fd](https://github.com/event4u-app/agent-config/commit/c68b0fd51617d6c21ebf1174122c038a7bba6168))
-* **friction:** measure category-A coverage over real Bash traffic ([169dfb5](https://github.com/event4u-app/agent-config/commit/169dfb51b6c9309f7485f1494fbe0dcf5251afcd))
-* **governance:** the ratification record, and the round-3 conditions it carries ([56fea01](https://github.com/event4u-app/agent-config/commit/56fea0136cc3040d348f208f6cd67b70afa52bb2))
-* **governance:** check_kernel_edit_ratified — the CI gate that replaces a deny ([66a2ecb](https://github.com/event4u-app/agent-config/commit/66a2ecb919e323630a03ece329cbc05f854f079d))
-* **governance:** the ratification artifact, ADR-268 § 4's control ([0446070](https://github.com/event4u-app/agent-config/commit/04460704d2188d2f8e9efaa426486e339d675ec9))
-* **design-fidelity:** turn the claim into a measurement, and close the roadmap ([450ee30](https://github.com/event4u-app/agent-config/commit/450ee30cd5ac3eb19e0c2fc319b6a660abd93472))
-* **design-fidelity:** maturity and reconciliation as fields, with the numbers deliberately absent ([b168ca1](https://github.com/event4u-app/agent-config/commit/b168ca120de4813a78e761c84a1cd1268c7ee3fc))
-* **design-fidelity:** route the canvas artboard, record the artifact read, carve out ported icons ([21fb2fe](https://github.com/event4u-app/agent-config/commit/21fb2fe3798d0b0461e9a1901886d43e37914893))
-* **design-fidelity:** gate the route, cascade the mode, and land the arbitration where both rules reach it ([c0fa95d](https://github.com/event4u-app/agent-config/commit/c0fa95d40693a7105e3ed1c5ce802fdf14719c26))
-* **condense:** project docs/guidelines/ so the routed tier exists where it is read ([acc2451](https://github.com/event4u-app/agent-config/commit/acc24516330968f1324bf97d3246f350519b2531))
-* **budgets:** the payload gate gains a host reading, and the ratchet keeps its own ([b6af20d](https://github.com/event4u-app/agent-config/commit/b6af20db552fdbcc5e8507cd6a1d314925740ba8))
-
-### Bug Fixes
-
-* **settings:** make the settings writers idempotent, and repair what the old one broke (#2000) ([a063516](https://github.com/event4u-app/agent-config/commit/a0635168042f854fc8402a2de5d516a4f85d76ed))
-* **settings:** repair a file the old writer already corrupted, or say why not ([7f3a8c3](https://github.com/event4u-app/agent-config/commit/7f3a8c3f38a18cc42dbbcadaa30380bf9c090869))
-* **settings:** ask whether a key is present, never infer it from the write ([aea618a](https://github.com/event4u-app/agent-config/commit/aea618a21688edf3cfa67f50b3a73dab53aeda62))
-* **ci:** name the payload job what it does, before the name is pinned (#1999) ([5d58896](https://github.com/event4u-app/agent-config/commit/5d58896fa43212ae6b76d591529732dc140bbde7))
-* **ci:** make the payload check report on every PR, so it can be required (#1998) ([97466af](https://github.com/event4u-app/agent-config/commit/97466afddcb4018991185a66ff70c61b00a6e02a))
-* **gate:** tell an unverifiable bound apart from a risen one (#1994) ([f01f85f](https://github.com/event4u-app/agent-config/commit/f01f85f6ccfd5f60d4f5af567d00a0eadb5e95bd))
-* **ci:** record why the anchor target is manual, and what would make it run ([7481b00](https://github.com/event4u-app/agent-config/commit/7481b005ee914307c78cab7a01091b0d3d50bd8a))
-* **ci:** the anchor gate cannot run in CI — the token scope does not exist ([7648ae3](https://github.com/event4u-app/agent-config/commit/7648ae318bc86f7005a85739d41c6668dc94d83a))
-* **gates:** keep the self-test fixtures out of the shipped-import scan, and pay the size ratchet ([597c11b](https://github.com/event4u-app/agent-config/commit/597c11bd2ba8f92c269963c9acedac00528ee3c5))
-* **gates:** close the three findings the reachability review returned ([621d44f](https://github.com/event4u-app/agent-config/commit/621d44fc2b6ade0b2c6f375a803fbe786dd9adc8))
-* **gates:** reach the lossy module instead of being pointed at it ([0a9837a](https://github.com/event4u-app/agent-config/commit/0a9837ab444a4067866ac05bae2f24535063520c))
-* **review:** bind the skip declaration to the scope it actually covers ([90ad454](https://github.com/event4u-app/agent-config/commit/90ad454d8b042f02aadf94e3f94eb0cda110e1a8))
-* **evidence:** restore run 21, and give this run its own numbered record ([775ce56](https://github.com/event4u-app/agent-config/commit/775ce565ae54df748e758bb34329131ab0380392))
-* **ci:** three gate reds from this branch's own prose and one crossed ceiling ([fc5735c](https://github.com/event4u-app/agent-config/commit/fc5735cbbd914b65089934211ec14ef77c15c7a5))
-* **decisions:** refresh the derived index and census after the grade came down, and record what the census then did ([c4658aa](https://github.com/event4u-app/agent-config/commit/c4658aa959c9b4f4b29f1afef26e15cbc18c2bcb))
-* **review:** mark three shell-command backticks as non-references ([0746d16](https://github.com/event4u-app/agent-config/commit/0746d168b4ab59ee0aebbe5ce53047ffb76220c7))
-* **friction:** finish the argument half, and pin what could still drift ([a469e71](https://github.com/event4u-app/agent-config/commit/a469e717e61fdd497851ae674a0799f03ee2f5d4))
-* **chain-nudge:** four regressions the round-1 fixes introduced ([49fc069](https://github.com/event4u-app/agent-config/commit/49fc069f5301d76fccfd407601e544f982b6c9ad))
-* **governance:** close the floor's selector door and three fail-open reads ([217139b](https://github.com/event4u-app/agent-config/commit/217139b67f42ca0062b33584c6c63c4b28e0cd59))
-* **review:** close all nine completion-review findings, two of them the same defect this change removes ([fd54b35](https://github.com/event4u-app/agent-config/commit/fd54b3585493c289c27acc83b625789f7bfbf17d))
-* **docs:** keep the mechanics file under the depth ceiling ([fbce688](https://github.com/event4u-app/agent-config/commit/fbce68847c607f9bd421d5a486a6622b0b6b9a29))
-* **gates:** the loss-class gate scanned nothing, and route (a) could not have fixed it ([02711d3](https://github.com/event4u-app/agent-config/commit/02711d3508538c2c7c43c3c363cd70151a99968b))
-* **friction:** make the probe honest about its buckets and reproducible ([cd64ac7](https://github.com/event4u-app/agent-config/commit/cd64ac727e06da2974560ee0f6a9369300fb24f0))
-* **chain-nudge:** three false negatives and a false positive, per review ([0aa3e6e](https://github.com/event4u-app/agent-config/commit/0aa3e6e0a8709ca563040350e0da4d12f8d20d69))
-* **budget:** delete the unenforced grace_end_date, keep the enforced ceiling ([2294402](https://github.com/event4u-app/agent-config/commit/229440218c9ccdac83057cd694a50406f2d350ed))
-* **tests:** follow the build chain instead of matching one flat string ([c56809b](https://github.com/event4u-app/agent-config/commit/c56809b134f4d39665016a23b556dc517cdcfe25))
-* **evidence:** keep the record English, per language-and-tone ([824c1dc](https://github.com/event4u-app/agent-config/commit/824c1dcbf445944c8f1ea5fea700a2e1c0a3a1bf))
-* **tests:** type the newest-note lookup so tsc can see the index is checked ([794c291](https://github.com/event4u-app/agent-config/commit/794c2913f4d71d102ee10464310c78ce56be78d6))
-* **pack:** bind both defect fixes to the surface, not to one script ([368ccf2](https://github.com/event4u-app/agent-config/commit/368ccf2376e186980c543e311ade4b4e2750da8c))
-* **tests:** pin the cap derivation instead of one superseded reset ([293f5fc](https://github.com/event4u-app/agent-config/commit/293f5fc17505acc25d71a2ed155313d8ed955ca5))
-* **config:** reset both pack-size caps on a reconstructed clean baseline ([0d6b337](https://github.com/event4u-app/agent-config/commit/0d6b3372d72be7acddb83a2229a97c4b665e4bbf))
-* **build:** clean the cli-delegate outdir, which had shipped 105 orphan chunks ([1ff6f5e](https://github.com/event4u-app/agent-config/commit/1ff6f5ec3d9acfbc0dab4023d8d24c777ee3450b))
-* **flows:** map the two retired commands out, and the orphan that was already there in ([31516c5](https://github.com/event4u-app/agent-config/commit/31516c52ac473f2b77ad645e234c1e8b6684e126))
-* **adr:** inline the council convergence instead of linking the session file ([249b82c](https://github.com/event4u-app/agent-config/commit/249b82caf663fe3204b932779430da89a83c8d03))
-* **budget:** the ratification note pays its own always-budget cost ([6382956](https://github.com/event4u-app/agent-config/commit/63829565a59bb1cc81c83535e448c29e97f5798c))
-* **governance:** route the scanned count through _lib/scan_scope ([e30720e](https://github.com/event4u-app/agent-config/commit/e30720e994dbfee2dd11200dfa24442ce5425308))
-* **ci:** the task desc shadowed its own script in the reachability checker ([d456959](https://github.com/event4u-app/agent-config/commit/d4569590904bba70e852ac2506122ce7be20b49f))
-* **docs:** one house-dialect word in the new contract ([f417b09](https://github.com/event4u-app/agent-config/commit/f417b09a97895f86886b3d4a8045a6047eccbf34))
-* **guidelines:** nine characters over the depth ceiling ([fb5edd5](https://github.com/event4u-app/agent-config/commit/fb5edd5a289ab0f739cefaf9074218eab56fcade))
-* **guidelines:** eleven `task <x>` invocations that a consumer cannot run ([2491b5d](https://github.com/event4u-app/agent-config/commit/2491b5d1d96c13e132711e1372a91a2f08d803ab))
-* **tests:** three Node-shard failures, three different consequences of this branch ([d421f13](https://github.com/event4u-app/agent-config/commit/d421f13224820ea01a2e022310acb5f0afb43081))
-* **condense:** src/ and src/agent-src/ are two trees, and re-anchor the kernel prefix ([f27d7b9](https://github.com/event4u-app/agent-config/commit/f27d7b9bdc0a1c57bd6003494c3d32249455c5a7))
-* **ui-audit-gate:** the reuse qualification, condensed then paid for ([db46568](https://github.com/event4u-app/agent-config/commit/db46568aa0b5f461a589a6768e964c529bed9d71))
-* **design-fidelity:** the blind review's three high findings, and nine more ([9717ee3](https://github.com/event4u-app/agent-config/commit/9717ee3ac53edad2d350adfa856411706cfd6d15))
-* **ci:** four red jobs, all four consequences of projecting docs/guidelines ([c4d9ef2](https://github.com/event4u-app/agent-config/commit/c4d9ef2150d6e866f9f5f31a77d3b7dcf7c8678d))
-* **lint:** type-only import in tolerance_shadow ([30aa704](https://github.com/event4u-app/agent-config/commit/30aa704cf91612f3675838202e902bdda3f98cf6))
-* **design-fidelity:** close Phase 1 — the icon assertion, the unfollowable instruction, the prescribed order ([f6bb2a6](https://github.com/event4u-app/agent-config/commit/f6bb2a60f5b56805153ac1ee2b10d0fe4591af4e))
-* **code-graph:** refuse an option-shaped rev before git runs ([41897a6](https://github.com/event4u-app/agent-config/commit/41897a6f55fdf821b0b247f5d6b24c21d4fc15d1))
-* **budgets:** the host cross-check compares only what a fresh checkout can reproduce ([7f253c3](https://github.com/event4u-app/agent-config/commit/7f253c345b76bb96585f08de5dbd419625e2a8b4))
-* **tests:** drop the unused tmpdir scaffolding from the cost-table tests ([15c1650](https://github.com/event4u-app/agent-config/commit/15c165090d799ce8fc5a93d6dbf6666210db6d44))
-
-### Reverts
-
-* **governance:** the deny stays — the replacement was refused 2/2 ([03e4eb7](https://github.com/event4u-app/agent-config/commit/03e4eb7de6b8c637cf41bbe60acb489b3a6658af))
-
-### Documentation
-
-* **roadmap:** record the four residuals the council agreed to ship ([053669d](https://github.com/event4u-app/agent-config/commit/053669d46334e34b98a2f0a563bb3034b683f182))
-* **roadmap:** the E3 injection gate is closed by configuration, not by a stale bundle (#1997) ([4a77fe2](https://github.com/event4u-app/agent-config/commit/4a77fe23c2d4d095c75ed84499a3aebc7cb72a53))
-* **governance:** record the approval-floor rollback and plan the bounded waiver (#1993) ([2a38337](https://github.com/event4u-app/agent-config/commit/2a38337f0d3b63ee80635d665c680bacbde1192c))
-* **roadmap:** decide prerequisites 3 and 4 for a measured payload ceiling (#1996) ([09d9bc7](https://github.com/event4u-app/agent-config/commit/09d9bc7600de4e1535d0f164079339c104d6782c))
-* **roadmap:** the headroom question, asked and answered 2/2 ([e808be2](https://github.com/event4u-app/agent-config/commit/e808be27b6eefe4b0558ab559b9a37e0bb935bc1))
-* **roadmap:** four fifths of 4.4's rejection premise was already solved in the tree ([c42a72b](https://github.com/event4u-app/agent-config/commit/c42a72b668b5b4f8305c8e24f4bc8edfb5480ba3))
-* **review:** rebind the findings artefact to the CI-fix head ([19ebbfe](https://github.com/event4u-app/agent-config/commit/19ebbfe19b76829aebbad0108c1ee71c339b96cd))
-* **review:** record the reachability review and its three dispositions ([838ab93](https://github.com/event4u-app/agent-config/commit/838ab932560e8ebe9a8ae235cff69529840301c4))
-* **evidence:** correct the run record — three of its PRs were merged meanwhile ([cb38480](https://github.com/event4u-app/agent-config/commit/cb38480c7dcf49b7fa5505c73eea9d1dbf77ba42))
-* **evidence:** the drain-run summary, as the last commit of the run ([ef06ab8](https://github.com/event4u-app/agent-config/commit/ef06ab825a549c5d23cf2930d4fce1e0dfb30cf9))
-* **roadmap:** record why three roadmaps stay open, and correct two premises ([5d7066e](https://github.com/event4u-app/agent-config/commit/5d7066e17f0edbd9258e6594986cc840773c1f7d))
-* **review:** re-bind round 2 in place, dispositions and post-fix scope ([70e99e0](https://github.com/event4u-app/agent-config/commit/70e99e06b9d54c3dbc580e317f10399ad66d4424))
-* the write share is a floor, the SHA is a base, the delta is not a result ([2655175](https://github.com/event4u-app/agent-config/commit/26551751e3d41232e616b88742df2f398a1e1849))
-* **review:** round 2, and round 1 archived beside it ([252e64a](https://github.com/event4u-app/agent-config/commit/252e64a3e4aa2571a2912a2845dcb6e29fe63e34))
-* **review:** rebind the findings artefact to the publish-surface head ([9d3e82b](https://github.com/event4u-app/agent-config/commit/9d3e82be5b57a9590a6163b3fc6c617be66dcaee))
-* **roadmap:** close road-to-continuity-writer-activation — 10 satisfied, 1 cancelled ([2ae48cc](https://github.com/event4u-app/agent-config/commit/2ae48ccf65895536f294fb2df3dac66ea1b01b7e))
-* **review:** dispositions for all thirteen findings, with the fixing commits ([65e260d](https://github.com/event4u-app/agent-config/commit/65e260d78f63121b31f92020e4939fff33bc2780))
-* **roadmap:** reopen a blocker that closed on a claim the tree contradicts ([2ea4201](https://github.com/event4u-app/agent-config/commit/2ea42016ea0776da426f4218f2350fc2af6f4ac2))
-* **contracts:** stop claiming a platform anchor the platform does not hold ([6bab400](https://github.com/event4u-app/agent-config/commit/6bab400a881b601e9e0bd3281c02de4f67ce055e))
-* one population for every figure, and two denominators kept apart ([84d1c07](https://github.com/event4u-app/agent-config/commit/84d1c074b578d9e3888b74bbe9651977f0555497))
-* **roadmap:** record why 4.4 stays open, and correct the date every reader planned against ([1d36c6c](https://github.com/event4u-app/agent-config/commit/1d36c6ca56c5e5458a1cbc24accf5feb4b3e47ce))
-* **review:** rebind the findings artefact and re-derive its manifest ([439349b](https://github.com/event4u-app/agent-config/commit/439349ba68d0df937a34efd6030f4b24d154771f))
-* **decisions:** the grace ceiling never expired, and three rounds decided on that premise ([85666cb](https://github.com/event4u-app/agent-config/commit/85666cbbaa5eadc880d447d954f4aef8541a588c))
-* **review:** the completion-review findings, before any of them is fixed ([ed7c80e](https://github.com/event4u-app/agent-config/commit/ed7c80e1829df44e1d31bcf392d2560a84b33d56))
-* **evidence:** why the confirmations recur, and which half is reachable ([ce0450c](https://github.com/event4u-app/agent-config/commit/ce0450cfbe09738a2fd80d39b8834b338bb856ef))
-* **token-efficiency:** the re-measured figures, and a correction to the table ([f1dffea](https://github.com/event4u-app/agent-config/commit/f1dffea03296ec990da2fbffc50219b0f2b09e0c))
-* **review:** rebind the findings artefact to the type-fix head ([da25cdf](https://github.com/event4u-app/agent-config/commit/da25cdf080f238752596374e36d9c776ed994c4c))
-* **review:** record the completion review and its ten dispositions ([59cefb3](https://github.com/event4u-app/agent-config/commit/59cefb3b76e387a073abae229561e2a596964e36))
-* **roadmap:** close the packed-payload cap, and record which axis it was ([d009289](https://github.com/event4u-app/agent-config/commit/d00928977a5a10c71cd076f2e7f30f0f4e8187a4))
-* **roadmap:** re-review the risk register against what 3.4 actually changed ([b7f68e8](https://github.com/event4u-app/agent-config/commit/b7f68e8b4f449cb2bd2ff21cb144dcb3bc46de12))
-* **roadmap:** close 3.4, resolve both its blockers, record what could not ship ([7975d41](https://github.com/event4u-app/agent-config/commit/7975d4105176231bd08ab4dadf1b062ad954fc80))
-* **roadmap:** close 4.2 on ADR-272, and escalate 4.4's split to the owner ([e7faccc](https://github.com/event4u-app/agent-config/commit/e7faccc84257afaf89f0466b9f21cd25358bec01))
-* **adr:** the Evidence section ADR-272 owed, and the census it moves ([6800c2f](https://github.com/event4u-app/agent-config/commit/6800c2f0096b2f33608c9464d3daa90842d2112e))
-* **adr:** ADR-272 supersedes the rules-bucket ceiling once, upward, at 25,375 ([d454f90](https://github.com/event4u-app/agent-config/commit/d454f9055c50730b85c26b726a1460eb11cac06b))
-* **roadmap:** re-review the risk register against what 3.1 actually changed ([5947c63](https://github.com/event4u-app/agent-config/commit/5947c631b2907e5c09c68cdf76ec388a9d538514))
-* **roadmap:** close 3.1, and correct the two predictions it got wrong ([6b4ba55](https://github.com/event4u-app/agent-config/commit/6b4ba555cd32ac7e3e1fe875bf382c7b142c0bdb))
-* the seven surfaces that described a cache which no longer exists ([5daa82a](https://github.com/event4u-app/agent-config/commit/5daa82a675882bbd6ae74ffce66ae8ad54b90171))
-* **loss-classes:** record that the gated corpus is now empty, and why ([90e67be](https://github.com/event4u-app/agent-config/commit/90e67bed5e8ad0135fdbda4c2c7afbbbf1981145))
-* **roadmap:** 5.1 closed, 5.2 and 0.2 open with the refusal recorded ([5abc3a4](https://github.com/event4u-app/agent-config/commit/5abc3a40bbdb3d1996032f49798e58ef701ad295))
-* **governance:** stop asserting a mechanism that no longer exists ([9c3f86b](https://github.com/event4u-app/agent-config/commit/9c3f86bdcf25c0eab3f4e4f8788e1195ad109228))
-* **adr:** ADR-271 discloses its evidence, and the install bundle is fresh ([3fb8ad6](https://github.com/event4u-app/agent-config/commit/3fb8ad622129bed9f1ebd0e43d7654e825b56856))
-* **evidence:** the 14.23.0 findings ledger, 13 blocking dispositions ([409d96a](https://github.com/event4u-app/agent-config/commit/409d96a77e9be07a096d0f9dbfb87419c38704e3))
-* **roadmap:** three council rounds on 1:1 fidelity and Storybook-first ([8e00a5e](https://github.com/event4u-app/agent-config/commit/8e00a5e7932ac58fc9291b31df1a7e30b3b4ea13))
-* **decisions:** ADR-270 splits source corpus from host payload, and records what the council would not decide ([c8615ae](https://github.com/event4u-app/agent-config/commit/c8615aee89325dc3aca5a1c32902a30a0275220d))
-* **contracts:** publish the per-host standing cost, re-pinned to a census that matches the tree ([e8a41a9](https://github.com/event4u-app/agent-config/commit/e8a41a98782706585818bf00feac6346ca3f68d6))
-* **decisions:** ADR-269 abandons the Iron Law reserve, the strict ceiling stands ([dc88915](https://github.com/event4u-app/agent-config/commit/dc88915b8af53edc33d9fcfefddb2a0ed7689b85))
-
-### Refactoring
-
-* **hooks:** retire the hot-context cache, keep the session-index restore ([6b08a37](https://github.com/event4u-app/agent-config/commit/6b08a37d0c73fccac807c484fda1c8975f3a7d3f))
-* **condense:** the projected-link rewriter moves to the lane that owns it ([514761b](https://github.com/event4u-app/agent-config/commit/514761b77cfcc997989991bbb20addeddf9b5e05))
-
-### Tests
-
-* **hooks:** the three sub-tests step 3.1's verify line asks for ([4a3834d](https://github.com/event4u-app/agent-config/commit/4a3834d54e557f5572230f8a6487d08fc7580337))
-* **governance:** prove the base-revision invocation, which CI cannot exercise here ([f098916](https://github.com/event4u-app/agent-config/commit/f0989169ec24cea3d717b9179a5a84d015572690))
-* **security:** pin the properties four 14.23.0 review findings said were missing ([e758465](https://github.com/event4u-app/agent-config/commit/e758465188a24a400f921720af11c982f62f5afd))
+# Era: pre-16.0.0 — archived
 
