@event4u/agent-config 16.2.0 → 16.4.0

package/CHANGELOG.md

@@ -32,6 +32,69 @@ Entry-shape contract: [`docs/contracts/CHANGELOG-conventions.md`](docs/contracts
 
 ### Changed
 
+- **46 settings keys are retired; an install that never changed them sees no
+  difference.** Each key's shipped default is now fixed behavior: every reader
+  of it — code, rule and command prose, the wizard — was rewritten to that
+  default in the same change. **If your `.agent-settings.yml` still sets one,
+  that value is ignored** and the loader prints one line per key —
+  `<key> was removed (<what decides instead>); ignored.` — so a non-default
+  value you chose is lost visibly, never silently. Delete the line to silence
+  it. The keys:
+  - Output and tone: `telegraph.speak`, `tokens.rich_skills`, `personal.minimal_output`, `personal.play_by_play`, `personal.pr_comment_bot_icon`, `verbosity.intent_announcements`, `verbosity.preview_artifacts`, `verbosity.routine_confirmations`, `verbosity.post_action_reports`.
+  - Reasoning protocol switches: `reasoning.auto_gate`, `reasoning.components.orchestrator`, `reasoning.components.notes_first`, `reasoning.components.grounding`, `reasoning.components.intent`, `reasoning.components.complexity_first`, `reasoning.components.verifier_default`, `reasoning.components.prediction_tracking`, `reasoning.components.decision_ledger`, `reasoning.components.uncertainty_budget`.
+  - Roadmap cadence: `roadmap.skip_pre_run_gate`, `roadmap.dashboard_regen_cadence`.
+  - Command suggestion and PR creation: `commands.auto_detect`, `commands.suggestion.enabled`, `commands.suggestion.confidence_floor`, `commands.suggestion.cooldown_seconds`, `commands.suggestion.max_options`, `commands.create_pr.api_examples`, `commands.create_pr.ui_paths`, `commands.create_pr.api_paths`.
+  - Memory and knowledge sharing: `memory.cadence`, `memory.review_threshold`, `knowledge.global_sharing.redaction.enabled`, `knowledge.global_sharing.redaction.halt_on_trigger`, `knowledge.global_sharing.auto_promote_threshold`, `knowledge.global_sharing.freshness.hypothesis_after_days`, `knowledge.global_sharing.freshness.stale_after_days`.
+  - Hooks and engine: `hooks.concern_budget.max_per_event`, `hooks.concern_budget.hard_fail`, `decision_engine.surface_traces`, `decision_engine.on_block_fallback`, `explain.enable_last`.
+  - Remaining: `project.pr_template`, `pipelines.skill_improvement`, `consistency.cross_source`, `subagents.downshift`, `ai_team.suppress_setup_hint`.
+  The reference page lists each key with the behavior that replaces it
+  (`templates/agent-settings.md` § Retired keys).
+
+- **A medium security finding now needs a disposition before a release
+  ships.** `check_finding_dispositions` treats `security × medium` as blocking
+  for every release after 16.3.0 (council 2026-10-07, 2/2). Such a row must
+  carry `fixed` (with its commit), `false_positive` or `accepted_risk`, each
+  with a rationale and a `verified_by`, like any blocking row, and
+  `still_open` keeps the release red with a message saying so. On a release
+  pull request (`--pr`), a medium security finding the self-review reported
+  but the ledger lacks is red too. Releases up to 16.3.0 are judged as they
+  shipped. The merge gate (`self_review_gate.classifyBlocking`) is unchanged,
+  so on every other pull request the finding only advises. `claim × medium`
+  stays advisory in both.
+- **No spend bound applies unless you set one.** Owner directive, 2026-10-05,
+  recorded as **ADR-279** and accepted on the owner's own answer (option (a))
+  on 2026-10-06. With nothing configured, no USD or token ceiling this package
+  defines stops a council run, a debate or a paid gate, and none of them asks —
+  because no ceiling exists to ask about. Every ceiling remains settable and
+  behaves exactly as its contract describes once set.
+  **Your own council file is not rewritten.** If you copied
+  `agents/templates/.ai-council.yml.example` before this release it carries
+  these lines explicitly, and they are your figures now:
+  `cost_budget.max_input_tokens: 500000`, `cost_budget.max_output_tokens:
+  200000`, `cost_budget.max_total_usd: 20.0` and `debate.max_cost_usd: 5.00`.
+  Delete them to become unbounded; keep them to stay bounded. The shipped
+  defaults behind an absent key moved to `0` in all three layers — the loader,
+  the command's own fallback for a file with no `cost_budget` block, and the
+  `CostBudget` constructor.
+  **`max_calls` and the debate round limits did not move**: they bound call
+  count per invocation, not money. Nor did any of the controls listed under
+  § What stays in ADR-279 — provider refusals, the per-day plan-quota guards,
+  the `--confirm` a class-1 gate asks for, the debate's between-round
+  confirmation, or the budget an unattended run must still be given.
+  **Two defects were repaired in the same change, and both could bite a
+  configured install.** `0` was documented as disabling a token cap and did
+  not — the two token comparisons carried no zero guard while the two USD
+  comparisons beside them did, so a budget with every cap at zero breached on
+  a ten-token estimate. And the class-1 gate's two caps had to BOTH be set
+  before EITHER applied, so setting one left you bounded by neither. Each cap
+  now bounds alone.
+  **One optional hard stop now works for the first time.** With
+  `cost.enforcement: hard-stop` and a budget configured, the cost preflight
+  resolved its budget script relative to the working directory, read the
+  resulting empty output as "no budget configured", and exited `0` on a spent
+  budget from every working directory. It now resolves the script from its own
+  location and exits non-zero as its contract always said it would.
+
 - **`agent-config init` no longer overwrites a managed file you have edited.**
   Owner ruling, 2026-09-21, taken after an AI council split 1/1 on it. Until
   now the installer's `_resolve_file_conflict` returned `write` for every
@@ -125,6 +188,79 @@ Entry-shape contract: [`docs/contracts/CHANGELOG-conventions.md`](docs/contracts
 
 ### Added
 
+- **An old project keeps its real commit format — `agent-config git:convention
+  measure`.** A repository with no declared convention and no approved card is
+  now measured instead of silently given Conventional Commits: the verb samples
+  the non-merge history of the default branch, resolved as the carrier resolves
+  it (the server's symref, then `refs/remotes/origin/HEAD`) — with no default
+  branch it says so and exits `1` rather than sampling `main`, `master` or the
+  current branch in its place — drops bots, automation and bulk imports, caps
+  each author per half, and names the established subject family or — below the
+  bar — the two strongest. It also proposes a `branch_pattern` from the remote
+  branch names (or reports no clear pattern) and shows the observed update style,
+  which it never adopts. The thresholds are constants of the module the verb
+  runs and are rendered into the commit-subject reference, not restated by hand.
+  `show` and `subject` print `no convention established — run git:convention
+  measure` in that state (`convention_established` under `--json`; exit codes
+  unchanged). An interactive `/commit` asks once — the established family or the
+  two strongest against Conventional Commits — and writes the answer to the
+  approved convention card, also when the answer is Conventional, so the question
+  is never repeated; `/commit:in-chunks` never asks and reports the measurement.
+  Where the choice maps to a setting, `measure` prints the ready-to-commit
+  `.git-convention.yml` (`commit_format`, `branch_pattern`, never
+  `update_strategy`); a human creates and commits it, the agent never writes it.
+
+- **A team's git convention can be declared instead of measured — the new
+  `git:` settings block.** Three Class-C keys, each defaulting to the
+  behaviour every install had before, so an install that sets nothing is
+  unchanged. `git.commit_format: ticket-conventional` writes
+  `DEV-1234 feat(exporter): …` instead of `feat(DEV-1234): …` and treats a
+  ticket in the scope as a wrong subject; `/commit` and `/commit:in-chunks`
+  validate against the regex for the configured format, and the
+  conventional-commits-writing classifier gains a `ticket-conventional` family
+  so such a history is no longer misread as free-text ticket prefixes.
+  `git.branch_pattern` (`{type}`, `{ticket}`, `{slug}`) shapes the branches
+  `/worktree:create` proposes; reading a ticket back out of a branch now takes
+  the first `[A-Z][A-Z0-9]+-[0-9]+` token that is not a standard name (`UTF`,
+  `ISO`, `SHA`, `RFC` prefixes), so `DEV-1234-device-export` yields its ticket.
+  Under `git.update_strategy: rebase`, `/create-pr` asks for
+  `git rebase origin/<base>` plus `--force-with-lease`, and `/pr:merge`,
+  `/prepare-for-review` and `/review:changes` report a behind branch instead of
+  updating it; none of them merges the base into a feature branch — one git-workflow reference
+  (`references/branch-update.md`) now owns that decision, and
+  `sync_pr_branch` exits `3` instead of merging when such a branch is behind
+  (a current branch still exits `0`). **What it does not do:** the setting picks the operation and never
+  authorises it; git-history-discipline still requires the user's request for
+  every rebase, fixup or autosquash. A team declares the keys in
+  `.git-convention.yml`, a tracked file at the repository root that overrides
+  every developer settings file and where either value is a declaration
+  (ADR-283): `git.update_strategy` is read from it at the commit a pull request
+  is judged against, so a worktree, a fresh clone and CI agree and a pull
+  request cannot change the strategy its own update is judged by;
+  `git.commit_format` and `git.branch_pattern` are read at `HEAD`. Without the
+  carrier the keys come from the project settings files as before; the
+  user-global file does not carry them, and the settings GUI no longer offers
+  them while it writes there. `agent-config git:convention show` prints the
+  value in force, the commit it was read at and a differing checkout value as
+  a candidate; `show --key` judges only the named keys. The commit is the
+  `--base` given — a pull request passes `--base origin/<its base>` — else the
+  default branch; nothing asks the forge. A carrier that does not parse makes
+  `sync_pr_branch` exit `4`, a target that names no commit exit `1`, and a named
+  commit that cannot be fetched is `unverified`; none of them merges. A target
+  that moves between the strategy read and the merge is read again at the
+  commit being merged, which is governed by the strategy it carries: the same
+  strategy goes on against it, another one exits `1` before anything is
+  merged. A blank `--base` is a usage error (exit `2`) in `sync_pr_branch`,
+  `git:convention show` and `sync`, and `check_branch_freshness`, never read
+  as no `--base`. A commit-linting config
+  in the repository still outranks `git.commit_format`. In a packed consumer
+  install `git:convention show` is the git surface that resolves, and the
+  consumer matrix proves it with a `git-convention` leg; `sync_pr_branch` and
+  `check_branch_freshness`, which `/pr:merge`, `/create-pr`, `/fix:ci` and
+  `/roadmap:next` run through `./scripts-run`, still need a source checkout of
+  this package.
+  The merge method is not a key: `/pr:merge` already reads it from the forge.
+
 - **A push no longer ships a branch whose tree contradicts its own commits.**
   `check_branch_work_committed` runs first in the pre-push hook, and it exists
   because this branch produced the defect it guards: a merge-reconciled baseline
@@ -726,266 +862,233 @@ Entry-shape contract: [`docs/contracts/CHANGELOG-conventions.md`](docs/contracts
 > keeps the active era under the 250-line drift cap enforced by
 > `tests/test_changelog_eras.py`.
 
-# Era: 16.2.x — current
+# Era: pre-16.3.0 — archived
+
+> All entries before `16.3.0` live in
+> [`docs/archive/CHANGELOG-pre-16.3.0.md`](docs/archive/CHANGELOG-pre-16.3.0.md).
+> The archive is read-only; git tags remain the canonical
+> source for what shipped. Splitting them out of the main file
+> keeps the active era under the 250-line drift cap enforced by
+> `tests/test_changelog_eras.py`.
+
+# Era: 16.3.x — current
 
-> Started at `16.2.0`. Full entries live inline below.
+> Started at `16.3.0`. Full entries live inline below.
 > The drift test caps this era at 250 lines of entry body; growth past
-> that forces a new era split (`# Era: 16.3.x`, etc.) — see
+> that forces a new era split (`# Era: 16.4.x`, etc.) — see
 > [`docs/contracts/CHANGELOG-conventions.md § Era splits`](docs/contracts/CHANGELOG-conventions.md).
 
