@event4u/agent-config 17.0.0 → 17.1.0

package/CHANGELOG.md

@@ -387,522 +387,141 @@ An entry belongs under a dated release section, not here — see
 > keeps the active era under the 250-line drift cap enforced by
 > `tests/test_changelog_eras.py`.
 
-# Era: 16.5.x — current
+# Era: pre-17.1.0 — archived
 
-> Started at `16.5.0`. Full entries live inline below.
+> All entries before `17.1.0` live in
+> [`docs/archive/CHANGELOG-pre-17.1.0.md`](docs/archive/CHANGELOG-pre-17.1.0.md).
+> The archive is read-only; git tags remain the canonical
+> source for what shipped. Splitting them out of the main file
+> keeps the active era under the 250-line drift cap enforced by
+> `tests/test_changelog_eras.py`.
+
+# Era: 17.1.x — current
+
+> Started at `17.1.0`. Full entries live inline below.
 > The drift test caps this era at 250 lines of entry body; growth past
-> that forces a new era split (`# Era: 16.6.x`, etc.) — see
+> that forces a new era split (`# Era: 17.2.x`, etc.) — see
 > [`docs/contracts/CHANGELOG-conventions.md § Era splits`](docs/contracts/CHANGELOG-conventions.md).
 
-## [17.0.0](https://github.com/event4u-app/agent-config/compare/16.5.0...17.0.0) (2026-10-22)
+## [17.1.0](https://github.com/event4u-app/agent-config/compare/17.0.0...17.1.0) (2026-10-23)
 