-### Chores
+> All entries before `16.0.0` live in
+> [`docs/archive/CHANGELOG-pre-16.0.0.md`](docs/archive/CHANGELOG-pre-16.0.0.md).
+> The archive is read-only; git tags remain the canonical
+> source for what shipped. Splitting them out of the main file
+> keeps the active era under the 250-line drift cap enforced by
+> `tests/test_changelog_eras.py`.
 
-* **review:** declare the completion-review skip, no code surface ([7c30e41](https://github.com/event4u-app/agent-config/commit/7c30e41e4c35ff02298a7b45f87ec7648e0db75a))
-* **review:** re-bind the skip declaration after the exemption row ([82218b2](https://github.com/event4u-app/agent-config/commit/82218b212e79cf2c40328bc12de17dac60689051))
-* **review:** re-bind the skip declaration to the corrected scope ([1c65494](https://github.com/event4u-app/agent-config/commit/1c65494a3c35b8175bb4a5cc435fee57e2fe671c))
-* **review:** declare the completion-review skip for the wiring diff ([d1eb452](https://github.com/event4u-app/agent-config/commit/d1eb452ec40104b56acc77f653cd05546c1c372e))
-* **review:** re-derive the manifest roadmap hash after the finding-8 fix ([d54ed6a](https://github.com/event4u-app/agent-config/commit/d54ed6a3e14925b67e7599c0b277b9ea8fb9430a))
-* **review:** disposition all twelve findings and re-bind the round ([7b0740b](https://github.com/event4u-app/agent-config/commit/7b0740b49c7aaec71d3112cac94f10a1899bb350))
-* **config:** record the publish-surface change the pyc negations caused ([4ddf345](https://github.com/event4u-app/agent-config/commit/4ddf34525643292f6c5949f0725557b6b5341a84))
-* **review:** record the completion review before its findings are fixed ([726b9b8](https://github.com/event4u-app/agent-config/commit/726b9b8b9d4d79376d06862abbf08d2cf5437227))
-* **ratification:** record the artifact for the platform-anchor change ([19b88df](https://github.com/event4u-app/agent-config/commit/19b88df6645802a199e0ee7114dd1d58fdb618f6))
-* **hooks:** recompile the manifest after the comment edit ([6c543f0](https://github.com/event4u-app/agent-config/commit/6c543f0a268124d8018b108566d8561348623dc3))
-* **roadmap:** archive the packed-payload cap, 6/6 with its blocker resolved ([d0c6a96](https://github.com/event4u-app/agent-config/commit/d0c6a9677ba65953b08e04a56d3689d256f9b1ca))
-* **sync:** regenerate every surface the two retired commands were counted in ([5e16fe9](https://github.com/event4u-app/agent-config/commit/5e16fe9c7b0c9a107e37ba733b778a981fcd6ca5))
-* **sync:** regenerate projections after merging origin/main ([51c7534](https://github.com/event4u-app/agent-config/commit/51c7534bf1367bb54ec22e41878a8bc987b1cac0))
-* **evidence:** re-bind after the depth-ceiling fix ([e1b3a01](https://github.com/event4u-app/agent-config/commit/e1b3a01d234784b29f3a49d995ed2cf8fdc99d8f))
-* **evidence:** re-bind after the portability fix ([098e6ef](https://github.com/event4u-app/agent-config/commit/098e6ef67866a55e43929a1502325ac59d8f45d8))
-* **evidence:** re-bind after the ADR-evidence and bundle fix ([7f5fd9f](https://github.com/event4u-app/agent-config/commit/7f5fd9fb5fcd25783ddef4bd049a85b1a74dcdc2))
-* **evidence:** re-bind after the Node-shard fixes ([bd8d7ef](https://github.com/event4u-app/agent-config/commit/bd8d7ef50b31f85674e5c148462183a6c7ac45b2))
-* **evidence:** re-emit the census and host cost table at the current pin ([a3c855e](https://github.com/event4u-app/agent-config/commit/a3c855e6ea7fb6d6ab2b01b673a7270774d73e06))
-* **evidence:** re-bind after the two-tree fix and the kernel re-anchor ([ebe1dfc](https://github.com/event4u-app/agent-config/commit/ebe1dfc4718913dc07bdbb3cbc3c9cef3cb300e1))
-* **evidence:** re-bind after the stub-ceiling fix ([b50fd49](https://github.com/event4u-app/agent-config/commit/b50fd49d89b6f8002b9ebbf2100d098ed6753644))
-* **evidence:** re-bind the findings artefact after the size-budget payback ([04cae66](https://github.com/event4u-app/agent-config/commit/04cae668f747028c290a705bf80653dec8f0c620))
-* **evidence:** re-bind the R2 findings artefact to the post-fix scope ([7cfc849](https://github.com/event4u-app/agent-config/commit/7cfc849ffdd125b386cc3c8fdc673ae6c2dc29e2))
-* **evidence:** re-emit the per-host standing-payload census at the merged pin ([469a075](https://github.com/event4u-app/agent-config/commit/469a07566f2fbcad069d5bf222f18a016b582dd3))
-* **roadmap:** continuity-writer-activation — five of six blockers resolved by council ([7e2f548](https://github.com/event4u-app/agent-config/commit/7e2f54878b8cb18bfae4eff3348dd38e78bdf7d0))
-* **roadmap:** packed-payload-cap — reproduce the baseline, and the passing reading is the wrong one ([4d5a214](https://github.com/event4u-app/agent-config/commit/4d5a21493c16676cf55773d9c84197343f3810cb))
-* **evidence:** disposition the 14.23.0 findings, and answer the stub's open question ([d6053c0](https://github.com/event4u-app/agent-config/commit/d6053c0d2d6b4935dfae9fd7f147bc95fb5ba6e3))
-* **roadmap:** delivery-on-hook-hosts — prerequisite met, and the E3 bar was never the obstacle ([bdb6a59](https://github.com/event4u-app/agent-config/commit/bdb6a597eb3c56eeeb8f1a62c69df5baf8cc0911))
-* **evidence:** re-run the ADR census after merging main ([5becc38](https://github.com/event4u-app/agent-config/commit/5becc38871ed1167dd5c3b955a95e7d1ffd9ba77))
-* **roadmap:** re-review the risk register after the surface decision ([460017a](https://github.com/event4u-app/agent-config/commit/460017a17d1accb36c4aa7750d53fbe70e17b8db))
-* **roadmap:** archive iron-law-reserve-activation, re-depth its links ([36a18bb](https://github.com/event4u-app/agent-config/commit/36a18bb7bebf0a5d4dcb19985a7467edc2fd959c))
-* **roadmap:** close iron-law-reserve-activation on the decide-against branch ([4b1e101](https://github.com/event4u-app/agent-config/commit/4b1e101c2aa9fdd4eb90762fa70fefbdddbab959))
+# Era: pre-16.1.0 — archived
 