-## [16.2.0](https://github.com/event4u-app/agent-config/compare/16.1.0...16.2.0) (2026-10-01)
+## [16.4.0](https://github.com/event4u-app/agent-config/compare/16.3.0...16.4.0) (2026-10-10)
 
 ### Release highlights
 
-- **Behaviour changes:** keep ui-audit-gate inside the measured per-spawn payload ceiling (bc499bf); record taxonomy detection and the fourth greenfield option (91d0c55); register the gates, and stop the reader guessing (8714a7a); declare inputs once, structurally (3cfaa6f); disprove a deletion claim against the tree before it blocks a release (c7f813f).
-- **Default changes + migration:** correct the blocker gate's own scope claims, and pin the widened default (5857ef1).
-- **Security and correctness:** enable auto-merge, fix the deploy-row checker, and withdraw an AC-5 close that did not hold (#2114) (52f2da9); re-derive the codex writer pin after install.ts shrank (3c2041a); an absent section must parse, and now a test says so (51c2bab); pay the read-surface declaration nothing (bfce3ac); a deterministic traversal test, and a claim I got wrong (b883d80); a canonical ASCII boundary, and the exploit that is not there (6281500); +31 more.
-- **Honest nulls:** The plumbing roadmap's last measurable gap, measured (#2135) (db000c5); a bytes row that exists, and a gate that refuses one without it (0863114); re-bind the skip to the post-fix scope, and record what the read returned (246d7ea).
-- **Known limitations:** ci_settle refuses an argument it does not honour, and the doc that taught a wrong one (#2130) (tests/scripts/memory_learn_hook.test.ts declares a residual) (dbbf470); A zero in the enforcement table becomes a fact with a date on it (#2141) (tests/install/global_install_hooks_smoke.test.ts declares a residual) (ab2c75d); The review of the stop gate, acted on (#2128) (tests/scripts/release.test.ts declares a residual) (5689c2d); an opt-in write of two size caps, and neither traffic variable (src/scripts/install.ts declares a residual) (74e21e2).
+- **Behaviour changes:** retire 46 default-neutral derivable settings keys (#2274) (b35d432); A team's git convention can be declared: ticket-prefixed commits, branch shape, and rebase instead of merge (#2235) (0f9c32e); ADR-281 and the texts it corrects (partial, self-modification roadmap) (#2251) (82a131f); credit a gate with the obligations it refuses, not the whole rule (#2246) (93a192b); precedence rule, contradiction review, and a reachable MCP-use recorder (#2241) (a6e5942); repair signals that mean what they say (loop flag, cap comments, verify forms) (#2228) (7548bfc); +1 more.
+- **Default changes + migration:** Correct AC-2 to 37: one of the 47 selected keys was not default-neutral (#2278) (e48f52c); doctor is offline by default; --online opts the forge read back in (#2277) (60c129b); retire 46 default-neutral derivable settings keys (#2274) (b35d432); Queue 47 default-neutral settings keys for retirement (#2272) (9582574); a default install is served each rule body once; report pending reinstall (#2238) (d7b0955).
+- **Security and correctness:** Findings that get a disposition: medium security blocks a release, and every 16.3.0 row ends somewhere (#2266) (bf7ed4f); an ignored file is not a pass; a green row names the type checker that did not run (#2244) (3e00f5e); a default install is served each rule body once; report pending reinstall (#2238) (d7b0955); land the two review-round defects stranded when #2231 merged mid-lane (#2233) (4e19d06); repair signals that mean what they say (loop flag, cap comments, verify forms) (#2228) (7548bfc); round-3..7 review findings (follow-up to #2230) (#2232) (3e7baa1); +4 more.
+- **Honest nulls:** round-3..7 review findings (follow-up to #2230) (#2232) (3e7baa1); refuse a triggerless routed rule; measure the real thinned total (#2226) (52b409e).
+- **Known limitations:** Phase 2 waits on a cancelled instrument, not on a machine (#2282) (0f6209e); retire 46 default-neutral derivable settings keys (#2274) (src/scripts/install.ts declares a residual) (b35d432); release evidence that reproduces (#2250) (src/scripts/_lib/release_highlights.ts declares a residual) (35209c1); a default install is served each rule body once; report pending reinstall (#2238) (src/scripts/check_standing_rule_delivery.ts declares a residual) (d7b0955); land the two review-round defects stranded when #2231 merged mid-lane (#2233) (4e19d06); measure the thinned layer in one unit, and price what stands between it and the ceiling (#2231) (src/scripts/install.ts declares a residual) (96dff15).
 
-> **Governance mix:** governance-only 70 vs consumer-only 22 (taxonomy 1.1.0).
+> **Governance mix:** governance-only 38 vs consumer-only 1 (taxonomy 1.1.0; range 5550dec9cf92..79e335f1c1b9).
 
 ### Features
 
-* **host-env:** an opt-in write of two size caps, and neither traffic variable ([74e21e2](https://github.com/event4u-app/agent-config/commit/74e21e2d4b81714e2721a31b9aea93455b85211d))
-* **retrieval-sanitize:** generate the read-surface list, close the two named gaps ([96c9b2a](https://github.com/event4u-app/agent-config/commit/96c9b2abcd4b9ed6f57db568f0c771f9ef36e9f6))
-* **retrieval-sanitize:** salvaged work from an interrupted run, unverified ([a175faf](https://github.com/event4u-app/agent-config/commit/a175fafedbcb4ea6a27924a77845d85d45bf16f6))
-* **settings-fence:** refuse a Class C key, leave every other key writable ([7d285e5](https://github.com/event4u-app/agent-config/commit/7d285e59840867b1faede405561407297d6ab551))
-* **exit-codes:** one table, and the gate that keeps it the only one ([7f4cbbb](https://github.com/event4u-app/agent-config/commit/7f4cbbbe177f990bb80f492bc4f3370011259d3f))
-* **work-engine:** wire the taxonomy into the audit, the schema and apply ([7f87162](https://github.com/event4u-app/agent-config/commit/7f8716240d557dc78a3d2ac25a783ac8ed4ca9ee))
-* **work-engine:** detect the component taxonomy a project already chose ([0772aaa](https://github.com/event4u-app/agent-config/commit/0772aaaa1c87ee633a943dc652613461926040a4))
-* **plumbing-guard:** salvaged work from an interrupted run, unverified ([b8a7037](https://github.com/event4u-app/agent-config/commit/b8a7037e37ed29f52fc169fbbf7821d7db281791))
-* **gates:** keep the kill-switch table equal to the tree it counts ([948f8f2](https://github.com/event4u-app/agent-config/commit/948f8f25bc342bb59d0f0715ac3da2caeed67def))
-* **host-format-gate:** generate the format cell instead of maintaining it ([86093ec](https://github.com/event4u-app/agent-config/commit/86093ec7dc499a6c77112fa82466e4a3f3c00e70))
-* **hooks:** a new test file clears detector F only with a red it passed ([04bb5ea](https://github.com/event4u-app/agent-config/commit/04bb5ea4a3982688e16afaf00713eb365d0d12da))
-* **hooks:** detector C reads the run record, and keeps a replay mode ([dcb07e0](https://github.com/event4u-app/agent-config/commit/dcb07e09b95379d1fedfeeb9783a3f7a3e4618c7))
-* **hooks:** record the verification runs a turn actually made ([99255cd](https://github.com/event4u-app/agent-config/commit/99255cd9fd2dcb328d40b2528167a2a8682b9c67))
-* **hooks:** classify a verification RUN, not the command text ([d638959](https://github.com/event4u-app/agent-config/commit/d638959550a7ab6bf65acf9939fbb8b5f3b708d9))
-* **metrics:** a bytes row that exists, and a gate that refuses one without it ([0863114](https://github.com/event4u-app/agent-config/commit/08631143754a53b6a4ad25296e573a4451fdbde6))
-* **report:** print menu bytes per install profile, and show them equal ([8ecb71c](https://github.com/event4u-app/agent-config/commit/8ecb71c3d66b7e67055355296786def48c0e8e87))
-* **gates:** fail a diff that changes a skill carrying no trigger corpus ([7539f7f](https://github.com/event4u-app/agent-config/commit/7539f7f4577d8ad2dcb6136c73572472307ae658))
-* **eval:** score the ranker with an interval, and refuse a verdict under n=100 ([f6a0608](https://github.com/event4u-app/agent-config/commit/f6a0608d198ca5255fd01aac7942d49f05b87c5d))
-* **eval:** give every routing-matrix case an expected-skills label ([06f8cb3](https://github.com/event4u-app/agent-config/commit/06f8cb3f543fd937728461758a89d0daa4dfc4c9))
-* **roadmap-template:** a verify clause may say what the command must produce ([8f60a26](https://github.com/event4u-app/agent-config/commit/8f60a269d1358f9b1981b66bd3d4a5c9fc9ac12f))
-* **roadmaps:** publish the runnable and falsifiable share, and refute a zero ([7e0fd6b](https://github.com/event4u-app/agent-config/commit/7e0fd6ba6c9b3dab62c3f3dbf3ff5a846515b0a4))
