@event4u/agent-config 16.4.0 → 17.0.0

package/CHANGELOG.md

@@ -30,504 +30,11 @@ Entry-shape contract: [`docs/contracts/CHANGELOG-conventions.md`](docs/contracts
 
 ## [Unreleased]
 
-### Changed
-
-- **46 settings keys are retired; an install that never changed them sees no
-  difference.** Each key's shipped default is now fixed behavior: every reader
-  of it — code, rule and command prose, the wizard — was rewritten to that
-  default in the same change. **If your `.agent-settings.yml` still sets one,
-  that value is ignored** and the loader prints one line per key —
-  `<key> was removed (<what decides instead>); ignored.` — so a non-default
-  value you chose is lost visibly, never silently. Delete the line to silence
-  it. The keys:
-  - Output and tone: `telegraph.speak`, `tokens.rich_skills`, `personal.minimal_output`, `personal.play_by_play`, `personal.pr_comment_bot_icon`, `verbosity.intent_announcements`, `verbosity.preview_artifacts`, `verbosity.routine_confirmations`, `verbosity.post_action_reports`.
-  - Reasoning protocol switches: `reasoning.auto_gate`, `reasoning.components.orchestrator`, `reasoning.components.notes_first`, `reasoning.components.grounding`, `reasoning.components.intent`, `reasoning.components.complexity_first`, `reasoning.components.verifier_default`, `reasoning.components.prediction_tracking`, `reasoning.components.decision_ledger`, `reasoning.components.uncertainty_budget`.
-  - Roadmap cadence: `roadmap.skip_pre_run_gate`, `roadmap.dashboard_regen_cadence`.
-  - Command suggestion and PR creation: `commands.auto_detect`, `commands.suggestion.enabled`, `commands.suggestion.confidence_floor`, `commands.suggestion.cooldown_seconds`, `commands.suggestion.max_options`, `commands.create_pr.api_examples`, `commands.create_pr.ui_paths`, `commands.create_pr.api_paths`.
-  - Memory and knowledge sharing: `memory.cadence`, `memory.review_threshold`, `knowledge.global_sharing.redaction.enabled`, `knowledge.global_sharing.redaction.halt_on_trigger`, `knowledge.global_sharing.auto_promote_threshold`, `knowledge.global_sharing.freshness.hypothesis_after_days`, `knowledge.global_sharing.freshness.stale_after_days`.
-  - Hooks and engine: `hooks.concern_budget.max_per_event`, `hooks.concern_budget.hard_fail`, `decision_engine.surface_traces`, `decision_engine.on_block_fallback`, `explain.enable_last`.
-  - Remaining: `project.pr_template`, `pipelines.skill_improvement`, `consistency.cross_source`, `subagents.downshift`, `ai_team.suppress_setup_hint`.
-  The reference page lists each key with the behavior that replaces it
-  (`templates/agent-settings.md` § Retired keys).
-
-- **A medium security finding now needs a disposition before a release
-  ships.** `check_finding_dispositions` treats `security × medium` as blocking
-  for every release after 16.3.0 (council 2026-10-07, 2/2). Such a row must
-  carry `fixed` (with its commit), `false_positive` or `accepted_risk`, each
-  with a rationale and a `verified_by`, like any blocking row, and
-  `still_open` keeps the release red with a message saying so. On a release
-  pull request (`--pr`), a medium security finding the self-review reported
-  but the ledger lacks is red too. Releases up to 16.3.0 are judged as they
-  shipped. The merge gate (`self_review_gate.classifyBlocking`) is unchanged,
-  so on every other pull request the finding only advises. `claim × medium`
-  stays advisory in both.
-- **No spend bound applies unless you set one.** Owner directive, 2026-10-05,
-  recorded as **ADR-279** and accepted on the owner's own answer (option (a))
-  on 2026-10-06. With nothing configured, no USD or token ceiling this package
-  defines stops a council run, a debate or a paid gate, and none of them asks —
-  because no ceiling exists to ask about. Every ceiling remains settable and
-  behaves exactly as its contract describes once set.
-  **Your own council file is not rewritten.** If you copied
-  `agents/templates/.ai-council.yml.example` before this release it carries
-  these lines explicitly, and they are your figures now:
-  `cost_budget.max_input_tokens: 500000`, `cost_budget.max_output_tokens:
-  200000`, `cost_budget.max_total_usd: 20.0` and `debate.max_cost_usd: 5.00`.
-  Delete them to become unbounded; keep them to stay bounded. The shipped
-  defaults behind an absent key moved to `0` in all three layers — the loader,
-  the command's own fallback for a file with no `cost_budget` block, and the
-  `CostBudget` constructor.
-  **`max_calls` and the debate round limits did not move**: they bound call
-  count per invocation, not money. Nor did any of the controls listed under
-  § What stays in ADR-279 — provider refusals, the per-day plan-quota guards,
-  the `--confirm` a class-1 gate asks for, the debate's between-round
-  confirmation, or the budget an unattended run must still be given.
-  **Two defects were repaired in the same change, and both could bite a
-  configured install.** `0` was documented as disabling a token cap and did
-  not — the two token comparisons carried no zero guard while the two USD
-  comparisons beside them did, so a budget with every cap at zero breached on
-  a ten-token estimate. And the class-1 gate's two caps had to BOTH be set
-  before EITHER applied, so setting one left you bounded by neither. Each cap
-  now bounds alone.
-  **One optional hard stop now works for the first time.** With
-  `cost.enforcement: hard-stop` and a budget configured, the cost preflight
-  resolved its budget script relative to the working directory, read the
-  resulting empty output as "no budget configured", and exited `0` on a spent
-  budget from every working directory. It now resolves the script from its own
-  location and exits non-zero as its contract always said it would.
-
-- **`agent-config init` no longer overwrites a managed file you have edited.**
-  Owner ruling, 2026-09-21, taken after an AI council split 1/1 on it. Until
-  now the installer's `_resolve_file_conflict` returned `write` for every
-  deployed file and its header recorded `--force` as an accepted no-op
-  "because installs always overwrite" — while the planner had, since the
-  preceding change, produced a list naming exactly the files you had edited.
-  The report named the file and the next install replaced it.
-  A managed file whose bytes diverge from the SHA-256 the install manifest
-  recorded is now **preserved**, and the package content it would have been
-  replaced with is staged beside it as `<path>.agent-config.new` — a
-  tool-owned suffix, not a bare `.new`, so the installer never claims a
-  namespace other tools already write into.
-  **The staleness is deliberately loud, and that is the load-bearing half.**
-  Preserving an edit leaves the active installation not-current, and a stale
-  install exiting `0` would make that silent. So a run that preserved anything
-  exits **`3`** (new, distinct from `0` success, `1` failure and `2` usage),
-  names each preserved file on stderr with the sentence "the active
-  installation is not current", and prints a count. Under `--progress-ndjson`
-  the count also rides on the terminal `done` frame, which the wizard's apply
-  route forwards as `summary.conflicts`; a zero-conflict run's frames are
-  byte-identical to before. **`--force` is now a real escape hatch** — it
-  replaces the managed file and exits `0`.
-  Scripts that treat any non-zero exit from `init` as a failure will see `3`
-  on a tree with local edits. That is the intended signal, not a regression:
-  the install did complete, and the tree is not current.
-  Three things are deliberately absent. There is **no semantic
-  classification** — one byte of divergence from the recorded digest is the
-  whole test, because a format-aware diff would pull per-format parsers into
-  the installer's trusted computing base and a syntactically trivial edit can
-  still be intentional. There is **no fallback to overwriting** under conflict
-  volume or resource pressure, and no bulk accept flag. And an **existing
-  sidecar is never clobbered**: identical bytes are a no-op, anything else
-  fails the run with the package content staged nowhere, because a pathname
-  matching the convention is not proof the installer wrote it.
-  The verdict is computed from a re-hash of the destination **at the moment of
-  the write**, not from the plan: the planner's conflict list is advisory
-  state, and a plan-time verdict is blind to an edit made in between.
-
-### Fixed
-
-- **The self-review gate reviews again — it had reviewed nothing for four
-  consecutive releases.** 14.17.0, 14.18.0, 14.19.0 and 14.20.0 each returned
-  `HTTP 400 prompt is too long` and each recorded an honest null in
-  `agents/evidence/release-findings/`. The release path sets the analysis base
-  to the previous tag, so the whole release span went into **one** request.
-  **All four** recorded a figure against the 200000 cap — 235472 (14.17.0),
-  413191 (14.18.0), 450336 (14.19.0), 260998 (14.20.0) — and the smallest
-  exceeded it by 17.7 %. (An earlier draft of this entry said three releases
-  recorded a figure and put the smallest at 30 % over; both were wrong, and the
-  omitted reading was the one nearest the cap — the one that most constrains
-  the budget. The conclusion does not depend on the error: every span observed
-  exceeds the cap.) `buildPlan` already computed `promptChars` and only
-  *reported* it, so nothing consulted the number before spending the call.
-  The diff is now partitioned **per file** into requests under a character
-  budget, each is reviewed, and findings are merged and deduplicated on the
-  finding id the ledger already uses. Verified against the live span that had
-  been failing: 5 requests, no path left out.
-  **Nothing is truncated**, and that is the load-bearing decision: a silently
-  shortened diff yields findings about a fragment while reading as a review of
-  the whole change, which is the false green this repository's honest-null
-  discipline exists to prevent. So a single file larger than one request is
-  **named as unreviewed** rather than cut mid-hunk, a per-run request ceiling
-  bounds the spend and reports its remainder, a chunk whose call fails no longer
-  discards the chunks that succeeded, and the rendered PR comment carries a
-  **Coverage** block stating what was not read — including the sentence that
-  absence of a finding for an unreviewed path is not evidence about that path.
-  `--dry-run` now prints the request count rather than only a token estimate,
-  because this gate spends per request, and warns when a span sits at the
-  ceiling. The budget factor is a character proxy **derived from those four
-  failures** (measured diff chars / reported tokens = 3.13 and 3.18) and set
-  below them, because the ratio is content-dependent — cl100k over this repo's
-  own diffs reads ~3.9 for `src/`, ~4.1 for prose and ~2.75 for a lockfile. A
-  call that still overflows a budgeted chunk falsifies that number, not the
-  partitioning.
-  **A neutral reviewer on the first version found three defects that are fixed
-  here rather than shipped.** The coverage line counted every file in a dropped
-  chunk as reviewed — 59 of 60 for a run that read 4, because the partition
-  packed to opaque strings and reported one aggregate row; it ignored chunks
-  whose call had failed, computing the number before those were appended; and a
-  non-ASCII filename was silently skipped **and** counted as read, because
-  `git diff --name-only` renders it quoted and the quoted form then matches no
-  pathspec. Coverage is now summed from the chunks that actually returned, every
-  dropped chunk names its own files, and paths are read with
-  `core.quotePath=false`. Correcting the budget ratio shrank each request, so
-  the same span needed five: the request ceiling moved from four to six rather
-  than paying for tokenizer safety with silent coverage loss.
-  Known limits, stated rather than implied: coverage lives in prose, so an
-  `--enforce` run over a partial review still returns 0, and
-  `check_finding_dispositions --ingest` reads only `.findings`, so the durable
-  ledger does not record the coverage the artifact now carries.
-
-### Added
-
-- **An old project keeps its real commit format — `agent-config git:convention
-  measure`.** A repository with no declared convention and no approved card is
-  now measured instead of silently given Conventional Commits: the verb samples
-  the non-merge history of the default branch, resolved as the carrier resolves
-  it (the server's symref, then `refs/remotes/origin/HEAD`) — with no default
-  branch it says so and exits `1` rather than sampling `main`, `master` or the
-  current branch in its place — drops bots, automation and bulk imports, caps
-  each author per half, and names the established subject family or — below the
-  bar — the two strongest. It also proposes a `branch_pattern` from the remote
-  branch names (or reports no clear pattern) and shows the observed update style,
-  which it never adopts. The thresholds are constants of the module the verb
-  runs and are rendered into the commit-subject reference, not restated by hand.
-  `show` and `subject` print `no convention established — run git:convention
-  measure` in that state (`convention_established` under `--json`; exit codes
-  unchanged). An interactive `/commit` asks once — the established family or the
-  two strongest against Conventional Commits — and writes the answer to the
-  approved convention card, also when the answer is Conventional, so the question
-  is never repeated; `/commit:in-chunks` never asks and reports the measurement.
-  Where the choice maps to a setting, `measure` prints the ready-to-commit
-  `.git-convention.yml` (`commit_format`, `branch_pattern`, never
-  `update_strategy`); a human creates and commits it, the agent never writes it.
-
-- **A team's git convention can be declared instead of measured — the new
-  `git:` settings block.** Three Class-C keys, each defaulting to the
-  behaviour every install had before, so an install that sets nothing is
-  unchanged. `git.commit_format: ticket-conventional` writes
-  `DEV-1234 feat(exporter): …` instead of `feat(DEV-1234): …` and treats a
-  ticket in the scope as a wrong subject; `/commit` and `/commit:in-chunks`
-  validate against the regex for the configured format, and the
-  conventional-commits-writing classifier gains a `ticket-conventional` family
-  so such a history is no longer misread as free-text ticket prefixes.
-  `git.branch_pattern` (`{type}`, `{ticket}`, `{slug}`) shapes the branches
-  `/worktree:create` proposes; reading a ticket back out of a branch now takes
-  the first `[A-Z][A-Z0-9]+-[0-9]+` token that is not a standard name (`UTF`,
-  `ISO`, `SHA`, `RFC` prefixes), so `DEV-1234-device-export` yields its ticket.
-  Under `git.update_strategy: rebase`, `/create-pr` asks for
-  `git rebase origin/<base>` plus `--force-with-lease`, and `/pr:merge`,
-  `/prepare-for-review` and `/review:changes` report a behind branch instead of
-  updating it; none of them merges the base into a feature branch — one git-workflow reference
-  (`references/branch-update.md`) now owns that decision, and
-  `sync_pr_branch` exits `3` instead of merging when such a branch is behind
-  (a current branch still exits `0`). **What it does not do:** the setting picks the operation and never
-  authorises it; git-history-discipline still requires the user's request for
-  every rebase, fixup or autosquash. A team declares the keys in
-  `.git-convention.yml`, a tracked file at the repository root that overrides
-  every developer settings file and where either value is a declaration
-  (ADR-283): `git.update_strategy` is read from it at the commit a pull request
-  is judged against, so a worktree, a fresh clone and CI agree and a pull
-  request cannot change the strategy its own update is judged by;
-  `git.commit_format` and `git.branch_pattern` are read at `HEAD`. Without the
-  carrier the keys come from the project settings files as before; the
-  user-global file does not carry them, and the settings GUI no longer offers
-  them while it writes there. `agent-config git:convention show` prints the
-  value in force, the commit it was read at and a differing checkout value as
-  a candidate; `show --key` judges only the named keys. The commit is the
-  `--base` given — a pull request passes `--base origin/<its base>` — else the
-  default branch; nothing asks the forge. A carrier that does not parse makes
-  `sync_pr_branch` exit `4`, a target that names no commit exit `1`, and a named
-  commit that cannot be fetched is `unverified`; none of them merges. A target
-  that moves between the strategy read and the merge is read again at the
-  commit being merged, which is governed by the strategy it carries: the same
-  strategy goes on against it, another one exits `1` before anything is
-  merged. A blank `--base` is a usage error (exit `2`) in `sync_pr_branch`,
-  `git:convention show` and `sync`, and `check_branch_freshness`, never read
-  as no `--base`. A commit-linting config
-  in the repository still outranks `git.commit_format`. In a packed consumer
-  install `git:convention show` is the git surface that resolves, and the
-  consumer matrix proves it with a `git-convention` leg; `sync_pr_branch` and
-  `check_branch_freshness`, which `/pr:merge`, `/create-pr`, `/fix:ci` and
-  `/roadmap:next` run through `./scripts-run`, still need a source checkout of
-  this package.
-  The merge method is not a key: `/pr:merge` already reads it from the forge.
-
-- **A push no longer ships a branch whose tree contradicts its own commits.**
-  `check_branch_work_committed` runs first in the pre-push hook, and it exists
-  because this branch produced the defect it guards: a merge-reconciled baseline
-  was written into `gate-violation-baselines.json` **after** `git add`, so
-  `git commit --no-edit` captured the staged side, the reconciled number stayed
-  in the working tree, and the push went out asserting a baseline the tree
-  contradicted. The operator found it, not the pipeline — and **no CI gate
-  could have**: CI checks out the pushed commit, and the working tree holding
-  the lost edit does not exist there. That is why this gate is pre-push and
-  local-only, the same reach `check_branch_freshness` has.
-  It blocks by **authorship**, not on a dirty tree, because a blanket
-  clean-tree rule would fire on every gate script's own report output and train
-  the operator to set the skip variable: staged-and-changed-since (the measured
-  shape), staged at all (`git add` is recorded intent, and a push carries
-  commits rather than the index), and dirty files this branch's own commits
-  touch. A parallel session's edit and a gate's report output are named and
-  waved through. One residual limit is stated in the header rather than hidden:
-  a file this branch created and neither staged nor committed cannot be told
-  apart from a foreign untracked file; the staged rule closes it at the first
-  `git add`, and that rule exists because testing the gate against the live
-  tree put its own source file in the advisory class.
-
-### Fixed
-
-- **`task release` no longer asks the releaser to write anything, and the
-  written-answer obligation is deleted (ADR-261).** This entry replaces the one
-  that stood here — *"the release's written obligation is now answerable, not
-  only refusable"* — because that mechanism landed and was removed in the same
-  cycle, and shipping its description would be a false claim about 14.21.0.
-
-  The obligation: when governance-only commits outnumbered consumer-only ones
-  over the release span, the section had to carry human prose naming the next
-  cycle's consumer work, and the following release had to read that promise back
-  as `shipped` / `did not ship` / `withdrawn`. Four refusal sites, two
-  placeholder sentinels, a length floor, an outcome vocabulary, a
-  `## [Unreleased]` staging channel and an interactive prompt stood behind two
-  sentences. Across 14.18.0, 14.19.0 and 14.20.0 it was discharged **by hand,
-  mid-release**, after the pipeline had bumped the version and aborted.
-
-  The mechanism built to fix that ran for the first time on 14.21.0 and made it
-  worse: `staged_response` located its markers with an unanchored
-  `body.indexOf(marker)` over the whole `## [Unreleased]` body, so it matched
-  the **prose of the changelog entry describing itself**, cut two sentences out
-  of the middle of that entry, pasted them into the 14.21.0 release head as
-  orphan fragments, and prompted for the answer anyway. A `task release` run
-  corrupted both sections of the file it was governing. Both are repaired here.
-
-  The owner removed the obligation rather than the bug: this package exists to
-  make the maintainer's work cheaper, and a gate that halts a green pipeline
-  until a human types prose about a cycle that has not happened yet moves cost
-  onto the person the tool is for. `> **Governance mix:** …` stays as a
-  one-line measurement the generator renders end to end.
-
-  **Untouched:** every honesty control about a claim *this* release makes —
-  `_auto-derived, rewrite before merge:_` still blocks, the authoring-instruction
-  sentinel still blocks, the `_none_` contradiction check still blocks, the
-  `Tests: N` footer is still required. Those refuse an unreviewed statement about
-  the release being published; the deleted one refused the absence of a statement
-  about a future one. ADR-253's actual decision — the decline of the per-PR
-  user-artifact gate — stands.
-
-- **The 14.19.0 start-position fix shipped incomplete; this is its other half.**
-  It taught `preflightPosition` to accept `release/{target}`, and 14.20.0 then
-  failed with `release must run from 'main' or 'release/14.21.0', currently on
-  'release/14.20.0'`. Step 2 had already bumped `package.json`, so a plain
-  re-run computed the bump from the **already bumped** version and asked the
-  preflight about a version one higher than the one in flight — the start-position
-  fix could not help, it was asked about the wrong target.
-  `_detect_in_flight_target` needed no flag for either of its branches (HEAD on a
-  release branch; a manifest version whose tag is not published), and the comment
-  at the call site already stated that intent — the `args.resume ?` gate narrowed
-  it to resumed runs. The probe now runs unconditionally, so an abandoned bump can
-  no longer be silently released as the NEXT version either. A wiring assertion
-  pins it, because the probe's own unit tests passed throughout: they never asked
-  whether anything called it unconditionally.
-
-- **The curated-head refusal is recoverable again — its own remedy was refused
-  by the preflight.** `guard_release_curation` stops between step 2 and step 3,
-  leaving HEAD on the local `release/X.Y.Z` with the generated section
-  uncommitted, and tells the operator to curate the head and re-run
-  `task release`. Measured on 14.19.0, every spelling of that re-run died
-  *before step 1*: a plain run on `release must run from 'main'`, and
-  `--resume` on `working tree is not clean` — against the pipeline's own
-  step-2 output. The only way through was to hand-craft the `release: X.Y.Z`
-  commit the pipeline makes for itself one step later.
-  `docs/release-runbook.md` claimed this had been closed on 2026-09-03; that
-  fix landed in `checkout_release_branch`, which is step 1 and therefore
-  unreachable from the position the guard creates — the claim was not wrong
-  about step 1, it was wrong that step 1 was reachable. The start position is
-  now one pure verdict, `preflightPosition`: `release/{target}` is legal with
-  or without `--resume`, and a dirty tree is accepted **there only**, with the
-  swept files printed. A dirty `main` still refuses, because there the same
-  tree is an operator's unrelated work about to enter a release commit. Pinned
-  by `tests/scripts/release.test.ts` § `preflightPosition`, including a wiring
-  assertion so a pure verdict nobody calls cannot pass.
-
-- **Release gates now refuse before the push, not on the release PR.** 14.17.0
-  (PR #1856) failed `check_release_highlights` on a missing
-  `> **Governance mix:**` line — an assertion reproducible locally in under two
-  seconds, discovered instead after a branch, a pull request and a CI run had
-  been spent. It was the second instance of the shape in three releases
-  (14.14.0 / PR #1812 was the first, on the curated head), and
-  `docs/contracts/CHANGELOG-conventions.md` had **recorded** the gap rather than
-  closed it. Three changes: `render_changelog_entry` now emits the response
-  block with the measured level and a placeholder sentinel the guards refuse
-  (never a finished answer — a generator that discharged a written-answer
-  obligation for itself would make it a formality); one predicate
-  (`mix_response_blockers`) is read by the CI gate and both local guards, so the
-  two sides cannot drift; and the missing `Tests: N` footer joins it as a
-  section-level publication blocker, which until now also existed only inside
-  `release-validation.yml`.
-
-  **Superseded within the same cycle — read the ADR-261 entry above.** The
-  placeholder sentinel, `mix_response_blockers` and the whole written-answer
-  obligation this entry describes are deleted; the `> **Governance mix:**` line
-  survives as a pure measurement. What still holds from this entry: the
-  locality registry, the `Tests: N` footer as a section-level blocker, and the
-  push-time refusal for the curated head.
-
-### Added
-
-- **A release-gate locality registry, so the next orphan cannot land silently.**
-  `src/config/release-gate-locality.yml` relates every job in
-  `release-validation.yml` to the command that reproduces it locally;
-  `tests/scripts/release_gate_locality.test.ts` fails when a job has no row, or
-  when a row claims a script that is not in the tree, or when a missing local
-  command carries no classified `NEEDS_*` reason. `task release:verify` runs the
-  reproducible set from that same registry — and `task release` now runs its
-  `--cheap` subset itself, before the branch is pushed. Three jobs genuinely
-  cannot run pre-PR; the registry names which and why, and a green run prints
-  what it did not cover rather than reading as a clearance.
-
-### Changed
-
-- **Docs hygiene — retired stale authoring-source pointers.** 43 stale
-  "edit `.agent-src.uncondensed/`" *authoring* pointers across 28 `.md` files
-  repointed at `src/` (the authoring source of truth per ADR-051); continues
-  the #989 README/thin-root fixes. `check_source_pointer_freshness`'s allowlist
-  broadened (2 → 16 files) to lock the cleaned files against regression. Live
-  `.agent-src.uncondensed/` **code constants, pipeline descriptions, and
-  catalog paths were deliberately left untouched** — that tree is a live
-  generated intermediate, not dead debt; a blind sweep was explicitly rejected.
-
-### Added
-
-- **Internet-reach operator tooling** — upstream-tool health and install-pinning
-  discipline for the tools a reach recipe needs. The router skill this was
-  scoped around was **cancelled pre-authoring by its own benchmark gate**: the
-  pre-registered run returned 0/12 outright wins against the host's native web
-  tools (`band: stop`), so no skill, no triggers, no capability-area claim. The
-  null is published in [`docs/benchmark.md`](docs/benchmark.md) § internet-reach;
-  the decision is [ADR-126](docs/decisions/ADR-126-internet-reach-operator-tooling.md).
-  - `reach:doctor` — new read-only command: per-channel probe status,
-    `active_backend`, tier, lifecycle, and the exact **pinned** fix command for
-    the current platform when a backend is missing or broken. No writes, no
-    installs, no network (`--deep` is the explicit opt-in that makes one real
-    request per backend and still writes nothing).
-  - `src/config/reach-channels.yml` + `reach-channels.schema.json` — ordered
-    backend candidates per channel (swapping a backend is a config reorder, not
-    a code edit), the four-value lifecycle vocabulary reused from
-    `provider-lifecycle`, `last_verified` staleness metadata, and an install
-    pattern that **rejects** unpinned versions, `latest`/`main`/`HEAD` refs and
-    archive-URL install sources.
-  - `tool_probe` — five-state probe taxonomy (`ok`/`missing`/`broken`/`timeout`/
-    `error`) with stale-shim detection (resolvable shim, dead interpreter),
-    exit-126/127 mapping, timeout-only single retry, and per-channel error
-    isolation. Every spawn routes through `hardenedSpawnEnv()`.
-  - `check-reach-channels` + `check-reach-prescriptions` CI gates — pinning and
-    intake-record discipline is machine-checked, not an honour system; a
-    prescription that cannot be pinned does not ship.
-  - `check-reach-staleness` CI gate — offline: a channel unverified for >90 days,
-    a `deprecated` channel with no `replacement`, or a channel past its
-    `removal_after` date and still present fails the build.
-  - Registry trust is enforced at runtime, not just in CI: `reach:doctor` (incl.
-    `--registry <path>`) validates the registry against its schema and refuses to
-    probe on any violation (exit 2). `probe_args` is a flag-shaped **allowlist**
-    and `probe_cmd` must equal its backend `id`, so a registry entry can neither
-    smuggle a shell payload nor label a row with a binary other than the one that
-    ran — both closed by an adversarial pre-merge review, with permanent
-    regression fixtures.
-
-- **Doc-follows-code discipline** — deterministic, framework-agnostic mechanism
-  so documentation is updated when code changes.
-  - `downstream-changes` rule gains a first-class **Doc-Impact** obligation:
-    a change to a public surface (route, exported signature, CLI flag, config/
-    settings key, env var, DB schema, event payload) is incomplete until the
-    doc that describes it is updated in the same change; escape hatch for
-    refactor-only / no-surface changes.
-  - `agent-docs-writing` skill: the advisory doc-sync table becomes an
-    actionable, cross-stack Doc-Impact procedure with a falsifiable-claim
-    fire/no-fire test.
-  - `check_source_pointer_freshness` CI gate — fails when an authoring file
-    names the retired `.agent-src.uncondensed/` tree as source of truth.
-  - Opt-in consumer CI template `github-workflows/doc-impact.yml` (warn-first,
-    `[docs:not-needed]` / `refactor:` escape hatch, `STRICT` toggle).
-
-### Fixed
-
-- **Every release PR was red on its first run — the generator and the
-  highlight gate contradicted each other.** `release.ts` wrote `_none_` into
-  all five curated-head fields; `check_release_highlights` (added 2026-08-03)
-  fails a `_none_` the release span contradicts. Because every release of this
-  package touches `src/rules/` or `src/scripts/schemas/`, "Behaviour changes"
-  is *always* substantiated, so the gate reliably red-flagged the generator's
-  own default — 9.17.0 (run 30871194277) and 9.18.0 (run 30909511315) both
-  failed on that one step, and each release had to be unblocked by hand.
-  - The span → category classifier now lives once, in
-    `src/scripts/_lib/release_highlights.ts`, and is shared by the generator
-    and the gate; the two duplicated label lists are gone with it.
-  - `release.ts` **pre-fills** each substantiated label with the deriving
-    reason plus its citing SHAs (capped at 6, remainder stated, never silently
-    truncated). `_none_` is now a fallback for labels the span does not
-    substantiate, not a blanket default — so the tool no longer asserts five
-    things it never checked.
-  - The gate keeps full teeth for the failure it was actually built for: a
-    **human** editing a substantiated line back down to `_none_`, which is what
-    produced the false 9.13.0 and 9.14.0 heads. An unrewritten auto-derived
-    line is advisory (a prose gap, not a false claim) and never blocks.
-  - Derivation is best-effort in the generator: a git failure degrades to the
-    `_none_` skeleton with a warning instead of aborting a release.
-
-- **`/team delegate` double gate is now enforced in code, not only in prose**
-  (team mode stays default-off; closing `road-to-team-mode`). The gate on the
-  only write-access wrapper existed as agent-followed instructions in the
-  command doc — nothing mechanical checked `ai_team.allow_delegate`, and no
-  test covered any of the three flag combinations. Added
-  `assert_delegate_allowed()` + `TeamDelegateDisabledError` in
-  `src/scripts/ai_team/team_dispatch.ts` (mirroring the existing
-  `run_team_review` fail-closed shape) plus a `--delegate-gate` CLI mode that
-  exits non-zero with the opt-in pointer unless **both** `ai_team.enabled` and
-  `ai_team.allow_delegate` are true; all three combinations are test-pinned.
-- **Default-off parity for team mode is now pinned where it was only
-  claimed**: the Stop-hook E2E covered `enabled: true` + `managed: false`
-  only, so the shipped default posture (`ai_team` absent, or
-  `enabled: false`) was never exercised — two new pins assert a strict no-op
-  (exit 0, no stdout, no state, no ledger). The command-suggestion surface
-  gained its own pin (exactly one eligible team command, its
-  `trigger_context` carrying the `ai_team.enabled is true` agent-side
-  precondition, all sub-commands ineligible, and zero `ai_team` awareness in
-  the deterministic suggester — so its output is invariant with respect to
-  that config).
-- Stale `not yet manifest-wired` header comments in
-  `src/scripts/ai_team/review_gate.ts` and
-  `src/scripts/team_review_gate_hook.ts`: the Stop-concern registration
-  landed with team-mode Phase 4 (`hook_manifest.yaml`, claude `stop` chain),
-  so the comments told a reviewer auditing default-off that the hook was
-  still inert.
-- Source-of-truth pointer drift: `src/agent-src/README.md` and the
-  `agents-md-thin-root` skill named the retired `.agent-src.uncondensed/`
-  tree; corrected to `src/`.
-- **Embed-contract docs completed + de-drifted**
-  ([`docs/contracts/local-server-ports.md`](docs/contracts/local-server-ports.md),
-  [`docs/contracts/local-server-api.md`](docs/contracts/local-server-api.md)):
-  the host-facing contract now carries the framing-DENY council reasoning, the
-  `local-server.json` discovery-file rules (`url` embeds `?token=` — hosts
-  rebuild from `port` + a fresh token read; `0600` is a contract invariant),
-  the `?token=` accepted-risk statement, the wizard-out-of-scope-for-embed-v1
-  note, and a Host-lifecycle section (idle-shutdown watchdog + keepalive,
-  headless refusal). `local-server-api.md` had three stale claims corrected:
-  the token IS persisted (`local-server.token`, mode `0600`) — not
-  "never written to disk"; headless `ui:serve` refuses with exit 2 — it does
-  not silently boot browserless; the ping example now shows the
-  `capabilities` block. Plus an explicit `capabilities.embed` assertion in
-  `tests/server/app.test.ts`. Closes `road-to-ac-embeddable-gui`.
-
-> The former "6.0.0 at a glance" overview was drained on 2026-07-21 to
-> [`docs/archive/CHANGELOG-6.0.0-overview.md`](docs/archive/CHANGELOG-6.0.0-overview.md).
+_Nothing staged._ Twenty entries that had accumulated here were drained to
+[`docs/archive/CHANGELOG-unreleased-drain-2026-10.md`](docs/archive/CHANGELOG-unreleased-drain-2026-10.md)
+on 2026-10-13; every one of them had already shipped, the oldest in 9.7.0.
+An entry belongs under a dated release section, not here — see
+[`docs/contracts/CHANGELOG-conventions.md`](docs/contracts/CHANGELOG-conventions.md).
 