-### Other
+> All entries before `16.1.0` live in
+> [`docs/archive/CHANGELOG-pre-16.1.0.md`](docs/archive/CHANGELOG-pre-16.1.0.md).
+> The archive is read-only; git tags remain the canonical
+> source for what shipped. Splitting them out of the main file
+> keeps the active era under the 250-line drift cap enforced by
+> `tests/test_changelog_eras.py`.
 
-* the anchor measures the trust model you chose, with a dated waiver for the risk you accepted (#1995) ([d81f2a6](https://github.com/event4u-app/agent-config/commit/d81f2a6ed24d196851fd85b280476ce534cb7a92))
-* **r2:** retract the previous correction, which had the diagnosis backwards ([8b8a18f](https://github.com/event4u-app/agent-config/commit/8b8a18f0f11d534a5867769895c2e7ccfd227da1))
-* **r2:** correct two prose defects in the delivery-for-every-host findings ([6e560d1](https://github.com/event4u-app/agent-config/commit/6e560d1bc19b61d1351555bc2375e9cf3ffb1bbf))
-* **r2:** third re-bind, owed by the main merge and the ADR renumber ([431024d](https://github.com/event4u-app/agent-config/commit/431024d7e98f42d6a418be29bf00a465d21723d1))
-* **r2:** second re-bind, owed by the derived-file half of finding 6 ([f7fb052](https://github.com/event4u-app/agent-config/commit/f7fb052ffe367dece22c5890ec5ead0082b8c700))
-* **r2:** disposition all nine findings and re-bind the round to the current scope ([6d7b833](https://github.com/event4u-app/agent-config/commit/6d7b8334a85e1ebc71ed1fc2e9f9a0fb74d518e1))
-* **r2:** dispatch a fresh completion review bound to the current scope ([5213861](https://github.com/event4u-app/agent-config/commit/5213861760eead0f1a96c0f4f49a9d4ff2e828a6))
+# Era: 16.1.x — current
 
-Tests: 22890 (+427 since 14.23.0)
+> Started at `16.1.0`. Full entries live inline below.
+> The drift test caps this era at 250 lines of entry body; growth past
+> that forces a new era split (`# Era: 16.2.x`, etc.) — see
+> [`docs/contracts/CHANGELOG-conventions.md § Era splits`](docs/contracts/CHANGELOG-conventions.md).
 
-## [14.23.0](https://github.com/event4u-app/agent-config/compare/14.22.0...14.23.0) (2026-09-09)
+## [16.1.0](https://github.com/event4u-app/agent-config/compare/16.0.0...16.1.0) (2026-09-28)
 
 ### Release highlights
 
-- **Behaviour changes:** the artifact-versus-brand split does not fit the standing payload (b798f4f); one skill taught the failure design-fidelity forbids (1c04ccd); name `killed-if` as the field a falsified rejection reads (7f21116); stop a vacuous parity comparison reading as a pass, and record two contracts honestly (f121cf9); compensate the standing-payload growth instead of raising the ceiling (4bdca0f); move the horizon reference material out of the per-spawn body (89658f1); +2 more.
-- **Default changes + migration:** deterministic session-end record writer, default-off (1dc768d); MIGRATION entry for the readers, and regenerate the skills catalog (3fa7886); pay the activation charge and flip the default for Claude Code (ffb09a6).
-- **Security and correctness:** repair the regressions #1964 introduced — a blocking guard is weakened on main (#1966) (bdbd5b7); Fix: a successor now finds its predecessor's recycle envelope (#1965) (f58ba26); block-speaking-inbox-dir refused reads it was never scoped to (82169c5); repair all seven R2 findings on the trust contract (ced1322); repair all five R2 round-2 findings (bd9962e); repair all three R2 completion-review findings (30ea290); +15 more.
-- **Honest nulls:** _none_
-- **Known limitations:** _none_
+- **Behaviour changes:** design-fidelity becomes provable, and the auto-rule bucket gets a ratchet (#2058) (107a210); split the ladder context and pay both size ratchets back (27daf4e); restore the concrete verification tools in autonomous-execution (e12e3c2); clear the six reds this branch created, and pay the payload cost honestly (bbdbcad); a delivery block, Class C at every key (018f729); tests are evaluators, and two gates that see the cheap half (64fcc3d); +8 more.
+- **Default changes + migration:** regenerate the install bundle for the per_phase schema default (a5759da); move both MIGRATION.md refusals out of release.ts (ad5f26b); register the migration-section gate outside the ratification self-watch (d0ff02a); refuse a major cut whose BREAKING section has no migration entry (2bb5176); give 15.0.0 and 16.0.0 the sections their BREAKING entries earn (d720135); separate the template default from the parser fallback, in ten places (295e753).
+- **Security and correctness:** stop the reach:doctor witness watching shared mutable state (f83ce46); repoint the codex writer citation after the second line shift (4ad8939); surface preserved files instead of swallowing every conflict channel (2d96040); stop the rule rewrite from dropping a preserved file's frontmatter (78e77b1); stage the file the installer would have written, and record it (eecbaa0); repoint the codex writer citation after the line shift (157482d); +29 more.
+- **Honest nulls:** record a third exposure reading and the first near-miss (fabcaa5); record the independence level per group, closing AC-2 (af398a1); record the post-merge exposure reading as a dated addendum (dfa5bcb); prepare the rule-13 split as one verified, unapplied decision (2615000); pre-register release-hold-refuses-declared-state as unbacked (f599a4b).
+- **Known limitations:** surface preserved files instead of swallowing every conflict channel (src/ui/pages/WizardPage.tsx declares a residual) (2d96040); stage the file the installer would have written, and record it (src/scripts/install.ts declares a residual) (eecbaa0); keep recorded digests across runs, so preservation survives (src/scripts/install.ts declares a residual) (539b08c); move the preservation state machine out of install.ts (src/scripts/install.ts declares a residual) (dfb10aa); preserve a user-modified managed file instead of overwriting it (src/scripts/install.ts declares a residual) (86fb653); write the transaction log from the headless apply path (#2057) (src/scripts/install.ts declares a residual) (5ca2d5b); +10 more.
 
-> **Governance mix:** governance-only 62 vs consumer-only 13 (taxonomy 1.1.0).
+> **Governance mix:** governance-only 89 vs consumer-only 21 (taxonomy 1.1.0).
 