-* **closure-scan:** list the verify clauses whose oracle cannot say no ([86d2c07](https://github.com/event4u-app/agent-config/commit/86d2c07771c7c2a8000a63f46cd2de27b9d57c1c))
-* **run-continuation:** carry the expectation into the continuation message ([67fdd5b](https://github.com/event4u-app/agent-config/commit/67fdd5b0f1dfa743444930f591cb2a231a3bfe00))
-* **verify:** one parser for the verify clause, with an expectation half ([8b5a878](https://github.com/event4u-app/agent-config/commit/8b5a87881c1dea06b8c092d48dbac2991d3c5760))
-* **hooks:** carry the host lowering table further toward every host ([d28ce58](https://github.com/event4u-app/agent-config/commit/d28ce587ab6b3e3010aada63c59985d22d63c0dd))
-* **obligations:** name the writer on every obligation row ([46d3ebf](https://github.com/event4u-app/agent-config/commit/46d3ebf806f52cddec4e65913860b055ec869417))
-* **denylist:** give every external-source subject a registry entry ([bb1107d](https://github.com/event4u-app/agent-config/commit/bb1107d5a4b033021bf6c9d22f30c977b277150c))
-* **probe:** report a false green as a refusal, and archive the roadmap ([0eadd50](https://github.com/event4u-app/agent-config/commit/0eadd503f9f735162acc951d636987738f1d92f4))
-* **design-pass:** report stale, and stop reporting a count against inputs that moved ([4032b24](https://github.com/event4u-app/agent-config/commit/4032b24aea47144cf07fc51680a0b1d227660c71))
-* **probe:** record the inputs beside the timestamp, on every artefact ([c86ebad](https://github.com/event4u-app/agent-config/commit/c86ebad009fe41485f6e28ce8b4fa23ef9a5dbac))
-* **ui:** report a port that handed all its work back, in shadow ([55b4378](https://github.com/event4u-app/agent-config/commit/55b4378732b7601afbe37356c9e35dba7aac7c11))
-* **probe:** give the conformance artefact a vocabulary for what it read ([e07a896](https://github.com/event4u-app/agent-config/commit/e07a8967164e7d2c8409c91ec67b56dca12d52b0))
-* **reporter:** count the artifacts that carry one obligation ([cabc485](https://github.com/event4u-app/agent-config/commit/cabc48540c446dbc4138e00117aec49545d155d2))
-* **doctor:** report the host traffic environment, and never omit a row ([454e072](https://github.com/event4u-app/agent-config/commit/454e07223d5ba539bc341b802506eca282bd9122))
-* declare inputs on one command and one skill ([124dc5b](https://github.com/event4u-app/agent-config/commit/124dc5becdbab71993c7993eac6072265cd9d9fe))
-* **mcp:** derive the argument-hint and the wire arguments from the declaration ([15f1f66](https://github.com/event4u-app/agent-config/commit/15f1f665c082fa6fb74a11c91ac11e7e995afcdf))
-* **scripts:** fail an in-body reference no declaration backs ([c2a2d07](https://github.com/event4u-app/agent-config/commit/c2a2d07f3bb9d794aa9110aa2768ab48f84ba492))
-* **schemas:** declare inputs once, structurally ([3cfaa6f](https://github.com/event4u-app/agent-config/commit/3cfaa6f2183bd6f567a4ff0ebc2ead864ac1df82))
-* **scripts:** ratchet foreign placeholder syntaxes shrink-only ([d9c99ad](https://github.com/event4u-app/agent-config/commit/d9c99ad9a3a8d1f7d0d825109a59daaa17d45ba7))
-* **scripts:** census the invocation surface, with the unit defined first ([833e2f6](https://github.com/event4u-app/agent-config/commit/833e2f6f44cef9e7ebbd277ef4b5e7dee8744edd))
-* **scripts:** count which concerns sit on slots that cannot deny ([76811e9](https://github.com/event4u-app/agent-config/commit/76811e9653014adfea2f0f157733a2117f0af248))
-* **scripts:** add the body-portable eligibility predicate ([e0eb189](https://github.com/event4u-app/agent-config/commit/e0eb1892b91087afa673861b4b3df172d411e55d))
-* **scripts:** census which skill semantics the MCP-lite carrier drops ([88cff00](https://github.com/event4u-app/agent-config/commit/88cff0053daeb92c645673781094b0ca20b6517d))
-* **gates:** lint_roadmap_blockers scans agents/roadmaps/stubs/ ([a1e47cd](https://github.com/event4u-app/agent-config/commit/a1e47cd288ca00d18dbeb4e30d0b2f37b58ce886))
-* **design-review:** demote the screenshot to an appearance-only floor ([d7427f7](https://github.com/event4u-app/agent-config/commit/d7427f7bd16d8da0dca699cc5d03291059b0659d))
+* **roadmaps:** 6.1's verdict lands, and two things it uncovered are held rather than worked around (#2294) ([79e335f](https://github.com/event4u-app/agent-config/commit/79e335f1c1b9c41d6ee75c6c38ef57eeeb63f010))
+* **roadmaps:** Phase 7's population, measured — and the first sweep that was thrown away (#2293) ([7a7a55b](https://github.com/event4u-app/agent-config/commit/7a7a55b2d8947d2c2e26ff59862bc8e9fac3f573))
+* **roadmaps:** the hold step 1.1 asked for is neither of the two shapes it offered (#2283) ([e90a478](https://github.com/event4u-app/agent-config/commit/e90a4788ec0d9afa07aaeeac00bf73b76ecc30f6))
+* **gates:** bring later/*-carried.md into the blocker lint, and nothing else (#2280) ([11dc63f](https://github.com/event4u-app/agent-config/commit/11dc63fe8521a0f87fb5a72203453497aca04ccf))
+* **settings:** retire 46 default-neutral derivable settings keys (#2274) ([b35d432](https://github.com/event4u-app/agent-config/commit/b35d432b11cc3328517c7963c570bb1a06b8dda7))
+* cross-file blocker refs and declared snapshot exemption (authority-routing phases 4-5) (#2264) ([b01d71d](https://github.com/event4u-app/agent-config/commit/b01d71d94dd8e763d6c1d5f9fc6f7776beffde55))
+* **merge:** auto-merge on the owner's word, with a council danger gate (ADR-282) (#2256) ([edd18fe](https://github.com/event4u-app/agent-config/commit/edd18fea6867255375dc3797121260e137322f26))
+* **roadmaps:** a routed authority for dangerous-action decisions (#2254) ([4b54335](https://github.com/event4u-app/agent-config/commit/4b54335a6217e25ae9c6273b591ee0e2919683c5))
+* **enforcement:** credit a gate with the obligations it refuses, not the whole rule (#2246) ([93a192b](https://github.com/event4u-app/agent-config/commit/93a192bbd36c051032e028a68fed7f8574908907))
+* **probe:** blocking time by cause, the CI-and-subagent hypothesis refuted (#2248) ([179019f](https://github.com/event4u-app/agent-config/commit/179019fb3c310f9ad1226877b7f191ae30f9d394))
+* **release:** release evidence that reproduces (#2250) ([35209c1](https://github.com/event4u-app/agent-config/commit/35209c1f5bd2c7cc2521693c58523402ad03618e))
+* **gates:** a ratification fence that follows the dispatcher's imports (#2247) ([8fdb481](https://github.com/event4u-app/agent-config/commit/8fdb4816921e50fbcb78e70beb0c347bad11890f))
+* **roadmaps:** parked blockers get counted, one owner question gets a blocker, two checks for ticks and citations (#2245) ([764fa4f](https://github.com/event4u-app/agent-config/commit/764fa4fa4c7d88d0214fea4409e234760889d545))
+* **code-graph:** measure the graph feeder's cost on the stop slot (graph-that-feeds-the-gate 3.5) (#2239) ([8d91928](https://github.com/event4u-app/agent-config/commit/8d91928cbd6111293b8eca16fde1240651d853e7))
+* **ci:** gates a pull request can hear (#2249) ([c4051c7](https://github.com/event4u-app/agent-config/commit/c4051c7ed34cd9209496205286af3c5a1ef2d89e))
+* **doctor:** an offline flag, and the 16.3.0 findings' doc and test fixes (partial) (#2243) ([fc1bdec](https://github.com/event4u-app/agent-config/commit/fc1bdec4f4edcf9438d42388e252352617f257b6))
+* **install:** count unresolved installed links per artefact kind (#2240) ([ef32868](https://github.com/event4u-app/agent-config/commit/ef328687cfff78efa57cc957d90344fae7b90979))
+* **ranker:** opt-in unrounded tie-break, tie metrics, and the tuning reading (#2242) ([e92e9dc](https://github.com/event4u-app/agent-config/commit/e92e9dcdb23bb16d596252fdb7c21e51fe7ec64a))
+* **neighbours:** precedence rule, contradiction review, and a reachable MCP-use recorder (#2241) ([a6e5942](https://github.com/event4u-app/agent-config/commit/a6e5942236858a85b01246c0b04345c6148075d7))
+* **spend:** a spend bound applies only where one was set (#2234) ([e3c30fc](https://github.com/event4u-app/agent-config/commit/e3c30fc9d3af3121a03dbc420b4fbaa235993b46))
+* **installed-layer:** measure the thinned layer in one unit, and price what stands between it and the ceiling (#2231) ([96dff15](https://github.com/event4u-app/agent-config/commit/96dff15dd9d5544641b54e5c729becbef6f57306))
+* **reach:** close road-to-modules-that-something-calls — census, repairs, and the five reported counts (#2227) ([3dbb3f9](https://github.com/event4u-app/agent-config/commit/3dbb3f99da8c731a6ba6f34fef48ae90834fb1df))
 