 # Era: pre-4.5.0 — archived
 
@@ -871,224 +378,531 @@ Entry-shape contract: [`docs/contracts/CHANGELOG-conventions.md`](docs/contracts
 > keeps the active era under the 250-line drift cap enforced by
 > `tests/test_changelog_eras.py`.
 
-# Era: 16.3.x — current
+# Era: pre-16.5.0 — archived
 
-> Started at `16.3.0`. Full entries live inline below.
+> All entries before `16.5.0` live in
+> [`docs/archive/CHANGELOG-pre-16.5.0.md`](docs/archive/CHANGELOG-pre-16.5.0.md).
+> The archive is read-only; git tags remain the canonical
+> source for what shipped. Splitting them out of the main file
+> keeps the active era under the 250-line drift cap enforced by
+> `tests/test_changelog_eras.py`.
+
+# Era: 16.5.x — current
+
+> Started at `16.5.0`. Full entries live inline below.
 > The drift test caps this era at 250 lines of entry body; growth past
-> that forces a new era split (`# Era: 16.4.x`, etc.) — see
+> that forces a new era split (`# Era: 16.6.x`, etc.) — see
 > [`docs/contracts/CHANGELOG-conventions.md § Era splits`](docs/contracts/CHANGELOG-conventions.md).
 
-## [16.4.0](https://github.com/event4u-app/agent-config/compare/16.3.0...16.4.0) (2026-10-10)
+## [17.0.0](https://github.com/event4u-app/agent-config/compare/16.5.0...17.0.0) (2026-10-22)
 
 ### Release highlights
 
-- **Behaviour changes:** retire 46 default-neutral derivable settings keys (#2274) (b35d432); A team's git convention can be declared: ticket-prefixed commits, branch shape, and rebase instead of merge (#2235) (0f9c32e); ADR-281 and the texts it corrects (partial, self-modification roadmap) (#2251) (82a131f); credit a gate with the obligations it refuses, not the whole rule (#2246) (93a192b); precedence rule, contradiction review, and a reachable MCP-use recorder (#2241) (a6e5942); repair signals that mean what they say (loop flag, cap comments, verify forms) (#2228) (7548bfc); +1 more.
-- **Default changes + migration:** Correct AC-2 to 37: one of the 47 selected keys was not default-neutral (#2278) (e48f52c); doctor is offline by default; --online opts the forge read back in (#2277) (60c129b); retire 46 default-neutral derivable settings keys (#2274) (b35d432); Queue 47 default-neutral settings keys for retirement (#2272) (9582574); a default install is served each rule body once; report pending reinstall (#2238) (d7b0955).
-- **Security and correctness:** Findings that get a disposition: medium security blocks a release, and every 16.3.0 row ends somewhere (#2266) (bf7ed4f); an ignored file is not a pass; a green row names the type checker that did not run (#2244) (3e00f5e); a default install is served each rule body once; report pending reinstall (#2238) (d7b0955); land the two review-round defects stranded when #2231 merged mid-lane (#2233) (4e19d06); repair signals that mean what they say (loop flag, cap comments, verify forms) (#2228) (7548bfc); round-3..7 review findings (follow-up to #2230) (#2232) (3e7baa1); +4 more.
-- **Honest nulls:** round-3..7 review findings (follow-up to #2230) (#2232) (3e7baa1); refuse a triggerless routed rule; measure the real thinned total (#2226) (52b409e).
-- **Known limitations:** Phase 2 waits on a cancelled instrument, not on a machine (#2282) (0f6209e); retire 46 default-neutral derivable settings keys (#2274) (src/scripts/install.ts declares a residual) (b35d432); release evidence that reproduces (#2250) (src/scripts/_lib/release_highlights.ts declares a residual) (35209c1); a default install is served each rule body once; report pending reinstall (#2238) (src/scripts/check_standing_rule_delivery.ts declares a residual) (d7b0955); land the two review-round defects stranded when #2231 merged mid-lane (#2233) (4e19d06); measure the thinned layer in one unit, and price what stands between it and the ceiling (#2231) (src/scripts/install.ts declares a residual) (96dff15).
+- **Behaviour changes:** run only package-owned dispatchers, and refuse PreToolUse when none is reachable (#2573) (0559570); raise the Node floor to 22 (ADR-290) — unblocks the 17.0.0 cut (#2565) (76f4136); A setup that decides itself: Phase 4 removes the keys, and nothing reads them (#2532) (d8f5590); The source door takes its decided name, the observation slots stay unspent, and the calibration reads zero (#2544) (32a66d7); Brand drain: lexicon and claim check on every finished draft, scenario fixtures, claims (5.3, 5.4, 7.2, 7.3) (#2486) (6c312e1); A canvas the code owns: claude-design lane, /design-system:sync, Lock carrier (#2470) (72f7580); +14 more.
+- **Default changes + migration:** Steps the skill cannot skip: two pilots split, and a default-off procedure cursor (Phases 4-5) (#2466) (e3cf6dc); read member CLI output beyond the default spawn buffer (#2348) (2fa431c). Breaking, pending in `BREAKING_CHANGES.md` and shipped by this release: **Three `fail_closed` hook guards run where they were silent.** The installed claude hook command now reaches a dispatcher staged under `~/.event4u/agent-config/runtime/` after a project-local install and before `PATH` ([`3f8c98e`](https://github.com/event4u-app/agent-config/commit/3f8c98e74), #2455). On machines installed through `npx`, or hosts launched with a bare `PATH`, every hook command used to end in a silent `exit 0`; there `block-no-verify` (refuses `git … --no-verify` and `core.hooksPath` overrides), `block-kernel-rule-writes` and `block-plumbing-writes` (refuse agent writes to this package's kernel rules and hook plumbing) now run and may refuse a tool call for the first time. Classed breaking by the AI council, 2026-10-19 (`agents/evidence/council/hook-carrier-release-note-class-20261019.md`). **`uninstall --global --purge` stops being a recursive delete of the host anchor.** Old scope: `fs.rmSync(anchor, { recursive: true })` on whole host configuration roots — `~/.claude/`, `~/.codex/`, `~/.config/zed/` — so everything under them went, whoever wrote it. New scope: only the anchor-relative paths this package's own deploy inventory recorded writing; the anchor itself is never removed, directories are pruned only when left empty, a recorded symlink is unlinked rather than followed, and a purge with no readable inventory for that anchor exits 1 having deleted nothing. A second change in the same area: a plain `uninstall --global` now keeps the lockfile while recorded content is still on disk, where it used to delete it.
+- **Security and correctness:** kind_flip binds isKindFlipped locally after the state split (f0348e9); a worker name reaches the ledger only as a session-bound digest (7d1db2e); a TokenScope that throws is withheld visibly too (9c2260c); name the free rung only for a kind that has flipped (2ace081); a throwing engine withholds injected text visibly instead of escaping (234581b); the codex seat records thread.started and keeps its sandbox bound on resume (defbc6f); +49 more.
+- **Honest nulls:** a failed route hands the call down the chain once (free-hands 5.2) (a962afa); the advisor pairing run is a recorded null (tier 3.2) (23428d8); Blocker sweep follow-up: the three owner answers recorded (#2521) (221cd5d); Canvas 7.3: the taught baseline line, its corpus and the re-pinned routing measurements (#2502) (6c84bdf); A brand the tree can check: palette tags, voice slot, lexicon checker, zero brand bytes (#2433) (debb26d); A search answer a model can choose from (#2331) (b8f248b).
+- **Known limitations:** base_url route members with proven billing class (src/scripts/_lib/environment_detector.ts declares a residual) (d0d9dd4); one provider table (free-hands 2.1) (src/scripts/_lib/environment_detector.ts declares a residual) (09507c1); the 17.0.0 self-review findings, second and third wave (#2580) (src/scripts/_lib/release_findings_ingest.ts declares a residual) (5d64cba); The update concerns' code, hardened and unregistered: eleven council rounds, two delivery gaps named (#2545) (src/scripts/_lib/update_notice.ts declares a residual) (7aa764a); A setup that decides itself: Phase 4 removes the keys, and nothing reads them (#2532) (src/scripts/install.ts declares a residual) (d8f5590); Install and hook runtime: foreign skills are not ours, a global dry run shows the global plan, and a fresh worktree's hooks run (#2553) (src/scripts/_cli/doctor_ownership_ledger.ts declares a residual) (4338b2e); +12 more.
+
+> **Governance mix:** governance-only 117 vs consumer-only 16 (mixed 252, maintenance 28; taxonomy 1.1.0; range 17f028941037..e7d10fac5355).
 