 ### Features
 
-* **ci-settle:** refuse a verdict about a head that stopped mattering ([7a07631](https://github.com/event4u-app/agent-config/commit/7a076319734f501cdb0559ef6310340592e8479a))
-* **roadmap:** the recycle envelope is written but never read — measured ([45f372a](https://github.com/event4u-app/agent-config/commit/45f372a3263375a70d3076377e5b3b92f46ac665))
-* **memory:** wire the trust contract, and the corpus fixture that proves it ([b6b464c](https://github.com/event4u-app/agent-config/commit/b6b464c0aaa6deb2c62f2983760eb66d65349cc1))
-* **memory:** the six-property trust contract for the session-start index ([0296fb5](https://github.com/event4u-app/agent-config/commit/0296fb5981f8de8dbb148c794ab62fbbe3b895d4))
-* **hook-hosts:** close step 4.2 and resolve the predecessor blocker ([26b1876](https://github.com/event4u-app/agent-config/commit/26b1876ef8943c3d9869108c6a6ef4d9ff0985f5))
-* **vendor:** anchor the vendored grammars to the locked upstream ([ca37441](https://github.com/event4u-app/agent-config/commit/ca374419226924b6a9aca50597348108acf17b6f))
-* **gate:** no blocker id may be open in both an active and an archived roadmap ([85883c6](https://github.com/event4u-app/agent-config/commit/85883c600bccbe172c8bd7499dc41d291cdf4e6f))
-* **autonomy:** ADR-268 plus the three receiver roadmaps from the inbox-2026-09-w drain ([9f2e714](https://github.com/event4u-app/agent-config/commit/9f2e714ae38bb8246c74a0157188b6675559169c))
-* **pr-merge:** activate section 9 under ADR-266 ([0f24135](https://github.com/event4u-app/agent-config/commit/0f241359eb786f1356ab109c0883b0eeb263b545))
-* **continuity:** three independent kill switches and the rollback note ([8a23f6b](https://github.com/event4u-app/agent-config/commit/8a23f6b0840a50c3635b21beb6c2b9f8e744946f))
-* **continuity:** deterministic session-end record writer, default-off ([1dc768d](https://github.com/event4u-app/agent-config/commit/1dc768d442d06e9f553bc48c83b4386e799acaf7))
-* **continuity:** settle the record-slot capacity policy before any writer ([7bb1bf5](https://github.com/event4u-app/agent-config/commit/7bb1bf53a6cfd0f41a1203d909b4d78b79a36dba))
-* **notes:** name `killed-if` as the field a falsified rejection reads ([7f21116](https://github.com/event4u-app/agent-config/commit/7f2111668d68d2a3144c49a99a30bf1863371285))
-* **mcp:** five graph tools, the pinned install hint, and the skill description ([9452f29](https://github.com/event4u-app/agent-config/commit/9452f29b4b82790c867b1e62b93ca7e82003f539))
-* enforce the shrink-only standing-payload grace ceiling ([7c0d109](https://github.com/event4u-app/agent-config/commit/7c0d1096e32c93381a16cd669fecc034712237bd))
-* **regression-selector:** select over the native code graph ([2d900fc](https://github.com/event4u-app/agent-config/commit/2d900fc4a2aa2166dd3472d4c8fb3148187c2442))
-* **code-graph:** four gate verbs — impact, tests-for, untested, dead ([a8ff075](https://github.com/event4u-app/agent-config/commit/a8ff075c59d8a6f774b6cb02d6866e400fa647ac))
-* **code-graph:** derive the tests relation and move GraphState into the engine ([a31335f](https://github.com/event4u-app/agent-config/commit/a31335f9a21acc51e66ea801f7509acf88894d7e))
-* **delivery:** pay the activation charge and flip the default for Claude Code ([ffb09a6](https://github.com/event4u-app/agent-config/commit/ffb09a604b5328d9e27cad5c10f2e2dd58c91646))
-* **reasoning:** a commitment horizon that is decidable, and a reopen that ends ([306df03](https://github.com/event4u-app/agent-config/commit/306df03ec6ef866519a9c81e4cd051bb38082cc4))
-* **delivery:** scope thinning to a host, and prove the other hosts are untouched ([9ae0ff2](https://github.com/event4u-app/agent-config/commit/9ae0ff2889ce3c30d5cbd9432d659fc624685b2b))
-* **delivery:** freeze the standing payload per host, and correct D3 from 8 to 11 ([afd1579](https://github.com/event4u-app/agent-config/commit/afd15798d798ca38b139d3721179496b20d4ae14))
+* **corpus:** re-derive threat-modeling and database corpora ([6991eea](https://github.com/event4u-app/agent-config/commit/6991eeab900adb08f89b13b36960b4c20aba1016))
+* **install:** preserve a user-modified managed file instead of overwriting it ([86fb653](https://github.com/event4u-app/agent-config/commit/86fb653f2304d743fc668546c2e4a5d5c1a6201f))
+* **install:** write the transaction log from the headless apply path (#2057) ([5ca2d5b](https://github.com/event4u-app/agent-config/commit/5ca2d5b1ac0cc28deb4a2104458f6547c75dc1b4))
+* design-fidelity becomes provable, and the auto-rule bucket gets a ratchet (#2058) ([107a210](https://github.com/event4u-app/agent-config/commit/107a21051f659aea4b9f362ecc7bd2d03903376d))
+* **roadmap-template:** split rule 13, add release-holds rule 28 (#2055) ([47bb077](https://github.com/event4u-app/agent-config/commit/47bb0771991ee696d880857f2e2d7fd8209fa174))
+* **lib:** a per-test independence record, so a level can be checked ([ca0dbca](https://github.com/event4u-app/agent-config/commit/ca0dbcae86ef1fbb3c67a9add1fb1f1d2080d3aa))
+* **continuity:** the mission record, council transport, and the authority path ([85b9a55](https://github.com/event4u-app/agent-config/commit/85b9a55c1396a4fe9f2b5fb95310b426956dddd7))
+* **guardrails:** what rides along, the typed-op watch, and the council's veto ([53fd5dc](https://github.com/event4u-app/agent-config/commit/53fd5dc755e243e3f07c5272614f680ea802c993))
+* **sync:** a cascade base, and an unenumerated conflict routes instead of halting ([7d69218](https://github.com/event4u-app/agent-config/commit/7d692181d39654d222ab3a706da01e47f429ac10))
+* **forge:** the six required layers, and doctor reads forge protection ([43bcf72](https://github.com/event4u-app/agent-config/commit/43bcf725ba7211ae8b68dc1d3d2076b8405c8ac1))
+* **docs:** a per-host destructive column, measured rather than asserted ([0e100f1](https://github.com/event4u-app/agent-config/commit/0e100f17c560b2afd43fb72b7789f6290e063f7b))
+* **roadmap:** prepare the rule-13 split as one verified, unapplied decision ([2615000](https://github.com/event4u-app/agent-config/commit/26150006d28a9b491c02f6ef8e8ef83c7bf5898f))
+* **loops:** give the run-terminal vocabulary its three consumers ([fb3aa4e](https://github.com/event4u-app/agent-config/commit/fb3aa4ed7911907777f3ededc67ad9a6f19bf0a7))
+* **claims:** pre-register release-hold-refuses-declared-state as unbacked ([f599a4b](https://github.com/event4u-app/agent-config/commit/f599a4b264a824d797b2b2e99915bb99b3bff82c))
+* **roadmap:** land release-holds Phase 0.1-0.3 with three measured corrections ([104f08c](https://github.com/event4u-app/agent-config/commit/104f08c120847c6bb0c0b1132fe70ab128dd2712))
+* **gates:** add a _lib-export-reach axis to check_gate_reachability ([496482a](https://github.com/event4u-app/agent-config/commit/496482a3c4279f56e6a8449e7fb71f004a7e52ea))
+* **config:** declare the five loop surfaces and their instruments ([dc6d96d](https://github.com/event4u-app/agent-config/commit/dc6d96d26889b34d5791b2881d391279cd849b77))
+* **install:** three-state ownership in the conflict matrix ([71a4580](https://github.com/event4u-app/agent-config/commit/71a4580070b49489951c25b7ed463b2a106dbfac))
+* **settings:** a delivery block, Class C at every key ([018f729](https://github.com/event4u-app/agent-config/commit/018f7294360b662bad3a978937a10b69f37b93b3))
+* **install:** read the recorded per-file digest the manifest already carries ([8624ca5](https://github.com/event4u-app/agent-config/commit/8624ca5bcfd110577a976dfb3dec3e4f71f4308a))
+* **conformance:** the txlog check can go non-green, and its remedy is true ([a2bc8ef](https://github.com/event4u-app/agent-config/commit/a2bc8ef76b1ddf2444841b1230743db8d370d912))
+* **gates:** tests are evaluators, and two gates that see the cheap half ([64fcc3d](https://github.com/event4u-app/agent-config/commit/64fcc3da23caf0492fce20a70336e91ad05d747b))
+* **execution:** route mid-run residue by the same ownership table ([8585311](https://github.com/event4u-app/agent-config/commit/85853118c16ae11efc14d66490ef47dcc3753da5))
+* **scope:** enumerate scope growth by ownership, not by size ([0bd6db4](https://github.com/event4u-app/agent-config/commit/0bd6db4b3dfe47a8073c3acb7690b1b27b533681))
+* **hooks:** add the turn-end obligation reader, in shadow ([70b3559](https://github.com/event4u-app/agent-config/commit/70b3559bd06204732c3d1c27dde3cb4dc7713399))
+* **census:** four axes, and the two targets that are actually measurable ([89a3838](https://github.com/event4u-app/agent-config/commit/89a3838f4dd40cacc394809a95518ea419e5c3b7))
+* **run-continuation:** a run cannot end with red CI while its checkboxes read complete ([6baf897](https://github.com/event4u-app/agent-config/commit/6baf89735d2b98f86b4f231476f9ddf7f04e1f5c))
+* **rules:** the fix-loop bound triggers a strategy change, never a question ([06a9f0b](https://github.com/event4u-app/agent-config/commit/06a9f0b896e713960e274f74ec378f9b833aba5e))
+* **ask:** use the host's native primitive, and ask residue instead of filing it ([e236e88](https://github.com/event4u-app/agent-config/commit/e236e88e8dd3fc0abeeb409fac7ce4903711f260))
+* **hooks:** mount the conformance verdict in shadow, block path untouched ([09be9ca](https://github.com/event4u-app/agent-config/commit/09be9ca0f9f88bc46756ac11afadc6ef06e441a3))
+* **hooks:** record each host's ask shape as a manifest row ([4c52daf](https://github.com/event4u-app/agent-config/commit/4c52daf8d5470ba49f999d6e84cb3fac598f635c))
+* **blockers:** a judgement call is closed, never parked ([5ed431b](https://github.com/event4u-app/agent-config/commit/5ed431b046c8bf82f89e974755257d8ed7a0b5d6))
+* **hooks:** give the delivered-obligation record a ledger and two doctor lines ([ee388dc](https://github.com/event4u-app/agent-config/commit/ee388dc764106cfbe146f97ac30b220cf62f99e1))
+* **skills:** contract the five behavioural stories and the breakpoint rows ([74ae80b](https://github.com/event4u-app/agent-config/commit/74ae80bd4e21e9abef36529ae2a07350943a6f56))
+* **council:** the owner-facing options block becomes conditional on ownership ([915f2d3](https://github.com/event4u-app/agent-config/commit/915f2d3d5e9bea2f9634f1c65c2913dd394f8051))
+* **scripts:** add ui_conformance_probe, structure gated before style ([8ed491c](https://github.com/event4u-app/agent-config/commit/8ed491c11ceba058b69a77ac220da0d3b8583a87))
+* **rules:** test-first, a 40-line rule that activates the TDD skill ([d278dd9](https://github.com/event4u-app/agent-config/commit/d278dd98cb21393e0b64e081c2903820f17f93fa))
+* **roadmap:** make `## Decisions` the plan's closure record ([088f98f](https://github.com/event4u-app/agent-config/commit/088f98fc2a7cc375b4eeefaf67eb902b55488ca0))
+* **census:** count an explicit bypass as its own axis ([a145778](https://github.com/event4u-app/agent-config/commit/a14577800332efb614012c1a74b21f985eef6248))
+* **rules:** close the declared enforcement-class vocabulary beside obligation_frequency ([513ecef](https://github.com/event4u-app/agent-config/commit/513ecefc6dfb6b2ce15d532bffa47a483065a312))
+* **planning:** declare roadmap producers, and make closure their last step ([94112d8](https://github.com/event4u-app/agent-config/commit/94112d886793ba268e91efa660210a53737e9aac))
+* **settings:** quality runs under a mission, per-phase cadence, an execution block ([83700d3](https://github.com/event4u-app/agent-config/commit/83700d38e16c0655019b80e9060cbae8c9477fef))
+* **challenge-me:** add the closure sub-command and its detector ([0257cd3](https://github.com/event4u-app/agent-config/commit/0257cd39b51e47b2c5e0acecc225139d0fbd0c67))
+* **release:** refuse a major cut whose BREAKING section has no migration entry ([2bb5176](https://github.com/event4u-app/agent-config/commit/2bb5176dcbd2ff98b4932e887af9749d8fb9d755))
+* **release:** derive Known limitations, the fifth label nothing derived ([ebc4286](https://github.com/event4u-app/agent-config/commit/ebc4286bef16cd05f4f48bcb517ff9a223db06ee))
+* **roadmap-create:** the council is a step, not a billable offer ([96f7aa8](https://github.com/event4u-app/agent-config/commit/96f7aa891186938b7b24f1a605c100849f8d3652))
+* **council:** route decisions by ownership, not by impact ([58e4366](https://github.com/event4u-app/agent-config/commit/58e4366b8eb73e97756d9bc09394faae354171d0))
+* **gates:** register the hook-manifest triple in check_generator_sync ([16cf6fa](https://github.com/event4u-app/agent-config/commit/16cf6fafc9fde371fdcb74b17610c4f991bac30b))
+* **hooks:** let compile_hook_manifest write outside the tree ([bacde7d](https://github.com/event4u-app/agent-config/commit/bacde7d2ef1d6ccafca507156a842a4e92d3cf77))
+* **gates:** deliver the memory before the action, and refuse a generated artefact its source outran ([9c7d1ef](https://github.com/event4u-app/agent-config/commit/9c7d1ef543a326e80dba0b42bfddc20905c90d4a))
+* **payload:** split the payload metric into three, and correct a stale figure this roadmap carried ([3f439c3](https://github.com/event4u-app/agent-config/commit/3f439c3ca4b9959efb7cb6fed01dd85bd1fac445))
+* **docs:** generate the enforcement matrix per slot, and title it for what it proves ([128b227](https://github.com/event4u-app/agent-config/commit/128b227889d6cb4b5ecb4d86aa6099c5bcd63c9c))
+* **gates:** measure the enforcement table against its configuration, and get one mismatch ([dfc1f93](https://github.com/event4u-app/agent-config/commit/dfc1f93d9f8ce186097b537eb886ada96c4b5812))
 