 ### Bug Fixes
 
-* **release:** count tests by running files, not by static parse (#2145) ([396fbbc](https://github.com/event4u-app/agent-config/commit/396fbbc27f37147a2dad7757a69147b7e0d9a761))
-* **roadmap:** make the menu-precision path-scoping blocker machine-readable (#2119) ([016530f](https://github.com/event4u-app/agent-config/commit/016530fd099d74f48b4fb3346226fb48608597fa))
-* **adversarial-verification:** enable auto-merge, fix the deploy-row checker, and withdraw an AC-5 close that did not hold (#2114) ([52f2da9](https://github.com/event4u-app/agent-config/commit/52f2da946181ab0ab5437055ec55759f6e04fd92))
-* **roadmap:** make the obligation-writer corpus blocker machine-readable (#2117) ([9de3e0c](https://github.com/event4u-app/agent-config/commit/9de3e0cd3cf8a4ae08c9b809038f225e3750adef))
-* **citations:** re-derive the codex writer pin after install.ts shrank ([3c2041a](https://github.com/event4u-app/agent-config/commit/3c2041a152d77ad6799f0053eb8be509ec8824d4))
-* **host-env:** an absent section must parse, and now a test says so ([51c2bab](https://github.com/event4u-app/agent-config/commit/51c2bab3fda07042a643cd10ec26c04bd381349c))
-* **size-budget:** pay the read-surface declaration nothing ([bfce3ac](https://github.com/event4u-app/agent-config/commit/bfce3ac363c6e6013aad9829d7289ab388940c6e))
-* **read-surface:** a deterministic traversal test, and a claim I got wrong ([b883d80](https://github.com/event4u-app/agent-config/commit/b883d80cc0074381bbd5b91a52aebaeefa6b480f))
-* **update-prices:** a canonical ASCII boundary, and the exploit that is not there ([6281500](https://github.com/event4u-app/agent-config/commit/62815002af383bdb3655fb4d62956f69ef0397d9))
-* **read-surface:** four findings from the second review round ([1bd1f97](https://github.com/event4u-app/agent-config/commit/1bd1f9718d3d667c727a30197162005900a70d2e))
-* **rules:** keep ui-audit-gate inside the measured per-spawn payload ceiling ([bc499bf](https://github.com/event4u-app/agent-config/commit/bc499bf6c9e773800373a918966fed42530703ea))
-* **ci:** four gates this branch reds, each for a real reason ([6b9f886](https://github.com/event4u-app/agent-config/commit/6b9f886f6a269fed302b9e5b2bdee16c5cbf973b))
-* **work-engine:** close seven defects an independent review found ([3e83a51](https://github.com/event4u-app/agent-config/commit/3e83a513aeb8b15fd93f5dedcd8682471955a4cf))
-* **hooks:** use the shared session-stability predicate main brought in ([d229d1a](https://github.com/event4u-app/agent-config/commit/d229d1afde93903e42fad03f5bf95b5a5216af6e))
-* **plumbing-guards:** three defects an independent review found before merge ([afcd180](https://github.com/event4u-app/agent-config/commit/afcd180c0614f950d7ae58b361d0c3512aee891d))
-* **skills:** keep existing-ui-audit under its size budget and at dialect baseline ([876b045](https://github.com/event4u-app/agent-config/commit/876b04557a4da5932a2bc927c2d68d1fa256da71))
-* **work-engine:** make the taxonomy floors and the AC-2 guard testable alone ([0e30e4a](https://github.com/event4u-app/agent-config/commit/0e30e4ac9f9a7691d24d44a942a85c5e77272442))
-* **gates:** host the kill-switch step where its trigger paths already are ([2ffcd47](https://github.com/event4u-app/agent-config/commit/2ffcd4771ef14987a0f826a75c58c219aac9fdfa))
-* **hooks:** keep the settle concern's main() argv-shaped ([0a0a4d7](https://github.com/event4u-app/agent-config/commit/0a0a4d7ca49cd6b03c337024610b58dbff9d6147))
-* **hooks:** join the ledger on ONE root resolver, and make the reproduction reproduce ([27deeb0](https://github.com/event4u-app/agent-config/commit/27deeb0a365a011e269c91eec02bf6a31ca39274))
-* **hooks:** narrow detector F to a new test file, and label the evidence honestly ([285c51e](https://github.com/event4u-app/agent-config/commit/285c51ec3f2b0b2c97dffd25c159b86e87524f75))
-* **hooks:** read the exit code the host actually reports, not the one it does not ([7282593](https://github.com/event4u-app/agent-config/commit/7282593773a823f1021d18aad4c77f729601ffc3))
-* **hooks:** join the obligation reader to the key the writer used ([5c94152](https://github.com/event4u-app/agent-config/commit/5c94152581b44b6ec68f26201c45ca8cad6107f3))
-* **roadmap:** report against the acceptance criteria, do not rewrite them ([2bf7673](https://github.com/event4u-app/agent-config/commit/2bf7673fd2ff2c81603c953fe258ff102d6819ad))
-* **verify:** bound a clause to its own paragraph, not to the whole step ([55cf57c](https://github.com/event4u-app/agent-config/commit/55cf57ce2ee42b3ecfbfb11708353fee2028467b))
-* act on an independent review of this branch ([b5d2d8f](https://github.com/event4u-app/agent-config/commit/b5d2d8f4ecda62d9dbf34da5285b7620dd6eb839))
-* **verify:** keep the over-cap hook at its size, and stop F5 reading as a roadmap ([846d765](https://github.com/event4u-app/agent-config/commit/846d76502b7f870174c11ff3b5a62d4cefc57507))
-* **injection-budget:** meter only the hosts whose emission reaches them ([cde876e](https://github.com/event4u-app/agent-config/commit/cde876e7f7c2d34346a9e83fe7fd4750158a1dbc))
-* **host-lowering:** two defects the answered_at fixtures surfaced, and the tests that hold them ([5eadd50](https://github.com/event4u-app/agent-config/commit/5eadd507c1412c61904cab18b3970452b7229511))
-* **canonical-terms:** write the two new prose lines in house dialect ([21894c1](https://github.com/event4u-app/agent-config/commit/21894c16fa0a9e8b0753f9f21fc5b86db17ff13b))
-* **probe:** record inputs on the stopped path too ([952e616](https://github.com/event4u-app/agent-config/commit/952e6167dd21d7e0a38b93fa19703124704d7299))
-* **contexts:** keep the pointer, drop the argument for the pointer ([3d84ba0](https://github.com/event4u-app/agent-config/commit/3d84ba04d5daa2cf6a2ccc41fbcf2333bcebca10))
-* **ui:** match a declared item by id, and report the shadow outcome ([2b6a0f5](https://github.com/event4u-app/agent-config/commit/2b6a0f551278446aa839f1e0f6e79791ab0c8108))
-* **docs:** write the traffic doc in the house dialect ([10a9de9](https://github.com/event4u-app/agent-config/commit/10a9de902b2cc4e6761e2b156cde53476ac4deef))
-* **tests:** narrow the comparison union before reading its reason ([cc270c9](https://github.com/event4u-app/agent-config/commit/cc270c9e83517a4ca2c9ed96c0f1e87fca7b2986))
-* **ui:** account for a declared item by id, not by substring ([99933fa](https://github.com/event4u-app/agent-config/commit/99933fac372e2f2d37b18c83baf8d6c3a0555872))
-* **review:** stop a removal claim inside a modified file from disproving itself ([54c01ad](https://github.com/event4u-app/agent-config/commit/54c01ad156761c7a62c90029f40e453dab55d52d))
-* **config:** give the placeholder budget an owner and a review date ([cc28417](https://github.com/event4u-app/agent-config/commit/cc2841777e28b340f34d0385cd0d69dc56e3f42c))
-* **gates:** refuse an empty corpus, and record the ratification ([a9e7da2](https://github.com/event4u-app/agent-config/commit/a9e7da2150097f74d03f10467bd54c73ec9deef9))
-* register the gates, and stop the reader guessing ([8714a7a](https://github.com/event4u-app/agent-config/commit/8714a7a2724c15264bea3144e942dfa83785f4ab))
-* **scripts:** stop the audit failing open on a host with no slot rows ([074ae19](https://github.com/event4u-app/agent-config/commit/074ae19883ca19facc8588280ab74421095162a6))
-* **scripts:** bind the carrier constants to the carrier, and share one classifier ([828d384](https://github.com/event4u-app/agent-config/commit/828d384102755fade06a2632228242aedc9a5018))
-* **roadmaps:** close the three lint_decision_classes violations ([9b9f61b](https://github.com/event4u-app/agent-config/commit/9b9f61b7f77e814e3ee76fbb8bb384b02b5d900c))
-* **claims,roadmap:** six corrections from an independent read of this branch ([5169ced](https://github.com/event4u-app/agent-config/commit/5169cedaaafc9992ce2afb5cc27bd071d4f1a86f))
-* **claims:** correct the two ledger sentences that denied a shipped collector ([1ec20a6](https://github.com/event4u-app/agent-config/commit/1ec20a65887628c5b23312a0c35a3458209f82bd))
-* **review:** re-derive the manifest hashes after the roadmap's final edits ([319d35e](https://github.com/event4u-app/agent-config/commit/319d35edafe3f9ffc058d5def02b96c780a650e9))
-* **ci:** write the house dialect and refresh the routing-signal verdict ([91503fc](https://github.com/event4u-app/agent-config/commit/91503fc2b5ad28f5720d443fcfbfff3fe1242c77))
-* **gates:** correct the blocker gate's own scope claims, and pin the widened default ([5857ef1](https://github.com/event4u-app/agent-config/commit/5857ef107468f03561ea7e45ddafd2a613642acd))
-* **design-review:** drop the archived-roadmap path from the appearance floor ([26a2dbd](https://github.com/event4u-app/agent-config/commit/26a2dbd7b5a7ae39d7cc8d0b992782490a43853d))
-* **claims:** re-measure the artifact counts the claim had gone stale against ([1528325](https://github.com/event4u-app/agent-config/commit/15283253b24a875f6fe466b29e8ec8b40b6fdb91))
-* **review:** disprove a deletion claim against the tree before it blocks a release ([c7f813f](https://github.com/event4u-app/agent-config/commit/c7f813ffc39acc712ecb309f4c5f1df702e31ea1))
-
-### Performance
-
-* **enforcement-coverage:** worklist the reachability fixed point (#2112) ([7090e82](https://github.com/event4u-app/agent-config/commit/7090e822e74fdb10295be2d652b572ccb0a28d5d))
-* **hooks:** compile the lowering table — 9 ms off every dispatch (#2110) ([4d60b86](https://github.com/event4u-app/agent-config/commit/4d60b866732808e3252336c26f198134d6ed0c34))
-
-### Reverts
-
-* **structural-hiding:** hold the transform, land the inventory gate ([55dae10](https://github.com/event4u-app/agent-config/commit/55dae10e9aa9339b8f6180c0bfe7565fcaa02f65))
+* **roadmaps:** dispose the two neighbours-carried steps (#2267) ([dc9f98a](https://github.com/event4u-app/agent-config/commit/dc9f98aa05c31fe20e52ec2a38f089771bbbea37))
+* **roadmaps:** carry the archived AC-3 and close parked-blockers step 4.2 (#2262) ([6051d37](https://github.com/event4u-app/agent-config/commit/6051d3744ac67057d6fc9bc178af3d36060ff4c1))
+* **release-findings:** close the ratification-fence roadmap's last step (#2261) ([6a1cb1a](https://github.com/event4u-app/agent-config/commit/6a1cb1a5cfbd9ca582152ea7f3022100d517abfa))
+* **touched-file-quality:** an ignored file is not a pass; a green row names the type checker that did not run (#2244) ([3e00f5e](https://github.com/event4u-app/agent-config/commit/3e00f5e0fb424e6c925058a184ac6942eb8dee89))
+* **rule-inject:** a default install is served each rule body once; report pending reinstall (#2238) ([d7b0955](https://github.com/event4u-app/agent-config/commit/d7b095551302e7dc215d6ac7b2a4191619eb0ed5))
+* **installed-layer:** land the two review-round defects stranded when #2231 merged mid-lane (#2233) ([4e19d06](https://github.com/event4u-app/agent-config/commit/4e19d06651700573df2bf395536011c32381ffc1))
+* **scripts:** repair signals that mean what they say (loop flag, cap comments, verify forms) (#2228) ([7548bfc](https://github.com/event4u-app/agent-config/commit/7548bfca437880a8a3a69b7ce608538ae757f303))
+* **reach:** round-3..7 review findings (follow-up to #2230) (#2232) ([3e7baa1](https://github.com/event4u-app/agent-config/commit/3e7baa13cfe63febf1735be9b17b414d21aa8527))
+* **reach:** three R2-review bugs in the module-reach report (follow-up to #2227) (#2230) ([31e3da5](https://github.com/event4u-app/agent-config/commit/31e3da5baf7aa7bc2a06b53335b18f1846912c3a))
+* **rules:** refuse a triggerless routed rule; measure the real thinned total (#2226) ([52b409e](https://github.com/event4u-app/agent-config/commit/52b409e897e42ab00e7305a6f17e1e27a1a35072))
+* **code-graph:** repair the gate feeder path shape, then publish what step 3.3 actually measures (#2216) ([1668731](https://github.com/event4u-app/agent-config/commit/166873158c1bcbe585a95654376ec021873a4107))
+* **deps:** lift proxy-addr to 2.0.8 so the runtime audit gate can pass (#2219) ([26510a6](https://github.com/event4u-app/agent-config/commit/26510a6c2a0e5d2997d639d6e5f3e9e9bc9dc34f))
+* **rules:** repair the docs/ link group, correct two stale blocker claims (#2213) ([c58d7ea](https://github.com/event4u-app/agent-config/commit/c58d7eae8d1aab76d37f9018a57c5047d4b957bc))
+* **roadmaps:** register step 0.2 blockedness where the carrier reads it (#2212) ([6b79d06](https://github.com/event4u-app/agent-config/commit/6b79d06defecbb3d8bc16d44e41160e0d4e470a5))
 