-> **Governance mix:** governance-only 38 vs consumer-only 1 (taxonomy 1.1.0; range 5550dec9cf92..79e335f1c1b9).
+### BREAKING CHANGES
+
+* **hooks:** run only package-owned dispatchers, and refuse PreToolUse when none is reachable (#2573) ([0559570](https://github.com/event4u-app/agent-config/commit/055957034474c04613f83f874e41ea53976a0bfb))
+* raise the Node floor to 22 (ADR-290) — unblocks the 17.0.0 cut (#2565) ([76f4136](https://github.com/event4u-app/agent-config/commit/76f4136e110829316ad72f85a67d0d951c7f2ac9))
 
 ### Features
 
-* **roadmaps:** 6.1's verdict lands, and two things it uncovered are held rather than worked around (#2294) ([79e335f](https://github.com/event4u-app/agent-config/commit/79e335f1c1b9c41d6ee75c6c38ef57eeeb63f010))
-* **roadmaps:** Phase 7's population, measured — and the first sweep that was thrown away (#2293) ([7a7a55b](https://github.com/event4u-app/agent-config/commit/7a7a55b2d8947d2c2e26ff59862bc8e9fac3f573))
-* **roadmaps:** the hold step 1.1 asked for is neither of the two shapes it offered (#2283) ([e90a478](https://github.com/event4u-app/agent-config/commit/e90a4788ec0d9afa07aaeeac00bf73b76ecc30f6))
-* **gates:** bring later/*-carried.md into the blocker lint, and nothing else (#2280) ([11dc63f](https://github.com/event4u-app/agent-config/commit/11dc63fe8521a0f87fb5a72203453497aca04ccf))
-* **settings:** retire 46 default-neutral derivable settings keys (#2274) ([b35d432](https://github.com/event4u-app/agent-config/commit/b35d432b11cc3328517c7963c570bb1a06b8dda7))
-* cross-file blocker refs and declared snapshot exemption (authority-routing phases 4-5) (#2264) ([b01d71d](https://github.com/event4u-app/agent-config/commit/b01d71d94dd8e763d6c1d5f9fc6f7776beffde55))
-* **merge:** auto-merge on the owner's word, with a council danger gate (ADR-282) (#2256) ([edd18fe](https://github.com/event4u-app/agent-config/commit/edd18fea6867255375dc3797121260e137322f26))
-* **roadmaps:** a routed authority for dangerous-action decisions (#2254) ([4b54335](https://github.com/event4u-app/agent-config/commit/4b54335a6217e25ae9c6273b591ee0e2919683c5))
-* **enforcement:** credit a gate with the obligations it refuses, not the whole rule (#2246) ([93a192b](https://github.com/event4u-app/agent-config/commit/93a192bbd36c051032e028a68fed7f8574908907))
-* **probe:** blocking time by cause, the CI-and-subagent hypothesis refuted (#2248) ([179019f](https://github.com/event4u-app/agent-config/commit/179019fb3c310f9ad1226877b7f191ae30f9d394))
-* **release:** release evidence that reproduces (#2250) ([35209c1](https://github.com/event4u-app/agent-config/commit/35209c1f5bd2c7cc2521693c58523402ad03618e))
-* **gates:** a ratification fence that follows the dispatcher's imports (#2247) ([8fdb481](https://github.com/event4u-app/agent-config/commit/8fdb4816921e50fbcb78e70beb0c347bad11890f))
-* **roadmaps:** parked blockers get counted, one owner question gets a blocker, two checks for ticks and citations (#2245) ([764fa4f](https://github.com/event4u-app/agent-config/commit/764fa4fa4c7d88d0214fea4409e234760889d545))
-* **code-graph:** measure the graph feeder's cost on the stop slot (graph-that-feeds-the-gate 3.5) (#2239) ([8d91928](https://github.com/event4u-app/agent-config/commit/8d91928cbd6111293b8eca16fde1240651d853e7))
-* **ci:** gates a pull request can hear (#2249) ([c4051c7](https://github.com/event4u-app/agent-config/commit/c4051c7ed34cd9209496205286af3c5a1ef2d89e))
-* **doctor:** an offline flag, and the 16.3.0 findings' doc and test fixes (partial) (#2243) ([fc1bdec](https://github.com/event4u-app/agent-config/commit/fc1bdec4f4edcf9438d42388e252352617f257b6))
-* **install:** count unresolved installed links per artefact kind (#2240) ([ef32868](https://github.com/event4u-app/agent-config/commit/ef328687cfff78efa57cc957d90344fae7b90979))
-* **ranker:** opt-in unrounded tie-break, tie metrics, and the tuning reading (#2242) ([e92e9dc](https://github.com/event4u-app/agent-config/commit/e92e9dcdb23bb16d596252fdb7c21e51fe7ec64a))
-* **neighbours:** precedence rule, contradiction review, and a reachable MCP-use recorder (#2241) ([a6e5942](https://github.com/event4u-app/agent-config/commit/a6e5942236858a85b01246c0b04345c6148075d7))
-* **spend:** a spend bound applies only where one was set (#2234) ([e3c30fc](https://github.com/event4u-app/agent-config/commit/e3c30fc9d3af3121a03dbc420b4fbaa235993b46))
-* **installed-layer:** measure the thinned layer in one unit, and price what stands between it and the ceiling (#2231) ([96dff15](https://github.com/event4u-app/agent-config/commit/96dff15dd9d5544641b54e5c729becbef6f57306))
-* **reach:** close road-to-modules-that-something-calls — census, repairs, and the five reported counts (#2227) ([3dbb3f9](https://github.com/event4u-app/agent-config/commit/3dbb3f99da8c731a6ba6f34fef48ae90834fb1df))
+* **ask:** a hand kind flips to the free route only on cleared shadow bars (free-hands 6.3) ([6fb2cb8](https://github.com/event4u-app/agent-config/commit/6fb2cb8e5b5fbac3ae17e660f3102e62feac76a9))
+* **ask:** shadow mode ledgers a free and a paid answer per hand call (free-hands 6.2) ([e7f38f2](https://github.com/event4u-app/agent-config/commit/e7f38f239ad8cd7aac9924dcafeb1a2599ce3058))
+* **canary:** a red streak of the scheduled canary surfaces in doctor and at session start (free-hands 5.3) ([bd113de](https://github.com/event4u-app/agent-config/commit/bd113de5334cb751de90b265e45d58a776a8e1e4))
+* **ask:** a failed route hands the call down the chain once (free-hands 5.2) ([a962afa](https://github.com/event4u-app/agent-config/commit/a962afa732038407f0bd8f0e8dfaf349fee38a7b))
+* **ask:** route liveness counts unservable streaks per route and model (free-hands 5.1) ([594698a](https://github.com/event4u-app/agent-config/commit/594698ab11bc3e2e6236a842c20df810f686c219))
+* **council:** the stance repair continues the seat's own CLI session inside the cache TTL ([be6e3b3](https://github.com/event4u-app/agent-config/commit/be6e3b3a3df7aeaefad04976380b403693facbc7))
+* **council:** the necessity gate applies the strict bar inside a host rate window ([604d512](https://github.com/event4u-app/agent-config/commit/604d512a3b630c25a8432e3d6d4188418fce8241))
+* **delegation-nudge:** name the free rung only when the council config declares an unpaid route ([0358a03](https://github.com/event4u-app/agent-config/commit/0358a034ab26d7d13327579938af280933dc0687))
+* **spawn-guard:** shadow line records whether a host rate marker would have held a spawn ([d4c716b](https://github.com/event4u-app/agent-config/commit/d4c716ba4d09504d06eb7ab45c625d7b0aa3b36e))
+* **council:** chair candidates carry route billing, so a free route never chairs (free-hands 4.1) ([2bc7ce4](https://github.com/event4u-app/agent-config/commit/2bc7ce4980a47b86f51a57de430712a352a9e715))
+* **ask:** an exposure ledger per hand route (free-hands 3.6) ([34a1ca4](https://github.com/event4u-app/agent-config/commit/34a1ca4623a3d63b96afd79561a9ef750460bb8a))
+* **hooks:** the host's StopFailure(rate_limit) writes a host-sourced quota marker (cold-start 4.3) ([8dedad4](https://github.com/event4u-app/agent-config/commit/8dedad4f8a57ec2140e318ec7fe60de730f08ec2))
+* **ask:** hands see fragments, never the project (free-hands 3.5) ([3064cf4](https://github.com/event4u-app/agent-config/commit/3064cf43945b7a73ed95469b91610287973b3ab0))
+* **council:** ship route endpoints, discover route models live ([e750d31](https://github.com/event4u-app/agent-config/commit/e750d310834b3a5d05dba25200d7fd59d17a3fb5))
+* **skills:** llm-provider-knowledge gains a free-tier class (free-hands 7.1) ([f89826b](https://github.com/event4u-app/agent-config/commit/f89826b92a9335b09162523ddb05c6b56d53d785))
+* **council:** derive a route's identity from the served model id ([996fd9a](https://github.com/event4u-app/agent-config/commit/996fd9aa4eb59ccd74207c87e53de9b6f1f827fa))
+* **nudge:** name the free rung for a typed hand slice (free-hands 3.4) ([7857d7f](https://github.com/event4u-app/agent-config/commit/7857d7fd868ea9b7a53d54618869e48e9b11babf))
+* **council:** base_url route members with proven billing class ([d0d9dd4](https://github.com/event4u-app/agent-config/commit/d0d9dd44afba079e9102ae17aef0d72b5d2c5282))
+* **economy:** ask_economy gains a billing-class axis (free-hands 6.1) ([449f03c](https://github.com/event4u-app/agent-config/commit/449f03cff02340cdfef46a797d13756fa0e76c02))
+* **ask:** the head verifies every hand, and the line says so (free-hands 3.3) ([619b597](https://github.com/event4u-app/agent-config/commit/619b597a8e3de5c3182aa70bd51ca1bb4e21bce2))
+* **subagents:** the reuse shadow window report and the four flip conditions as code (cold-start 3.5, 3.6) ([943c19a](https://github.com/event4u-app/agent-config/commit/943c19ad967ad9faed45481ac683edd963b60984))
+* **hooks:** spawn-guard-shadow records reuse verdicts and resumes by name (cold-start 3.3) ([c3f7f1a](https://github.com/event4u-app/agent-config/commit/c3f7f1a1999aa42c8a2c5d58d6607cfc88ac1321))
+* **council:** unpaid seats propose and judge, never chair; five-judge cap; n_eff beside kappa (free-hands 4.1-4.3) ([78f7126](https://github.com/event4u-app/agent-config/commit/78f7126f48c9357a7b8a01a6bb9d9ab37a303e91))
+* **ask:** a route chooser replaces the first configured member (free-hands 3.2) ([177c6a8](https://github.com/event4u-app/agent-config/commit/177c6a89ebb63446380fbd577836d03dc1b84b9f))
+* **ask:** typed hand kinds with a JSON output schema each (free-hands 3.1) ([550ac29](https://github.com/event4u-app/agent-config/commit/550ac29e615e855103da945d216ab2d0c84d462f))
+* **egress:** invisible characters and lookalike letters do not hide a value ([2b758dc](https://github.com/event4u-app/agent-config/commit/2b758dcf56ec0530d377807e3f635d83be1e194d))
+* **egress:** validated identifier rows in the one rule table ([40aa265](https://github.com/event4u-app/agent-config/commit/40aa265f1ed59512cf3b2c22d716762d7e04d8b6))
+* **egress:** a loopback canary run through ask_transport (free-hands 1.3) ([ffb6a6b](https://github.com/event4u-app/agent-config/commit/ffb6a6b7226e4255ad6e27619dbb467e8fbd119d))
+* **bench:** the advisor pairing run, advisor usage charged to its arm (tier 3.2) ([c4e4a37](https://github.com/event4u-app/agent-config/commit/c4e4a37e7b4401978f5e19e17e3ef96f3a38ef02))
+* **subagents:** ac-researcher declares lite once both tier claims are backed (tier 2.3) ([5b84014](https://github.com/event4u-app/agent-config/commit/5b84014245fed5512650a775d063821e95fa4d5e))
+* **bench:** paired tier-downshift run and its verdict as code (tier 2.2, 2.3) ([75da434](https://github.com/event4u-app/agent-config/commit/75da434d61417bb7b07971da1a00f38e39e54b7d))
+* **steering:** a lite leg's escalation is a record, never a climb (tier 1.3) ([de939dd](https://github.com/event4u-app/agent-config/commit/de939ddb627fca4dd098aefcedaf8d872cfb4fd2))
+* **hooks:** the delegation nudge names the model value the table earned (tier 1.2) ([1f48d0f](https://github.com/event4u-app/agent-config/commit/1f48d0ff15c1ea848377cdb0731066ebd4c05f33))
+* **telemetry:** every recorded dispatch carries its tier fields (tier 1.1) ([aa74c70](https://github.com/event4u-app/agent-config/commit/aa74c70c5f36d548ed6cac4a134ba02f38b93631))
+* **council:** the Anthropic seat launches light on a probed version ([b63871b](https://github.com/event4u-app/agent-config/commit/b63871b61f8576492470a4aa0d385e1e673c4bec))
+* **council:** probe a lighter seat launch per CLI version (cold-start 5.1) ([eaf5811](https://github.com/event4u-app/agent-config/commit/eaf5811486e9c97891969b46cceae966c63dbb1a))
+* **subagents:** package workers skip project instructions (cold-start 2.5) ([d5afdea](https://github.com/event4u-app/agent-config/commit/d5afdea316a0f816e601c8360fa8b71364a4821e))
+* **release:** review credential-shaped fixtures redacted; replace a detected value everywhere (#2578) ([84beafc](https://github.com/event4u-app/agent-config/commit/84beafcfa099aa1991369e8821533478b3d36fa8))
+* **release:** let a local self-review run be scoped and run to completion (#2575) ([66b8105](https://github.com/event4u-app/agent-config/commit/66b81058818d8a3c3bc4dfa2c7ee59c776fa0c63))
+* **roadmaps:** route a human-owned blocker through the council before filing ([6bfd836](https://github.com/event4u-app/agent-config/commit/6bfd83679927e7d561e645cbaf93c9ad1c995617))
+* **install:** keep every skill a surviving artefact declares in the scoped projection ([d3067c8](https://github.com/event4u-app/agent-config/commit/d3067c8dfa9b9006a6542e298c8b12a8c3e9081e))
+* **retro:** read an analysis round as a retro unit, with adoption only once a roadmap is archived (#2489) ([6fd7c66](https://github.com/event4u-app/agent-config/commit/6fd7c66acc7f7d6d00b6c6a94dc200e4283eab73))
+* **doctor:** report the update verdict read-only in doctor --json (release-impact 4.3) (#2483) ([3ec8d6b](https://github.com/event4u-app/agent-config/commit/3ec8d6b1ecce3dbaf9b9aa8531f7c9b4d017576c))
+* **retro:** held, recurred, or first — and a revert reopens the record (#2453) ([e12c6ab](https://github.com/event4u-app/agent-config/commit/e12c6ab6385c3a31168801d9ff9c1b48e70687be))
+* **release:** Consumer-Impact trailer, prerelease-aware comparator and a pure update classifier (#2421) ([a739e50](https://github.com/event4u-app/agent-config/commit/a739e508c90079f6794f4c6bbd24b39c197ffb40))
+* **self-repair:** scan the pushed commits, name the account, cite one threshold (#2436) ([f147efd](https://github.com/event4u-app/agent-config/commit/f147efd948c21d50ef10c03a28075d64ba2e5fb5))
+* **report:** build the content repeat-share instrument before its window closes (#2423) ([5a70acb](https://github.com/event4u-app/agent-config/commit/5a70acb8c64676b7b40069393fb6a6659580ed25))
+* **install:** compute the rule-layer form from evidence, shadow-only (#2414) ([ee49fd8](https://github.com/event4u-app/agent-config/commit/ee49fd88839e037cd8ec17ee18625b1e40a41d5d))
+* **skills:** resolve every reference link against its own file, one split canon (#2411) ([e1956ea](https://github.com/event4u-app/agent-config/commit/e1956ead7e4014aed572f257825db24874a9634c))
+* **analysis:** scope resolver, run core and loop ledger for the analysis family (#2407) ([629b19d](https://github.com/event4u-app/agent-config/commit/629b19d04308529384578ee21faeeda28391ac59))
+* **skills:** free the host's context key, reach uninstalled skills from the shell path (#2398) ([4b655be](https://github.com/event4u-app/agent-config/commit/4b655be8c045c9b64490144f2cebdfe24e2f1f5b))
+* **cold-start:** runs per leg, reuse decision, capability atoms and baselines (#2403) ([7d9d4ca](https://github.com/event4u-app/agent-config/commit/7d9d4caf4522ff7822511f359b9257f3e5ca3c96))
+* **turnaround:** throughput figures in the turnaround probe, correction and baseline (#2397) ([37d68ce](https://github.com/event4u-app/agent-config/commit/37d68ce64460c76cc22b934f69cb2684d6fd863c))
+* **report:** classify content results exactly as the PREREG registers them (#2396) ([80f646d](https://github.com/event4u-app/agent-config/commit/80f646d34d5168259c5667b3bb0e94cc0b70b305))
+* **egress:** generate the census of this package's own model senders (#2394) ([6e55ba4](https://github.com/event4u-app/agent-config/commit/6e55ba462f084c6691feddaff300a14f5f35ee74))
+* **council:** an unpriced billable seat is a state, not a zero (#2392) ([0a4ffff](https://github.com/event4u-app/agent-config/commit/0a4ffff674d1830c97786c9206b7227b07e59674))
+* **merge:** clearances name their head, a bypass has a closing, the owner's load is a number (#2381) ([73eb694](https://github.com/event4u-app/agent-config/commit/73eb69439b5b9169e9af9311bff69df0d102ace4))
+* **merge:** a danger gate that sees what governs and runs from the base (#2375) ([85d00e5](https://github.com/event4u-app/agent-config/commit/85d00e56a74832f74b4d5c4817181b50ba166097))
+* **hooks:** egress stage in the dispatcher, observe and protect views (placeholders Phase 1) (#2371) ([38542f8](https://github.com/event4u-app/agent-config/commit/38542f8eebaffd240b0e97b240884e72aec709c2))
+* **egress:** contract, rule table and token grammar for egress placeholders (#2366) ([7cd7564](https://github.com/event4u-app/agent-config/commit/7cd7564ebcbd646205dc62e042032e998ecca213))
+* **account-surface:** wire the detector into production-validator and launch-readiness (#2361) ([fd62723](https://github.com/event4u-app/agent-config/commit/fd62723872a1d7f0c4a645403328d6a4eba16dfc))
+* **account-surface:** reconcile threat rows and add the lexical account-flow detector (#2356) ([6aa338f](https://github.com/event4u-app/agent-config/commit/6aa338fd4ae3c9db399b0b2e1ae1f73575a9f7fa))
+* **svg:** discharge the SVG obligation only on a render the hook observed (#2355) ([7614604](https://github.com/event4u-app/agent-config/commit/7614604dc6e74ba63f24445e258f4c760e89b6f1))
+* **release:** apply the owner answer on what a minor may remove (#2344) ([d23dcec](https://github.com/event4u-app/agent-config/commit/d23dcec562b8bc61c2966b3c3545c9ce5bd23b92))
 