 ### Bug Fixes
 
-* **budgets:** record the mcp_public_tool_count move 20 -> 25 ([#1968](https://github.com/event4u-app/agent-config/pull/1968)) ([7b76059](https://github.com/event4u-app/agent-config/commit/7b76059585e30dc646ee899ff5d8620299505910))
-* **hooks,design:** repair the regressions #1964 introduced — a blocking guard is weakened on main (#1966) ([bdbd5b7](https://github.com/event4u-app/agent-config/commit/bdbd5b762a1943c75040014198b7c8aba5030660))
-* **design:** one skill taught the failure design-fidelity forbids ([1c04ccd](https://github.com/event4u-app/agent-config/commit/1c04ccd158c44f089ac1a18372d4062c398e9c42))
-* **hooks:** block-speaking-inbox-dir refused reads it was never scoped to ([82169c5](https://github.com/event4u-app/agent-config/commit/82169c5cfa4987027a86547c52a94b66e0244636))
-* **memory:** repair all seven R2 findings on the trust contract ([ced1322](https://github.com/event4u-app/agent-config/commit/ced1322f266a02ae567a32293e334b0416c16e3c))
-* **continuity:** dispose of the session-index latch in the inventory ([1f8e051](https://github.com/event4u-app/agent-config/commit/1f8e05166d22c5c67da69b568daba27bba54a459))
-* **hook-hosts:** move the 4.2 note under its own step, re-review the risk register ([88608f2](https://github.com/event4u-app/agent-config/commit/88608f22f522ce44e1efc5c647d107c47ff0571f))
-* **review:** repair all five R2 round-2 findings ([bd9962e](https://github.com/event4u-app/agent-config/commit/bd9962e046f4132c06d33130d88a53cd6b330857))
-* **review:** repair all three R2 completion-review findings ([30ea290](https://github.com/event4u-app/agent-config/commit/30ea290301b3270fc060aef459cb5a1595688857))
-* **adr-263:** the 187 figure is an arithmetic error; 189 stands ([f6de539](https://github.com/event4u-app/agent-config/commit/f6de5393679268d064292964d0ab10bf8bd5c1ed))
-* **archival:** refuse to archive a roadmap whose staged blockers differ from the working tree ([c3f6c00](https://github.com/event4u-app/agent-config/commit/c3f6c00565f247f3256ef25edf56e97cf013d7b7))
-* **adr:** give ADR-266 the Evidence section it owes ([2876dd9](https://github.com/event4u-app/agent-config/commit/2876dd91eca6f881b26b5094ea70398450988ba5))
-* **roadmap:** correct 192 -> 193, and record the drift as the finding ([a9d1bfe](https://github.com/event4u-app/agent-config/commit/a9d1bfe6e6a59a7b2bce9b20546f09572a51d72a))
-* **estate:** claim the one-in-one-out offset the second receiver needs ([abdfa4e](https://github.com/event4u-app/agent-config/commit/abdfa4e4eca22eaa1759d2f0672f8a535cea6dbf))
-* **contracts:** keep-beta-until must sit inside the 90-day window ([fcdfc30](https://github.com/event4u-app/agent-config/commit/fcdfc300b4a5278418fb39976a8ae58abfedfdee))
-* **settings:** the two downstream surfaces the continuity section missed ([adaa5c3](https://github.com/event4u-app/agent-config/commit/adaa5c387f384ff5571f07a8298344120266b882))
-* **release-findings:** disposition the eleven 14.22.0 blocking findings ([7151087](https://github.com/event4u-app/agent-config/commit/71510872cbcaec3f7e4af7e9132577b2033c9bbd))
-* **roadmap:** land the blocker pointer that git mv left unstaged ([7c7d2f7](https://github.com/event4u-app/agent-config/commit/7c7d2f76d3b9a1d4edb4a59863ebd735da1c5ce7))
-* **release-findings:** ingest the 14.22.0 self-review, envelope included ([4a35059](https://github.com/event4u-app/agent-config/commit/4a350592b8dfc12a125806ea45affb1e28d1cb3d))
-* **ci:** the generator self-reference rule, and re-measure the delivery-set record ([3d0ce92](https://github.com/event4u-app/agent-config/commit/3d0ce9213025b5a22a791772c4e7556cd9a42dc3))
-* mark the not-yet-existing ledger path as a deliberate non-reference ([2066776](https://github.com/event4u-app/agent-config/commit/2066776bbdbbd194cc8fca0d30557410fa3066fe))
-* **code-graph:** repair every defect an independent completion review found ([62bfb0e](https://github.com/event4u-app/agent-config/commit/62bfb0e80395f2919849c8f8b0763200e46fc308))
-* **lint:** drop the roadmap path from a source docblock ([a0b9d20](https://github.com/event4u-app/agent-config/commit/a0b9d20635c72e970e4ad0b75681693a5b29384f))
-* **report:** derive the census figure instead of hardcoding a literal that went stale ([23e390b](https://github.com/event4u-app/agent-config/commit/23e390baff4bd7f88b981fd2b6520eccf82efcb7))
-* **estate:** trim the skill description by one word to hold the token floor ([a2ca885](https://github.com/event4u-app/agent-config/commit/a2ca8851751de9230e556f9a49a357be8b33689a))
-* **delivery:** close R2 finding 1 by measuring the shipped reach, and de-duplicate the router sets ([0870750](https://github.com/event4u-app/agent-config/commit/08707501c63ce528809c3f599b1fb3fd5293a1a5))
-* **lint:** drop markdown headings and box rules from the new comments ([dac3f12](https://github.com/event4u-app/agent-config/commit/dac3f12c4e457d538c5843385c883868286de2e3))
-* **budget:** reconcile the rule-inject cap onto the owner-specified charge, downward ([80769d7](https://github.com/event4u-app/agent-config/commit/80769d76a3df743d7a94d4f3395fd6d7a0e39e02))
-* **report:** make the standing-payload report's own guards as strong as its sentences ([2145f18](https://github.com/event4u-app/agent-config/commit/2145f184429954c0f8b55b9958eb09d84add37e1))
-* **gates:** stop a vacuous parity comparison reading as a pass, and record two contracts honestly ([f121cf9](https://github.com/event4u-app/agent-config/commit/f121cf975e18c93e825abf6830b2805ba2ddc514))
-* **delivery:** make both lean_projection readers agree — same-indent hosts list, host-aware gate ([e1743b5](https://github.com/event4u-app/agent-config/commit/e1743b508480088d60ba9f0df8ee7718b90c1ae4))
-* **adr:** finish the 263 -> 265 renumber inside the record itself ([0949257](https://github.com/event4u-app/agent-config/commit/0949257ab41a720fc83fb24708b41c3a2e0840d2))
-* **settings:** admit lean_projection delivery + hosts in the server schema ([767b007](https://github.com/event4u-app/agent-config/commit/767b00791c26813cf64ad4312e03885ccd775e5e))
-* **ci:** carry the four measurements this branch moved, none of them a threshold ([f7f0986](https://github.com/event4u-app/agent-config/commit/f7f0986f91d45c8323523fef95c0607a465e5dc0))
-* **tests:** the repair record quoted the literal its own gate forbids ([4803b9d](https://github.com/event4u-app/agent-config/commit/4803b9dafda0ac8d8eb75b15ab84b72643bf5457))
-* **thin-rules:** the repair record reproduced the literal the gate forbids ([b197df8](https://github.com/event4u-app/agent-config/commit/b197df81ed85f2776ee1736abffe3d4dcca2da97))
-
-### Performance
-
-* **mcp:** trim the graph tool surface, then re-anchor only mcp_schemas ([a904c00](https://github.com/event4u-app/agent-config/commit/a904c0046361a0ca4bbe4a4a16f217bd574bd363))
-* **bench:** re-anchor thin_rule_load onto the post-E2 projection, attribution measured ([12ccf11](https://github.com/event4u-app/agent-config/commit/12ccf1158f796216d9ec775ec1efc5f0c7437085))
-* **rule:** compensate the standing-payload growth instead of raising the ceiling ([4bdca0f](https://github.com/event4u-app/agent-config/commit/4bdca0f4cc6018207de8793cc2ca50e9b966ad21))
-* **rule:** move the horizon reference material out of the per-spawn body ([89658f1](https://github.com/event4u-app/agent-config/commit/89658f16c0dc094a25345f492da34861530c397a))
+* **roadmap:** give D1 the mandated Decisions-table columns ([922085a](https://github.com/event4u-app/agent-config/commit/922085aafe00c049e1f1b6c3323bdca962bd7fd5))
+* **evidence:** use the six-column findings-table shape ([8452a91](https://github.com/event4u-app/agent-config/commit/8452a91dfef6abe97895617a9cf9a283f682c37f))
+* **evidence:** declare the review artefact's evidence type ([b54ae08](https://github.com/event4u-app/agent-config/commit/b54ae086a2814a3ce92c1d00133929ff5c9378fe))
+* **tests:** stop the reach:doctor witness watching shared mutable state ([f83ce46](https://github.com/event4u-app/agent-config/commit/f83ce4600dba85f1ea139608ba056b91846f586f))
+* **roadmap:** correct AC-2's prose, which put AC-5 in the refused set ([b992b5c](https://github.com/event4u-app/agent-config/commit/b992b5cd46db0b01d68d1fc295c5e70b57fc4467))
+* **report:** repoint the codex writer citation after the second line shift ([4ad8939](https://github.com/event4u-app/agent-config/commit/4ad8939fd8df76305bced49a1be859f663a0bfb6))
+* **wizard:** surface preserved files instead of swallowing every conflict channel ([2d96040](https://github.com/event4u-app/agent-config/commit/2d96040a9e7b1721570f0b100cb099500be89b6c))
+* **install:** stop the rule rewrite from dropping a preserved file's frontmatter ([78e77b1](https://github.com/event4u-app/agent-config/commit/78e77b12a4d668c633ba7382af9cfbe8349f6010))
+* **install:** stage the file the installer would have written, and record it ([eecbaa0](https://github.com/event4u-app/agent-config/commit/eecbaa07d530b2ef338b1739ba196cec13199eed))
+* **report:** repoint the codex writer citation after the line shift ([157482d](https://github.com/event4u-app/agent-config/commit/157482d802f2a848fbb431ffd5bfc003b6cf0e84))
+* **install:** prove sidecar ownership from the manifest, not from byte equality ([df8c516](https://github.com/event4u-app/agent-config/commit/df8c516c1bcb6ae41f609c70653bdf65a0ff3737))
+* **install:** keep recorded digests across runs, so preservation survives ([539b08c](https://github.com/event4u-app/agent-config/commit/539b08cc2094e0e91caf4e13e1a80aadb88e6480))
+* **install:** spell out the macOS realpath symlink instead of quoting it ([e740520](https://github.com/event4u-app/agent-config/commit/e740520fe6b37023b9938addccc887cd95dc235e))
+* **gate:** base R1 staleness on the commit that introduced the review (#2065) ([61bbdb1](https://github.com/event4u-app/agent-config/commit/61bbdb10f2103a147cb90adc73e7bb3096d7c12c))
+* **roadmap:** reword three ruleset-type mentions the reference gate reads as rule refs ([c204e85](https://github.com/event4u-app/agent-config/commit/c204e85c31a3cab803aa7127efb436055324b932))
+* **roadmap:** mark the seven blocked steps so scanOpenSteps reads them ([438c2e5](https://github.com/event4u-app/agent-config/commit/438c2e55e239237bb9f0a3c63155c16b51b35461))
+* **roadmap:** declare release-holds blockedness where the scanner reads it ([aed1e94](https://github.com/event4u-app/agent-config/commit/aed1e94f65a97a1eb47e9b0621e24e768e8621a3))
+* **roadmap:** rebase the rule-13 split onto its moved base ([4a91ca8](https://github.com/event4u-app/agent-config/commit/4a91ca84ad1d6ed22e4f03baa249621f7e41b822))
+* **roadmaps:** mark the 13 owner-gated steps blocked so the stop slot reads them ([112e52f](https://github.com/event4u-app/agent-config/commit/112e52fb139adc68fec77f320804b6330662cd19))
+* **authority:** check that the record and the ledger name the same grant ([f5f8721](https://github.com/event4u-app/agent-config/commit/f5f872120fc5b4f5323c2e758aa4ffcc2a2dc6ba))
+* **authority:** make the exact object, the verb and the turn checkable ([91b7864](https://github.com/event4u-app/agent-config/commit/91b786421ad3443b548e1862489be79a7f16892a))
+* **roadmaps:** stop two note headings parsing as phases ([74d937b](https://github.com/event4u-app/agent-config/commit/74d937b39054e976183352a93b6a8a6d3f1bee00))
+* **install:** correct a txlog docstring naming a removed module ([6dec7fc](https://github.com/event4u-app/agent-config/commit/6dec7fce14ffc1fba3d570f06cb0f30b97e4ed45))
+* **roadmap:** decision-closure's banner claimed 0 of 22 while 17 boxes were checked ([4f6e09a](https://github.com/event4u-app/agent-config/commit/4f6e09a6acfa86ca4926c75f189eb633ed3b67dc))
+* **portability:** drop the project-local task name from the verification table ([0cc441c](https://github.com/event4u-app/agent-config/commit/0cc441ca3674b59a468dc1a8bc4511a9805b4bbc))
+* **tests:** anchor the memory_lookup staleness fixture to the real clock ([c9fdae7](https://github.com/event4u-app/agent-config/commit/c9fdae7152975e5c39b5301d140793b8cdeb8ce3))
+* **merge:** resolve three badly-committed count-badge conflicts ([8cf38c6](https://github.com/event4u-app/agent-config/commit/8cf38c6230ac2aa610f88557af6aa22e949adaa9))
+* **docs:** put the migrated German quote on one DE/EN anchor line ([5ee7e7d](https://github.com/event4u-app/agent-config/commit/5ee7e7d5ab5a17d84c33afc6cf14c01d1ebca7c6))
+* **merge:** re-derive four contested counts on the merged tree ([a671cd7](https://github.com/event4u-app/agent-config/commit/a671cd77e182fc0f8fe628521f39719da34a2bba))
+* **review:** eight findings from an independent review of this branch ([2f5c68b](https://github.com/event4u-app/agent-config/commit/2f5c68bdd518ebdcd2469cf642eea7d96c2e14ff))
+* **context:** give the new context a referrer inside the context layer ([82a7dea](https://github.com/event4u-app/agent-config/commit/82a7dea8a9d9a748fb5a69e7c36282767d14ba53))
+* **ci:** re-pin the secret-allow line, give the gates a base ref, and narrow the weakening detector ([484077c](https://github.com/event4u-app/agent-config/commit/484077ce125bda06e7b0931992f8c5259498e6b0))
+* **conformance:** the log has no writer at all — correct the premise, not just the wording ([d04ed00](https://github.com/event4u-app/agent-config/commit/d04ed00f25b7a2d0f6efa806ace66f269fe81a74))
+* **budget:** keep the scope-growth pointer off the always-rule closure ([585eaaa](https://github.com/event4u-app/agent-config/commit/585eaaa375fd42f5e4b43dbdf1a09ccb16cdb970))
+* **budgets:** split the ladder context and pay both size ratchets back ([27daf4e](https://github.com/event4u-app/agent-config/commit/27daf4ec61e8d7d237756f5a8c82042692184c91))
+* **install:** this branch published a claim its own tree contradicts ([0c4cff3](https://github.com/event4u-app/agent-config/commit/0c4cff3e04ed9d739ccd4d7d3615bab50dd1315e))
+* **docs:** house dialect on the one line this diff authored ([929d151](https://github.com/event4u-app/agent-config/commit/929d151c9a09524880e9b1d39d68c87ea061bccd))
+* **ci:** pay the settings rename off the source ratchet, and repair one link ([9413b9e](https://github.com/event4u-app/agent-config/commit/9413b9e1cf02be3355203130d76de26cb6dd864d))
+* **ci:** rebuild dist/install, and clear two ratchets the new prose tripped ([529c28e](https://github.com/event4u-app/agent-config/commit/529c28e35f3f4ee0baeee98b6dba0167edf33a14))
+* **ci:** clear the fourteen red checks this branch introduced ([d5a8efe](https://github.com/event4u-app/agent-config/commit/d5a8efebd2642ad52d5609fa154a6c92017260cc))
+* **verify-repair-loop:** require reading the failure before revising ([2718b07](https://github.com/event4u-app/agent-config/commit/2718b071692e840132fa9f66e41fefeab438df03))
+* **rules:** restore the concrete verification tools in autonomous-execution ([e12e3c2](https://github.com/event4u-app/agent-config/commit/e12e3c2d47c14a092a0b99abc6f79b7ee5e225eb))
+* **ci:** move the two test gates to tests.yml — consistency.yml is ratification-gated ([7dc3e92](https://github.com/event4u-app/agent-config/commit/7dc3e922fceb54ebd82b013941ccae09f3d69c17))
+* **hooks:** replace three raw NUL separators and record the concern admission ([39db453](https://github.com/event4u-app/agent-config/commit/39db4536880688ae7a300fb8dea4f1da08b87625))
+* **templates:** drop the roadmap path from a stable artifact ([e1ed862](https://github.com/event4u-app/agent-config/commit/e1ed862c5211221cff2bfa7749cbbe613d6a367a))
+* **telemetry:** remove three trigger-comparison flags nothing can compute ([8b0deb7](https://github.com/event4u-app/agent-config/commit/8b0deb77bfefaccb0a814bb348979c94dfa422b2))
+* **ci:** clear the six reds this branch created, and pay the payload cost honestly ([bbdbcad](https://github.com/event4u-app/agent-config/commit/bbdbcade2400a5a3e5db8b98d62176db04b54610))
+* **conformance:** keep the `unknown` symbol out of the over-ceiling doctor file ([160927e](https://github.com/event4u-app/agent-config/commit/160927e547b4d8da73529fda27d8308687cb2f1e))
+* **skills:** correct the Storybook docs tool names, re-derived from an installation ([fea24ec](https://github.com/event4u-app/agent-config/commit/fea24ecbe0f44a6615d00e3c0b962dfc05326ab3))
+* **docs:** canonical house dialect, and no bare src/ path in a shipped skill ([03e3ec9](https://github.com/event4u-app/agent-config/commit/03e3ec9057f5c1c769d10d187d4de52873585f76))
+* **config:** dispose of the ui-conformance state leaf in the continuity surface ([d924ed6](https://github.com/event4u-app/agent-config/commit/d924ed64b9003d0e02886362ee13bbe3aa55571f))
+* **budget:** keep the ownership axis and the ask contract off the ratchets ([de8bee8](https://github.com/event4u-app/agent-config/commit/de8bee8ee8095575badb49346901729e4cb0cfe2))
+* **schema:** allow `produces_roadmap` on a command, and resync the index ([39b8ca1](https://github.com/event4u-app/agent-config/commit/39b8ca1da1c4b4ca3500acb71251faa5fac93e40))
+* **rules:** routes_to back to block form — the linter parses no flow sequence ([0b80768](https://github.com/event4u-app/agent-config/commit/0b8076804d0316556da944d9165490417c7aa1d6))
+* **secrets:** re-pin the gate-coverage canary allow-entry to 655 ([38dfab6](https://github.com/event4u-app/agent-config/commit/38dfab664eb389bcc0a3fbdd2954b4c441cd3e53))
+* **rules:** scope test-first to workspaces and packs ([c580266](https://github.com/event4u-app/agent-config/commit/c580266d58d115dbce5648b8470c4442d9b3d940))
+* **changelog:** the 16.0.0 and 15.0.0 heads claimed no known limitations ([da107a3](https://github.com/event4u-app/agent-config/commit/da107a339607bbea52d60852192b24a35511d83b))
+* **ci:** claim the offset half of the estate ratchet, not only the growth half ([8e73efa](https://github.com/event4u-app/agent-config/commit/8e73efa3d00703524cd87a65bafc6e435fbea976))
+* **ci:** admit the recall concern and claim its estate growth where it happened ([36f30b6](https://github.com/event4u-app/agent-config/commit/36f30b612e20772c637bceaee1cc3456e667bba9))
+* **ci:** compile the hook manifest the YAML comment edit outran ([9703a69](https://github.com/event4u-app/agent-config/commit/9703a69341c20298666530d84d556c4650a98530))
+* **ci:** rebuild the committed install bundle for the schema text this branch changed ([1a238ad](https://github.com/event4u-app/agent-config/commit/1a238ad674e11947b7e02c829950cfad6ff5dbab))
+* **release:** read the remote before pushing, never from the rejection ([84d069e](https://github.com/event4u-app/agent-config/commit/84d069ef83c23ca2c834e9e1234c0adf89e323a2))
 