 ### Documentation
 
-* **roadmap:** mark the bounded-approval-floor-waiver's owner-reserved step, and date M18 (#2116) ([0a462f2](https://github.com/event4u-app/agent-config/commit/0a462f29b37ccc5595b94f23808d3d2b421f3bd5))
-* **roadmap:** the 2026-09-30 window reading, and the reset three readings missed (#2115) ([e6b8ac3](https://github.com/event4u-app/agent-config/commit/e6b8ac3a6630015de2f84c0799fd15bc5687b9ad))
-* **roadmap:** correct the release-holds measurement-window record against the live tree (#2113) ([7c065c3](https://github.com/event4u-app/agent-config/commit/7c065c30464be92720a3ff41f45269b13c0db8d8))
-* **ratification:** record the five-round review that ratified this branch ([41f29b9](https://github.com/event4u-app/agent-config/commit/41f29b991676c747050747b976dcffce618358fa))
-* **evidence:** record the holdout-corpus growth and move the two counts ([ce90f34](https://github.com/event4u-app/agent-config/commit/ce90f34008e56ae47875ecad1e72d9ecb1819ac9))
-* **admissions:** record why block-plumbing-writes was admitted ([2203c9e](https://github.com/event4u-app/agent-config/commit/2203c9ed2c62b4cffee1edc405d5b6a28269c559))
-* **budget:** record that the pre_tool_use revisit-if fired, and what this branch cost ([724329f](https://github.com/event4u-app/agent-config/commit/724329fd410daada84347f7ec843434e8aa84fff))
-* **roadmaps:** record the review round and withdraw two false claims ([3947043](https://github.com/event4u-app/agent-config/commit/3947043b4cbbc789d7d0a39f3a4c140c993bb495))
-* **roadmap:** re-review the risk register against what actually landed ([5b89946](https://github.com/event4u-app/agent-config/commit/5b89946d5c44ad0d69121f6211d95e98d5276dfa))
-* **ratification:** record the ratified verdict and the three fixed blockers ([c6ad1bb](https://github.com/event4u-app/agent-config/commit/c6ad1bb23e4e6a5defc0450cf070bdaa67f443d7))
-* **roadmap:** close Phases 1, 2 and 4 with evidence; record the Phase 3 blocker ([8e6db5c](https://github.com/event4u-app/agent-config/commit/8e6db5cd36fa32ff881cc00636821bfe962e8fdc))
-* **roadmaps:** close the component-taxonomy roadmap and archive it ([6ae9804](https://github.com/event4u-app/agent-config/commit/6ae9804e9b42b4063c0d39f6033a0b12b4b695ec))
-* **ui-track:** record taxonomy detection and the fourth greenfield option ([91d0c55](https://github.com/event4u-app/agent-config/commit/91d0c55d7ec7f38840cc7062f74122589b53d7cc))
-* **roadmaps:** record the review round, and what it changed about the closed steps ([57bc4b1](https://github.com/event4u-app/agent-config/commit/57bc4b1312e0fb76239c10ca5848a849d6852cb8))
-* **evidence:** record the independent review of this branch ([c8e775b](https://github.com/event4u-app/agent-config/commit/c8e775b3d13d9bb2c9a4d5382ab88c262b977faf))
-* **ratification:** record the three-round review, and leave Phase 2 open ([0758dca](https://github.com/event4u-app/agent-config/commit/0758dcaf962b324f59c5628ba3e6fc12f85a7d99))
-* **enforcement-by-host:** state what the tree does, and what it does not record ([80f7cf0](https://github.com/event4u-app/agent-config/commit/80f7cf06853ba7a782813f4cc3488f774449da96))
-* **roadmaps:** close six steps of road-to-a-stop-that-holds, and name what stays open ([862227a](https://github.com/event4u-app/agent-config/commit/862227aa9c2becf1087cafeedce5d0fefbbfc69c))
-* **claims:** reset the obligation-settle bar window at the join fix ([ab59f86](https://github.com/event4u-app/agent-config/commit/ab59f866f5d337f30c9de8385f073790c7335c57))
-* **hooks:** inventory every AGENT_CONFIG kill switch the hook layer reads ([b9e9d9e](https://github.com/event4u-app/agent-config/commit/b9e9d9e34f205f17b30ad0b26fc632e9c201798c))
-* **closure-scan:** say that the unfalsifiable count is a lower bound ([e6fd3ee](https://github.com/event4u-app/agent-config/commit/e6fd3ee3e92fe24295dbad37613ec01723488b26))
-* **verify:** correct four refuted figures, and unship a dated number ([7f165fb](https://github.com/event4u-app/agent-config/commit/7f165fb1ee30a786eed89878f5a972f1ebcb0c28))
-* **evidence:** say which sha the reading was taken against, and that it held ([b9e3cbd](https://github.com/event4u-app/agent-config/commit/b9e3cbd993bf3ce65bc9a5ddd78cb310a72a4053))
-* **evidence:** record the measured routing precision and cite it in the register ([5feeba5](https://github.com/event4u-app/agent-config/commit/5feeba5f9d0da66d1193acccae07b647051f3ec2))
-* **roadmaps:** close the probe-inputs roadmap, and retract the claim it got wrong ([106e80f](https://github.com/event4u-app/agent-config/commit/106e80f2c73f8fe7b7d68da65870af5f1ce8ca8c))
-* **onboarding:** point the consumer tour at the traffic mapping, close phases 1-3 ([a2a7a43](https://github.com/event4u-app/agent-config/commit/a2a7a4388ddc37c4a6d5c350c053f923bc860add))
-* **setup:** map the host traffic variables against the shipped binary ([3428a55](https://github.com/event4u-app/agent-config/commit/3428a55924c426142b92a561d056d63913cc64e4))
-* **roadmaps:** close the fact-plane roadmap with its evidence and two findings ([0b10990](https://github.com/event4u-app/agent-config/commit/0b10990d21ccba680055c5a1d5f64a713bb8b6b1))
-* **roadmaps:** close road-to-an-invocation-contract-that-reaches-the-wire ([3c8fbd1](https://github.com/event4u-app/agent-config/commit/3c8fbd1fbd3d6fd88d17b44edd2473f977f3984b))
-* **roadmaps:** close road-to-a-content-scanner-on-a-slot-that-can-refuse ([43c717e](https://github.com/event4u-app/agent-config/commit/43c717e5a803cc2a327bd07133a83652dd21150a))
-* **enforcement:** say which concern sits on which slot, and why ([43c2c5b](https://github.com/event4u-app/agent-config/commit/43c2c5b526f152f6fbeb67c57ac8fdb2b27aa6e1))
-* **roadmaps:** byte-equality is necessary and not sufficient ([2bfb6cb](https://github.com/event4u-app/agent-config/commit/2bfb6cb2a839e18844bb01b829794571e379d47a))
-* **review:** declare the completion review skipped — this diff has no code surface ([549c3cc](https://github.com/event4u-app/agent-config/commit/549c3cc8e801d9315abd11e236791df69957691d))
-* **roadmaps:** state the measured growth figure in both claims ([2bb25fe](https://github.com/event4u-app/agent-config/commit/2bb25fe5138510e048383dbcb0a3c57495fde687))
-* **roadmaps:** make the two growth claims legible in the gate output ([01bb781](https://github.com/event4u-app/agent-config/commit/01bb781bdda772ae3f48dc051d66dcee794c3036))
-* **evidence:** record the inbox-2026-09-ab disposition ([6697f68](https://github.com/event4u-app/agent-config/commit/6697f68c6dc8a039fce80a788a866c1f800e9c01))
-* **roadmaps:** record arrival counts on 18 held objects ([3d2a99c](https://github.com/event4u-app/agent-config/commit/3d2a99c6ffe8fbb94004f226f6fb0f5a5e2c8aba))
-* **roadmaps:** land 22 roadmaps from inbox round inbox-2026-09-ab ([e0db0cc](https://github.com/event4u-app/agent-config/commit/e0db0cca23e56e18c9e122254fdfeab06a84b39f))
-* **review:** re-bind the skip to the post-fix scope, and record what the read returned ([246d7ea](https://github.com/event4u-app/agent-config/commit/246d7eab5bfdc2cb5bd298d0b705472f0ceb024d))
-* **roadmap:** record the per-track governance ruling as pending, and close its blocker ([464b1ab](https://github.com/event4u-app/agent-config/commit/464b1ab8f7f82eb54a4471a22252be7a14dd4314))
-* **review:** declare the completion-review skip for this closure ([755d616](https://github.com/event4u-app/agent-config/commit/755d616d9b7c9f207d21c865524da97c5ee9041f))
-* **roadmap:** record the owner ruling on the probe lane ([4bdc42d](https://github.com/event4u-app/agent-config/commit/4bdc42d78c38a575f4704f9a9cd153466411c32e))
-* **review:** re-point the findings artifact at the current review scope ([9b62299](https://github.com/event4u-app/agent-config/commit/9b6229945474441d0a724ff1d20a37111e118674))
-* **roadmap:** move the post-review AC-4 corrections out of the AC section ([74150a8](https://github.com/event4u-app/agent-config/commit/74150a8434f55dd3669c680e1d5d568575c6fbfc))
-* **roadmap:** second risk-register pass, after the independent review moved AC-4 ([81cc461](https://github.com/event4u-app/agent-config/commit/81cc46111b1a456b6ad900c4a1418b0de4a543da))
-* **review:** record the §2.5 ordering deviation on the review artifact ([3749d12](https://github.com/event4u-app/agent-config/commit/3749d12c868eb42e44204cd4363f0074c5d9e5b5))
-* **review:** land the independent completion review for the blocker-gate widening ([eb4c47f](https://github.com/event4u-app/agent-config/commit/eb4c47f5bb508ea4492cb336836599f2a6f7de7c))
-* **evidence:** re-scope the skip declaration and record the two CI catches ([4160717](https://github.com/event4u-app/agent-config/commit/41607171e9e40242944f667b7c58b7a3816361b8))
-* **roadmap:** record the archival deadlock AC-4's closure creates ([b4f1751](https://github.com/event4u-app/agent-config/commit/b4f175167550e2944de4e91b3cc4001f880054cb))
-* **stubs:** tell stub authors the blocker gate now reads this directory ([c7d5deb](https://github.com/event4u-app/agent-config/commit/c7d5debdc0d2263b0a8dc868213fe5edde54a416))
-* **roadmap:** re-review the substrate-stub risk register after AC-4 ([254bf55](https://github.com/event4u-app/agent-config/commit/254bf5596f00438b1cdbd2aeca1f0c533f6ac458))
-* **evidence:** declare the completion-review skip for Phase 4 ([f1b1545](https://github.com/event4u-app/agent-config/commit/f1b15458f5d2e7c8b11ab81c8c8dedb7260c1746))
-* **roadmap:** close AC-4 of the substrate-stub roadmap on the owner ruling ([4b5a23d](https://github.com/event4u-app/agent-config/commit/4b5a23dd74b37e3b4ad6d36b55a14c96beb12b67))
-* **roadmap:** re-review the risk register after Phase 4 landed ([144f209](https://github.com/event4u-app/agent-config/commit/144f209a98214b2568fbe1c51062c043a91b362b))
-* **roadmap:** record the owner ruling and close Phase 4 ([6f71003](https://github.com/event4u-app/agent-config/commit/6f71003642732c94eb518115415d2410e8d36f12))
-
-### Refactoring
-
-* **hooks:** move the record reader to its producer, and the verdict prose to its vocabulary ([063197a](https://github.com/event4u-app/agent-config/commit/063197ae40b62d4a3c4d893186787206b2bd1145))
-* **contexts:** one carrier for the commit obligation, not three ([1a87d86](https://github.com/event4u-app/agent-config/commit/1a87d86502b922c74601295138374db8838fdc19))
-* **design-review:** fit the appearance floor under the 400-line skill cap ([6daa154](https://github.com/event4u-app/agent-config/commit/6daa154b59a699b369bd83e2fb3be03b8eb55105))
+* **roadmaps:** close three prerequisites that were performed but never ticked (#2291) ([c393d6b](https://github.com/event4u-app/agent-config/commit/c393d6b244ff3031d46345ebb24b3fd2ffc6611e))
+* **roadmaps:** mark the three Phase-3 steps that share one gate, and refuse to mark two that do not (#2290) ([05329ba](https://github.com/event4u-app/agent-config/commit/05329ba488e7fcf98a93bf2a2df4d4162d013d54))
+* **roadmaps:** measure all five open acceptance criteria instead of assuming them (#2289) ([70bd51a](https://github.com/event4u-app/agent-config/commit/70bd51a8a1221e56cb8a15648282cb31b0b4ce97))
+* **roadmaps:** a sixth reading of three stable negatives, and one rejected substitution (#2287) ([ebefcdc](https://github.com/event4u-app/agent-config/commit/ebefcdc1f0d35d0a7ca5044d33605d4b3247b679))
+* **roadmaps:** the gate refused a comment, which answers the phase block (#2285) ([6715878](https://github.com/event4u-app/agent-config/commit/6715878859af7cd20fcac76855c4c4158b57edf3))
+* **roadmaps:** Phase 1 was done except for three notes nobody wrote (#2284) ([5280e89](https://github.com/event4u-app/agent-config/commit/5280e8912ab480799e433d37df2d402b5b10b791))
+* **roadmaps:** Phase 2 waits on a cancelled instrument, not on a machine (#2282) ([0f6209e](https://github.com/event4u-app/agent-config/commit/0f6209e8eb436f0ffcc679a34663dc6675c1bf8b))
+* **roadmaps:** close 3.2 by council re-scope, and name the accrual trap I hit (#2281) ([d6e75f4](https://github.com/event4u-app/agent-config/commit/d6e75f45fa086dca62f953966479569fd54b93b2))
+* **adr:** amend ADR-281 so a council recommends passage, never grants it (#2257) ([f76e83e](https://github.com/event4u-app/agent-config/commit/f76e83e47cdb823e37c96f4bbd16e53bc5c24c04))
+* **governance:** ADR-281 and the texts it corrects (partial, self-modification roadmap) (#2251) ([82a131f](https://github.com/event4u-app/agent-config/commit/82a131feb5f6309365c962d272e9362ec9820c53))
+* **council:** ADR-281 and the authority-routing decision cannot both stand (#2255) ([61cd5b7](https://github.com/event4u-app/agent-config/commit/61cd5b7ad6a6851f99e97405a20c1e8a9ea61607))
+* **council:** record the authority-routing decision — ratified, 2 of 2 seats (#2253) ([0009ecd](https://github.com/event4u-app/agent-config/commit/0009ecd7c1f0d8f9659dd0ab249414879015b20e))
+* **roadmaps:** close road-to-leading-every-row on the owner's answers and ADR-280 (#2237) ([adaad0a](https://github.com/event4u-app/agent-config/commit/adaad0aa2afd216767bf31404f533beb9393c5c8))
+* **roadmap:** record that the two kernel-held rule links are human-gated (#2236) ([8510ebc](https://github.com/event4u-app/agent-config/commit/8510ebc995d224b1d353eb5042887905b7b16533))
+* **roadmaps:** park the opencode probe and restore the risk-register gate on main (#2229) ([c267eae](https://github.com/event4u-app/agent-config/commit/c267eaef62b49abb38730734509d1a39f1a3d788))
+* **roadmaps:** land inbox-2026-10-e as ten ready roadmaps (#2225) ([0c86ad9](https://github.com/event4u-app/agent-config/commit/0c86ad98fb540e3be196cdead4dcf98a49b03492))
+* **roadmaps:** record the owner's answers to eleven open blockers (#2222) ([a75bb32](https://github.com/event4u-app/agent-config/commit/a75bb32106f695d006aa67f9ffc8185afb54faad))
+* **evidence:** publish the shadow readings the release window opened, and carry 2.3 (#2217) ([2bb3a1a](https://github.com/event4u-app/agent-config/commit/2bb3a1a03d50a58a374f4f6d7600147e930a523e))
+* **roadmaps:** park menu-precision on a two-branch wake after a fourth null probe (#2215) ([f3cc5db](https://github.com/event4u-app/agent-config/commit/f3cc5db98ae15c744a990731f19b88a2508a60a3))
+* **roadmaps:** settle four of seven blockers on road-to-leading-every-row (#2214) ([2bf1067](https://github.com/event4u-app/agent-config/commit/2bf10671424cb09adb179c50512577d7b6b79a52))
 