 ### Bug Fixes
 
-* **roadmaps:** dispose the two neighbours-carried steps (#2267) ([dc9f98a](https://github.com/event4u-app/agent-config/commit/dc9f98aa05c31fe20e52ec2a38f089771bbbea37))
-* **roadmaps:** carry the archived AC-3 and close parked-blockers step 4.2 (#2262) ([6051d37](https://github.com/event4u-app/agent-config/commit/6051d3744ac67057d6fc9bc178af3d36060ff4c1))
-* **release-findings:** close the ratification-fence roadmap's last step (#2261) ([6a1cb1a](https://github.com/event4u-app/agent-config/commit/6a1cb1a5cfbd9ca582152ea7f3022100d517abfa))
-* **touched-file-quality:** an ignored file is not a pass; a green row names the type checker that did not run (#2244) ([3e00f5e](https://github.com/event4u-app/agent-config/commit/3e00f5e0fb424e6c925058a184ac6942eb8dee89))
-* **rule-inject:** a default install is served each rule body once; report pending reinstall (#2238) ([d7b0955](https://github.com/event4u-app/agent-config/commit/d7b095551302e7dc215d6ac7b2a4191619eb0ed5))
-* **installed-layer:** land the two review-round defects stranded when #2231 merged mid-lane (#2233) ([4e19d06](https://github.com/event4u-app/agent-config/commit/4e19d06651700573df2bf395536011c32381ffc1))
-* **scripts:** repair signals that mean what they say (loop flag, cap comments, verify forms) (#2228) ([7548bfc](https://github.com/event4u-app/agent-config/commit/7548bfca437880a8a3a69b7ce608538ae757f303))
-* **reach:** round-3..7 review findings (follow-up to #2230) (#2232) ([3e7baa1](https://github.com/event4u-app/agent-config/commit/3e7baa13cfe63febf1735be9b17b414d21aa8527))
-* **reach:** three R2-review bugs in the module-reach report (follow-up to #2227) (#2230) ([31e3da5](https://github.com/event4u-app/agent-config/commit/31e3da5baf7aa7bc2a06b53335b18f1846912c3a))
-* **rules:** refuse a triggerless routed rule; measure the real thinned total (#2226) ([52b409e](https://github.com/event4u-app/agent-config/commit/52b409e897e42ab00e7305a6f17e1e27a1a35072))
-* **code-graph:** repair the gate feeder path shape, then publish what step 3.3 actually measures (#2216) ([1668731](https://github.com/event4u-app/agent-config/commit/166873158c1bcbe585a95654376ec021873a4107))
-* **deps:** lift proxy-addr to 2.0.8 so the runtime audit gate can pass (#2219) ([26510a6](https://github.com/event4u-app/agent-config/commit/26510a6c2a0e5d2997d639d6e5f3e9e9bc9dc34f))
-* **rules:** repair the docs/ link group, correct two stale blocker claims (#2213) ([c58d7ea](https://github.com/event4u-app/agent-config/commit/c58d7eae8d1aab76d37f9018a57c5047d4b957bc))
-* **roadmaps:** register step 0.2 blockedness where the carrier reads it (#2212) ([6b79d06](https://github.com/event4u-app/agent-config/commit/6b79d06defecbb3d8bc16d44e41160e0d4e470a5))
+* **ask:** kind_flip binds isKindFlipped locally after the state split ([f0348e9](https://github.com/event4u-app/agent-config/commit/f0348e97f6bf15efeabfd783dd5e5973825849bd))
+* **spawn-guard:** a worker name reaches the ledger only as a session-bound digest ([7d1db2e](https://github.com/event4u-app/agent-config/commit/7d1db2e068569d8d2a5b0b4763a056d68c6c259e))
+* **egress:** a TokenScope that throws is withheld visibly too ([9c2260c](https://github.com/event4u-app/agent-config/commit/9c2260c94000865ea16af84bf5cf6247bac04a16))
+* **delegation-nudge:** name the free rung only for a kind that has flipped ([2ace081](https://github.com/event4u-app/agent-config/commit/2ace081b28e4521b84ee007bd3c9fcf415af6d8d))
+* **egress:** a throwing engine withholds injected text visibly instead of escaping ([234581b](https://github.com/event4u-app/agent-config/commit/234581b6f79970b70ed5fc0e0bc26a1b4886facb))
+* **council:** the codex seat records thread.started and keeps its sandbox bound on resume ([defbc6f](https://github.com/event4u-app/agent-config/commit/defbc6fdae0c2185e93b4713b9e1b8b98bd38f8d))
+* **ask:** the route adapter reads a base_url member's billing field (free-hands 3.2) ([dde0284](https://github.com/event4u-app/agent-config/commit/dde028435e1b09b5928041a041324c9c696f8260))
+* **egress:** every IBAN registry country masks; credential minimums exercised ([dc8648b](https://github.com/event4u-app/agent-config/commit/dc8648b9acb952c6917804c2223ebec1ad1e4661))
+* **egress:** the canary runs in protect mode and spells no value the census counts (free-hands 1.3) ([61bb246](https://github.com/event4u-app/agent-config/commit/61bb2463f60887c409a6cf1ed2a55fcd6bffc55a))
+* **egress:** the three free-tier rows join every per-row suite (free-hands 1.2) ([9725442](https://github.com/event4u-app/agent-config/commit/9725442e470687dc02a65bc00cfca750abe5de64))
+* **egress:** NANP row matches every shape the stores' old phone regex tagged ([b7b88f3](https://github.com/event4u-app/agent-config/commit/b7b88f35e7c2857023aee57173d89748de963c22))
+* **egress:** stores redact recall-first; balanced phone parentheses; .md domains ([db29db4](https://github.com/event4u-app/agent-config/commit/db29db4ccbe7586aec20fb69f36d4b8fed3ddedf))
+* **egress:** mask bare Hugging Face, NVIDIA and Replicate keys (free-hands 1.2) ([0677711](https://github.com/event4u-app/agent-config/commit/06777113cca281f347328ba49c3ab4136af27cab))
+* **council:** the content ceiling fails closed (free-hands 1.1) ([ec9df20](https://github.com/event4u-app/agent-config/commit/ec9df200789ad9a59e635ad0a105bc9ebf516db5))
+* **claims:** a retired phrasing may not justify parked work either (free-hands 0.2) ([e7c2462](https://github.com/event4u-app/agent-config/commit/e7c2462d9f054da71bd3b3cf5de2a408837e3a36))
+* **bench:** no discordant pair bounds the difference by the rule of three ([b1881b9](https://github.com/event4u-app/agent-config/commit/b1881b977dd527fb5acc915cda5be6f6ab28cb9b))
+* **canary:** a suite whose router never answered is not a routing score ([40482d3](https://github.com/event4u-app/agent-config/commit/40482d31cbd05b583ffc8ed021b7ef99432cb81f))
+* the 17.0.0 self-review findings, second and third wave (#2580) ([5d64cba](https://github.com/event4u-app/agent-config/commit/5d64cba1bde6eb32b9722f00e601a12ca9f947c5))
+* **release:** take back the key 16.5.0 never shipped from the released surface (#2579) ([0a78c53](https://github.com/event4u-app/agent-config/commit/0a78c53e2f064bf276c4562bcfc8d271bcad5eda))
+* the 17.0.0 self-review findings, first wave (#2576) ([816a98e](https://github.com/event4u-app/agent-config/commit/816a98e7381f0ea613e23652d5198cfde22a8a8d))
+* **hooks:** refuse every abbreviation git reads as --no-verify, and scope short -n (#2572) ([feec560](https://github.com/event4u-app/agent-config/commit/feec560b54e2af4cf7caaf23b2f490a91a691ac4))
+* three 17.0.0 self-review findings, and a roadmap for the three accepted as risk (#2571) ([369b8b4](https://github.com/event4u-app/agent-config/commit/369b8b4aac947479cec93e04e6d944142db4fb82))
+* **release:** let the release-shape gate accept the impact-map entry the release writes (#2569) ([4123ea8](https://github.com/event4u-app/agent-config/commit/4123ea8f8ddae26b02a6620a5a35c5d14e85776d))
+* **release:** stop refusing a breaking commit that lost its Consumer-Impact trailer (#2567) ([95dbe28](https://github.com/event4u-app/agent-config/commit/95dbe28f6eea722535bda769d08ad2c61f9f8a82))
+* **ci:** let sync-visibility write metadata with RELEASE_PR_TOKEN (#2566) ([88df4bc](https://github.com/event4u-app/agent-config/commit/88df4bc75ee1a9c4c49d81b089a064f15c2c0fa1))
+* **skill:** keep roadmap-writing within its body ceiling ([4c1cc58](https://github.com/event4u-app/agent-config/commit/4c1cc5822f3c31f91459a80f171d83af05c02071))
+* **review:** R2 findings on the routing ratchet and the settled closures ([cc83373](https://github.com/event4u-app/agent-config/commit/cc83373eb90ff95b586d04bf5a3bb7a99398a738))
+* **language-pin:** a host-wrapped agent message never sets the pin ([0c85ece](https://github.com/event4u-app/agent-config/commit/0c85ece41519d5855744f0f323af41b07f6afa84))
+* **hooks:** re-establish the two drifted Claude Code doc pages (#2514) ([44253c1](https://github.com/event4u-app/agent-config/commit/44253c1027713205ad3c1ad308ee85389c492a8b))
+* **docs:** write the claim's new clause in the house dialect ([620c51e](https://github.com/event4u-app/agent-config/commit/620c51eda9f1b13810acdb703f0df135b15c3be0))
+* **ci:** hold the README word budget and lower the source-size baseline to the CI total ([74db765](https://github.com/event4u-app/agent-config/commit/74db765ef446c6b9b576d9b2bafb5b8684bbf250))
+* **hooks:** judge an inbox path against the tree the command runs in, and let the guard's own remediation through ([2bf64f6](https://github.com/event4u-app/agent-config/commit/2bf64f69910c1a4adb1e38577fabd1f64aa555ec))
+* **upgrade:** an installed package is not a source checkout, so --unattended stops refusing on every one (#2492) ([81a6e63](https://github.com/event4u-app/agent-config/commit/81a6e63fd8a7fcce9e7d837a45303281a9d3cd68))
+* **gates:** retire the expired relates baseline instead of extending it (#2488) ([cf887ff](https://github.com/event4u-app/agent-config/commit/cf887ff746acd20519ce7293d793361dd29f9d8b))
+* **skills:** every SKILL.md link resolves or is a named repo-only class (AC-1) (#2482) ([95b00b6](https://github.com/event4u-app/agent-config/commit/95b00b6569a53d6f0f49626b966278fdb8ff0109))
+* **release:** read Consumer-Impact from every trailer block, not only the last (#2479) ([b2d7b41](https://github.com/event4u-app/agent-config/commit/b2d7b41ce58787e3d4a767d9d8ccc676f28351fd))
+* **analysis:** validated publication target and redirect-free clone (#2477) ([504308f](https://github.com/event4u-app/agent-config/commit/504308ffaa0ef127b90d6837adbffd3ffbe1da48))
+* **tests:** drop the removed linearity field from the session-table fixture (#2478) ([7106101](https://github.com/event4u-app/agent-config/commit/71061011717483a725e1c1fd86f6b423f26e7b45))
+* **ci:** build before measuring the payload, and re-baseline the built surface (#2445) ([2884530](https://github.com/event4u-app/agent-config/commit/288453077e0f4485003c37182cd127c6c17c09ef))
+* **lineage:** parse quoted parents and read direction before reporting (#2417) ([dc480bf](https://github.com/event4u-app/agent-config/commit/dc480bf90fe9b1bd2cac1407b69e0281ca2c114b))
+* **design-fidelity:** one handover shape list, reserved host design names, DTCG alias record (#2412) ([a536e78](https://github.com/event4u-app/agent-config/commit/a536e787795f6744c3e87f682a00d7d5ed5889f2))
+* **drain:** lower the parity baseline to CI's 25 after 2.2e (#2408) ([5fe028f](https://github.com/event4u-app/agent-config/commit/5fe028fd4b1dea233a46344b43ad3a3058f0d4c6))
+* **uninstall:** what the end-to-end run found after #2399 (#2401) ([7af0039](https://github.com/event4u-app/agent-config/commit/7af00395b2d7f17caaa8e610c029e9b3aa2ee809))
+* **uninstall:** purge only the files this package recorded writing (#2399) ([b352d9a](https://github.com/event4u-app/agent-config/commit/b352d9ab8d31a19fcedcd8dd4ed0d1d60f1e16b0))
+* **test-gates:** close road-to-unknowns-that-say-so steps 5.1 and 5.4 (#2393) ([bbae275](https://github.com/event4u-app/agent-config/commit/bbae275b229eab9de799143cf07c2a4a84bac5ea))
+* **ratification:** restore the strippable subject calculator and end the danger-gate window (#2387) ([5fa963c](https://github.com/event4u-app/agent-config/commit/5fa963cec5c9801c589d85990a96fc75b3dcc779))
+* **ratification:** gate the subject calculator and retire its pin (stage 2 of 2) (#2386) ([a7de456](https://github.com/event4u-app/agent-config/commit/a7de45670676940d7675d818fdd6bcf45a4baefb))
+* **ratification:** restore the subject calculator to its pinned blob (#2383) ([9a43fab](https://github.com/event4u-app/agent-config/commit/9a43fabe5fddfbd053811e39bd94844746bc6ace))
+* **ratification:** gate the modules the kernel-edit gate's verdict runs through (stage 1 of 2) (#2379) ([a10aa16](https://github.com/event4u-app/agent-config/commit/a10aa16a1fe1a27b7ff54bcb564154a28877625f))
+* **ratification:** classify the dispatcher closure's base side at the named base commit on every run (#2376) ([e789a13](https://github.com/event4u-app/agent-config/commit/e789a13f823ecc0e44ab180f31a694115d64f5a0))
+* **tests:** deliver the stalled-stdout harness through the stream, not fs.writeSync (#2368) ([a139cd6](https://github.com/event4u-app/agent-config/commit/a139cd6bf273499c65695b38ac0843939a17e508))
+* **hooks:** make the plugin's no-dispatcher branch say so (#2360) ([90ed4e6](https://github.com/event4u-app/agent-config/commit/90ed4e697b28a48c6b1ab80f288d9b3310aa36ed))
+* **scripts:** let large-output gates drain stdout before exiting (#2357) ([555e50a](https://github.com/event4u-app/agent-config/commit/555e50a292eb70fa8beeb4b9fb555682f79a471a))
+* **hooks:** re-establish six drifted vendor docs rows and route the next drift to an issue (#2353) ([7a31fa0](https://github.com/event4u-app/agent-config/commit/7a31fa0edeca93272abcf4e754a0b43a2dc25530))
+* **council:** read member CLI output beyond the default spawn buffer (#2348) ([2fa431c](https://github.com/event4u-app/agent-config/commit/2fa431ccee78cc8f4f165a002b23ab464bb65887))
+* **release-drill:** keep step-2 bump writes off the real tree (#2347) ([b75aaeb](https://github.com/event4u-app/agent-config/commit/b75aaeb39c7d2078642f172c65d0b70a226687a4))
+* **closure:** council decides owner-labelled questions before the owner sees one (#2322) ([1a72534](https://github.com/event4u-app/agent-config/commit/1a725343aa47f13195303f9d5b306acd003ee3fb))
+
+### Reverts
+
+* **skills:** keep llm-provider-knowledge triggers at the pinned corpus bytes ([78c0df7](https://github.com/event4u-app/agent-config/commit/78c0df72c14e5705fad228ecf041f8abb9abe706))
+* **hooks:** withdraw the speaking-inbox guard change the council refused 2/2 ([37f0be5](https://github.com/event4u-app/agent-config/commit/37f0be502766f119eb964499c4d54309687e5007))
 