 ### Reverts
 
-* **brand:** the artifact-versus-brand split does not fit the standing payload ([b798f4f](https://github.com/event4u-app/agent-config/commit/b798f4fc0b092ead6bd67f3219b0151cefc1f81e))
+* **install:** drop the txlog docstring fix, record it in the roadmap ([252dbf9](https://github.com/event4u-app/agent-config/commit/252dbf9d4641a4a62ee908f9ba01724857da97ae))
 
 ### Documentation
 
-* **roadmap:** pass 3 finds a step no first reading produced — reuse under conformity ([ff80052](https://github.com/event4u-app/agent-config/commit/ff8005276b4b6cc5bbc795f25ddcd32c29dee6ad))
-* **roadmap:** road-to-design-intent-conformance — the contract is written, contradicted and unreachable ([b40531a](https://github.com/event4u-app/agent-config/commit/b40531ab91c3331867592cade6f774cb89dd9e20))
-* **git-workflow:** carry the new ci_settle refusal to both surfaces that state it ([762e3a3](https://github.com/event4u-app/agent-config/commit/762e3a362074cc26391fe042fb0cd036de0e4a06))
-* **vendor:** write the binary predicate threat boundary down ([620ec78](https://github.com/event4u-app/agent-config/commit/620ec78658552741f3e422890f11c0e0637eb027))
-* **adr:** disposition the three adversarial findings on ADR-266 ([b57a946](https://github.com/event4u-app/agent-config/commit/b57a9469bf496ab536f1dad369b8935f2935492f))
-* **adr:** record the owner ruling that activates /pr:merge merging ([c82c385](https://github.com/event4u-app/agent-config/commit/c82c385d96d0bea0b0899b967459406f46805e65))
-* **roadmap:** record what Phase 1 closed, and three findings that correct it ([e2349bd](https://github.com/event4u-app/agent-config/commit/e2349bd2505a1203e3ef5927936010be3758a20f))
-* **grammars:** point the refresh checklist at the manifest that exists ([9e70bc2](https://github.com/event4u-app/agent-config/commit/9e70bc29a0d1942d6cce28f234be7472bfb39a55))
-* **review:** the independent completion-review findings, with dispositions ([885bc2a](https://github.com/event4u-app/agent-config/commit/885bc2a2f9bc8caa6387ffc32d356a120e583f11))
-* **stub:** record the 14.22.0 findings-ledger recurrence on the existing 14.21.0 stub ([cbb26d3](https://github.com/event4u-app/agent-config/commit/cbb26d378fc54365751f1dc58b813dd79fca5a73))
-* MIGRATION entry for the readers, and regenerate the skills catalog ([3fa7886](https://github.com/event4u-app/agent-config/commit/3fa7886e32eff9fbed1ece6491e6e88ad8c41e5e))
-* **claims:** repoint the delivery-equivalence claim at the report that carries its figures ([ae3267f](https://github.com/event4u-app/agent-config/commit/ae3267ff56a17afc3aa07fa1cae6ead5c270bffc))
-* restate the MCP standing-cost claim at the measured figure ([9716817](https://github.com/event4u-app/agent-config/commit/971681741def028ab7957563409d0026f7f0366e))
-* ADR-265 gains its Evidence section ([2d6882f](https://github.com/event4u-app/agent-config/commit/2d6882f83cbc1670e6e34b10fcda558c8a5813b7))
-* ADR-265 — the Iron Law reserve is refused, verifier is inside the change ([c310efa](https://github.com/event4u-app/agent-config/commit/c310efa9e4ecfd37b0ddfd348c9b3742028dc190))
-* **adr-262:** disclose the evidence the accepted record rests on ([c9f064d](https://github.com/event4u-app/agent-config/commit/c9f064dda6522d0242756c8f113ea815cd2ae9ea))
-* **roadmap:** re-review the risk register, and record that Risk 3 is refuted ([4e5fcf7](https://github.com/event4u-app/agent-config/commit/4e5fcf7333af24bdd2cc8d16b82ed1e9818d3978))
-* **roadmap:** settle the acceptance criteria against what was actually measured ([07aaf83](https://github.com/event4u-app/agent-config/commit/07aaf831e205770688a86e14dc99af7b406718ab))
-* **claims:** the delivery row said not-shipped, and 4.3 made that false ([b02ba95](https://github.com/event4u-app/agent-config/commit/b02ba958ff9341dfab8f6c9d70011738bf9ca723))
+* **roadmap:** record that trigger-eval freshness has no writer ([aa2e30e](https://github.com/event4u-app/agent-config/commit/aa2e30e7717e6b4a5e8c20a5fcedbcbe16d4ae5b))
+* **roadmap:** record the corpus cadence decision the council reached ([289241d](https://github.com/event4u-app/agent-config/commit/289241deb1f28ab456d187bd5aa56172fae7cd1b))
+* **evidence:** record the independent verdict on the witness test rewrite ([de40070](https://github.com/event4u-app/agent-config/commit/de40070dd9d7e22ff102b8e59580c3ec1388df26))
+* **contributing:** adopt a Flake-diagnosis commit-trailer convention ([aa51c49](https://github.com/event4u-app/agent-config/commit/aa51c495bc3c9a75004d5076f7e1dcad9de2032e))
+* **review:** declare the completion-review skip for the docs-only reading ([980cf47](https://github.com/event4u-app/agent-config/commit/980cf47772ad3f80d9a45c0466f92f8fc8c09983))
+* **roadmap:** close Phase 1 of the corpus refresh ([ae7ef00](https://github.com/event4u-app/agent-config/commit/ae7ef00f41a4b6be216007f415761d4ea57953f2))
+* **roadmap:** re-verify the bounded approval-floor waiver's one open item ([e5bf070](https://github.com/event4u-app/agent-config/commit/e5bf0709c2471987892b17e85036c54da263f2e3))
+* **roadmap:** record the 2026-09-27 shadow-bar reading against ledger step 6.1 ([be9093e](https://github.com/event4u-app/agent-config/commit/be9093e6e52bb64baba661140379634a5d91fb89))
+* **roadmap:** close out the declared component contract on the refusal ruling ([1b8d185](https://github.com/event4u-app/agent-config/commit/1b8d1852ba78e97e92a7c05ab1894b03a07da85b))
+* **roadmap:** re-review the risk register after the refusal ruling ([19cb97b](https://github.com/event4u-app/agent-config/commit/19cb97b5b8705e3590879bf229fb155b60e8dccd))
+* **roadmap:** resolve taxonomy-reversal-is-a-second-arrival as a refusal ([de0b4d0](https://github.com/event4u-app/agent-config/commit/de0b4d03154838157a5d6d66f6512c2044a93ad9))
+* **roadmap:** record the second arrival on the archived granularity roadmap ([06ec030](https://github.com/event4u-app/agent-config/commit/06ec0300a86e0f535595665e1979418c10fea0da))
+* **install:** correct every surface that published the unconditional-overwrite claim ([5c596ba](https://github.com/event4u-app/agent-config/commit/5c596babb3b5e588a0f9de3c58a94dd31033f512))
+* **roadmap:** execute the screenshot blocker condition and escalate the ruling (#2060) ([46eaa0b](https://github.com/event4u-app/agent-config/commit/46eaa0b1d375526450d9edfb7c95d168ca217e18))
+* **roadmap:** decide which-track-promotes-is-owner-reserved -- promote none (#2056) ([00a4dc8](https://github.com/event4u-app/agent-config/commit/00a4dc84c0c6ec770f096ec7ac60de17b00c7e32))
+* **review:** declare the completion-review skip for a prose-only diff ([b63cdf3](https://github.com/event4u-app/agent-config/commit/b63cdf3431b57b982f3bdea149f9e15a89a78b22))
+* **roadmap:** re-verify both blockers and three stale step reasons ([a84c73b](https://github.com/event4u-app/agent-config/commit/a84c73be1fe44579714e4d1de131614c69faf553))
+* **work-engine:** correct how the engine reaches a consumer, and record the measured blast radius ([772735f](https://github.com/event4u-app/agent-config/commit/772735f55b65128311c28d86c3844d776cb76aa4))
+* **evidence:** record a third exposure reading and the first near-miss ([fabcaa5](https://github.com/event4u-app/agent-config/commit/fabcaa5f5861265f5a6a5fc64941546bd9bfcaa8))
+* **roadmap:** re-review the risk register and record the reachability risk ([9af15b7](https://github.com/event4u-app/agent-config/commit/9af15b780cfc5da74be0c6e8407e4a1aa14960a1))
+* **roadmap:** mark the two owner-blocked screenshot steps blocked-by ([763f089](https://github.com/event4u-app/agent-config/commit/763f08942cf96edb37935b8beabcee0b86f1eefc))
+* **evidence:** record the threat pass over the two authority modules ([0dc6835](https://github.com/event4u-app/agent-config/commit/0dc6835e65cc6dc5a51480af63e6489da6bb0f8b))
+* **roadmap:** record the measured shadow-bar reading against step 6.1 ([5661596](https://github.com/event4u-app/agent-config/commit/56615963e937a917f65ab09788af937b5f3c18fa))
+* **roadmaps:** mark the substrate stub's owner-reserved steps blocked-by ([1671e0f](https://github.com/event4u-app/agent-config/commit/1671e0f6c837d70d744cb3265e40643dbad6dace))
+* **roadmap:** say why the last three criteria are impossible, not unstarted ([2d232dc](https://github.com/event4u-app/agent-config/commit/2d232dcb8e1e403655d199392c9e4b5e9f5f3361))
+* **roadmap:** carry the four authority findings the AC-2 pass produced ([a1f11bc](https://github.com/event4u-app/agent-config/commit/a1f11bcc642dbfbfd31bda26b2d92a8478228b17))
+* **roadmaps:** record the capability screen and mark the blocked steps ([8485b73](https://github.com/event4u-app/agent-config/commit/8485b737c841f776acf65c59214034a9ea6481a0))
+* **roadmap:** correct the NEVER_WAIVABLE count, record the gated third site ([dc4a61b](https://github.com/event4u-app/agent-config/commit/dc4a61b6deaec601fecb44b703de4edb78e3eb45))
+* **roadmap:** correct stale present-tense records in the waiver roadmap ([5dc973e](https://github.com/event4u-app/agent-config/commit/5dc973ea2b0872d69b019931597a43475848c62d))
+* **roadmap:** re-verify decision-closure's five open boxes on the current tree ([732b1b5](https://github.com/event4u-app/agent-config/commit/732b1b579b651f1d597a5b56b33ec71465aa8dee))
+* **evidence:** record the post-merge exposure reading as a dated addendum ([dfa5bcb](https://github.com/event4u-app/agent-config/commit/dfa5bcbc85b80e23310687a2fd50e79dbc7b8878))
+* **review:** disposition all 12 round-2 findings against d04ed00f2 ([c77a257](https://github.com/event4u-app/agent-config/commit/c77a257a905694da410856b5da3d960dfa358182))
+* **review:** bind each fixed finding to the commit that fixed it ([d7a2e78](https://github.com/event4u-app/agent-config/commit/d7a2e78667c95e7fb60128b91cfa56488f1bc849))
+* **review:** completion review of drain/conformance-check — 11 findings, all open ([23d8cca](https://github.com/event4u-app/agent-config/commit/23d8cca415ff537f881df143a4a63c9115c6602b))
+* **roadmap:** re-review the risk register against what landed ([7f79a07](https://github.com/event4u-app/agent-config/commit/7f79a07dec92c820c47980d0e408f281c505be33))
+* **roadmap:** close the seven acceptance criteria with their evidence ([e2de90e](https://github.com/event4u-app/agent-config/commit/e2de90e569068eadde7ce334b1bbcada314086ba))
+* **roadmap:** record why 1.4, 1.7 and 4.2 were not attempted ([6a3478d](https://github.com/event4u-app/agent-config/commit/6a3478d72207bf8a5f14651000c3565563f92312))
+* **roadmaps:** re-review the substrate-stub risk register ([ce60f08](https://github.com/event4u-app/agent-config/commit/ce60f0871d0aa959bf3e965ffd47962390ae0903))
+* **roadmap:** document the optional delivery frontmatter block ([741d9dd](https://github.com/event4u-app/agent-config/commit/741d9dd65e212991dedbc99393390ba4bcb4f5d2))
+* **roadmaps:** record phases 1 to 4 landed, phase 5 owner-reserved ([0579873](https://github.com/event4u-app/agent-config/commit/05798739fc702abb4ae6366640c0f2f2642b8d0e))
+* **roadmap:** re-review the risk register after Phase 1 ([8ee2a29](https://github.com/event4u-app/agent-config/commit/8ee2a29c475c08a78db54ea7202c98130740f2dd))
+* **roadmaps:** re-cut the substrate stub against its now-open gate ([715b3ae](https://github.com/event4u-app/agent-config/commit/715b3ae39310300e81815c18c5fe3eaafccc2350))
+* **evidence:** enumerate ADR-249 governance conditions against the tree ([d0a9e06](https://github.com/event4u-app/agent-config/commit/d0a9e06d2233690e0860960c1f6892ea76e472e0))
+* **roadmap:** keep the auto-merge namespace ratchet, and say why ([6c5e2c9](https://github.com/event4u-app/agent-config/commit/6c5e2c976a65d76c1dcefb107c2d51b8f552d080))
+* **settings:** name what no execution mode lifts, instead of "a safety floor" ([047fdaf](https://github.com/event4u-app/agent-config/commit/047fdaf21432345d8c31b839afcb50de5e9c3e77))
+* **roadmap:** advance the two owner-reserved blockers with evidence, not a decision ([36c89fd](https://github.com/event4u-app/agent-config/commit/36c89fd570adf80983fe0991f0f73e5a03ad852c))
+* **roadmap:** re-measure both open blockers instead of reading them forward ([5952d4c](https://github.com/event4u-app/agent-config/commit/5952d4c83f4ec9c979aa1c55342af8cfcb174c38))
+* **roadmap:** mark AC-1 to AC-4 proven, and say why AC-5 and AC-6 are not ([40215fb](https://github.com/event4u-app/agent-config/commit/40215fbd2a556fdfb3bd3ffc170d57d74ce8f346))
+* **roadmap:** mark the eight acceptance criteria the landed work satisfies ([ffe25e1](https://github.com/event4u-app/agent-config/commit/ffe25e17d6c34328d71b11e867d7e6837399ea38))
+* **claims:** register the conformance catch against its pre-registered bar ([1fee1ef](https://github.com/event4u-app/agent-config/commit/1fee1ef3c18ac70e1333d8058976e3b5cce48c5b))
+* **evidence:** declare the completion-review skip for this closure ([af45769](https://github.com/event4u-app/agent-config/commit/af457691a23cc0e9d013626005c9eb8bd89973ff))
+* date the superseded platform measurements across the tree ([fda54cf](https://github.com/event4u-app/agent-config/commit/fda54cf92158f71a4c1147355b817ae87aa7db47))
+* **anchor:** correct the record against re-measured forge state ([b4beff0](https://github.com/event4u-app/agent-config/commit/b4beff02644f91b8beb81fc08eaebd355d8ea17c))
+* **anchor:** close Phase 1 against what shipped, with sensitivity proven ([e3eb5bb](https://github.com/event4u-app/agent-config/commit/e3eb5bbf97b4065f74b72e81ad4b334fb5f4314d))
+* **anchor:** answer both open design questions and write the lockout recovery ([1722a3e](https://github.com/event4u-app/agent-config/commit/1722a3e368f8dbb3e1c8869e8e00edcefa1017db))
+* **evidence:** re-read the enforcement census and correct a stale ADR pointer ([aed37c1](https://github.com/event4u-app/agent-config/commit/aed37c1764d17c8ea83d5423a24359d9007c2806))
+* **evidence:** what the Known-limitations derivation returns over both spans ([740d622](https://github.com/event4u-app/agent-config/commit/740d622c6120a86c7f8852d354b23648a2f3f7e0))
+* **gates:** recount the gate-coverage denominator on this tree ([04916f1](https://github.com/event4u-app/agent-config/commit/04916f181ea42b39363b6a82e876d812ecb067ed))
+* **memory:** correct the hook-manifest regeneration recipe ([21ba777](https://github.com/event4u-app/agent-config/commit/21ba7772c6ff739ebcfaa609e762eb6d5ea7150a))
+* **contracts:** name computed_style, interaction, viewport_matrix, media_emulation ([e69e40c](https://github.com/event4u-app/agent-config/commit/e69e40c3eceac549c48eed8434ecb4f1e5641017))
+* **migration:** give 15.0.0 and 16.0.0 the sections their BREAKING entries earn ([d720135](https://github.com/event4u-app/agent-config/commit/d7201354dd080eef09a45b035dd927876e2e91ab))
+* **changelog:** say which line won on the 15.0.0 kernel-deny entry ([163f447](https://github.com/event4u-app/agent-config/commit/163f447891ee6b5455c79d126c97d35579d52452))
+* **review:** declare the completion-review skip — the diff carries no code path ([e6a206e](https://github.com/event4u-app/agent-config/commit/e6a206ebb4d5019d25c7a7e17b2a17c6952fa64f))
+* **pr-merge:** pin the straggler batch to preparation and close the disposition set ([c63818b](https://github.com/event4u-app/agent-config/commit/c63818bfc4f18dc3ed39363192afcdcf69b7a9ca))
+* **roadmap:** two release-truth defects the round found, both verified at source ([f1d927f](https://github.com/event4u-app/agent-config/commit/f1d927fd614e68fbe08dc2d9dd6eebcb8a2aaa92))
+* **evidence:** one inbox round read three times, and the two counts it moved ([8abff9f](https://github.com/event4u-app/agent-config/commit/8abff9fc31820d87ca598aa79d198b0bc571eda1))
+* **evidence:** enumerate and disposition the 18 mixed-trigger rules, and defer both rebinds ([4e5c5dd](https://github.com/event4u-app/agent-config/commit/4e5c5ddc9e7da7dde2e9dc90d2034962e87543d6))
+* **projection:** separate the template default from the parser fallback, in ten places ([295e753](https://github.com/event4u-app/agent-config/commit/295e753aa809d125f63a1d8330b9e36af52ac605))
+* **governance:** ratify the workflow registration, and close the fail-open flag it exposed ([7abad60](https://github.com/event4u-app/agent-config/commit/7abad60aab09a533755d6d3f012e395d7127cfa7))
 