 ### Tests
 
-* **read-surface:** type the fixture index accesses and the transport request ([e6983ed](https://github.com/event4u-app/agent-config/commit/e6983edf355433ad87cbc34bdba49ec1aca35131))
-* **routing:** hold the trigger corpus to the case-class discipline, and re-seed ([76cfda9](https://github.com/event4u-app/agent-config/commit/76cfda96b6c3ad464871e08badabf705f9066d93))
-* **routing:** add the trigger corpus for ui-component-architect ([2c567c3](https://github.com/event4u-app/agent-config/commit/2c567c30307c85ee67747296eefa7d496d14605f))
-* **work-engine:** make three weak assertions discriminate, and cover the new refusals ([48c8a88](https://github.com/event4u-app/agent-config/commit/48c8a885a855a38b79ca3b16c8ae823af398f3e9))
-* **golden:** re-capture GT-U9 and GT-U10 for the fourth greenfield option ([a993773](https://github.com/event4u-app/agent-config/commit/a9937736cf6de275a30cc02294e9f53308e37088))
-* **work-engine:** cover detection, placement and the greenfield offer ([e89d304](https://github.com/event4u-app/agent-config/commit/e89d30414b66472dc1bbf55591762e286883183f))
-* **transcript:** state the not-measured byte column on the token fixtures ([071d7dd](https://github.com/event4u-app/agent-config/commit/071d7dd3bbf7d254ae7174b18b3e69dbe972e648))
-* **fixtures:** capture the two inputs the conformance probe had never seen ([b7c3f57](https://github.com/event4u-app/agent-config/commit/b7c3f579026c0f75487ee3f6e920722f912659b2))
-* **ui:** plant three port losses and pre-register what today catches ([7b35b4c](https://github.com/event4u-app/agent-config/commit/7b35b4c5c42bde3997a936574735f2066b975f6e))
+* **harvest:** re-derive the census pin after two sanctioned provenance tokens (#2224) ([d3973a8](https://github.com/event4u-app/agent-config/commit/d3973a86a13e3e101e3a018ae0567bf2099fd71d))
+
+### Chores
+
+* **roadmaps:** park the rule-triggers roadmap on two human-gated events (#2276) ([9be2b6f](https://github.com/event4u-app/agent-config/commit/9be2b6fad97389eb29ad5f24f561d04e45dacf56))
+* **roadmaps:** park the two owner-blocked drafts in later/ (#2271) ([717aba6](https://github.com/event4u-app/agent-config/commit/717aba62a59685eca54515221e6165bae743dc05))
+* **roadmaps:** archive the settings-classes stagnation roadmap (#2270) ([dd80cbe](https://github.com/event4u-app/agent-config/commit/dd80cbe5ce2f5aa3bb3a833a1d21d1f12a898126))
+* **gates:** reaffirm the derivable-settings baseline after a drain that found nothing (#2268) ([6d603d9](https://github.com/event4u-app/agent-config/commit/6d603d93ecff326e9fc5c49d97dcd3f878bfb4af))
+* **roadmaps:** close and archive road-to-enforcement-per-obligation (#2263) ([ebd8adc](https://github.com/event4u-app/agent-config/commit/ebd8adc37fbcd9ca334f2930653460d26f86437c))
+* **roadmaps:** close and archive road-to-signals-that-mean-what-they-say (#2260) ([bacc2a0](https://github.com/event4u-app/agent-config/commit/bacc2a0dcaee3cab3864b1bb3cd11cc8f6aad4cf))
+* **roadmaps:** archive the neighbours lane and carry its two deferred steps (#2259) ([7dc88a6](https://github.com/event4u-app/agent-config/commit/7dc88a61aae1b75026c14640817f76d18f739fa2))
+* **roadmaps:** park road-to-learning-you-can-see-carried, and publish the reading that moved it (#2221) ([fcd5b9e](https://github.com/event4u-app/agent-config/commit/fcd5b9e0b27307444c15140a6ac56a965654fe2c))
+* **roadmaps:** park road-to-stacks-beyond-php behind owner blocker b5 (#2220) ([d47793a](https://github.com/event4u-app/agent-config/commit/d47793a787dd3c61c4287194be8138e6c624bf6f))
+* **roadmaps:** settle producible-vs-elapsed for the user_prompt_submit timeout and park host-claims-carried (#2218) ([763bc12](https://github.com/event4u-app/agent-config/commit/763bc121c24615027a01811322b73590845a85ad))
+
+### Other
+
+* The modification review — its questions, how a seat closes, how the verdict follows (#2292) ([bbe5b73](https://github.com/event4u-app/agent-config/commit/bbe5b73be4f06faa528d494a271d2c8b21e28bb2))
+* Occasion 3 of 4 — one row corrected, one correction declined (#2288) ([0fd09eb](https://github.com/event4u-app/agent-config/commit/0fd09ebe3bc1ceb54fe06ea593addf609b46c3be))
+* One step needed no council, the other split and found why (#2286) ([55360bb](https://github.com/event4u-app/agent-config/commit/55360bb87e794f8b8e6fd03134c05e1791aa2a66))
+* Four law headings went to a council; one landed and three were refused (#2279) ([40b74b9](https://github.com/event4u-app/agent-config/commit/40b74b948f40e4875e9c9b4a72080cad04132532))
+* Correct AC-2 to 37: one of the 47 selected keys was not default-neutral (#2278) ([e48f52c](https://github.com/event4u-app/agent-config/commit/e48f52cadf551e411aafdfc65d955d23a6bf8e1f))
+* doctor is offline by default; --online opts the forge read back in (#2277) ([60c129b](https://github.com/event4u-app/agent-config/commit/60c129bfa74224abb86254f79909a715535522c6))
+* Park the graph-feeder roadmap on an accrual wait its own repository cannot end (#2275) ([737f0d6](https://github.com/event4u-app/agent-config/commit/737f0d6633d52e51e3eb90115b17bfdc865eb43d))
+* Close the pack-boundary base-into-narrow mismatch with an advisory edge the gate reads (#2273) ([9ecd663](https://github.com/event4u-app/agent-config/commit/9ecd6639fd8f4b2f02a277a8fe3f565d5783e792))
+* Queue 47 default-neutral settings keys for retirement (#2272) ([9582574](https://github.com/event4u-app/agent-config/commit/958257418b9098ef37be6fc3118c7d4bcbc69861))
+* Resolve 15 roadmap blockers, and run the council before any owner question (#2269) ([6d68417](https://github.com/event4u-app/agent-config/commit/6d6841712de38c4dcd8f5ff4c03bd5acc5b09cd3))
+* Findings that get a disposition: medium security blocks a release, and every 16.3.0 row ends somewhere (#2266) ([bf7ed4f](https://github.com/event4u-app/agent-config/commit/bf7ed4f7559d8bd8827551bee21bf9b768262549))
+* Harden the git convention from #2235: correct in a packed install, safe sync and rebase, and measure-and-propose for undeclared projects (#2258) ([b83bcb1](https://github.com/event4u-app/agent-config/commit/b83bcb19a7d5d649fbb8687c00a5327a2704febe))
+* A team's git convention can be declared: ticket-prefixed commits, branch shape, and rebase instead of merge (#2235) ([0f9c32e](https://github.com/event4u-app/agent-config/commit/0f9c32e260c0e213273da9a448044e4403eac5a2))
+* Re-price the neighbours lane on the tree it will be decided on, and stop its census caches leaking home paths (#2223) ([7cd6563](https://github.com/event4u-app/agent-config/commit/7cd6563a8c038b8bebe21f9b4dc6acda06ea5bc6))
+
+Tests: 27198 (+1310 since 16.3.0)
+
+## [16.3.0](https://github.com/event4u-app/agent-config/compare/16.2.0...16.3.0) (2026-10-05)
+
+### Release highlights
+
+- **Behaviour changes:** Rule links that name a path the repository actually has, and the blocker that held them (#2185) (8031e09); Rule laws that can stand, and the class whose law stands with them (#2177) (9e2fe18); 100 % roadmaps archive — bare deferrals carried, owner blockers ask step by step (#2167) (074eee6); make the two pack-boundary gates green on the trunk and run the workflow-security audit in CI (#2155) (90a0ad5); A release record that says what it reviewed, and an index with every major (#2157) (8e30a53).
+- **Default changes + migration:** _none_
+- **Security and correctness:** 100 % roadmaps archive — bare deferrals carried, owner blockers ask step by step (#2167) (074eee6); make the two pack-boundary gates green on the trunk and run the workflow-security audit in CI (#2155) (90a0ad5).
+- **Honest nulls:** _none_
+- **Known limitations:** An installed layer measured against its limit, and the consent an installer must have before thinning (#2201) (src/scripts/install.ts declares a residual) (df7ea79); Two Phase-0 instruments closed against measurement, and the third blocked by a record rather than a ceiling (#2198) (src/scripts/check_standing_rule_delivery.ts declares a residual) (92027a2); A rule carrier that delivers what the install carries, in the host's form, in a string the host keeps (#2182) (src/scripts/install.ts declares a residual) (7fdfd0a); Rule triggers and installed links that hold (#2174) (src/scripts/install.ts declares a residual) (328a21b); A tree that keeps its neighbours (#2161) (src/scripts/install.ts declares a residual) (4399b5a); make the two pack-boundary gates green on the trunk and run the workflow-security audit in CI (#2155) (90a0ad5); +2 more.
+
+> **Governance mix:** governance-only 23 vs consumer-only 1 (taxonomy 1.1.0).
+>
+> _Re-measured 2026-10-07:_ governance-only 83 vs consumer-only 3 (taxonomy 1.1.0) on `16.2.0..16.3.0` (`8d157f5e7..91aaf5e21`), via `./scripts-run src/scripts/measure_release_mix --from 16.2.0 --to 16.3.0`. The line above was measured to an unrecorded `HEAD` at write time.
+
+### Features
+
+* **commands:** /roadmap:resolve-blockers — council first, owner one question at a time (#2204) ([5ddfc05](https://github.com/event4u-app/agent-config/commit/5ddfc05819a501b1066b713571e9073d1ce435c9))
+* **commands:** /roadmap:triage-parked — drain later/ and skipped/ (#2184) ([ab516fc](https://github.com/event4u-app/agent-config/commit/ab516fc19a420a7022eb7dc5f8b16f6d033fc6e8))
+* **evidence:** classify the evidence tree by reference, and rule out a cold location (#2153) ([590cebc](https://github.com/event4u-app/agent-config/commit/590cebc729a7a45fbe98e2ee55b8f231ac0329c2))
+* **hooks:** run the project's own quality tools over the files a turn edited (#2152) ([d4760bb](https://github.com/event4u-app/agent-config/commit/d4760bb4f47b7be902c9ec3b88c51d8aa818311e))
+* **memory-learn:** open the learning dogfood window and give it a screen (#2151) ([162889e](https://github.com/event4u-app/agent-config/commit/162889e8b16359904766927a7fbd896f961ed9b9))
+* **ui:** flip the carried-nothing shadow to a halt, closing road-to-a-ui-coverage-ledger-that-can-fail (#2149) ([cbd5d07](https://github.com/event4u-app/agent-config/commit/cbd5d07fe21af3a3de12e847b3b8da7f86f8bb81))
+
+### Bug Fixes
+
+* **archival:** 100 % roadmaps archive — bare deferrals carried, owner blockers ask step by step (#2167) ([074eee6](https://github.com/event4u-app/agent-config/commit/074eee6881d19b5f6d7ec8574a83c26dffd25353))
+* **gates:** make the two pack-boundary gates green on the trunk and run the workflow-security audit in CI (#2155) ([90a0ad5](https://github.com/event4u-app/agent-config/commit/90a0ad522d49a853d30ffb6f1fec46e2b802ae35))
+* **hooks:** make the bundle ceiling describe the trunk it defends (#2165) ([c399d09](https://github.com/event4u-app/agent-config/commit/c399d097eea2f30676b36604a2514ff0e22cd46d))
+
+### Documentation
+
+* **roadmaps:** drain road-to-leading-every-row — install above the fold, commit-mix baseline, seven owner questions put (#2148) ([8f32c31](https://github.com/event4u-app/agent-config/commit/8f32c316b489f6b8decfdacf57da72149e07dbd5))
+* **roadmaps:** land four roadmaps from inbox round inbox-2026-10-c (#2150) ([07f83a1](https://github.com/event4u-app/agent-config/commit/07f83a1f681869b9cea467f2ad88e5642ef55af9))
+* **roadmaps:** use the declared decision classes in the inbox-2026-10-a roadmaps ([ab5c92b](https://github.com/event4u-app/agent-config/commit/ab5c92b61936fdddfd5bb3e315d086b64bc1911e))
+* **roadmaps:** state the measured blocker growth in the round's claim ([2a52860](https://github.com/event4u-app/agent-config/commit/2a528602ea27b6407e9e999b8818f41ad1e9f0cb))
+* **evidence:** disposition for inbox round inbox-2026-10-a ([ea06fa1](https://github.com/event4u-app/agent-config/commit/ea06fa1fafe54db61b1313050c52d4c7497e799a))
+* **roadmaps:** record arrivals and owner questions on six held objects ([60f9e60](https://github.com/event4u-app/agent-config/commit/60f9e60f6d2940c49677479641a599d23cbd380b))
+* **roadmaps:** land eight roadmaps from inbox round inbox-2026-10-a ([2c34c3d](https://github.com/event4u-app/agent-config/commit/2c34c3d99b103bd704f917d1603e926f7dac3f0c))
+* **evidence:** declare the evidence type on the inbox-2026-10-b disposition ([8adf9ef](https://github.com/event4u-app/agent-config/commit/8adf9eff9b7908334ed29cb7ed4fbe48f2e05cda))
+* **evidence:** record the inbox-2026-10-b disposition ([a51740b](https://github.com/event4u-app/agent-config/commit/a51740b4b79d963af8ff2fd3551c26214430166e))
+* **stubs:** count the inbox-2026-10-b arrivals on four held stubs ([6f2bc0b](https://github.com/event4u-app/agent-config/commit/6f2bc0b116a78747bc98e1addfda25672ea76ed7))
+* **roadmaps:** land the leading-every-row programme and its lanes from inbox-2026-10-b ([6631412](https://github.com/event4u-app/agent-config/commit/6631412219157e4b26ee9f1eede6493ea38764c0))
 