 ### Documentation
 
-* **roadmaps:** close three prerequisites that were performed but never ticked (#2291) ([c393d6b](https://github.com/event4u-app/agent-config/commit/c393d6b244ff3031d46345ebb24b3fd2ffc6611e))
-* **roadmaps:** mark the three Phase-3 steps that share one gate, and refuse to mark two that do not (#2290) ([05329ba](https://github.com/event4u-app/agent-config/commit/05329ba488e7fcf98a93bf2a2df4d4162d013d54))
-* **roadmaps:** measure all five open acceptance criteria instead of assuming them (#2289) ([70bd51a](https://github.com/event4u-app/agent-config/commit/70bd51a8a1221e56cb8a15648282cb31b0b4ce97))
-* **roadmaps:** a sixth reading of three stable negatives, and one rejected substitution (#2287) ([ebefcdc](https://github.com/event4u-app/agent-config/commit/ebefcdc1f0d35d0a7ca5044d33605d4b3247b679))
-* **roadmaps:** the gate refused a comment, which answers the phase block (#2285) ([6715878](https://github.com/event4u-app/agent-config/commit/6715878859af7cd20fcac76855c4c4158b57edf3))
-* **roadmaps:** Phase 1 was done except for three notes nobody wrote (#2284) ([5280e89](https://github.com/event4u-app/agent-config/commit/5280e8912ab480799e433d37df2d402b5b10b791))
-* **roadmaps:** Phase 2 waits on a cancelled instrument, not on a machine (#2282) ([0f6209e](https://github.com/event4u-app/agent-config/commit/0f6209e8eb436f0ffcc679a34663dc6675c1bf8b))
-* **roadmaps:** close 3.2 by council re-scope, and name the accrual trap I hit (#2281) ([d6e75f4](https://github.com/event4u-app/agent-config/commit/d6e75f45fa086dca62f953966479569fd54b93b2))
-* **adr:** amend ADR-281 so a council recommends passage, never grants it (#2257) ([f76e83e](https://github.com/event4u-app/agent-config/commit/f76e83e47cdb823e37c96f4bbd16e53bc5c24c04))
-* **governance:** ADR-281 and the texts it corrects (partial, self-modification roadmap) (#2251) ([82a131f](https://github.com/event4u-app/agent-config/commit/82a131feb5f6309365c962d272e9362ec9820c53))
-* **council:** ADR-281 and the authority-routing decision cannot both stand (#2255) ([61cd5b7](https://github.com/event4u-app/agent-config/commit/61cd5b7ad6a6851f99e97405a20c1e8a9ea61607))
-* **council:** record the authority-routing decision — ratified, 2 of 2 seats (#2253) ([0009ecd](https://github.com/event4u-app/agent-config/commit/0009ecd7c1f0d8f9659dd0ab249414879015b20e))
-* **roadmaps:** close road-to-leading-every-row on the owner's answers and ADR-280 (#2237) ([adaad0a](https://github.com/event4u-app/agent-config/commit/adaad0aa2afd216767bf31404f533beb9393c5c8))
-* **roadmap:** record that the two kernel-held rule links are human-gated (#2236) ([8510ebc](https://github.com/event4u-app/agent-config/commit/8510ebc995d224b1d353eb5042887905b7b16533))
-* **roadmaps:** park the opencode probe and restore the risk-register gate on main (#2229) ([c267eae](https://github.com/event4u-app/agent-config/commit/c267eaef62b49abb38730734509d1a39f1a3d788))
-* **roadmaps:** land inbox-2026-10-e as ten ready roadmaps (#2225) ([0c86ad9](https://github.com/event4u-app/agent-config/commit/0c86ad98fb540e3be196cdead4dcf98a49b03492))
-* **roadmaps:** record the owner's answers to eleven open blockers (#2222) ([a75bb32](https://github.com/event4u-app/agent-config/commit/a75bb32106f695d006aa67f9ffc8185afb54faad))
-* **evidence:** publish the shadow readings the release window opened, and carry 2.3 (#2217) ([2bb3a1a](https://github.com/event4u-app/agent-config/commit/2bb3a1a03d50a58a374f4f6d7600147e930a523e))
-* **roadmaps:** park menu-precision on a two-branch wake after a fourth null probe (#2215) ([f3cc5db](https://github.com/event4u-app/agent-config/commit/f3cc5db98ae15c744a990731f19b88a2508a60a3))
-* **roadmaps:** settle four of seven blockers on road-to-leading-every-row (#2214) ([2bf1067](https://github.com/event4u-app/agent-config/commit/2bf10671424cb09adb179c50512577d7b6b79a52))
+* **decisions:** admit the host-rate-marker concern ([8bb61b5](https://github.com/event4u-app/agent-config/commit/8bb61b5e5d7c97379af412ba30bc9fccdabac36f))
+* **roadmaps:** cold-start claims the one concern its step 4.3 adds ([053ac1e](https://github.com/event4u-app/agent-config/commit/053ac1e63ff6f6e7f5e2005dadd4bc05e76eb9fd))
+* **roadmaps:** re-review the cold-start and one-detector risk registers ([7e786f5](https://github.com/event4u-app/agent-config/commit/7e786f5ee75cd845240b0fcd2677c266b20d86d7))
+* **roadmaps:** close one-detector 2.3, 2.5, 2.6, 3.3, AC-1 and AC-2 ([c862ea4](https://github.com/event4u-app/agent-config/commit/c862ea4f420ceeb16b2545b5296cfe14d61a9913))
+* **evidence:** ratification of the branch's gated hook plumbing, 2/2 after three rounds ([787f8a3](https://github.com/event4u-app/agent-config/commit/787f8a3ec0acda1a25e3ddbf7f46e720a8546074))
+* **evidence:** commit the ratification round-3 prompt verbatim ([5f3c5be](https://github.com/event4u-app/agent-config/commit/5f3c5be58790db96b178c44fa67ab5fa200961f1))
+* **roadmaps:** cold-start 3.6 note fits the complexity cap ([f3534c4](https://github.com/event4u-app/agent-config/commit/f3534c490aa977cff6d37f5be991be525ccc22d0))
+* **roadmaps:** cold-start 3.3 records the name digest; 3.6 owes an indexed register before a flip ([166991b](https://github.com/event4u-app/agent-config/commit/166991b86be490ae600fab9bdbae8384d8d6f71b))
+* **evidence:** commit the ratification round-2 prompt verbatim ([4719956](https://github.com/event4u-app/agent-config/commit/4719956bf4f908f8ee8cd756e6568012aef9510b))
+* **hooks:** reconcile the engine chunk measurement and say rate_limit is unobserved ([be08dc0](https://github.com/event4u-app/agent-config/commit/be08dc0b678218b788cb72ce390b8ac19d0e6107))
+* **evidence:** commit the ratification round-1 prompt verbatim ([cd57650](https://github.com/event4u-app/agent-config/commit/cd57650c3751559187435e6e8b53b06a5f3dabfd))
+* **roadmaps:** free-hands 1.2 names egress_credential_env.ts ([e9e658c](https://github.com/event4u-app/agent-config/commit/e9e658cba69af2988d44db362ea5b8e603ec7516))
+* **hosts:** Claude Code binds ten lifecycle slots since StopFailure ([835716a](https://github.com/event4u-app/agent-config/commit/835716a6d6ac645c4aeb1bc4c8cbf68ff06ad07e))
+* **egress:** the route catalogue's /models discovery joins the sender census ([198e176](https://github.com/event4u-app/agent-config/commit/198e17629fe7be5d57a8803118fd8cf4b16c13cf))
+* **evidence:** type the owner-blocker council question ([ae861da](https://github.com/event4u-app/agent-config/commit/ae861da112fe5c8189b981837df35e9edfdde8c8))
+* **roadmaps:** close free-hands 5.1-5.3, 6.3 and AC-6; 6.2 built, waiting on its window ([d43c719](https://github.com/event4u-app/agent-config/commit/d43c719e7ccf38b9b962cdfc994072f06921cb85))
+* **council:** route liveness streaks in the base_url route contract (free-hands 5.1) ([5518071](https://github.com/event4u-app/agent-config/commit/5518071217e56b8eb0866fa310c99f9fc277b6ad))
+* **roadmaps:** step evidence fits the complexity cap ([3b1c434](https://github.com/event4u-app/agent-config/commit/3b1c434e27b08dc448de77c84700c5eb59a56f7d))
+* **roadmaps:** free-hands 3.6 names the paid-route exposure question as an owner item ([9583254](https://github.com/event4u-app/agent-config/commit/9583254c5ed110c4828cd3495d70a4317c71d348))
+* **roadmaps:** close free-hands 2.2-2.5, 3.1-3.6, 4.1-4.3, 6.1, 7.1 and five acceptance criteria ([c6f9eb2](https://github.com/event4u-app/agent-config/commit/c6f9eb2060386e3036ae7b9bf70eba018937c08e))
+* **roadmaps:** close cold-start 3.3, 4.3, 4.5, 5.2, 5.3 and six acceptance criteria ([aaf8c99](https://github.com/event4u-app/agent-config/commit/aaf8c99cc1096ff60c5c043caea9ad1bdc545e40))
+* **council:** describe base_url route members ([b64e3ef](https://github.com/event4u-app/agent-config/commit/b64e3ef140dc544b722536ad5a32b22cc02a3222))
+* **claims:** pre-register free-jury-effective-independence, free-hands-limit-relief and free-hands-quality-held ([25df57a](https://github.com/event4u-app/agent-config/commit/25df57a81477eaf7455195cce98a8ca5a11e8cdb))
+* **roadmaps:** cold-start 3.5 and 3.6 built, waiting on the shadow window ([9a613e4](https://github.com/event4u-app/agent-config/commit/9a613e4d35dbf35835ec03993a5e9401a6f4f508))
+* **egress:** commit the round-6 ratification prompt verbatim ([c63c854](https://github.com/event4u-app/agent-config/commit/c63c85441eecacb4a0f9e05ad382e9e8cae90cda))
+* **roadmaps:** close free-hands 2.1 ([458275c](https://github.com/event4u-app/agent-config/commit/458275c9608608b0c0556e0ceaf7428037a7709c))
+* **roadmaps:** close free-hands 1.3 ([0a930e6](https://github.com/event4u-app/agent-config/commit/0a930e6c4703ed7dd4844d82b8322f51b62fcfde))
+* **egress:** commit the round-5 ratification prompt verbatim ([c6d61d5](https://github.com/event4u-app/agent-config/commit/c6d61d589b191c2a63dedfdda4ec1b46df89f83b))
+* **roadmaps:** close tier 3.2 and AC-1 to AC-6 ([25d323c](https://github.com/event4u-app/agent-config/commit/25d323c3b95969207ab325229416e2cb5354a6b2))
+* **evidence:** the advisor pairing run is a recorded null (tier 3.2) ([23428d8](https://github.com/event4u-app/agent-config/commit/23428d8b20a84246c7897954f614f9bdf5cab149))
+* **egress:** commit the round-4 ratification prompt verbatim ([ef09b25](https://github.com/event4u-app/agent-config/commit/ef09b25f20f14024acf943c8fc2b446f4af541b6))
+* **egress:** commit the round-3 ratification prompt verbatim ([372cea3](https://github.com/event4u-app/agent-config/commit/372cea38223b0a4d0e67d98a48be27843e92de2c))
+* **egress:** commit the round-2 ratification prompt verbatim ([3dc8350](https://github.com/event4u-app/agent-config/commit/3dc83504c55381bfc3ed185c636e511d210fce06))
+* **egress:** name how each credential-only reader reads, and why 2.7 precedes 3.3 ([5f12233](https://github.com/event4u-app/agent-config/commit/5f1223392aef7a05466e716fd23b51764bab0381))
+* **egress:** contract and roadmap for 1.2, 2.3, 2.4, 2.5 and 3.2 ([0721e39](https://github.com/event4u-app/agent-config/commit/0721e39091535e60b13c9b2457e9666c70af2819))
+* **roadmaps:** close free-hands 1.2 ([0541883](https://github.com/event4u-app/agent-config/commit/054188396de723e649cdfb95499c00ccd45bc5d6))
+* **roadmaps:** close free-hands 1.1 ([d811e5b](https://github.com/event4u-app/agent-config/commit/d811e5bc11022e1eb5710740bf4fd50b45e3aa72))
+* **roadmaps:** close free-hands 0.2 ([88fd495](https://github.com/event4u-app/agent-config/commit/88fd49569b601d8f44dc9bc38a4aada45706713b))
+* **roadmaps:** close free-hands 0.1 ([fe74027](https://github.com/event4u-app/agent-config/commit/fe740272fd98fb845f38dc82e0dd654097892ec3))
+* **evidence:** classify the canary's uniform zero (free-hands 0.1) ([15d00c9](https://github.com/event4u-app/agent-config/commit/15d00c94204361ba41f0c9bb8601fe58971fbd0b))
+* **roadmaps:** council defaults for the three owner blockers; close tier 2.2, 2.3, 4.4 ([4b00985](https://github.com/event4u-app/agent-config/commit/4b009857dc7d2c5fb0e777dacba1c3db399d39c5))
+* **evidence:** the tier-downshift paired run, 60 pairs (tier 2.2) ([573393f](https://github.com/event4u-app/agent-config/commit/573393fd0fa5a8359bf98e5945451b0d879cdf2c))
+* **claims:** pre-register the advisor pairing claim (tier 3.2) ([a8ac989](https://github.com/event4u-app/agent-config/commit/a8ac989ea3631e6f2864c3cd4f3f84aef0ea3654))
+* **roadmaps:** close tier 3.1 ([c52d26f](https://github.com/event4u-app/agent-config/commit/c52d26fa854e970acc838fd8a7a26cd10127186f))
+* **evidence:** a dispatched worker can run with an advisor on 2.1.308 (tier 3.1) ([f3a3b4d](https://github.com/event4u-app/agent-config/commit/f3a3b4dcc7a28f077a441d136d4cfa8276a5db25))
+* **roadmaps:** close tier 2.1 ([f4e20ba](https://github.com/event4u-app/agent-config/commit/f4e20ba12f15afb11b3fee54a21a15fa64b738d6))
+* **claims:** pre-register the two tier-downshift claims (tier 2.1) ([e61a0db](https://github.com/event4u-app/agent-config/commit/e61a0db79c926a7c381807ca0853b9419fe9dc72))
+* **roadmaps:** close tier 1.3 ([c3bcf6d](https://github.com/event4u-app/agent-config/commit/c3bcf6d99f4aaa021bd44bca06d25f7bc053c913))
+* **roadmaps:** close tier 1.2 ([48e6a34](https://github.com/event4u-app/agent-config/commit/48e6a343d8bd44ca5e8b932188adeb1d5b666e18))
+* **roadmaps:** close tier 1.1 ([6c78380](https://github.com/event4u-app/agent-config/commit/6c783806b84cfa3485329034f5040328b05884a9))
+* **roadmaps:** close tier 0.1 and 0.2 ([a2bc18e](https://github.com/event4u-app/agent-config/commit/a2bc18eb94669f783750e8169b7c435b9c115c75))
+* **evidence:** tier realisation over 14 days and the per-call model probe (tier 0.1, 0.2) ([7042888](https://github.com/event4u-app/agent-config/commit/70428884f15a0cadc7d6846754d961fc01664481))
+* **roadmaps:** close cold-start 5.1 ([5de4c73](https://github.com/event4u-app/agent-config/commit/5de4c73626e5fb6a91ecf5d58fc449a7efb274d5))
+* **roadmaps:** close cold-start 2.5 and 6.5 ([fdc91fe](https://github.com/event4u-app/agent-config/commit/fdc91febe7f1cd8eb06350eba7b8773cc399a7d7))
+* **evidence:** hand the skip reading to the per-spawn standing report (cold-start 6.5) ([5e390f6](https://github.com/event4u-app/agent-config/commit/5e390f63ab840bf3496123ae1f486e735aa8322e))
+* **roadmaps:** loopback is a precondition, not proof; the canary may refuse (#2584) ([5653d32](https://github.com/event4u-app/agent-config/commit/5653d32f328a155710f49c364c1a8a9d1317b696))
+* **roadmaps:** a tier the dispatch carries, folded into the #2582 free-hands plan (#2583) ([43a0cb2](https://github.com/event4u-app/agent-config/commit/43a0cb20ec3356ea00591ddc66f731d22d9b8cf7))
+* **roadmaps:** free routes as bounded hands, seat failure classes, host inputs, workflow floors (#2582) ([01ae122](https://github.com/event4u-app/agent-config/commit/01ae122acbbaac8fdf11b968b59f9dbcb877e53e))
+* **placeholders:** record three review rounds on the rewrite path and the reverted change (#2560) ([ee183b7](https://github.com/event4u-app/agent-config/commit/ee183b7a4804c359a2789030fde970cb32e7ba6e))
+* **evidence:** observe resume admission, the skip flag and named spawns on 2.1.306 (#2554) ([3d3a357](https://github.com/event4u-app/agent-config/commit/3d3a3576fc1a0fd6eef18fb561b8937732e79c37))
+* **evidence:** probe Claude Code 2.1.304 rewrite channels and record one release of observe readings (#2530) ([8e23f81](https://github.com/event4u-app/agent-config/commit/8e23f812572e5477d038a951a5369944473a2884))
+* **review:** rebind the R2 findings after the verify-clause fix ([8d78347](https://github.com/event4u-app/agent-config/commit/8d78347cf87a04d0fced19cc558cb63d339d0bf1))
+* **roadmap:** verify clauses state an oracle the gate can read ([6267d59](https://github.com/event4u-app/agent-config/commit/6267d594d39fd22b0adb108cf84286fdb6569fba))
+* **review:** rebind the R2 findings after the skill-ceiling fix ([81a27c1](https://github.com/event4u-app/agent-config/commit/81a27c103ba8d86956e0b94e589a34317e63f511))
+* **review:** bind the R2 findings to the re-applied fix commit ([abf07a5](https://github.com/event4u-app/agent-config/commit/abf07a5d81b8b4c41f1415a104c3ba9dda29d08d))
+* **review:** R2 completion review for the blocker-routing change, nine findings dispositioned ([7929df8](https://github.com/event4u-app/agent-config/commit/7929df85836969d7555588e80a949432a6494295))
+* **roadmap:** close two blockers the tree settled, archive the routing roadmap ([981b285](https://github.com/event4u-app/agent-config/commit/981b285139982bcb341a599d0e98f0490e586356))
+* **roadmap:** close the replay blocker its own Resolved-when already settled (#2523) ([88efaa5](https://github.com/event4u-app/agent-config/commit/88efaa56822c821730931c9c1d0c9e703c9e949d))
+* **roadmap:** blocker causes measured, plan to route blockers before filing ([f511892](https://github.com/event4u-app/agent-config/commit/f51189289124c7697bada6a2db07938a5a9e2261))
+* **roadmap:** close 3.1 and 6.3, record the 0.2 and 0.3 probe rounds ([51cacf1](https://github.com/event4u-app/agent-config/commit/51cacf14c04990113c8e90d985a3d62928b4a6d9))
+* **roadmap:** authority routing — classification taxonomy round and the owed AC-4 widening (#2511) ([97393d8](https://github.com/event4u-app/agent-config/commit/97393d8479972f60a024cdb30282f7d3e4e5b139))
+* **roadmap:** reopen Phase 3 after the council refused the guard change ([6cfbfe3](https://github.com/event4u-app/agent-config/commit/6cfbfe32edffb83b552bbeb9d5668431cd73c6e7))
+* **evidence:** record the speaking-inbox guard review, refused 2/2 — prompt, both seat texts, the record ([56ce772](https://github.com/event4u-app/agent-config/commit/56ce772f3dd245d6b57092997034248e416eed7e))
+* **roadmap:** close Phase 3 of road-to-gates-that-read-what-was-written ([0c32dc7](https://github.com/event4u-app/agent-config/commit/0c32dc78dab4230eb1a59680eb9fe1db04881fc6))
+* screen Phase 7 of the authority-routing roadmap (#2475) ([9f1abaf](https://github.com/event4u-app/agent-config/commit/9f1abaf577a1cf5c3396f3777245bfc26c89fcb5))
+* record what Codex reads of the global install (#2474) ([ee1c771](https://github.com/event4u-app/agent-config/commit/ee1c77192d160fb61a7558c99d89cc179b3d7b87))
+* **roadmap:** record the 2026-10-18 screen of tool results that leave a handle (#2456) ([324a230](https://github.com/event4u-app/agent-config/commit/324a230ade7cedb4955393152c2e4b86e987ad1e))
+* **roadmap:** screen every open throughput step, and record 4.3's blocker (#2451) ([d4675ef](https://github.com/event4u-app/agent-config/commit/d4675ef29c5c3f2e7ac02f4cf4937069ada8d868))
+* **roadmap:** route Phase 4 and 5 through the council and re-open the pilot pick (#2452) ([1600f78](https://github.com/event4u-app/agent-config/commit/1600f782d800e48a4c9568de8a31c65b3174a25e))
+* **roadmap:** close AC-8 and archive road-to-truthful-surfaces (#2446) ([8d7d0d7](https://github.com/event4u-app/agent-config/commit/8d7d0d7e8341c1ff504d3d9af521560019d67fc2))
+* **roadmap:** say why no agent lane can close the rest of self-modification (#2443) ([5cc0841](https://github.com/event4u-app/agent-config/commit/5cc0841dfa460a42a33e444ba8e17353b6e722e5))
+* **roadmap:** re-measure the 16 live-tree checks for authority-routing 7.1 (#2437) ([5a9f563](https://github.com/event4u-app/agent-config/commit/5a9f563056840cb0384e01e5c801d04709a8b5f2))
+* **retro:** file the owner directive and write the retro v1 contract (#2413) ([fe7a22c](https://github.com/event4u-app/agent-config/commit/fe7a22c6d6a36750e256e31748b0dc70e1b19d71))
+* **adr:** ADR-287 — the estate shrinks by finishing, not by capping (#2405) ([d324067](https://github.com/event4u-app/agent-config/commit/d324067878cb33873d0c6c8c29542eff8bfe2ee6))
+* **typography:** one value per question, font delivery mechanics, counter rule, registry intake (#2404) ([7686dbf](https://github.com/event4u-app/agent-config/commit/7686dbfa8a0b9b4948db2d33d6e2cd7736452538))
+* **runtime-classes:** classify the request gateway before it is built (#2402) ([8f22f6b](https://github.com/event4u-app/agent-config/commit/8f22f6b7aad28b5559efc117fb1efbbec4c25e6f))
+* **adr:** ADR-286 — discoverability is a goal, asking is not (#2395) ([26c06ae](https://github.com/event4u-app/agent-config/commit/26c06aef7fee1af9c8247b605b2744409313e367))
+* **roadmaps:** seven plans from inbox round inbox-2026-10-t (#2391) ([0382c08](https://github.com/event4u-app/agent-config/commit/0382c08855a94f18308d5cbf6038c911a723bff8))
+* **ratification:** the gate's header states which of its paths no hook denies (#2390) ([31a0c61](https://github.com/event4u-app/agent-config/commit/31a0c6181db578bd113abf86e5c382960cb13e9b))
+* **roadmap:** re-screen the installed-layer roadmap with a fresh opt-in measurement (#2389) ([8d0fade](https://github.com/event4u-app/agent-config/commit/8d0fade11eda32aa8e3c8fe5dba430a212b71e3e))
+* **ratification:** record the owner's after-the-fact decision on #2376 (#2380) ([fb5f199](https://github.com/event4u-app/agent-config/commit/fb5f199b82c7adb7b3ec328734be8f9a1e5bc4d8))
+* **roadmaps:** record the owner's four decisions from inbox round inbox-2026-10-s (#2377) ([f998ea3](https://github.com/event4u-app/agent-config/commit/f998ea3b52d9c505f38a85dc235b46759ec4eabc))
+* **roadmaps:** inbox round inbox-2026-10-s — three ready roadmaps (#2373) ([fd29490](https://github.com/event4u-app/agent-config/commit/fd29490204b9abcc097a0baa8dae881176bb57a1))
+* **roadmap:** redesign tool results that leave a handle around a content profile (#2372) ([8716c22](https://github.com/event4u-app/agent-config/commit/8716c227665ecc4508879dde1c89b063c94522e3))
+* **roadmaps:** record why placeholders-on-the-wire Phase 1 cannot start yet (#2364) ([be11ed6](https://github.com/event4u-app/agent-config/commit/be11ed686855e74d800c338619fe31e08cb49875))
+* **roadmaps:** record why tool-results-handle cannot start yet (#2362) ([13c13e4](https://github.com/event4u-app/agent-config/commit/13c13e40031ee24c6a3b26e16d3fbfea02f74ba8))
+* state the SKILL.md format instead of claiming standard conformance (#2350) ([0e0d95c](https://github.com/event4u-app/agent-config/commit/0e0d95c8481fb8cccba843e3b1a80ff056cfca36))
+* **evidence:** a project skillOverrides value beats a user value (#2349) ([7b236a0](https://github.com/event4u-app/agent-config/commit/7b236a00f0e7166a31f69c8db446278e130bced5))
+* **roadmaps:** close 6.1 on the calendar, and mark what shares the Phase 2-3 gate (#2314) ([5673eff](https://github.com/event4u-app/agent-config/commit/5673effeff9b4288444f1286a1327082ef352ca4))
+
+### Refactoring
+
+* **council:** the seat launch environment moves out of clients.ts ([fb0a5e7](https://github.com/event4u-app/agent-config/commit/fb0a5e72cc3cb70efc31106829538a67bacb52f7))
+* **council:** one provider table (free-hands 2.1) ([09507c1](https://github.com/event4u-app/agent-config/commit/09507c15103c7c4cf5582ad213555ec13f5f02f9))
 
 ### Tests
 
-* **harvest:** re-derive the census pin after two sanctioned provenance tokens (#2224) ([d3973a8](https://github.com/event4u-app/agent-config/commit/d3973a86a13e3e101e3a018ae0567bf2099fd71d))
+* **egress:** the store-redaction test moves out of the shipped tree ([b48e33b](https://github.com/event4u-app/agent-config/commit/b48e33b53b7e52fc93b99b2b9333e0238e640c0b))
+* **spawn-guard:** payload bodies and the raw agent id never reach the ledger ([ef3b951](https://github.com/event4u-app/agent-config/commit/ef3b951c2a7958c0e0d8b494b50f0f76243acc4e))
+* **worker-reuse:** type the spawn helper's reuse as present ([38bbdf9](https://github.com/event4u-app/agent-config/commit/38bbdf919bd00926bc239fbd883137a4a6d47aa3))
+* **council:** pin the self-hosted route's probe gate ([15d021b](https://github.com/event4u-app/agent-config/commit/15d021b4a28d49c9e1e948b5bddb0fee9cbe0b30))
+* **egress:** the F1 sample leaves with five placeholders; the canary is shown sensitive (one-detector 3.3) ([34b0f37](https://github.com/event4u-app/agent-config/commit/34b0f37d698a345928463d04ad31042bf9f42392))
+* **egress:** the IBAN checksum mutation joins the mutation suite (one-detector 2.6) ([8332c8b](https://github.com/event4u-app/agent-config/commit/8332c8be015a6869ba95ab2ea7f84aa9ba408659))
+* **egress:** compact NANP and deliberate losses run through both stores ([925c4e1](https://github.com/event4u-app/agent-config/commit/925c4e19d53ecef464d24982196b47ff2565ba02))
+* **subagents:** ac-researcher's tier follows the backed claims (tier 2.3 gate) ([6935b7a](https://github.com/event4u-app/agent-config/commit/6935b7ae51339709a1f2b29b46cdab6a7d3fd40f))
+* **probes:** record the second host's skill-listing behaviour ([5378bdc](https://github.com/event4u-app/agent-config/commit/5378bdc6ff5243f88d768b3aefa0dfdb0fa9db3b))
+* **install:** back hook-dispatch-latency with a real-install harness case (#2480) ([2950094](https://github.com/event4u-app/agent-config/commit/2950094566ea720cba6adc8929f705ffc3666f26))
+* **install:** back two consumer claims with real-install harness cases (#2459) ([97421e8](https://github.com/event4u-app/agent-config/commit/97421e883caf74f163b0b4a892b96cac228132f8))
+* **egress:** prove the stage counted the credential in the same dispatch (#2426) ([0122c02](https://github.com/event4u-app/agent-config/commit/0122c02f9aec04c1581bd3473faf94b25d312187))
+* **merge:** skip the strip-types danger-gate test exactly while the pinned blob is in place (#2384) ([9b6ff1a](https://github.com/event4u-app/agent-config/commit/9b6ff1a5b3d1f5572670f4b1c1d091441065b9cd))
+* ratchet consumer-fragile npx tsx invocations and pin the release-e2e selector refusal (#2369) ([94f9143](https://github.com/event4u-app/agent-config/commit/94f91431abaabae256b3ecbd616014449add99b0))
+
+### CI
+
+* green in minutes — four CI-speed roadmaps, executed (#2577) ([e6d0652](https://github.com/event4u-app/agent-config/commit/e6d0652c4283596f33afed201b9d3a032373d430))
+* **drain:** wire step 2.2's residue (2.2f) (#2410) ([4a5ac1a](https://github.com/event4u-app/agent-config/commit/4a5ac1a59c6bdccedd60b65583bd5bf8204e8bb7))
+* **drain:** wire step 2.2's fifth batch, the last of the wire-class window (2.2e) (#2406) ([00b23ab](https://github.com/event4u-app/agent-config/commit/00b23aba3d1085620ad7fd8b4049161990eff21c))
+* **drain:** wire step 2.2's fourth batch of local-only gates (2.2d) (#2400) ([a5cef31](https://github.com/event4u-app/agent-config/commit/a5cef31e1673842ee26ec4d0daf63dde60321b06))
+* **drain:** wire step 2.2's third batch of local-only gates (2.2c) (#2388) ([b174141](https://github.com/event4u-app/agent-config/commit/b17414109f933d0d241c63e40f826dab5c517b4d))
+* **drain:** wire step 2.2's second batch of local-only gates (2.2b) (#2385) ([433d3eb](https://github.com/event4u-app/agent-config/commit/433d3ebc5b578b7284eea2f1589d6b993ce30b35))
 