 ### Refactoring
 
-* **continuity:** move is_substantive and resolvePredecessor into _lib ([117e5c2](https://github.com/event4u-app/agent-config/commit/117e5c275701f9dc632bed300c59545c51fda992))
+* **install:** move the preservation state machine out of install.ts ([dfb10aa](https://github.com/event4u-app/agent-config/commit/dfb10aaf6cfccaa6848a6fec7ccc69f296382d3b))
+* **release:** drop the RunResult import the extraction orphaned ([88a46d2](https://github.com/event4u-app/agent-config/commit/88a46d24ae05c0db171c0c9853f3fada16d5a62b))
+* **release:** move both MIGRATION.md refusals out of release.ts ([ad5f26b](https://github.com/event4u-app/agent-config/commit/ad5f26b71da2168d41c0f208dba5bf011f88c4cc))
+* **release:** pay the size ratchet this branch moved, by pairing the refs ([63bf8ac](https://github.com/event4u-app/agent-config/commit/63bf8ac9ac692f35f5c4bbbc84155cf75e26ea59))
 
 ### Tests
 
-* **continuity:** parity in both halves the council separated ([ed06343](https://github.com/event4u-app/agent-config/commit/ed063430624a767454bdf771d0b23bd90549df5d))
-* **notes:** pin the boundary set closed and the reopen cap at one ([4edecf7](https://github.com/event4u-app/agent-config/commit/4edecf7217e2b5cf07989b9273a7b845860f5e22))
-* **mcp:** pair the entry-point escape case with an accepted nested path ([7bdaaec](https://github.com/event4u-app/agent-config/commit/7bdaaec90cabddd914e86a12b156578e081c27c2))
-* **lean-projection:** repoint the held-change tripwire onto the shipped state ([8d52e84](https://github.com/event4u-app/agent-config/commit/8d52e84eb469daab03e9e8324d40800925a54df8))
+* **e2e:** record the independence level per group, closing AC-2 ([af398a1](https://github.com/event4u-app/agent-config/commit/af398a182efbef5d154c7b870714158a618631bc))
+* **e2e:** a four-phase long-run fixture over the composition, closing AC-7 ([37a6ff8](https://github.com/event4u-app/agent-config/commit/37a6ff8c624ff6e5bead783f37720a571cb4b231))
+* **e2e:** land T1, T6, T9 and T10, closing AC-1 and AC-3 ([9de29d0](https://github.com/event4u-app/agent-config/commit/9de29d0a50c7aa3db5ac6c5181f2f792d26e7cc2))
+* **server:** carry the delivery block in the settings fixture ([bbb3aa5](https://github.com/event4u-app/agent-config/commit/bbb3aa5e04eaf1d043379e33469216735a5b260b))
+* **ui-audit:** pin the five-level taxonomy out of the emitted vocabulary ([2d3b8e2](https://github.com/event4u-app/agent-config/commit/2d3b8e214fc29a74df46a25b68b76c5a3215ecaf))
+* **design:** add the ui-conformance sensitivity fixture, before the probe ([d81c72a](https://github.com/event4u-app/agent-config/commit/d81c72aa680aa660dfbd2b381b05aa2212255072))
 
 ### Build
 
-* rebuild the install bundle after the ADR renumber ([4039b88](https://github.com/event4u-app/agent-config/commit/4039b880fc1d798a2a58bef4288a46406204d332))
-* recompile hook_manifest.json after the R2 finding-1 comment landed in the YAML ([b887fe2](https://github.com/event4u-app/agent-config/commit/b887fe2a556750447cc6e1f26606c8b0e1bf6814))
-* rebuild the stale install bundle and regenerate the ADR evidence census ([8e791d8](https://github.com/event4u-app/agent-config/commit/8e791d822c5ef2bf5dbaec7156f46321bf853374))
+* **install:** regenerate the install bundle for the per_phase schema default ([a5759da](https://github.com/event4u-app/agent-config/commit/a5759da2475a47133724fb0c880463ebcbb7d784))
+* **install:** resync the install bundle with the delivery schema ([5ace984](https://github.com/event4u-app/agent-config/commit/5ace98478647fbc7044882bd1bb8d4ba9ce9e96c))
+* **install:** regenerate the install bundle for the new settings keys ([4a1de39](https://github.com/event4u-app/agent-config/commit/4a1de39625b4c47fe6e6eb0ef13683cf78c8450b))
+
+### CI
+
+* **canary:** skip the live job when ANTHROPIC_API_KEY is absent instead of running it ([40f9376](https://github.com/event4u-app/agent-config/commit/40f937677e1398fdb070292f1d81e25a5e2b6f9c))
+* register the migration-section gate outside the ratification self-watch ([d0ff02a](https://github.com/event4u-app/agent-config/commit/d0ff02a41aa8f56f0172c7270bde5b5e9bff239a))
 