 ### Chores
 
-* **deps:** vitest 2 → 5, vite 5 → 8 (#2111) ([1f44215](https://github.com/event4u-app/agent-config/commit/1f442155ae679b38de1ea179ee85a133ce30a1d1))
-* **deps:** clear the production-dependency advisories the packed job flagged ([0f68f1a](https://github.com/event4u-app/agent-config/commit/0f68f1a45fcb06a7063f42aa8b843e0a93cbc62b))
-* **roadmaps:** archive two completed roadmaps, carry their three deferrals ([b29a75c](https://github.com/event4u-app/agent-config/commit/b29a75c6b51ca28b118a830f10c3cfd422380032))
-* **evidence:** re-emit the standing-payload census and the host cost table ([f8cea12](https://github.com/event4u-app/agent-config/commit/f8cea1246934fb3ddb8d729df637a49387336ee2))
-* **estate:** claim the one-concern growth where it happened ([028fc20](https://github.com/event4u-app/agent-config/commit/028fc202a7ba0a7d635883a30635a4e450487d25))
-* **roadmaps:** re-review the risk register on the five closed steps ([a4a5dee](https://github.com/event4u-app/agent-config/commit/a4a5dee30427779e2a0c7ed0f056cc7dfc76309a))
-* **roadmaps:** close five steps of road-to-a-menu-whose-precision-is-measured ([5ba60b9](https://github.com/event4u-app/agent-config/commit/5ba60b9d9c3d82229b6cac400ad6c18cf0f95ed7))
-* **roadmaps:** close six steps, and correct the roadmap own refuted figures ([2958ecc](https://github.com/event4u-app/agent-config/commit/2958ecc79e77387961f9cd86cc78958cd04b7dcf))
-* **dist:** rebuild the install bundle after the lowering-reader change ([a765c56](https://github.com/event4u-app/agent-config/commit/a765c569a511ab69e96278da230bcc9b84aebf82))
-* **roadmaps:** archive road-to-a-denylist-that-sees-every-subject ([ea6363f](https://github.com/event4u-app/agent-config/commit/ea6363f76b26cdbeb5da69d561c5f8bddd40c753))
-* **dist:** regenerate the ui apply directive after the merge ([d310aa6](https://github.com/event4u-app/agent-config/commit/d310aa61b082854f293f898befb94aab755eaf88))
-* **ratchet:** follow the source-size gain down to 17,748 ([e52a668](https://github.com/event4u-app/agent-config/commit/e52a668bda84201dbc20376056d2a9a22ddf3fc4))
-* **roadmaps:** archive road-to-probe-evidence-that-knows-its-inputs ([2c1e9e3](https://github.com/event4u-app/agent-config/commit/2c1e9e3fa6173359a3f6add4e880d47539d98a8b))
-* **roadmaps:** archive road-to-a-fact-plane-the-reviewer-cannot-invent ([e3dc42f](https://github.com/event4u-app/agent-config/commit/e3dc42fb9a21349146cbebf29cb6958123a59562))
-* **roadmaps:** archive road-to-an-invocation-contract-that-reaches-the-wire ([98da5a7](https://github.com/event4u-app/agent-config/commit/98da5a7ae5c95f6413fd0826734134116321ecc2))
-* **hooks:** recompile the manifest after the concern header edit ([319e43e](https://github.com/event4u-app/agent-config/commit/319e43eeba5b69fbb239d6fc0f694c3318dcdcc9))
-* **roadmaps:** archive road-to-a-content-scanner-on-a-slot-that-can-refuse ([f426526](https://github.com/event4u-app/agent-config/commit/f426526328ed48be0ad865f5df889fff639c7739))
-* **roadmaps:** archive road-to-semantic-parity-before-off-menu ([35e37a6](https://github.com/event4u-app/agent-config/commit/35e37a64d0236eb423f2a2c1c5869741c545b754))
-* **roadmap:** archive the substrate-stub roadmap now its last blocker is closed ([4865319](https://github.com/event4u-app/agent-config/commit/4865319602eea85a5052f62721c6f13023013cf0))
-* **roadmaps:** archive the behaviour-evidence-over-pixels roadmap ([88449ba](https://github.com/event4u-app/agent-config/commit/88449bac119738e75c2a3c2dfb4c94b000dd2ceb))
-* **gates:** reaffirm the lint_handoffs baseline, measured rather than waved through ([6d757a7](https://github.com/event4u-app/agent-config/commit/6d757a79356cd26545a9283b94ca24820ac474e5))
+* **deps:** bump the site group in /site with 4 updates (#2170) ([7464482](https://github.com/event4u-app/agent-config/commit/7464482550df64e24f101988086f9c6fb1bd7945))
+* **deps-dev:** bump the telemetry-worker group across 1 directory with 2 updates (#2163) ([11eb5d8](https://github.com/event4u-app/agent-config/commit/11eb5d813dc9057e9f475b7a827aa9730d688447))
 