 ### Release highlights
 
-- **Behaviour changes:** run only package-owned dispatchers, and refuse PreToolUse when none is reachable (#2573) (0559570); raise the Node floor to 22 (ADR-290) — unblocks the 17.0.0 cut (#2565) (76f4136); A setup that decides itself: Phase 4 removes the keys, and nothing reads them (#2532) (d8f5590); The source door takes its decided name, the observation slots stay unspent, and the calibration reads zero (#2544) (32a66d7); Brand drain: lexicon and claim check on every finished draft, scenario fixtures, claims (5.3, 5.4, 7.2, 7.3) (#2486) (6c312e1); A canvas the code owns: claude-design lane, /design-system:sync, Lock carrier (#2470) (72f7580); +14 more.
-- **Default changes + migration:** Steps the skill cannot skip: two pilots split, and a default-off procedure cursor (Phases 4-5) (#2466) (e3cf6dc); read member CLI output beyond the default spawn buffer (#2348) (2fa431c). Breaking, pending in `BREAKING_CHANGES.md` and shipped by this release: **Three `fail_closed` hook guards run where they were silent.** The installed claude hook command now reaches a dispatcher staged under `~/.event4u/agent-config/runtime/` after a project-local install and before `PATH` ([`3f8c98e`](https://github.com/event4u-app/agent-config/commit/3f8c98e74), #2455). On machines installed through `npx`, or hosts launched with a bare `PATH`, every hook command used to end in a silent `exit 0`; there `block-no-verify` (refuses `git … --no-verify` and `core.hooksPath` overrides), `block-kernel-rule-writes` and `block-plumbing-writes` (refuse agent writes to this package's kernel rules and hook plumbing) now run and may refuse a tool call for the first time. Classed breaking by the AI council, 2026-10-19 (`agents/evidence/council/hook-carrier-release-note-class-20261019.md`). **`uninstall --global --purge` stops being a recursive delete of the host anchor.** Old scope: `fs.rmSync(anchor, { recursive: true })` on whole host configuration roots — `~/.claude/`, `~/.codex/`, `~/.config/zed/` — so everything under them went, whoever wrote it. New scope: only the anchor-relative paths this package's own deploy inventory recorded writing; the anchor itself is never removed, directories are pruned only when left empty, a recorded symlink is unlinked rather than followed, and a purge with no readable inventory for that anchor exits 1 having deleted nothing. A second change in the same area: a plain `uninstall --global` now keeps the lockfile while recorded content is still on disk, where it used to delete it.
-- **Security and correctness:** kind_flip binds isKindFlipped locally after the state split (f0348e9); a worker name reaches the ledger only as a session-bound digest (7d1db2e); a TokenScope that throws is withheld visibly too (9c2260c); name the free rung only for a kind that has flipped (2ace081); a throwing engine withholds injected text visibly instead of escaping (234581b); the codex seat records thread.started and keeps its sandbox bound on resume (defbc6f); +49 more.
-- **Honest nulls:** a failed route hands the call down the chain once (free-hands 5.2) (a962afa); the advisor pairing run is a recorded null (tier 3.2) (23428d8); Blocker sweep follow-up: the three owner answers recorded (#2521) (221cd5d); Canvas 7.3: the taught baseline line, its corpus and the re-pinned routing measurements (#2502) (6c84bdf); A brand the tree can check: palette tags, voice slot, lexicon checker, zero brand bytes (#2433) (debb26d); A search answer a model can choose from (#2331) (b8f248b).
-- **Known limitations:** base_url route members with proven billing class (src/scripts/_lib/environment_detector.ts declares a residual) (d0d9dd4); one provider table (free-hands 2.1) (src/scripts/_lib/environment_detector.ts declares a residual) (09507c1); the 17.0.0 self-review findings, second and third wave (#2580) (src/scripts/_lib/release_findings_ingest.ts declares a residual) (5d64cba); The update concerns' code, hardened and unregistered: eleven council rounds, two delivery gaps named (#2545) (src/scripts/_lib/update_notice.ts declares a residual) (7aa764a); A setup that decides itself: Phase 4 removes the keys, and nothing reads them (#2532) (src/scripts/install.ts declares a residual) (d8f5590); Install and hook runtime: foreign skills are not ours, a global dry run shows the global plan, and a fresh worktree's hooks run (#2553) (src/scripts/_cli/doctor_ownership_ledger.ts declares a residual) (4338b2e); +12 more.
-
-> **Governance mix:** governance-only 117 vs consumer-only 16 (mixed 252, maintenance 28; taxonomy 1.1.0; range 17f028941037..e7d10fac5355).
-
-### BREAKING CHANGES
+- **Behaviour changes:** _none_
+- **Default changes + migration:** Breaking, pending in `BREAKING_CHANGES.md` and shipped by this release: **Three `fail_closed` hook guards run where they were silent.** The installed claude hook command now reaches a dispatcher staged under `~/.event4u/agent-config/runtime/` after a project-local install and before `PATH` ([`3f8c98e`](https://github.com/event4u-app/agent-config/commit/3f8c98e74), #2455). On machines installed through `npx`, or hosts launched with a bare `PATH`, every hook command used to end in a silent `exit 0`; there `block-no-verify` (refuses `git … --no-verify` and `core.hooksPath` overrides), `block-kernel-rule-writes` and `block-plumbing-writes` (refuse agent writes to this package's kernel rules and hook plumbing) now run and may refuse a tool call for the first time. Classed breaking by the AI council, 2026-10-19 (`agents/evidence/council/hook-carrier-release-note-class-20261019.md`). **`uninstall --global --purge` stops being a recursive delete of the host anchor.** Old scope: `fs.rmSync(anchor, { recursive: true })` on whole host configuration roots — `~/.claude/`, `~/.codex/`, `~/.config/zed/` — so everything under them went, whoever wrote it. New scope: only the anchor-relative paths this package's own deploy inventory recorded writing; the anchor itself is never removed, directories are pruned only when left empty, a recorded symlink is unlinked rather than followed, and a purge with no readable inventory for that anchor exits 1 having deleted nothing. A second change in the same area: a plain `uninstall --global` now keeps the lockfile while recorded content is still on disk, where it used to delete it.
+- **Security and correctness:** pace free-hands shadow calls from the last free reply (c28d888); record the id a keyless route actually serves (9235bdc); a pre-ledger global refresh updates untouched files instead of preserving thousands (#2590) (601abd8); put the SC2016 directive on the node command it covers (029da1a); pin the aging-hour notice case to midday UTC (0d2efc5); assemble the reach self-test fixtures so prepack reads no shipped import (839a4d5); +26 more.
+- **Honest nulls:** _none_
+- **Known limitations:** a pre-ledger global refresh updates untouched files instead of preserving thousands (#2590) (src/scripts/install.ts declares a residual) (601abd8); a release waits for no review ledger (#2591) (src/scripts/_lib/release_findings_ingest.ts declares a residual) (e1dde82).
 