 ### Chores
 
-* **roadmaps:** park the rule-triggers roadmap on two human-gated events (#2276) ([9be2b6f](https://github.com/event4u-app/agent-config/commit/9be2b6fad97389eb29ad5f24f561d04e45dacf56))
-* **roadmaps:** park the two owner-blocked drafts in later/ (#2271) ([717aba6](https://github.com/event4u-app/agent-config/commit/717aba62a59685eca54515221e6165bae743dc05))
-* **roadmaps:** archive the settings-classes stagnation roadmap (#2270) ([dd80cbe](https://github.com/event4u-app/agent-config/commit/dd80cbe5ce2f5aa3bb3a833a1d21d1f12a898126))
-* **gates:** reaffirm the derivable-settings baseline after a drain that found nothing (#2268) ([6d603d9](https://github.com/event4u-app/agent-config/commit/6d603d93ecff326e9fc5c49d97dcd3f878bfb4af))
-* **roadmaps:** close and archive road-to-enforcement-per-obligation (#2263) ([ebd8adc](https://github.com/event4u-app/agent-config/commit/ebd8adc37fbcd9ca334f2930653460d26f86437c))
-* **roadmaps:** close and archive road-to-signals-that-mean-what-they-say (#2260) ([bacc2a0](https://github.com/event4u-app/agent-config/commit/bacc2a0dcaee3cab3864b1bb3cd11cc8f6aad4cf))
-* **roadmaps:** archive the neighbours lane and carry its two deferred steps (#2259) ([7dc88a6](https://github.com/event4u-app/agent-config/commit/7dc88a61aae1b75026c14640817f76d18f739fa2))
-* **roadmaps:** park road-to-learning-you-can-see-carried, and publish the reading that moved it (#2221) ([fcd5b9e](https://github.com/event4u-app/agent-config/commit/fcd5b9e0b27307444c15140a6ac56a965654fe2c))
-* **roadmaps:** park road-to-stacks-beyond-php behind owner blocker b5 (#2220) ([d47793a](https://github.com/event4u-app/agent-config/commit/d47793a787dd3c61c4287194be8138e6c624bf6f))
-* **roadmaps:** settle producible-vs-elapsed for the user_prompt_submit timeout and park host-claims-carried (#2218) ([763bc12](https://github.com/event4u-app/agent-config/commit/763bc121c24615027a01811322b73590845a85ad))
+* **egress:** mark the canary's synthetic credentials as audited false positives ([85f74c9](https://github.com/event4u-app/agent-config/commit/85f74c9465ba2685ca9e2abb1135d5229e4f987f))
+* **dist:** project the restored llm-provider-knowledge triggers ([88bd5ff](https://github.com/event4u-app/agent-config/commit/88bd5ffe33cd82ee77abf56acbc0b91da9450929))
+* **budget:** source-size baseline lowered to the live total 17,358 ([9779d46](https://github.com/event4u-app/agent-config/commit/9779d460a169fa4bf9a8d0c60b32a6c2ca260008))
+* **plugin:** regenerate hooks/hooks.json for the StopFailure binding ([5df71aa](https://github.com/event4u-app/agent-config/commit/5df71aacd6e8eb2eaf1c3cfb5fb0194e3e5cb0cd))
+* **budget:** the egress engine chunk ceiling moves 28,000 -> 32,000 B ([11cc54f](https://github.com/event4u-app/agent-config/commit/11cc54fd4529bac9a59274c7944b0d3933032cb6))
+* **roadmaps:** track the 17.0.0 follow-up findings (#2581) ([447f8fd](https://github.com/event4u-app/agent-config/commit/447f8fd289fc65a81a3e8715f514b2ec9ba1ee6c))
+* **roadmaps:** park road-to-a-canvas-the-code-owns in later/ (#2535) ([6792887](https://github.com/event4u-app/agent-config/commit/67928878b24719d517473c286b449c763f30e476))
+* **roadmap:** park road-to-an-intake-the-queue-can-carry until its window opens ([253793c](https://github.com/event4u-app/agent-config/commit/253793cad57a77e616372ce398a636a5c5744a94))
+* **gates:** lower ci-parity local-only baseline to 104 after batch 2.2a (#2358) ([5a5a71f](https://github.com/event4u-app/agent-config/commit/5a5a71f30649d0b058d24bf835c9abbb0ebb3040))
+* **deps:** bump the github-actions group across 1 directory with 2 updates (#2318) ([013e864](https://github.com/event4u-app/agent-config/commit/013e864cacd9ef5c4abf16839279115adbac57a7))
+* **roadmap:** reopen three parked criteria whose ladder evidence was removed (#2351) ([55782c2](https://github.com/event4u-app/agent-config/commit/55782c2533da8a2b4bb11659404615c31b504806))
 