 ### Other
 
-* One corpus re-check that actually ran, and a repo-wide red due 2026-11-22 (#2137) ([d9ae1da](https://github.com/event4u-app/agent-config/commit/d9ae1da3f411d2905cbdca41a5f58b54bbbb4ed6))
-* Close AC-5 on the command it names, and hand AC-4 and AC-6 to their owners (#2143) ([4e803d6](https://github.com/event4u-app/agent-config/commit/4e803d6204906ce5357808ad2ec146e285249a0b))
-* The plumbing roadmap's last measurable gap, measured (#2135) ([db000c5](https://github.com/event4u-app/agent-config/commit/db000c50cd6dde87cd4e35b477a236aadcf9e797))
-* ci_settle refuses an argument it does not honour, and the doc that taught a wrong one (#2130) ([dbbf470](https://github.com/event4u-app/agent-config/commit/dbbf470b8acd15a523a8b2db85cda66e72bd5115))
-* A zero in the enforcement table becomes a fact with a date on it (#2141) ([ab2c75d](https://github.com/event4u-app/agent-config/commit/ab2c75dcbb31bb02bf16f4159c60ed8740fba58f))
-* The typed-grants roadmap, dispositioned: stop the ladder handing out the autonomy self-grant (#2140) ([5ade6a5](https://github.com/event4u-app/agent-config/commit/5ade6a5b88b3a55fcc697c45f585b149cd0c177c))
-* Decision closure: route its own ownership blocker to the council it specifies (#2139) ([405c5d8](https://github.com/event4u-app/agent-config/commit/405c5d82accf36c8f808c5fcfa8176db717cc4c2))
-* Re-probe the menu-precision E3 blocker and correct five stale figures (#2138) ([ad79f85](https://github.com/event4u-app/agent-config/commit/ad79f858af0ae102faef2f23f561283869e6b848))
-* Park the release-holds roadmap in later/, with a wake test a gate can read (#2136) ([d6e2e14](https://github.com/event4u-app/agent-config/commit/d6e2e1458529bc8c95622461c0542618598926b4))
-* Close what is agent-closable on trigger-eval freshness, and defer the owner-owned choice (#2134) ([5a4b897](https://github.com/event4u-app/agent-config/commit/5a4b8972102ab820bd451c7fd60ed6be189b4fec))
-* The obligation-row roadmap's last step, routed to its owner (#2133) ([fb915c0](https://github.com/event4u-app/agent-config/commit/fb915c08b73fd76574ad1ee15df9ba3ca15f4c57))
-* Close the ledger roadmap by carrying its one unreachable step to its live owner (#2132) ([1fd8f00](https://github.com/event4u-app/agent-config/commit/1fd8f006d6c0c7dd77666637f265ab3d690652dd))
-* Re-probe the shadow-release gate and re-verify the UI coverage ledger live (#2131) ([cdb16f7](https://github.com/event4u-app/agent-config/commit/cdb16f7f25d781a7f135d15d9b8a30d9af327639))
-* A reader for the shadow corpus, and the review that reopened a checkbox (#2142) ([e51a1df](https://github.com/event4u-app/agent-config/commit/e51a1dfda1585971872accc38e1ad43064a56eb3))
-* One verification classifier, anchored on the segment head (#2129) ([9f2b9fb](https://github.com/event4u-app/agent-config/commit/9f2b9fb4a78f2270eaa040513050e7a2d657879e))
-* The review of the stop gate, acted on (#2128) ([5689c2d](https://github.com/event4u-app/agent-config/commit/5689c2d1266560c187cb4df5bac73327d4dd71ed))
-* The stop gate measures the turns it lets through (#2127) ([ce923cc](https://github.com/event4u-app/agent-config/commit/ce923cce720bc84885ef24270a2e7dc9b197f09e))
-* Rotation coverage survives suite growth, and the freshness bill is priced (#2126) ([7178cdd](https://github.com/event4u-app/agent-config/commit/7178cdd1c3ca500bfb0507493329e4e461fff062))
-* Close the corpus stamp-edit ambiguity and structure the cadence hold (#2125) ([aae6467](https://github.com/event4u-app/agent-config/commit/aae6467510dfcb4bb7ce09bc0110b3fe57415439))
-* Phase 2 of road-to-host-claims closes: slot-failure rows from a pinnable source, and its blocker becomes machine-readable (#2124) ([14ff4a3](https://github.com/event4u-app/agent-config/commit/14ff4a3ca89bbd871305aac8294ea4753c245e88))
-* The dispatcher measures what it runs, per concern (#2121) ([a129277](https://github.com/event4u-app/agent-config/commit/a129277d510ba43baf627b9d649852bf21c03a58))
-* Close the UI coverage ledger's measurement half, and make 3.2's release gate machine-readable (#2122) ([99db452](https://github.com/event4u-app/agent-config/commit/99db452b9868d9af47381074d3abf8b5c64afc71))
-* The structural-hiding detector returns parser-backed, and Phase 3 closes (#2123) ([9b128df](https://github.com/event4u-app/agent-config/commit/9b128df1d1dd5362234c8185fb378bc82a1be627))
-* Mark decision-closure's blocked steps machine-readable, and re-verify its five open boxes (#2120) ([ebd31d9](https://github.com/event4u-app/agent-config/commit/ebd31d9482f7b299dee7ba0281f4eaf5cc1cbd33))
-* The lockout recovery procedure is rehearsed, and bounded-approval-floor-waiver closes (#2118) ([4429b1d](https://github.com/event4u-app/agent-config/commit/4429b1d3df9d7495d14f1ef61e356f5c5d0125d5))
-* **canonical-terms:** write the three new prose lines in house dialect ([c0a8c43](https://github.com/event4u-app/agent-config/commit/c0a8c437912f70cf807b4116e120aeea3fcd54b7))
-
-Tests: 24992 (+1020 since 16.1.0)
+* The intake rule was enforced and never written down, so git kept inviting the commit the gate refuses (#2206) ([975d03d](https://github.com/event4u-app/agent-config/commit/975d03d01cc549c297a7a8ea92134b08005eb333))
+* Two roadmaps that read finished, and the three gates that keep each of them where it is (#2205) ([df377ca](https://github.com/event4u-app/agent-config/commit/df377ca64d0333105ffd80813caa94e11805c30b))
+* An installed layer measured against its limit, and the consent an installer must have before thinning (#2201) ([df7ea79](https://github.com/event4u-app/agent-config/commit/df7ea7928c9d9fe5815978b689198b79fc8158d3))
+* Archive the kernel-plumbing roadmap, which finished and stayed in the active set (#2203) ([901e8bc](https://github.com/event4u-app/agent-config/commit/901e8bc4e848283327f5c6811e4e221246a41210))
+* A blocker citation pointing at a test fixture, and a step oracle that cannot reach its own exit (#2202) ([c04d74b](https://github.com/event4u-app/agent-config/commit/c04d74bea094071c72a1421fb013ee12e8200f2f))
+* The first observed structured-ask row, and the subagent leg the absent one was read from (#2199) ([f73e77d](https://github.com/event4u-app/agent-config/commit/f73e77d0f93f55ab76658d86b38dde00222d1246))
+* An acceptance criterion closed on measurement, a guard claim withdrawn, and the second obstacle under a blocked gate (#2200) ([e3e4774](https://github.com/event4u-app/agent-config/commit/e3e4774e2c6f6e2aa24d8720e6aff38c095d67f4))
+* A calendar hold whose date had already passed, and the gate standing behind the stamp (#2196) ([6aa3c36](https://github.com/event4u-app/agent-config/commit/6aa3c36f9cbd596a65cb5b2faafa71cdd240b8f5))
+* Two Phase-0 instruments closed against measurement, and the third blocked by a record rather than a ceiling (#2198) ([92027a2](https://github.com/event4u-app/agent-config/commit/92027a20c350f5b53625a1efbd3157aaf163b26b))
+* Two locks under one owner question, a bundle figure stale by 41 kB, and the oracle a blocked step is waiting for (#2197) ([24d6d5b](https://github.com/event4u-app/agent-config/commit/24d6d5b0d93852ee106dd1a1a7eda9bca9b2c249))
+* A blocker that held on its fourth reading, and the line it cited having moved (#2195) ([780c27e](https://github.com/event4u-app/agent-config/commit/780c27e1ed0f36edc6cd59883dce36230dfef9d4))
+* A payload total that drifted under a pin that never pinned it (#2194) ([e6b7193](https://github.com/event4u-app/agent-config/commit/e6b71933a84bb15e432e86aced4c848897498716))
+* A blocker that held on its sixth reading, and the four edits it is waiting on (#2193) ([fe0cff8](https://github.com/event4u-app/agent-config/commit/fe0cff8a558897a47caba9eb6d9dbe80e90e2d4b))
+* A blocker stated in prose, re-stated as the command that decides it (#2192) ([18ac6b2](https://github.com/event4u-app/agent-config/commit/18ac6b21ec35c4132958dc382349acc6af9a3b53))
+* A fifth reading of two blockers that held, and a second obstacle under the first (#2191) ([afad042](https://github.com/event4u-app/agent-config/commit/afad042bb39e24f3edf5dbbbfccabbda0f3ddb00))
+* A guard that permitted the call precisely when it broke, in six places and a seventh shape (#2189) ([51ee084](https://github.com/event4u-app/agent-config/commit/51ee0844b564f8863b753606f1758c9c0ef6dbd3))
+* An accrual figure that moved while the labelled corpus did not (#2190) ([30481f6](https://github.com/event4u-app/agent-config/commit/30481f6605ade9ff06bbc9ca300ab8614781321c))
+* A third reading of a blocker that has not moved, and a census nine units behind the tree (#2187) ([50bec97](https://github.com/event4u-app/agent-config/commit/50bec97430107d9fe73a6561a4fb986150c57ea8))
+* The fourth wake shape has no envelope tag, and the anchor is the whole guard (#2188) ([97a5a64](https://github.com/event4u-app/agent-config/commit/97a5a647412e376bf8ac12b9065706710c956831))
+* Rule links that name a path the repository actually has, and the blocker that held them (#2185) ([8031e09](https://github.com/event4u-app/agent-config/commit/8031e09d6ff6ecc61be329f2af4a904bcc7be18f))
+* The third wake shape: a subagent hand-back is a turn nobody typed, in two vocabularies that both missed it (#2186) ([0199fd0](https://github.com/event4u-app/agent-config/commit/0199fd0c0a448f3fdf262373cc30971213954168))
+* Twenty-eight boxes re-run rather than read, and the policy behind seven settled-looking cells (#2183) ([d6a2da7](https://github.com/event4u-app/agent-config/commit/d6a2da7bca601dbe9432b35c6fd76fddd63c80db))
+* A rule carrier that delivers what the install carries, in the host's form, in a string the host keeps (#2182) ([7fdfd0a](https://github.com/event4u-app/agent-config/commit/7fdfd0a4d59c616153ffaa283e265708b87b88ae))
+* A rule carrier that works outside the repo: resolution, one mode answer, and the matrix that proves both (#2181) ([95dc7bf](https://github.com/event4u-app/agent-config/commit/95dc7bfb1ba8c5dcb43ce7cfe3f8d271093eacf9))
+* The MCP recorder does not run, and what it would record was wrong in five ways (#2180) ([59824fd](https://github.com/event4u-app/agent-config/commit/59824fd95acfe5f6772f8da02e9f52a7896d593c))
+* Neighbours counted by use, and the link criterion measured rather than assumed (#2179) ([cd26c2e](https://github.com/event4u-app/agent-config/commit/cd26c2e177976d85644fbe8fd9c5a973418bfcdc))
+* Rule laws that can stand, and the class whose law stands with them (#2177) ([9e2fe18](https://github.com/event4u-app/agent-config/commit/9e2fe189e85d4b1feabb0bef55680e02097f0ac7))
+* A route line that says where the skill came from (#2178) ([6bdc2b2](https://github.com/event4u-app/agent-config/commit/6bdc2b25ba6c6d06b94a2137ccfd336efc8f60b0))
+* Stacks beyond PHP: the composition gate, the third binding site, and four resolver fixtures (#2173) ([a3c8393](https://github.com/event4u-app/agent-config/commit/a3c839340059ef68c8a37568685739bb9f8c7fe3))
+* Say which tree the reach numbers came from, and publish the per-prompt pair (#2176) ([4871260](https://github.com/event4u-app/agent-config/commit/48712607ad706c502cb44938a288a39b64d3f784))
+* Rule triggers and installed links that hold (#2174) ([328a21b](https://github.com/event4u-app/agent-config/commit/328a21bef2d8f6660227f4f9656d2043751ff7fc))
+* The stop gate records who set stop_hook_active, and the fingerprint store cannot be bound where its council chose (#2175) ([379cd53](https://github.com/event4u-app/agent-config/commit/379cd535c6618d8d514b78654eef8c59461dc0a1))
+* The advisories were already fixed; the record was not (#2171) ([30f7d21](https://github.com/event4u-app/agent-config/commit/30f7d21f65146fd348bc354b33093794ab500bcf))
+* Dispositions the carried roadmaps were missing (#2172) ([11726a9](https://github.com/event4u-app/agent-config/commit/11726a985ca8de0e183c14d643519d7aa5d77d0c))
+* archive the three roadmaps main still held at 100 % (#2168) ([21da719](https://github.com/event4u-app/agent-config/commit/21da71917d1ad685737b10196245c8d323bd21f4))
+* Let dependency PRs reach their required check (#2169) ([540ee7a](https://github.com/event4u-app/agent-config/commit/540ee7a0bed2bf327c971f204ab90a346a768250))
+* A tree that keeps its neighbours (#2161) ([4399b5a](https://github.com/event4u-app/agent-config/commit/4399b5a0d6395631d808f6bc5f75aaa7eed7e573))
+* A graph that reaches the search, sees the edit, and feeds the gate in shadow (#2159) ([4958809](https://github.com/event4u-app/agent-config/commit/495880908332d55c9a4069f7266dc19c99c83824))
+* A release record that says what it reviewed, and an index with every major (#2157) ([8e30a53](https://github.com/event4u-app/agent-config/commit/8e30a533124b1c85b011bb463a6bd63c3fc3c6e1))
+* Three claims a roadmap makes about itself, made checkable (#2156) ([3a8498c](https://github.com/event4u-app/agent-config/commit/3a8498c2c00fcff37970e2eeabd4ebe7b43f8b9e))
+* Blocking severities where a refusal can land (#2154) ([81d712f](https://github.com/event4u-app/agent-config/commit/81d712f2706ffe6fcdf98f2198a5607d7c6faf17))
+* Give the three spawn-bound test suites their own timeout (#2166) ([aead73d](https://github.com/event4u-app/agent-config/commit/aead73d280f8c61de7cf604ef39c06274fb6baf4))
+* A ranker that routes: the null, and the two premises it refuted (#2162) ([213d870](https://github.com/event4u-app/agent-config/commit/213d870558b7fbcdc033ac6f8f0ef4c1a43a5a80))
+* One YAML reader in the hook bundle, a ceiling on it, and a census that renders (#2158) ([22b19e5](https://github.com/event4u-app/agent-config/commit/22b19e520c198b6f0aec2cbf8cb2851818c11fcc))
+* Record a verification command that fails on claude (#2160) ([29b1832](https://github.com/event4u-app/agent-config/commit/29b183256155f9a3dea3d3351268b62b33628fde))
+* Three surfaces that said more than they did (#2144) ([00612c1](https://github.com/event4u-app/agent-config/commit/00612c1f27edafcfa6340b41c56a0da281d6ebc2))
+
+Tests: 25888 (+896 since 16.2.0)
 
 # Era: pre-4.0.0 — archived