-* **hooks:** run only package-owned dispatchers, and refuse PreToolUse when none is reachable (#2573) ([0559570](https://github.com/event4u-app/agent-config/commit/055957034474c04613f83f874e41ea53976a0bfb))
-* raise the Node floor to 22 (ADR-290) — unblocks the 17.0.0 cut (#2565) ([76f4136](https://github.com/event4u-app/agent-config/commit/76f4136e110829316ad72f85a67d0d951c7f2ac9))
+> **Governance mix:** governance-only 24 vs consumer-only 2 (mixed 39, maintenance 15; taxonomy 1.1.0; range ad30b6dfecd0..e1b086677d04).
 
 ### Features
 
-* **ask:** a hand kind flips to the free route only on cleared shadow bars (free-hands 6.3) ([6fb2cb8](https://github.com/event4u-app/agent-config/commit/6fb2cb8e5b5fbac3ae17e660f3102e62feac76a9))
-* **ask:** shadow mode ledgers a free and a paid answer per hand call (free-hands 6.2) ([e7f38f2](https://github.com/event4u-app/agent-config/commit/e7f38f239ad8cd7aac9924dcafeb1a2599ce3058))
-* **canary:** a red streak of the scheduled canary surfaces in doctor and at session start (free-hands 5.3) ([bd113de](https://github.com/event4u-app/agent-config/commit/bd113de5334cb751de90b265e45d58a776a8e1e4))
-* **ask:** a failed route hands the call down the chain once (free-hands 5.2) ([a962afa](https://github.com/event4u-app/agent-config/commit/a962afa732038407f0bd8f0e8dfaf349fee38a7b))
-* **ask:** route liveness counts unservable streaks per route and model (free-hands 5.1) ([594698a](https://github.com/event4u-app/agent-config/commit/594698ab11bc3e2e6236a842c20df810f686c219))
-* **council:** the stance repair continues the seat's own CLI session inside the cache TTL ([be6e3b3](https://github.com/event4u-app/agent-config/commit/be6e3b3a3df7aeaefad04976380b403693facbc7))
-* **council:** the necessity gate applies the strict bar inside a host rate window ([604d512](https://github.com/event4u-app/agent-config/commit/604d512a3b630c25a8432e3d6d4188418fce8241))
-* **delegation-nudge:** name the free rung only when the council config declares an unpaid route ([0358a03](https://github.com/event4u-app/agent-config/commit/0358a034ab26d7d13327579938af280933dc0687))
-* **spawn-guard:** shadow line records whether a host rate marker would have held a spawn ([d4c716b](https://github.com/event4u-app/agent-config/commit/d4c716ba4d09504d06eb7ab45c625d7b0aa3b36e))
-* **council:** chair candidates carry route billing, so a free route never chairs (free-hands 4.1) ([2bc7ce4](https://github.com/event4u-app/agent-config/commit/2bc7ce4980a47b86f51a57de430712a352a9e715))
-* **ask:** an exposure ledger per hand route (free-hands 3.6) ([34a1ca4](https://github.com/event4u-app/agent-config/commit/34a1ca4623a3d63b96afd79561a9ef750460bb8a))
-* **hooks:** the host's StopFailure(rate_limit) writes a host-sourced quota marker (cold-start 4.3) ([8dedad4](https://github.com/event4u-app/agent-config/commit/8dedad4f8a57ec2140e318ec7fe60de730f08ec2))
-* **ask:** hands see fragments, never the project (free-hands 3.5) ([3064cf4](https://github.com/event4u-app/agent-config/commit/3064cf43945b7a73ed95469b91610287973b3ab0))
-* **council:** ship route endpoints, discover route models live ([e750d31](https://github.com/event4u-app/agent-config/commit/e750d310834b3a5d05dba25200d7fd59d17a3fb5))