 ### Other
 
-* The modification review — its questions, how a seat closes, how the verdict follows (#2292) ([bbe5b73](https://github.com/event4u-app/agent-config/commit/bbe5b73be4f06faa528d494a271d2c8b21e28bb2))
-* Occasion 3 of 4 — one row corrected, one correction declined (#2288) ([0fd09eb](https://github.com/event4u-app/agent-config/commit/0fd09ebe3bc1ceb54fe06ea593addf609b46c3be))
-* One step needed no council, the other split and found why (#2286) ([55360bb](https://github.com/event4u-app/agent-config/commit/55360bb87e794f8b8e6fd03134c05e1791aa2a66))
-* Four law headings went to a council; one landed and three were refused (#2279) ([40b74b9](https://github.com/event4u-app/agent-config/commit/40b74b948f40e4875e9c9b4a72080cad04132532))
-* Correct AC-2 to 37: one of the 47 selected keys was not default-neutral (#2278) ([e48f52c](https://github.com/event4u-app/agent-config/commit/e48f52cadf551e411aafdfc65d955d23a6bf8e1f))
-* doctor is offline by default; --online opts the forge read back in (#2277) ([60c129b](https://github.com/event4u-app/agent-config/commit/60c129bfa74224abb86254f79909a715535522c6))
-* Park the graph-feeder roadmap on an accrual wait its own repository cannot end (#2275) ([737f0d6](https://github.com/event4u-app/agent-config/commit/737f0d6633d52e51e3eb90115b17bfdc865eb43d))
-* Close the pack-boundary base-into-narrow mismatch with an advisory edge the gate reads (#2273) ([9ecd663](https://github.com/event4u-app/agent-config/commit/9ecd6639fd8f4b2f02a277a8fe3f565d5783e792))
-* Queue 47 default-neutral settings keys for retirement (#2272) ([9582574](https://github.com/event4u-app/agent-config/commit/958257418b9098ef37be6fc3118c7d4bcbc69861))
-* Resolve 15 roadmap blockers, and run the council before any owner question (#2269) ([6d68417](https://github.com/event4u-app/agent-config/commit/6d6841712de38c4dcd8f5ff4c03bd5acc5b09cd3))
-* Findings that get a disposition: medium security blocks a release, and every 16.3.0 row ends somewhere (#2266) ([bf7ed4f](https://github.com/event4u-app/agent-config/commit/bf7ed4f7559d8bd8827551bee21bf9b768262549))
-* Harden the git convention from #2235: correct in a packed install, safe sync and rebase, and measure-and-propose for undeclared projects (#2258) ([b83bcb1](https://github.com/event4u-app/agent-config/commit/b83bcb19a7d5d649fbb8687c00a5327a2704febe))
-* A team's git convention can be declared: ticket-prefixed commits, branch shape, and rebase instead of merge (#2235) ([0f9c32e](https://github.com/event4u-app/agent-config/commit/0f9c32e260c0e213273da9a448044e4403eac5a2))
-* Re-price the neighbours lane on the tree it will be decided on, and stop its census caches leaking home paths (#2223) ([7cd6563](https://github.com/event4u-app/agent-config/commit/7cd6563a8c038b8bebe21f9b4dc6acda06ea5bc6))
-
-Tests: 27198 (+1310 since 16.3.0)
-
-## [16.3.0](https://github.com/event4u-app/agent-config/compare/16.2.0...16.3.0) (2026-10-05)
+* **tests:** type-only import in the self-hosted route test ([22dd596](https://github.com/event4u-app/agent-config/commit/22dd596af8eea429e4e6ff57556619e759750304))
+* **egress:** PREREG (a) recall and (b) precision for the identifier rows ([1a0c081](https://github.com/event4u-app/agent-config/commit/1a0c081ac97736cb2e600f2133a60419e73664bc))
+* redact the maintainer's home paths from evidence prose (17.0.0 roadmap 5.1, 5.2) (#2574) ([5dcfa13](https://github.com/event4u-app/agent-config/commit/5dcfa13a6c3f44ca19a55666807f16e260b8b02f))
+* Advisories heard the same day, security fixes carried to the merge, worktrees that leave after it (#2568) ([8f47545](https://github.com/event4u-app/agent-config/commit/8f4754512d079796cbf8247c20f2aeb45cdf228c))
+* The update concerns' code, hardened and unregistered: eleven council rounds, two delivery gaps named (#2545) ([7aa764a](https://github.com/event4u-app/agent-config/commit/7aa764a899e27f595cb74ae4baa2e74b61dd9ef5))
+* The content classifier lands, the tool-output store waits for a real lock: eighteen refusals recorded (#2527) ([095e785](https://github.com/event4u-app/agent-config/commit/095e7855409cf4f564821933d6187dd6f6576b1b))
+* Advisories heard the same day, fixes carried to the merge, worktrees that leave after it: three ready roadmaps (#2564) ([d02445d](https://github.com/event4u-app/agent-config/commit/d02445d1664d4c60a41d5250913a4fef5788996f))
+* Self-modification: 6.1 landed; 5.2, 3.4 and 6.2 reviewed, refused by a split council, recorded for the owner (#2563) ([56395be](https://github.com/event4u-app/agent-config/commit/56395bebfab22e36019fb5961ec82762c5cbc86f))
+* A review that ends after five passes, a depth flip on structurally safe paths: both owner decisions applied (#2557) ([324969e](https://github.com/event4u-app/agent-config/commit/324969e7ebe1eeda7c75fdc9c54a21b248c61781))
+* One detector and the senders we own: concern injections pass the engine, and 21 commits that nearly went missing (#2550) ([ebf1b31](https://github.com/event4u-app/agent-config/commit/ebf1b313b2f09cad4a84ea9a7e96d29d6304b48c))
+* A retro the merge runs: the daily probe at session start, and the switch ratified on its own (#2561) ([8a2c3b4](https://github.com/event4u-app/agent-config/commit/8a2c3b4168f0d33d74d61f5c38a9e948dfcad7b2))
+* A setup that decides itself: Phase 4 removes the keys, and nothing reads them (#2532) ([d8f5590](https://github.com/event4u-app/agent-config/commit/d8f5590f3b6186810cd4f0702b17d1bed9b49e1e))
+* Gates that read what was written: the speaking-inbox deny hint says what the guard recognizes (#2559) ([cbf2b77](https://github.com/event4u-app/agent-config/commit/cbf2b7762d031ef21b1b65eaf1b81913ad3441ee))
+* Breadth with depth: the directive in the tree before the next release (#2562) ([42b70dc](https://github.com/event4u-app/agent-config/commit/42b70dca986103b3c0f390789d700a818c1032a7))
+* Release-impact roadmap: drain re-screen, owner residue unchanged (#2558) ([dbe588f](https://github.com/event4u-app/agent-config/commit/dbe588f630f0f57176568a61a524b4ac25850a3d))
+* Install and hook runtime: foreign skills are not ours, a global dry run shows the global plan, and a fresh worktree's hooks run (#2553) ([4338b2e](https://github.com/event4u-app/agent-config/commit/4338b2e3ab3a56f41721decf4452757f0a8be523))
+* Cold start paid once: skip-flag brief fixture, cap docs for resumes, and the 3.3 council record (#2556) ([5200f6b](https://github.com/event4u-app/agent-config/commit/5200f6bdfe6cc0c53e8fdbadb57c20064641677a))
+* Test runs that clean up after themselves: a run-scoped scratch root instead of a flooded $TMPDIR (#2552) ([aaaba3a](https://github.com/event4u-app/agent-config/commit/aaaba3a2f033e64320627ea46d701897365536a5))
+* A review that ends, and a step that costs what it changes: two ready roadmaps for the slow-run subject (#2551) ([8d69dea](https://github.com/event4u-app/agent-config/commit/8d69deaf7e1a1edf9a700d71042fc0071c1e1077))
+* Category A stops granting what it cannot prove: hard floor Phase 0, ratified (#2549) ([553e58d](https://github.com/event4u-app/agent-config/commit/553e58dfbbdb76620e427becc20c91f7c657f26e))
+* The source door takes its decided name, the observation slots stay unspent, and the calibration reads zero (#2544) ([32a66d7](https://github.com/event4u-app/agent-config/commit/32a66d76584ac83e60f62e87f62ef9cbee8f7248))
+* A retro the merge runs: one switch, /retro, the merge path and the stores (session-start probe held) (#2541) ([5100656](https://github.com/event4u-app/agent-config/commit/5100656c9ee754d95bffb333b5ce34a1644bf83e))
+* Cold start paid once: the rate surfaces observed on 2.1.305, handed to billing-cliff detection (#2546) ([8905fe7](https://github.com/event4u-app/agent-config/commit/8905fe7ef1611514b56eedf38f39e2424710bef6))
+* The release bump rule, scored on the window it was not written on (#2542) ([5ccee9c](https://github.com/event4u-app/agent-config/commit/5ccee9c232579674148c1093279c0fd5043d2bfa))
+* Authority routing 7.1: a drafted truth table for what blocks, and a council round that reached no quorum (#2547) ([7e09579](https://github.com/event4u-app/agent-config/commit/7e09579cb38289642674302229db4c70f9041f02))
+* A refusal that cannot ride its own branch: the tool-output store is recorded as refused (#2543) ([18f66f6](https://github.com/event4u-app/agent-config/commit/18f66f61dfcd52ce09f8ba30f6f8010f25f868a4))
+* Gates that read what was written: quoted lineage parents, and a speaking-inbox guard that probes only what it can place (#2540) ([a2aa408](https://github.com/event4u-app/agent-config/commit/a2aa408abe677f543e84b24b0fe64d9621dc1676))
+* A session learns its own PR merged: live PR state in every prompt (#2539) ([fba00aa](https://github.com/event4u-app/agent-config/commit/fba00aabf450b88fec691c38267e7f5f3557b3ce))
+* Sessions that cannot build the same roadmap twice, a queue that stops counting held work, and lanes that resume where they died (#2538) ([6690d98](https://github.com/event4u-app/agent-config/commit/6690d9877649bef0fd56390b6abbfb1f961b5805))
+* Self-modification 4.2 rebuilt and reviewed five rounds: not passed, reverted, recorded (#2537) ([418a093](https://github.com/event4u-app/agent-config/commit/418a09379d316b6da1dba3302b6d04c1115018a7))
+* Skills that arrive when called: codex reaches every unlisted skill through a finder, and the roadmap closes (#2536) ([e64ecb7](https://github.com/event4u-app/agent-config/commit/e64ecb7b2e6d5f2eb3a11cf9df813ac93cc2c1c9))
+* An update that installs itself only when it is safe: a machine-wide register, a provenance tie, and two concerns the council refused (#2534) ([2349b60](https://github.com/event4u-app/agent-config/commit/2349b605df0a15a3b1eb2d2a1ca3f0e128415aa9))
+* Update that installs itself: a machine-wide session register, a consent key and the ring-0 record land; the session concerns wait on the council (#2533) ([ea1e201](https://github.com/event4u-app/agent-config/commit/ea1e2016327b6885b049a396cb8ed5726eeef748))
+* Throughput recovery: 5.2 closes on its own gate, three holds become blockers, and two of the file's claims were wrong (#2531) ([a0bdb8f](https://github.com/event4u-app/agent-config/commit/a0bdb8f8ba2f491f2ae30117e3cfb078195d3f38))
+* Skills that arrive when called: Phase 3 closes HARM, Phase 4 ships, and the effect read changed 4.1 twice (#2529) ([c43740e](https://github.com/event4u-app/agent-config/commit/c43740e6bd2e4d124f76a564c72b0dd100cfc452))
+* Hook carrier roadmap closed: Pending breaking rows reach the release head (4.1) (#2524) ([5c4d546](https://github.com/event4u-app/agent-config/commit/5c4d546796b704fa5515971c2e6fd3d71a6def3e))
+* Revert "Revert "fix(review): R2 findings on the routing ratchet and the settled closures"" ([1e79ede](https://github.com/event4u-app/agent-config/commit/1e79edea943076459c4c349b0c66443e72cd6dd1))
+* Revert "fix(review): R2 findings on the routing ratchet and the settled closures" ([d536771](https://github.com/event4u-app/agent-config/commit/d536771e5c29f7e29c658e6110f1fb8d280c96a1))
+* Brand the tree can check: 5.5 user style.avoid, roadmap archived (#2526) ([efa1cca](https://github.com/event4u-app/agent-config/commit/efa1cca339ac20c92c548fc6c6104912de3f1a1b))
+* Upstream body from closed fields only; one-upstream roadmap archived (#2525) ([1e885a4](https://github.com/event4u-app/agent-config/commit/1e885a4a2b7038412760ac459d5a7f981719a267))
+* Setup that decides itself: 0.1 per-host layer baseline as a reproducible fixture (#2522) ([220f8af](https://github.com/event4u-app/agent-config/commit/220f8af88d38cabc394da5c20ba16d74912a8147))
+* Blocker sweep follow-up: the three owner answers recorded (#2521) ([221cd5d](https://github.com/event4u-app/agent-config/commit/221cd5ddb6408b7e150341ff34bf9e5132e96130))
+* Setup that decides itself: AC-2 closed on the 3.1 table test, bundle headroom re-measured (#2520) ([61cdf6f](https://github.com/event4u-app/agent-config/commit/61cdf6febe78dd4d3f0e0f31a75406090c535e08))
+* One detector: credential deny rows offered by hooks:doctor, known values, token variants (1.2, 2.4, 3.2) (#2517) ([499c4b4](https://github.com/event4u-app/agent-config/commit/499c4b44564954725ab8da11d13b741a92f384fa))
+* Cold start: the fork premise from the host row, and the rate-limit retry split (ratified, round 10) (#2518) ([7ea8f70](https://github.com/event4u-app/agent-config/commit/7ea8f707d5cdd849ef4335713f864a31368b8789))
+* Throughput recovery: 1.4 and 4.4 closed, the language-refusal split, a paused-night count for 2.1 (#2516) ([80809d5](https://github.com/event4u-app/agent-config/commit/80809d5a045ef4810fe5acd33daf8bd1ec5e21eb))
+* Analysis family: 3.5 replayed and validated, AC-5, stage CLIs, D19 council split (#2512) ([355dbcc](https://github.com/event4u-app/agent-config/commit/355dbcc9f44f0fb99ef9e80ca0028823452fa3da))
+* Blocker sweep 2026-10-19: three decided in council, four recorded, three for the owner (#2515) ([b2904b1](https://github.com/event4u-app/agent-config/commit/b2904b1edfdb86509bacb63fbf5dbe54363e7ba3))
+* Analysis family: the fourth door's caps, the source door's scope, eight criteria closed and four prose holds registered (#2508) ([6a4a295](https://github.com/event4u-app/agent-config/commit/6a4a2956f66ce10b5ceca7c85e15952bbdd77a50))
+* Snapshot fence: the update-snapshots warning reads shell words, not substrings (ratified) (#2509) ([c2cc924](https://github.com/event4u-app/agent-config/commit/c2cc9241a1c57866488ed7702c894abc94900840))
+* The D1 helper-level hold is registered, so the drain screen stops handing out 1.1 and AC-1 (#2510) ([ac69800](https://github.com/event4u-app/agent-config/commit/ac698004da3e850e99939335fbfc9f31a822d483))
+* Brand drain: the opt-in persisted-prose target (5.6), and the two owner decisions this roadmap was carrying as prose (#2503) ([a835846](https://github.com/event4u-app/agent-config/commit/a835846189ab8b868b78071fb76031565f2915cc))
+* Canvas 7.3: the taught baseline line, its corpus and the re-pinned routing measurements (#2502) ([6c84bdf](https://github.com/event4u-app/agent-config/commit/6c84bdfd346717843d6d7452a21894f797fb45b2))
+* The upstream roadmap says which of its open steps are held (#2504) ([c0a271c](https://github.com/event4u-app/agent-config/commit/c0a271cc03b22a59d008c9345333cac1c0f1bac4))
+* Consumer gates 4.1: claims backed where the consumer stands, a measured-in-repo status, archived (#2498) ([4bd0e54](https://github.com/event4u-app/agent-config/commit/4bd0e544a15a799153297905a9f397e2769deeb3))
+* Self-modification 3.4 (split half): the record's header and the run's disposition, from one call (#2499) ([e0df3e1](https://github.com/event4u-app/agent-config/commit/e0df3e1723db4f2d13c0b2d3e82179c304470a3f))
+* Self-modification 4.1 and 4.2 reviewed and refused 2/2: the record, the prompt, both seat texts (#2501) ([d37689f](https://github.com/event4u-app/agent-config/commit/d37689f3f57f72a140b52f9e415fa0a911636486))
+* Installed layer: an environment-independent total (D7), the thinned exposure state (2.4), and the 2026-10-19 re-screen (#2500) ([ca5f412](https://github.com/event4u-app/agent-config/commit/ca5f41246c8b9c42c7e48d163ac449d522eebc54))
+* Brand drain: lexicon and claim check on every finished draft, scenario fixtures, claims (5.3, 5.4, 7.2, 7.3) (#2486) ([6c312e1](https://github.com/event4u-app/agent-config/commit/6c312e1b576cf7aadb68a84cb2ab8ab0899b4f12))
+* Two-lane drains provisional, re-decided in throughput 2.3; a stricter complete; the CI waiter stub (#2497) ([d8c4ece](https://github.com/event4u-app/agent-config/commit/d8c4ece2dc1a1dece3434cd8880883c0f934c8ba))
+* self-repair: optional claim fields a retro can write; upstream body and key left to the owner (3.1/3.2 half) (#2496) ([c0968e1](https://github.com/event4u-app/agent-config/commit/c0968e1f5ecf9c8e01d6cc04f2a9802beb913f04))
+* Phase 6 pre-registered; the measurement spend waits on the owner (D18) (#2494) ([7ea90aa](https://github.com/event4u-app/agent-config/commit/7ea90aa82bfee5bc82eb65c1f44e5e228f5904d7))
+* Finish roadmaps before starting new ones: one drain queue, one lane brief, one PR per roadmap (#2495) ([fa9290e](https://github.com/event4u-app/agent-config/commit/fa9290ef85b9c6405b60709f191f1463af59e9ed))
+* Snapshot fence in block_config_weakening (canvas roadmap 7.1, ratified) (#2471) ([f7468c8](https://github.com/event4u-app/agent-config/commit/f7468c8e2d3e741e67f836ad4fb18021f744169a))
+* Type with a witness: 5.8 benchmark verdict partial, 5.9/5.10/AC-5/AC-6 closed, archived (#2493) ([1086a84](https://github.com/event4u-app/agent-config/commit/1086a84cde1a639a0919d4634b741e3a968e470f))
+* Analysis family: analyze:pr, analyze:and-optimize, inbox as final stage, router (1.3, 3.4, 4.5, 5.2, 5.3, 6.1, 6.2) (#2487) ([70cd4ce](https://github.com/event4u-app/agent-config/commit/70cd4cedf9286a084fbd09258df074fb6105aad8))
+* Roadmaps: re-measure what blocks hook-carrier 4.1 and consumer-gates 4.1 (#2490) ([728d4b4](https://github.com/event4u-app/agent-config/commit/728d4b4c1c68d39105a2b2ad93dcdf96b07cb851))
+* Hook carrier 4.1: the #2455 note placed as a breaking Pending row (#2491) ([e8b36d7](https://github.com/event4u-app/agent-config/commit/e8b36d7ce0f0847f3c67520ae9bdeb85a6e0d47b))
+* One upstream: AC-1 and AC-5 closed, the producer/consumer wait recorded (#2485) ([aa4185a](https://github.com/event4u-app/agent-config/commit/aa4185a1f884e4948279d852165896cc67f5392b))
+* Intake: a generated digest of what each roadmap owns, read before the recurrence grep (4.1, 4.2) (#2484) ([5f0bc8e](https://github.com/event4u-app/agent-config/commit/5f0bc8e13f946beba19e3bd1ddfb38d02cca7109))
+* Consumer lock keeps global entries without their $HOME paths (ownership-record roadmap 3.3) (#2481) ([6a15bb3](https://github.com/event4u-app/agent-config/commit/6a15bb362b37de7688a7c588e2bb78c3664d0945))
+* Council outcomes on eight owner decisions: four resolved, two decided without a blocker, two split (#2476) ([ce163bc](https://github.com/event4u-app/agent-config/commit/ce163bcf0cb52b637541668970e53cf08725fe3b))
+* Analysis family: ADR-288, analyze:reference, cli analysts, publish, network sources, anchors, run.json (#2461) ([316e552](https://github.com/event4u-app/agent-config/commit/316e552c4b92e8fbef57692029fb36058daa1a8e))
+* One detector: every credential consumer reads the rule table (2.2) (#2457) ([f974869](https://github.com/event4u-app/agent-config/commit/f974869fd28bf9cbe8b7c80a5d3c81483c1d085a))
+* Egress session table: no value at rest, restores that fail closed (placeholders Phase 2) (#2473) ([f55e5a7](https://github.com/event4u-app/agent-config/commit/f55e5a7600bfe2f67bc5581f365af1d636fcd02c))
+* Skills that arrive when called: probes on the first host, a reach report, every skill classified for forking (#2472) ([6194e27](https://github.com/event4u-app/agent-config/commit/6194e2769639d333fcf02fb1d29d031c5a79fe06))
+* A canvas the code owns: claude-design lane, /design-system:sync, Lock carrier (#2470) ([72f7580](https://github.com/event4u-app/agent-config/commit/72f75809e2c1285b51d1866665a65a6357d261b5))
+* Cold start: subagents.max_parallel becomes the host concurrency cap (#2464) ([f4fa037](https://github.com/event4u-app/agent-config/commit/f4fa037d047bf60a7d630377c615df915afa6bd4))
+* Update that installs itself: measure the mid-session swap, an unattended envelope that refuses to swap yet, and a pin advisor (#2469) ([820e070](https://github.com/event4u-app/agent-config/commit/820e0706e066007859ec26e624ee2e1c80c27715))
+* Hard floor: name which layer carries it per host, and let the doctor say when it is not running (#2467) ([fbc8e7c](https://github.com/event4u-app/agent-config/commit/fbc8e7c4221ddcd797ed3e389ca0891820969e48))
+* Blocker screen: seven owner-labelled blockers re-checked, canvas 3.2 split by council (#2468) ([3a0ad04](https://github.com/event4u-app/agent-config/commit/3a0ad04beca18dd256d873dc4d5c3274e0cdf3a9))
+* Steps the skill cannot skip: two pilots split, and a default-off procedure cursor (Phases 4-5) (#2466) ([e3cf6dc](https://github.com/event4u-app/agent-config/commit/e3cf6dc6827d9217f7d65d52ecfa47bee3d1ca37))
+* Type design: an original font as a measured system, gated and witnessed (#2462) ([1876e18](https://github.com/event4u-app/agent-config/commit/1876e186047f0316972cb421f4c9f1bc508a29b6))
+* Cold start: reuse fields in the subagent schema, two package workers, validators never reused (#2463) ([dba19d0](https://github.com/event4u-app/agent-config/commit/dba19d0f793e92f61dd2ae7baefbf1b1b64b868b))
+* A setup that decides itself: arrival record, install --full, doctor declares the layer form (#2460) ([3245c7e](https://github.com/event4u-app/agent-config/commit/3245c7e7ca49f833a2f3585e430eb8e9dbebb9e4))
+* Ownership record: close 3.4 on council verdict, escalate 3.3 as an owner blocker (#2458) ([2b05954](https://github.com/event4u-app/agent-config/commit/2b05954f7aed684ba61b780f89fdc46d68f4d538))
+* One upstream that checks what leaves: a clean commit, a noreply identity, an approved digest (#2454) ([bf4e2d1](https://github.com/event4u-app/agent-config/commit/bf4e2d19ef6d70a63d6c7f30d3c7314a9421f683))
+* Brand the tree can check: one resolver list, one voice slot, readers that ask (#2449) ([3a9b54d](https://github.com/event4u-app/agent-config/commit/3a9b54d4c7e20bee6476b2ca83e38949b93c779e))
+* Hook carrier that is never silent: staged dispatcher ahead of PATH, dead-carrier fail-full (#2455) ([3f8c98e](https://github.com/event4u-app/agent-config/commit/3f8c98e7487c7c6dba67f19efe139fe4287fbaca))
+* Intake: an archived depends row now fails the roadmap lint (#2448) ([a82598b](https://github.com/event4u-app/agent-config/commit/a82598bfa4f561e0ae0227c92c5b60fd494e0641))
+* Uninstall: keep the record the purge needs, claim the containment, archive the roadmap (#2450) ([b5cc80a](https://github.com/event4u-app/agent-config/commit/b5cc80aab6c6b6e63872a7f0f5fbdda17091e175))
+* Distribution ledger: every row on a live read, and the roadmap closes (#2447) ([6e94748](https://github.com/event4u-app/agent-config/commit/6e94748ea68c4470f0c09af1d0e36a273ef3235f))
+* Steps the skill cannot skip: cross-pack reference links, reference indexes, procedure sidecar lint, dispatch order (#2425) ([48e0af2](https://github.com/event4u-app/agent-config/commit/48e0af261ab3646a926b8d2cd4cd7d16b005aaeb))
+* Local gates: batch 2.2g wires the last five, and the residue gets its class (#2440) ([e9be773](https://github.com/event4u-app/agent-config/commit/e9be7731a571f94c40391bfc6d56b2822242fbbc))
+* Unknowns that say so: a closed network, a stitch that was checked, and three wrong reasons (#2442) ([2dd2738](https://github.com/event4u-app/agent-config/commit/2dd27381afb807b17b93273fd7ccd648c4a55067))
+* Ownership record: stop overwriting a file the ledger says we deployed (#2444) ([643f451](https://github.com/event4u-app/agent-config/commit/643f45147f30ae78bdbabf6cceb521b70848ef46))
+* Exit-code register: publish the pairs two surfaces must agree on (#2441) ([19a4d54](https://github.com/event4u-app/agent-config/commit/19a4d54842c8c7c74996bc9efbeced6a1c6b32a9))
+* Distribution ledger: a standing block recorded as a rule, not rediscovered (#2438) ([2ddb218](https://github.com/event4u-app/agent-config/commit/2ddb218c1310894b0e7964c5e903db8ad17630a7))
+* Truthful surfaces: AC-8 measured, and the two trunk reds that hold it open (#2439) ([a8b8d55](https://github.com/event4u-app/agent-config/commit/a8b8d5505a0543d7dada6a769a4313b609bb5ddf))
+* Ownership record that belongs to the user: a ledger for global deploys (#2422) ([8c90aad](https://github.com/event4u-app/agent-config/commit/8c90aad26ed9a3f220664c71a29a1f213c55e395))
+* Unknowns that say so: a reserved ceiling, a recorded downgrade, a verifiable resume (#2431) ([c804bd8](https://github.com/event4u-app/agent-config/commit/c804bd849187035b841d69298ce9d7bc333c9875))
+* Analysis family: analysts, exchange, gain gate, emit/validate, source adapters (2.4–2.7, 3.1–3.2, 4.1–4.2) (#2432) ([3c4b879](https://github.com/event4u-app/agent-config/commit/3c4b8792665dd49ceb059e4a6965387f9fb2476b))
+* Throughput recovery: a red turnaround reading gets a reader, C split by path, asks counted, D7 re-decided (#2435) ([6abb887](https://github.com/event4u-app/agent-config/commit/6abb887d7625cda0932924bb195a9fbee785f468))
+* Retro, the deterministic half: pre-registration, fact reader, composition, queue (steps 0.5, 1.x, 2.1-2.3, 3.1/3.5/3.6, 4.1/4.2) (#2434) ([8e90cb7](https://github.com/event4u-app/agent-config/commit/8e90cb743891ef09e7b559d9692609bf09abdb21))
+* A brand the tree can check: palette tags, voice slot, lexicon checker, zero brand bytes (#2433) ([debb26d](https://github.com/event4u-app/agent-config/commit/debb26d180b366084412d8e818bedc90f49d6bc8))
+* Cold start: observe resume and fork caching on Claude Code 2.1.302 (#2429) ([835660b](https://github.com/event4u-app/agent-config/commit/835660b0dfaa893c8ba0bdcba179aa35f3235dfa))
+* Type with a witness: the face that painted, T11/T12, filled counters (#2430) ([52c0dcd](https://github.com/event4u-app/agent-config/commit/52c0dcd4ceb87e28bc0b7f8f97cfcb134305d0ee))
+* Skills that arrive when called: census, projection snapshot, Codex page watch, skills: type check (#2427) ([2d7b4c0](https://github.com/event4u-app/agent-config/commit/2d7b4c090e0115487a882dd86d480e562158332e))
+* Step 3.4 of the self-modification roadmap: two refused reviews, recorded (#2428) ([22e32dc](https://github.com/event4u-app/agent-config/commit/22e32dc285024e07b615a6d1b1b618dff7d4f47a))
+* Egress: the three channels prevention cannot see, and why 2.2 waits on a ratification (#2424) ([87c4674](https://github.com/event4u-app/agent-config/commit/87c4674f16017a023105270f3911f3a6f0c42e8e))
+* A distribution ledger that is true: reconcile with upstream, detect answers (#2420) ([b30932a](https://github.com/event4u-app/agent-config/commit/b30932a787d438cc4a74d69505a6dabadb8f9aab))
+* Truthful surfaces: banner command, claim-row guard, pointers and metadata (#2416) ([7890bf3](https://github.com/event4u-app/agent-config/commit/7890bf3fe3aa3e3b70523ac74a8c5d68f4c51414))
+* Thirteen council rounds over the blocker estate: seven closed, three stale records corrected (#2419) ([b8efdcf](https://github.com/event4u-app/agent-config/commit/b8efdcf45a6a6366264ba5af775f5098c178fce9))
+* Gates that run where the consumer stands: consumer-gate count, harness contract, doctor artifact-location, exit-code register (#2418) ([c2e8082](https://github.com/event4u-app/agent-config/commit/c2e8082b2063ade053b7c4d0479b981068e69a3f))
+* Intake the queue can carry: depends that hold, owner-search report, roadmap ages, two council rounds (#2415) ([675ba0a](https://github.com/event4u-app/agent-config/commit/675ba0ace3e69470bfa10e9e943dab087b8ffc1b))
+* Brand the tree can check: profiles ignored, one token name, honest brand:status, DTCG 2025.10 (#2409) ([7559f13](https://github.com/event4u-app/agent-config/commit/7559f13630c41f346f421e21f3114024d262f5a4))
+* A timeout stays a timeout, and a parse failure is not replayed (#2378) ([abb5eac](https://github.com/event4u-app/agent-config/commit/abb5eac6dabce6cb82429e7f7c5f8545868d5dee))
+* **stub:** the visibility sync channel cannot write (#2374) ([d242548](https://github.com/event4u-app/agent-config/commit/d242548a76e442e3d72b404bddaa1b6a1f027f5e))
+* Select reducible tool-result classes from the payload distribution (D6: none) (#2370) ([085ec41](https://github.com/event4u-app/agent-config/commit/085ec41ff661f61513e8590efa5a2d984ceb4504))
+* Fix what the council found in the bytes-the-model-receives change (#2367) ([7c728f3](https://github.com/event4u-app/agent-config/commit/7c728f35b77c5b9eb96750b32b8e4ee950503a96))
+* **review:** close the gap this review names in itself (#2365) ([0c2abb2](https://github.com/event4u-app/agent-config/commit/0c2abb2970d6b44011d9fbaa3942cc3abf128c18))
+* Count the bytes that reached the model, and cut the package's own recurring traffic (#2363) ([26dd190](https://github.com/event4u-app/agent-config/commit/26dd1905ece77a4d7e48d0d51c5909a1414b06b1))
+* Measure why night runs close fewer roadmaps, and plan the recovery (#2359) ([2ad637a](https://github.com/event4u-app/agent-config/commit/2ad637acb6793a1bed295fa36f0bd7638e60e1e3))
+* Wire the first twenty of step 2.2's local-only gates (batch 2.2a) (#2354) ([4b8ec8c](https://github.com/event4u-app/agent-config/commit/4b8ec8c1fae13886bc2999187d64d9881bdb25d5))
+* Say how the ceiling decision actually came about, and let the nightly commit run (#2345) ([6164d92](https://github.com/event4u-app/agent-config/commit/6164d92354180f1d5e3a06faa3a097e7c8e3b671))
+* Close the never-ran roadmap on its CI reading and drain more local-only gates (#2352) ([144c0b2](https://github.com/event4u-app/agent-config/commit/144c0b20b492a1300744af9a85ba8f9019d3ee5d))
+* Bind a ratification record to the content it reviewed (#2325) ([4a379af](https://github.com/event4u-app/agent-config/commit/4a379af12231dd63383f88d704b1cebdcb82dd9b))
+* Write the Claude Code listing override for package-owned skills (#2346) ([af95015](https://github.com/event4u-app/agent-config/commit/af9501519b1f71414c3755ec997082217565e463))
+* Account lifecycle gets its own threat rows, and a skill that reaches them (#2327) ([1696ac4](https://github.com/event4u-app/agent-config/commit/1696ac45bd3fe4d0775991a7949548a230ddcf63))
+* Remove the continuation ladder the withdrawn concern left behind (#2343) ([3c65b5c](https://github.com/event4u-app/agent-config/commit/3c65b5cca9339f9584aaba6b20d585bcc36d10cf))
+* Two lints that never ran, a classifier that read the wrong diff, and three sentences about another tree (#2336) ([b663b60](https://github.com/event4u-app/agent-config/commit/b663b60759781e4140a3e407c46e52ef2b6aef8c))
+* A closing condition that moved, re-executed against build 2.1.299 (#2342) ([44a6a20](https://github.com/event4u-app/agent-config/commit/44a6a20d05551b5a9d155397371196241ae4cb0f))
+* the settings-key rule step 5.1 must edit is stated in eight places (#2341) ([89be7c8](https://github.com/event4u-app/agent-config/commit/89be7c8a41e20848da1eec6d004018255f4b7add))
+* owner and council answers on the inbox-2026-10-p/q/r residue (#2340) ([45de5b7](https://github.com/event4u-app/agent-config/commit/45de5b74365c2ecea9b4d4f41bb098cd186238ea))
+* Sentences this tree states and could not back (#2339) ([c6c82bb](https://github.com/event4u-app/agent-config/commit/c6c82bb5d18b5d58d70aa243f41510a10b8decbe))
+* A release that cannot be cut unreviewed, and a record that says what it carried (#2334) ([702d5e5](https://github.com/event4u-app/agent-config/commit/702d5e5f8bdf7f79167800660ff00a13e8c92e6a))
+* land inbox-2026-10-p, -q and -r as five ready roadmaps (#2338) ([8ad243d](https://github.com/event4u-app/agent-config/commit/8ad243d435dc5295f86bca7bebd3ddf76b5ba60e))
+* One upstream path, and the three documents that pointed away from it (#2337) ([52f2997](https://github.com/event4u-app/agent-config/commit/52f29970e5828061d8fb1887a57b2e4e330043fc))
+* The line a skill teaches, started on a machine that has only node (#2335) ([503b4e9](https://github.com/event4u-app/agent-config/commit/503b4e9d6c3ffa41f7a2e07aa549f8474d72e5cc))
+* A structure reading for the handover that carries no handles (#2332) ([9a943f3](https://github.com/event4u-app/agent-config/commit/9a943f30cc48e6565e9bdd6db9e9313718d7b20a))
+* The cut reads the settings surface it is about to ship (#2333) ([e123e74](https://github.com/event4u-app/agent-config/commit/e123e74b0d47058de067a6c0df08b295373c99a5))
+* A search answer a model can choose from (#2331) ([b8f248b](https://github.com/event4u-app/agent-config/commit/b8f248bd554002c80b351d1bd89f1d9729291bf7))
+* Twenty local-only gates wired where a pull request can hear them, and the three reds that blocked them (#2330) ([46d2f0b](https://github.com/event4u-app/agent-config/commit/46d2f0b3c07d5b15e8486b7b9cfd00fdd3c12657))
+* A frozen account-surface corpus and its claim, both before the detector (#2329) ([c107aaf](https://github.com/event4u-app/agent-config/commit/c107aaf0f15ff8d7f00ef4891d2df6e199597ff9))
+* Four claims this roadmap carried, executed against the tree (#2328) ([257e87d](https://github.com/event4u-app/agent-config/commit/257e87de0a8982aa33a2cbb29b8d56d149f3d46e))
+* A written no-go that names a path becomes a rule the host refuses on (#2326) ([8cd4c1e](https://github.com/event4u-app/agent-config/commit/8cd4c1e4d6e27579f9fc9e2078858e6d3d335f1e))
+* The authority hold nobody could check, measured and made checkable (#2324) ([b9446c9](https://github.com/event4u-app/agent-config/commit/b9446c91b363f3aedad05e1d75b2a3f8601ee252))
+* The installer's host axis, recorded; and three stuck steps re-screened against the tree (#2323) ([d68ce19](https://github.com/event4u-app/agent-config/commit/d68ce1943569bf82745ce9e0e8ac048fcf73f077))
+* land inbox-2026-10-o as three ready roadmaps (#2321) ([7335a38](https://github.com/event4u-app/agent-config/commit/7335a38f1d38696e7e8559c87be1aa43262e87fd))
+* Stop teaching the account-flow anti-patterns (#2319) ([2bc5715](https://github.com/event4u-app/agent-config/commit/2bc5715c70f79d32e2c36df8af37d792b6270bce))
+* land inbox-2026-10-n as three ready roadmaps (#2320) ([82a450c](https://github.com/event4u-app/agent-config/commit/82a450c4e8e8a25589e920fba3286733df18b22a))
+* A project contract written down: the goal and the no-gos init never asked for (#2317) ([d760ecb](https://github.com/event4u-app/agent-config/commit/d760ecbde5e1005674af0de6bc56aeff746ed171))
+* Self-modification Phase 1: the council reviews, the owner approves (#2313) ([63407b6](https://github.com/event4u-app/agent-config/commit/63407b6353cb0d2ddc49ff99e4aa06a086e6d58b))
+* Surfaces no gate reads: three numbers and a path, produced by the tree (#2316) ([4d2e042](https://github.com/event4u-app/agent-config/commit/4d2e0424fe4983860e313120e22adaf4c79ceeec))
+* Close road-to-blocking-time-by-cause: the second window, read against its targets (#2312) ([7ecdca8](https://github.com/event4u-app/agent-config/commit/7ecdca8654c19b48de3b20bb9fba220388dda093))
+* A trigger suite the host grades: compile, never run (#2315) ([1644355](https://github.com/event4u-app/agent-config/commit/16443553033d786b951aa51712cd50d0b4fbb0dc))
+* land inbox-2026-10-m as six ready roadmaps (#2311) ([52d206d](https://github.com/event4u-app/agent-config/commit/52d206d9a211eaf0b22e59002692c00e3cdac30f))
+
+Tests: 32002 (+4677 since 16.5.0)
+
+## [16.5.0](https://github.com/event4u-app/agent-config/compare/16.4.0...16.5.0) (2026-10-12)
 
 ### Release highlights
 
-- **Behaviour changes:** Rule links that name a path the repository actually has, and the blocker that held them (#2185) (8031e09); Rule laws that can stand, and the class whose law stands with them (#2177) (9e2fe18); 100 % roadmaps archive — bare deferrals carried, owner blockers ask step by step (#2167) (074eee6); make the two pack-boundary gates green on the trunk and run the workflow-security audit in CI (#2155) (90a0ad5); A release record that says what it reviewed, and an index with every major (#2157) (8e30a53).
+- **Behaviour changes:** give hand-authored SVG a witness, an owner, and five recorded runs (#2300) (bdeb65c).
 - **Default changes + migration:** _none_
-- **Security and correctness:** 100 % roadmaps archive — bare deferrals carried, owner blockers ask step by step (#2167) (074eee6); make the two pack-boundary gates green on the trunk and run the workflow-security audit in CI (#2155) (90a0ad5).
+- **Security and correctness:** close the two real findings of the third 16.5.0 review, plus road-to-svg-witness-provenance (#2309) (d1f7c3b); close the security findings from the 16.5.0 re-cut review (#2307) (9904258); close the five medium-security findings from the 16.5.0 release review (#2305) (5593838); close the sixth review round of #2302 (#2303) (c88865f); strip only generic glob classes from an inbox name (fda00b3); admit a date suffix only on the families that are dated (fd5be56); +3 more.
 - **Honest nulls:** _none_
-- **Known limitations:** An installed layer measured against its limit, and the consent an installer must have before thinning (#2201) (src/scripts/install.ts declares a residual) (df7ea79); Two Phase-0 instruments closed against measurement, and the third blocked by a record rather than a ceiling (#2198) (src/scripts/check_standing_rule_delivery.ts declares a residual) (92027a2); A rule carrier that delivers what the install carries, in the host's form, in a string the host keeps (#2182) (src/scripts/install.ts declares a residual) (7fdfd0a); Rule triggers and installed links that hold (#2174) (src/scripts/install.ts declares a residual) (328a21b); A tree that keeps its neighbours (#2161) (src/scripts/install.ts declares a residual) (4399b5a); make the two pack-boundary gates green on the trunk and run the workflow-security audit in CI (#2155) (90a0ad5); +2 more.
+- **Known limitations:** _none_
 
-> **Governance mix:** governance-only 23 vs consumer-only 1 (taxonomy 1.1.0).
->
-> _Re-measured 2026-10-07:_ governance-only 83 vs consumer-only 3 (taxonomy 1.1.0) on `16.2.0..16.3.0` (`8d157f5e7..91aaf5e21`), via `./scripts-run src/scripts/measure_release_mix --from 16.2.0 --to 16.3.0`. The line above was measured to an unrecorded `HEAD` at write time.
+> **Governance mix:** governance-only 6 vs consumer-only 1 (taxonomy 1.1.0; range d411219277ce..d1f7c3b834bb).
 