 ### Chores
 
-* **estate:** claim the one-in-one-out offset the committed roadmap fires ([72dfa5d](https://github.com/event4u-app/agent-config/commit/72dfa5d90601da16bde06d9ed761663baab69848))
-* **roadmap:** 3.1's second half is under-specified — record it, do not invent it ([d542bf1](https://github.com/event4u-app/agent-config/commit/d542bf14ff2eec0ce46ee4ba66fb93f5bf9ca9d8))
-* **roadmap:** park road-to-skill-menu-economy — its own review trigger fired ([11ecf8a](https://github.com/event4u-app/agent-config/commit/11ecf8aedda395cecfa2dd992de328d609576adc))
-* **review:** disposition the seven findings, record what the failure teaches ([39dce8a](https://github.com/event4u-app/agent-config/commit/39dce8adbb855b496b2e60fbbb87bee04d31fd85))
-* **review:** R2 completion review — the trust contract does NOT hold ([a1f50ea](https://github.com/event4u-app/agent-config/commit/a1f50eaa832e5cce3f2ac8129fdbb96d9e86969d))
-* **roadmap:** record 3.1's precondition as discharged, and the step as open ([4545420](https://github.com/event4u-app/agent-config/commit/4545420a941ce65a67c192a9970e45e91641c95d))
-* **roadmap:** close road-to-limited-commitment-horizon Phase 3 unbuilt ([2e1b644](https://github.com/event4u-app/agent-config/commit/2e1b644bcffa1c27f7227c2300f8a88400a7a338))
-* **roadmap:** apply E7 — archive the two token-saving roadmaps, carry the residue ([6d53a9b](https://github.com/event4u-app/agent-config/commit/6d53a9bc947ca9802a108f0dbaf4faf08c5a3dac))
-* **roadmap:** close and archive road-to-the-14-22-0-findings-ledger ([ea3a973](https://github.com/event4u-app/agent-config/commit/ea3a973767eea70b850f8aae2a7b19b396e50ba8))
-* **review:** disposition the five round-2 findings against bd9962e04 ([45c8ae8](https://github.com/event4u-app/agent-config/commit/45c8ae82535c7314641f11b039ff1a77f2edd66e))
-* **review:** R2 round 2 — 5 findings, round 1 preserved ([368ba2b](https://github.com/event4u-app/agent-config/commit/368ba2bbe9a81a0cb41eda96af55d067017e5446))
-* **adr:** regenerate the evidence census after the ADR-263 amendment ([ed9746f](https://github.com/event4u-app/agent-config/commit/ed9746f7c0e825b285771cc1d0e9f1b19e5f61fa))
-* **review:** disposition the three R2 findings against 30ea29030 ([57dd539](https://github.com/event4u-app/agent-config/commit/57dd53925c12ab9140e54d6b3b8e4835cc7f7f76))
-* **review:** R2 completion review for the 14.22.0 residuals branch ([faabcff](https://github.com/event4u-app/agent-config/commit/faabcff4a9998412b1fb2634c7f6a80217b0327a))
-* **roadmap:** stub the census-store defect, repoint the archived refs ([4d0f978](https://github.com/event4u-app/agent-config/commit/4d0f978abf152f69b461bc477df9e9be55df79de))
-* **roadmap:** close and archive road-to-a-blocker-that-cannot-hide-in-the-archive ([32e3ff0](https://github.com/event4u-app/agent-config/commit/32e3ff05eb51889c02502cb2441d6aa809031a52))
-* **index:** regenerate the catalog for the /pr:merge description change ([bf743f0](https://github.com/event4u-app/agent-config/commit/bf743f068577689e8aeef1e95b2977bbca2ce36b))
-* **adr:** regenerate the index and the evidence census for ADR-266 ([3b5a0c4](https://github.com/event4u-app/agent-config/commit/3b5a0c43c00e46a0da7b83c08b4802c1e5c9aedf))
-* **review:** rebind the findings artefact after the base merge ([9d4ebfb](https://github.com/event4u-app/agent-config/commit/9d4ebfb62b542175314c06e1d24b05340a46f7cd))
-* **stubs:** close the 14.22.0 ledger instance — another lane landed it ([0cd51a2](https://github.com/event4u-app/agent-config/commit/0cd51a2515b2aac52f38c4f6123f1e8130c218a7))
-* **review:** final scope rebind ([c6965d1](https://github.com/event4u-app/agent-config/commit/c6965d114bf2aa2ad3fb0c42d53d8f7d98a3c7a0))
-* **review:** rebind the findings artefact to the post-trim scope ([529cc55](https://github.com/event4u-app/agent-config/commit/529cc5580750e80a75be906fdde435a9c958c33f))
-* **review:** rebind the findings artefact after the pointer commit ([9fa5777](https://github.com/event4u-app/agent-config/commit/9fa5777adf7371a40f3692aa98c0ca00bc776def))
-* **review:** rebind the findings artefact to the post-archival scope ([4bd39e4](https://github.com/event4u-app/agent-config/commit/4bd39e4d777d4b4c546c2049d8d761c55b7bbaae))
-* **roadmap:** close Phases 1 and 2 of limited-commitment-horizon ([8f350dd](https://github.com/event4u-app/agent-config/commit/8f350ddf30c56acf2bd8a79a8ae4fe5e2b2a3740))
-* record the 14.22.0 findings-ledger gap as arrival 4 ([7c5dc50](https://github.com/event4u-app/agent-config/commit/7c5dc50ae4f31005e241f034bd6989d6b38de298))
-* refresh the ADR evidence census after ADR-265 gained its Evidence section ([7685ab1](https://github.com/event4u-app/agent-config/commit/7685ab13c43697f8779a7df9af86e25018b00d4b))
-* regenerate the artefact index, and record the pack-size re-measurement ([b37fcfa](https://github.com/event4u-app/agent-config/commit/b37fcfa82179ca8ef2e0d8d7765468dcfacafcb8))
-* archive road-to-a-standing-budget-with-headroom ([225a4eb](https://github.com/event4u-app/agent-config/commit/225a4ebb898b017fa1ebecf616d5fbcb3f2977ff))
-* **review:** dispatch the R2 completion review for drain/delivery-for-every-host ([7925dbb](https://github.com/event4u-app/agent-config/commit/7925dbba34443211ffff62c96e5c497eace2fa5f))
-* **adr:** regenerate the evidence census after ADR-262 gained its Evidence section ([b9276f8](https://github.com/event4u-app/agent-config/commit/b9276f80e5454da6e2e4b418d0593aea07db427c))
+* **roadmap:** claim the estate offset exemption with its reason ([34f11cf](https://github.com/event4u-app/agent-config/commit/34f11cf745c72817eb8b87785e8a0d4995a71790))
+* **roadmaps:** archive the conformance-check roadmap at 17/17 ([86255ab](https://github.com/event4u-app/agent-config/commit/86255abdf5885e5c49bd6d4721c108f86927b62b))
+* **roadmaps:** archive the 2026 Q3 corpus refresh ([07975f9](https://github.com/event4u-app/agent-config/commit/07975f9c2a0ed8ff3e8c3eaf9c53f7beac92c9b6))
+* **roadmaps:** archive the witness-without-shared-state roadmap ([b9d2660](https://github.com/event4u-app/agent-config/commit/b9d26605d5f4abf355322c0978c796d7a04d0e4e))
+* **roadmaps:** archive the declared component contract ([8cf9680](https://github.com/event4u-app/agent-config/commit/8cf9680de4bbeedea891888d2271fff47010a0d8))
+* **dist:** rebuild the CLI output and install bundle ([e04ca0c](https://github.com/event4u-app/agent-config/commit/e04ca0c7c5c1f2306ca0e1b55e1d56bcb28955d1))
+* **gate:** lower the source-size ratchet to the measured total ([d19d2e7](https://github.com/event4u-app/agent-config/commit/d19d2e7f78c1ff1b45c97fff08b014b595d110af))
+* **roadmap:** archive road-to-authority-object-exactness ([5c702a2](https://github.com/event4u-app/agent-config/commit/5c702a2b8206e75038cc50f5fa3dc55916ee9b71))
+* **roadmap:** close the four criteria and promote the roadmap to ready ([e7c8625](https://github.com/event4u-app/agent-config/commit/e7c8625ee653c3378d074e514384ba510742207b))
+* **roadmap:** declare the estate growth and decline the offset, on the record ([5918806](https://github.com/event4u-app/agent-config/commit/5918806e8b9f728070847abc62efd5a75b6f3632))
+* **roadmaps:** archive the four roadmaps that reached every box ([d585e91](https://github.com/event4u-app/agent-config/commit/d585e919514eed984fcb9b8c7d95e9809d1fb43f))
+* **roadmaps:** promote three finished drafts to ready so the sweep can see them ([85297c0](https://github.com/event4u-app/agent-config/commit/85297c0e2fe8b80018c4238ecc90712d96f6b11d))
+* **proof:** regenerate the claims proof on the merged tree ([20a6c98](https://github.com/event4u-app/agent-config/commit/20a6c980e367d3df853eab2e4f990e05d8d17337))
+* **index:** regenerate for the merged command surface ([a56cf71](https://github.com/event4u-app/agent-config/commit/a56cf71af64eef180912e4af79ae8c0ab5e969ba))
+* **evidence:** re-pin the completion-review scope after the addendum commit ([ef111fd](https://github.com/event4u-app/agent-config/commit/ef111fdf4e9223c19c64fdaf5e0aed27a1b998fe))
+* **census:** re-emit the host payload census at the current pin ([98a9c87](https://github.com/event4u-app/agent-config/commit/98a9c87c8eed724659312fded3d61b5bdd5137c1))
+* **evidence:** declare the completion-review skip for this diff ([a2a1106](https://github.com/event4u-app/agent-config/commit/a2a11069e2119a438dcf83fe541fb94a905e740c))
+* **budgets:** carry the source-size gain the extraction produced ([6eb5d4f](https://github.com/event4u-app/agent-config/commit/6eb5d4fb66ad7cc7c882b4df86268d266ee23fca))
+* **build:** rebuild the install bundle after the settings-key rename ([953adca](https://github.com/event4u-app/agent-config/commit/953adcad205d661ed8cae4f34dd023f015d8bc65))
+* **sync:** regenerate projections and derived pages ([6501427](https://github.com/event4u-app/agent-config/commit/65014277caf0f76b0b51fcc99e63b4c0eb543e9a))
+* **tests:** drop the dead subprocess scaffolding in the doctor test ([0c37af1](https://github.com/event4u-app/agent-config/commit/0c37af1667730981425d7386c18428578bff6805))
+* **index:** regenerate the artefact index for test-first ([6f2aa02](https://github.com/event4u-app/agent-config/commit/6f2aa02cfdcbef24c36e6070947373986b9891d4))
+* **evidence:** regenerate the ADR evidence census ([5b9d161](https://github.com/event4u-app/agent-config/commit/5b9d1613bb0c502c306174d2731aa5ef8ead8320))
+* **ci:** re-run the macOS shard that failed on a process-spawn error ([e59c004](https://github.com/event4u-app/agent-config/commit/e59c00479b73643138e6b8d2f8fdd4212f70a29a))
+* **roadmap:** archive the delivery-flip roadmap and regenerate the archive index ([c8a0dbf](https://github.com/event4u-app/agent-config/commit/c8a0dbf32105b5968cc0de471731ae216bf30a39))
+* **roadmap:** archive the enforcement-table roadmap and regenerate the archive index ([f483632](https://github.com/event4u-app/agent-config/commit/f483632c088508959b30dea5fd000d9677b8c208))
+* **roadmap:** close the enforcement-table roadmap with its five acceptance criteria ([ec9f22a](https://github.com/event4u-app/agent-config/commit/ec9f22a3766d404524362ba5d2fe97b4b3888fe6))
 
 ### Other
 
-* Fix: a successor now finds its predecessor's recycle envelope (#1965) ([f58ba26](https://github.com/event4u-app/agent-config/commit/f58ba2654e1c067a6892e78c35b5e4d36b4b8c56))
-* a receiver for the archive-exclusion gap in two ratcheted gates ([f639efb](https://github.com/event4u-app/agent-config/commit/f639efbe945702ec9520e7ecdbe3827e917618ff))
-* **docs:** house dialect on the lines this branch authored ([0567287](https://github.com/event4u-app/agent-config/commit/05672878156bd075757bee137d846d8f573dc4a7))
-* the three residuals the 14.22.0 dispositions could not close ([8fab9b6](https://github.com/event4u-app/agent-config/commit/8fab9b6e16ac0721551f2ce1fae04192d7faad61))
-* relocate the pack-size blocker, and archive a-graph-that-is-shipped ([db5c4d3](https://github.com/event4u-app/agent-config/commit/db5c4d391e59a4d3fe07ea6f5df82465fca3c367))
-* Merge remote-tracking branch 'origin/main' into drain/standing-budget-approval-store ([34029ed](https://github.com/event4u-app/agent-config/commit/34029ed8847d20f090ef9d75ae3f3a703edc90d9))
-* the 14.22.0 findings ledger is missing and reds the required check ([30c0c0f](https://github.com/event4u-app/agent-config/commit/30c0c0f912411fd55fcad7cf3e660697a7eaca32))
-* **r2:** disposition all 14 findings and re-bind the round to the current scope ([0d5d8c9](https://github.com/event4u-app/agent-config/commit/0d5d8c9f9281bb90ce4713e7c11ef200b1b387fc))
-* **payload:** re-emit the standing-payload artifact from a clean tree, with an honest pin ([87f94ac](https://github.com/event4u-app/agent-config/commit/87f94ac47682ca68d84feb99a0ee68479a85f6cd))
-* **bench:** track the re-scored thin-inject report the ADR and CLAIMS cite ([9669409](https://github.com/event4u-app/agent-config/commit/966940967c222bb1bd4887edb5b2f76cdd7694b5))
-* re-review the Risk Register at close, all five rows ([ae537fd](https://github.com/event4u-app/agent-config/commit/ae537fd7568d316c9e1b8e4457e0a507ca0cb326))
-* close 1.3 and 2.3 on council verdicts, and discharge AC-4/5/6 ([9e4c6cd](https://github.com/event4u-app/agent-config/commit/9e4c6cd262aa5167c59b67a86fcbfeb909944002))
-* **r2:** 14 findings on drain/delivery-for-every-host — 3 high, 6 medium, 5 low ([2678861](https://github.com/event4u-app/agent-config/commit/2678861a315964bf1bb3b4d5646f2769652c1a4f))
-* defer standing-budget 1.3 to a named receiver, resolve its blocker ([3be6fd6](https://github.com/event4u-app/agent-config/commit/3be6fd63c541e2c5e5c1a9e19ce3f0b8b59ad90a))
-* Merge remote-tracking branch 'origin/main' into drain/delivery-for-every-host ([c2273db](https://github.com/event4u-app/agent-config/commit/c2273db25d553887e56cfb8f36ee7481a8059b8a))
-
-Tests: 22463 (+318 since 14.22.0)
+* Refute the shadow-window installation-lag cause and re-measure the pre-registered bar (#2059) ([5644590](https://github.com/event4u-app/agent-config/commit/5644590ddf0b6a92c82bd3555946363cb5f3693d))
+* Execute the detector blocker's condition, and make the taxonomy rejection citable (#2062) ([d5e109a](https://github.com/event4u-app/agent-config/commit/d5e109a4983c6df0562bacf05d1a9fc4885c3ee1))
+* Release holds that refuse: the contract, the evaluator, and the authoring self-check (#2061) ([3f34210](https://github.com/event4u-app/agent-config/commit/3f342103168e56d0168655c12141829f5e1d6ca0))
+
+Tests: 23972 (+883 since 16.0.0)
 
 # Era: pre-4.0.0 — archived