 ### Features
 
-* **commands:** /roadmap:resolve-blockers — council first, owner one question at a time (#2204) ([5ddfc05](https://github.com/event4u-app/agent-config/commit/5ddfc05819a501b1066b713571e9073d1ce435c9))
-* **commands:** /roadmap:triage-parked — drain later/ and skipped/ (#2184) ([ab516fc](https://github.com/event4u-app/agent-config/commit/ab516fc19a420a7022eb7dc5f8b16f6d033fc6e8))
-* **evidence:** classify the evidence tree by reference, and rule out a cold location (#2153) ([590cebc](https://github.com/event4u-app/agent-config/commit/590cebc729a7a45fbe98e2ee55b8f231ac0329c2))
-* **hooks:** run the project's own quality tools over the files a turn edited (#2152) ([d4760bb](https://github.com/event4u-app/agent-config/commit/d4760bb4f47b7be902c9ec3b88c51d8aa818311e))
-* **memory-learn:** open the learning dogfood window and give it a screen (#2151) ([162889e](https://github.com/event4u-app/agent-config/commit/162889e8b16359904766927a7fbd896f961ed9b9))
-* **ui:** flip the carried-nothing shadow to a halt, closing road-to-a-ui-coverage-ledger-that-can-fail (#2149) ([cbd5d07](https://github.com/event4u-app/agent-config/commit/cbd5d07fe21af3a3de12e847b3b8da7f86f8bb81))
+* **svg:** close all three SVG roadmaps — routing, review follow-ups and the live-session findings (#2302) ([5098697](https://github.com/event4u-app/agent-config/commit/50986972088029db18a90c6f7d198c5ab0e26da5))
+* give hand-authored SVG a witness, an owner, and five recorded runs (#2300) ([bdeb65c](https://github.com/event4u-app/agent-config/commit/bdeb65c37533825c2a3061fb7a33ef5778454d11))
 
 ### Bug Fixes
 
-* **archival:** 100 % roadmaps archive — bare deferrals carried, owner blockers ask step by step (#2167) ([074eee6](https://github.com/event4u-app/agent-config/commit/074eee6881d19b5f6d7ec8574a83c26dffd25353))
-* **gates:** make the two pack-boundary gates green on the trunk and run the workflow-security audit in CI (#2155) ([90a0ad5](https://github.com/event4u-app/agent-config/commit/90a0ad522d49a853d30ffb6f1fec46e2b802ae35))
-* **hooks:** make the bundle ceiling describe the trunk it defends (#2165) ([c399d09](https://github.com/event4u-app/agent-config/commit/c399d097eea2f30676b36604a2514ff0e22cd46d))
+* **svg:** close the two real findings of the third 16.5.0 review, plus road-to-svg-witness-provenance (#2309) ([d1f7c3b](https://github.com/event4u-app/agent-config/commit/d1f7c3b834bb43b8937dee44b7e38733d5eb70f2))
+* **svg:** close the security findings from the 16.5.0 re-cut review (#2307) ([9904258](https://github.com/event4u-app/agent-config/commit/990425836285eded0a6cb4370f8ded95823dd6c8))
+* **svg:** close the five medium-security findings from the 16.5.0 release review (#2305) ([5593838](https://github.com/event4u-app/agent-config/commit/5593838c01fab686e0856fba227ae4f37cd7b8f0))
+* **svg-engine:** close the sixth review round of #2302 (#2303) ([c88865f](https://github.com/event4u-app/agent-config/commit/c88865fdc1aad9337b4f98a868483d571848d7ea))
+* **hooks:** strip only generic glob classes from an inbox name ([fda00b3](https://github.com/event4u-app/agent-config/commit/fda00b35ef5a0d2b603b56511a986081a261dc11))
+* **hooks:** admit a date suffix only on the families that are dated ([fd5be56](https://github.com/event4u-app/agent-config/commit/fd5be56f6f17ebe96b17579ffdd452cbef3dfc39))
+* **hooks:** accept only wildcard-suffixed family heads and keep bracket payloads ([8446cc0](https://github.com/event4u-app/agent-config/commit/8446cc05e322c6d084df502319daff8c1bc79e63))
+* **hooks:** let a glob over an opaque family prefix through block-speaking-inbox-dir ([22904a5](https://github.com/event4u-app/agent-config/commit/22904a51d58dd8d3bbed7a6db08b717b7336adb1))
+* **lineage:** count a present non-road-to parent as present ([4b40ab6](https://github.com/event4u-app/agent-config/commit/4b40ab692f85bbc2b642f98603a9d601879cd5a1))
 
 ### Documentation
 
-* **roadmaps:** drain road-to-leading-every-row — install above the fold, commit-mix baseline, seven owner questions put (#2148) ([8f32c31](https://github.com/event4u-app/agent-config/commit/8f32c316b489f6b8decfdacf57da72149e07dbd5))
-* **roadmaps:** land four roadmaps from inbox round inbox-2026-10-c (#2150) ([07f83a1](https://github.com/event4u-app/agent-config/commit/07f83a1f681869b9cea467f2ad88e5642ef55af9))
-* **roadmaps:** use the declared decision classes in the inbox-2026-10-a roadmaps ([ab5c92b](https://github.com/event4u-app/agent-config/commit/ab5c92b61936fdddfd5bb3e315d086b64bc1911e))
-* **roadmaps:** state the measured blocker growth in the round's claim ([2a52860](https://github.com/event4u-app/agent-config/commit/2a528602ea27b6407e9e999b8818f41ad1e9f0cb))
-* **evidence:** disposition for inbox round inbox-2026-10-a ([ea06fa1](https://github.com/event4u-app/agent-config/commit/ea06fa1fafe54db61b1313050c52d4c7497e799a))
-* **roadmaps:** record arrivals and owner questions on six held objects ([60f9e60](https://github.com/event4u-app/agent-config/commit/60f9e60f6d2940c49677479641a599d23cbd380b))
-* **roadmaps:** land eight roadmaps from inbox round inbox-2026-10-a ([2c34c3d](https://github.com/event4u-app/agent-config/commit/2c34c3d99b103bd704f917d1603e926f7dac3f0c))
-* **evidence:** declare the evidence type on the inbox-2026-10-b disposition ([8adf9ef](https://github.com/event4u-app/agent-config/commit/8adf9eff9b7908334ed29cb7ed4fbe48f2e05cda))
-* **evidence:** record the inbox-2026-10-b disposition ([a51740b](https://github.com/event4u-app/agent-config/commit/a51740b4b79d963af8ff2fd3551c26214430166e))
-* **stubs:** count the inbox-2026-10-b arrivals on four held stubs ([6f2bc0b](https://github.com/event4u-app/agent-config/commit/6f2bc0b116a78747bc98e1addfda25672ea76ed7))
-* **roadmaps:** land the leading-every-row programme and its lanes from inbox-2026-10-b ([6631412](https://github.com/event4u-app/agent-config/commit/6631412219157e4b26ee9f1eede6493ea38764c0))
+* **contracts:** point the hook-concern row at the manifest instead of a count ([3406ae5](https://github.com/event4u-app/agent-config/commit/3406ae53848f7cf2ca866c2d03d297ad549743d1))
+
+### Tests
+
+* **hooks:** table-drive the opaque-family glob cases over all five heads ([52c9e0e](https://github.com/event4u-app/agent-config/commit/52c9e0e40ebd736aadcf8f37831f994ba1fe0dc6))
 
 ### Chores
 
-* **deps:** bump the site group in /site with 4 updates (#2170) ([7464482](https://github.com/event4u-app/agent-config/commit/7464482550df64e24f101988086f9c6fb1bd7945))
-* **deps-dev:** bump the telemetry-worker group across 1 directory with 2 updates (#2163) ([11eb5d8](https://github.com/event4u-app/agent-config/commit/11eb5d813dc9057e9f475b7a827aa9730d688447))
+* **ratification:** record the council review of the inbox-name guard change ([a03c9e9](https://github.com/event4u-app/agent-config/commit/a03c9e95a6b7cb58065fd9e9c30b104ebcb4911b))
 
 ### Other
 
-* The intake rule was enforced and never written down, so git kept inviting the commit the gate refuses (#2206) ([975d03d](https://github.com/event4u-app/agent-config/commit/975d03d01cc549c297a7a8ea92134b08005eb333))
-* Two roadmaps that read finished, and the three gates that keep each of them where it is (#2205) ([df377ca](https://github.com/event4u-app/agent-config/commit/df377ca64d0333105ffd80813caa94e11805c30b))
-* An installed layer measured against its limit, and the consent an installer must have before thinning (#2201) ([df7ea79](https://github.com/event4u-app/agent-config/commit/df7ea7928c9d9fe5815978b689198b79fc8158d3))
-* Archive the kernel-plumbing roadmap, which finished and stayed in the active set (#2203) ([901e8bc](https://github.com/event4u-app/agent-config/commit/901e8bc4e848283327f5c6811e4e221246a41210))
-* A blocker citation pointing at a test fixture, and a step oracle that cannot reach its own exit (#2202) ([c04d74b](https://github.com/event4u-app/agent-config/commit/c04d74bea094071c72a1421fb013ee12e8200f2f))
-* The first observed structured-ask row, and the subagent leg the absent one was read from (#2199) ([f73e77d](https://github.com/event4u-app/agent-config/commit/f73e77d0f93f55ab76658d86b38dde00222d1246))
-* An acceptance criterion closed on measurement, a guard claim withdrawn, and the second obstacle under a blocked gate (#2200) ([e3e4774](https://github.com/event4u-app/agent-config/commit/e3e4774e2c6f6e2aa24d8720e6aff38c095d67f4))
-* A calendar hold whose date had already passed, and the gate standing behind the stamp (#2196) ([6aa3c36](https://github.com/event4u-app/agent-config/commit/6aa3c36f9cbd596a65cb5b2faafa71cdd240b8f5))
-* Two Phase-0 instruments closed against measurement, and the third blocked by a record rather than a ceiling (#2198) ([92027a2](https://github.com/event4u-app/agent-config/commit/92027a20c350f5b53625a1efbd3157aaf163b26b))
-* Two locks under one owner question, a bundle figure stale by 41 kB, and the oracle a blocked step is waiting for (#2197) ([24d6d5b](https://github.com/event4u-app/agent-config/commit/24d6d5b0d93852ee106dd1a1a7eda9bca9b2c249))
-* A blocker that held on its fourth reading, and the line it cited having moved (#2195) ([780c27e](https://github.com/event4u-app/agent-config/commit/780c27e1ed0f36edc6cd59883dce36230dfef9d4))
-* A payload total that drifted under a pin that never pinned it (#2194) ([e6b7193](https://github.com/event4u-app/agent-config/commit/e6b71933a84bb15e432e86aced4c848897498716))
-* A blocker that held on its sixth reading, and the four edits it is waiting on (#2193) ([fe0cff8](https://github.com/event4u-app/agent-config/commit/fe0cff8a558897a47caba9eb6d9dbe80e90e2d4b))
-* A blocker stated in prose, re-stated as the command that decides it (#2192) ([18ac6b2](https://github.com/event4u-app/agent-config/commit/18ac6b21ec35c4132958dc382349acc6af9a3b53))
-* A fifth reading of two blockers that held, and a second obstacle under the first (#2191) ([afad042](https://github.com/event4u-app/agent-config/commit/afad042bb39e24f3edf5dbbbfccabbda0f3ddb00))
-* A guard that permitted the call precisely when it broke, in six places and a seventh shape (#2189) ([51ee084](https://github.com/event4u-app/agent-config/commit/51ee0844b564f8863b753606f1758c9c0ef6dbd3))
-* An accrual figure that moved while the labelled corpus did not (#2190) ([30481f6](https://github.com/event4u-app/agent-config/commit/30481f6605ade9ff06bbc9ca300ab8614781321c))
-* A third reading of a blocker that has not moved, and a census nine units behind the tree (#2187) ([50bec97](https://github.com/event4u-app/agent-config/commit/50bec97430107d9fe73a6561a4fb986150c57ea8))
-* The fourth wake shape has no envelope tag, and the anchor is the whole guard (#2188) ([97a5a64](https://github.com/event4u-app/agent-config/commit/97a5a647412e376bf8ac12b9065706710c956831))
-* Rule links that name a path the repository actually has, and the blocker that held them (#2185) ([8031e09](https://github.com/event4u-app/agent-config/commit/8031e09d6ff6ecc61be329f2af4a904bcc7be18f))
-* The third wake shape: a subagent hand-back is a turn nobody typed, in two vocabularies that both missed it (#2186) ([0199fd0](https://github.com/event4u-app/agent-config/commit/0199fd0c0a448f3fdf262373cc30971213954168))
-* Twenty-eight boxes re-run rather than read, and the policy behind seven settled-looking cells (#2183) ([d6a2da7](https://github.com/event4u-app/agent-config/commit/d6a2da7bca601dbe9432b35c6fd76fddd63c80db))
-* A rule carrier that delivers what the install carries, in the host's form, in a string the host keeps (#2182) ([7fdfd0a](https://github.com/event4u-app/agent-config/commit/7fdfd0a4d59c616153ffaa283e265708b87b88ae))
-* A rule carrier that works outside the repo: resolution, one mode answer, and the matrix that proves both (#2181) ([95dc7bf](https://github.com/event4u-app/agent-config/commit/95dc7bfb1ba8c5dcb43ce7cfe3f8d271093eacf9))
-* The MCP recorder does not run, and what it would record was wrong in five ways (#2180) ([59824fd](https://github.com/event4u-app/agent-config/commit/59824fd95acfe5f6772f8da02e9f52a7896d593c))
-* Neighbours counted by use, and the link criterion measured rather than assumed (#2179) ([cd26c2e](https://github.com/event4u-app/agent-config/commit/cd26c2e177976d85644fbe8fd9c5a973418bfcdc))
-* Rule laws that can stand, and the class whose law stands with them (#2177) ([9e2fe18](https://github.com/event4u-app/agent-config/commit/9e2fe189e85d4b1feabb0bef55680e02097f0ac7))
-* A route line that says where the skill came from (#2178) ([6bdc2b2](https://github.com/event4u-app/agent-config/commit/6bdc2b25ba6c6d06b94a2137ccfd336efc8f60b0))
-* Stacks beyond PHP: the composition gate, the third binding site, and four resolver fixtures (#2173) ([a3c8393](https://github.com/event4u-app/agent-config/commit/a3c839340059ef68c8a37568685739bb9f8c7fe3))
-* Say which tree the reach numbers came from, and publish the per-prompt pair (#2176) ([4871260](https://github.com/event4u-app/agent-config/commit/48712607ad706c502cb44938a288a39b64d3f784))
-* Rule triggers and installed links that hold (#2174) ([328a21b](https://github.com/event4u-app/agent-config/commit/328a21bef2d8f6660227f4f9656d2043751ff7fc))
-* The stop gate records who set stop_hook_active, and the fingerprint store cannot be bound where its council chose (#2175) ([379cd53](https://github.com/event4u-app/agent-config/commit/379cd535c6618d8d514b78654eef8c59461dc0a1))
-* The advisories were already fixed; the record was not (#2171) ([30f7d21](https://github.com/event4u-app/agent-config/commit/30f7d21f65146fd348bc354b33093794ab500bcf))
-* Dispositions the carried roadmaps were missing (#2172) ([11726a9](https://github.com/event4u-app/agent-config/commit/11726a985ca8de0e183c14d643519d7aa5d77d0c))
-* archive the three roadmaps main still held at 100 % (#2168) ([21da719](https://github.com/event4u-app/agent-config/commit/21da71917d1ad685737b10196245c8d323bd21f4))
-* Let dependency PRs reach their required check (#2169) ([540ee7a](https://github.com/event4u-app/agent-config/commit/540ee7a0bed2bf327c971f204ab90a346a768250))
-* A tree that keeps its neighbours (#2161) ([4399b5a](https://github.com/event4u-app/agent-config/commit/4399b5a0d6395631d808f6bc5f75aaa7eed7e573))
-* A graph that reaches the search, sees the edit, and feeds the gate in shadow (#2159) ([4958809](https://github.com/event4u-app/agent-config/commit/495880908332d55c9a4069f7266dc19c99c83824))
-* A release record that says what it reviewed, and an index with every major (#2157) ([8e30a53](https://github.com/event4u-app/agent-config/commit/8e30a533124b1c85b011bb463a6bd63c3fc3c6e1))
-* Three claims a roadmap makes about itself, made checkable (#2156) ([3a8498c](https://github.com/event4u-app/agent-config/commit/3a8498c2c00fcff37970e2eeabd4ebe7b43f8b9e))
-* Blocking severities where a refusal can land (#2154) ([81d712f](https://github.com/event4u-app/agent-config/commit/81d712f2706ffe6fcdf98f2198a5607d7c6faf17))
-* Give the three spawn-bound test suites their own timeout (#2166) ([aead73d](https://github.com/event4u-app/agent-config/commit/aead73d280f8c61de7cf604ef39c06274fb6baf4))
-* A ranker that routes: the null, and the two premises it refuted (#2162) ([213d870](https://github.com/event4u-app/agent-config/commit/213d870558b7fbcdc033ac6f8f0ef4c1a43a5a80))
-* One YAML reader in the hook bundle, a ceiling on it, and a census that renders (#2158) ([22b19e5](https://github.com/event4u-app/agent-config/commit/22b19e520c198b6f0aec2cbf8cb2851818c11fcc))
-* Record a verification command that fails on claude (#2160) ([29b1832](https://github.com/event4u-app/agent-config/commit/29b183256155f9a3dea3d3351268b62b33628fde))
-* Three surfaces that said more than they did (#2144) ([00612c1](https://github.com/event4u-app/agent-config/commit/00612c1f27edafcfa6340b41c56a0da281d6ebc2))
-
-Tests: 25888 (+896 since 16.2.0)
+* add road-to-svg-from-a-live-session from the continued raster-to-SVG session (#2301) ([a17bd4a](https://github.com/event4u-app/agent-config/commit/a17bd4aa2bcca14cc787096be644647be6188f2e))
+* road-to-svg-review-followups from two reviews of the SVG roadmaps (#2299) ([b015b74](https://github.com/event4u-app/agent-config/commit/b015b747f7c2eea4a8206aba846b82dcc6e84f40))
+* add two ready SVG roadmaps from inbox-2026-10-l (#2298) ([fd02787](https://github.com/event4u-app/agent-config/commit/fd02787ef8e0e9eb21e9a0256e5f3ea9bca21492))
+* give six added verify clauses an expectation that can fail ([9a5338a](https://github.com/event4u-app/agent-config/commit/9a5338aebd49923a894e803b7e21f0d5dbb5d7d3))
+* add thirteen ready roadmaps from inbox-2026-10-g..k ([d8a9e43](https://github.com/event4u-app/agent-config/commit/d8a9e43a881bcf6ad9a8a96c83a4e4958f321098))
+* record inbox-2026-10-g..k arrivals on held stubs and parked roadmaps ([243b6f3](https://github.com/event4u-app/agent-config/commit/243b6f30251da478e03a5f9aa3d60636a14ea0e1))
+
+Tests: 27325 (+127 since 16.4.0)
 
 # Era: pre-4.0.0 — archived