-* **skills:** llm-provider-knowledge gains a free-tier class (free-hands 7.1) ([f89826b](https://github.com/event4u-app/agent-config/commit/f89826b92a9335b09162523ddb05c6b56d53d785))
-* **council:** derive a route's identity from the served model id ([996fd9a](https://github.com/event4u-app/agent-config/commit/996fd9aa4eb59ccd74207c87e53de9b6f1f827fa))
-* **nudge:** name the free rung for a typed hand slice (free-hands 3.4) ([7857d7f](https://github.com/event4u-app/agent-config/commit/7857d7fd868ea9b7a53d54618869e48e9b11babf))
-* **council:** base_url route members with proven billing class ([d0d9dd4](https://github.com/event4u-app/agent-config/commit/d0d9dd44afba079e9102ae17aef0d72b5d2c5282))
-* **economy:** ask_economy gains a billing-class axis (free-hands 6.1) ([449f03c](https://github.com/event4u-app/agent-config/commit/449f03cff02340cdfef46a797d13756fa0e76c02))
-* **ask:** the head verifies every hand, and the line says so (free-hands 3.3) ([619b597](https://github.com/event4u-app/agent-config/commit/619b597a8e3de5c3182aa70bd51ca1bb4e21bce2))
-* **subagents:** the reuse shadow window report and the four flip conditions as code (cold-start 3.5, 3.6) ([943c19a](https://github.com/event4u-app/agent-config/commit/943c19ad967ad9faed45481ac683edd963b60984))
-* **hooks:** spawn-guard-shadow records reuse verdicts and resumes by name (cold-start 3.3) ([c3f7f1a](https://github.com/event4u-app/agent-config/commit/c3f7f1a1999aa42c8a2c5d58d6607cfc88ac1321))
-* **council:** unpaid seats propose and judge, never chair; five-judge cap; n_eff beside kappa (free-hands 4.1-4.3) ([78f7126](https://github.com/event4u-app/agent-config/commit/78f7126f48c9357a7b8a01a6bb9d9ab37a303e91))
-* **ask:** a route chooser replaces the first configured member (free-hands 3.2) ([177c6a8](https://github.com/event4u-app/agent-config/commit/177c6a89ebb63446380fbd577836d03dc1b84b9f))
-* **ask:** typed hand kinds with a JSON output schema each (free-hands 3.1) ([550ac29](https://github.com/event4u-app/agent-config/commit/550ac29e615e855103da945d216ab2d0c84d462f))
-* **egress:** invisible characters and lookalike letters do not hide a value ([2b758dc](https://github.com/event4u-app/agent-config/commit/2b758dcf56ec0530d377807e3f635d83be1e194d))
-* **egress:** validated identifier rows in the one rule table ([40aa265](https://github.com/event4u-app/agent-config/commit/40aa265f1ed59512cf3b2c22d716762d7e04d8b6))
-* **egress:** a loopback canary run through ask_transport (free-hands 1.3) ([ffb6a6b](https://github.com/event4u-app/agent-config/commit/ffb6a6b7226e4255ad6e27619dbb467e8fbd119d))
-* **bench:** the advisor pairing run, advisor usage charged to its arm (tier 3.2) ([c4e4a37](https://github.com/event4u-app/agent-config/commit/c4e4a37e7b4401978f5e19e17e3ef96f3a38ef02))
-* **subagents:** ac-researcher declares lite once both tier claims are backed (tier 2.3) ([5b84014](https://github.com/event4u-app/agent-config/commit/5b84014245fed5512650a775d063821e95fa4d5e))
-* **bench:** paired tier-downshift run and its verdict as code (tier 2.2, 2.3) ([75da434](https://github.com/event4u-app/agent-config/commit/75da434d61417bb7b07971da1a00f38e39e54b7d))
-* **steering:** a lite leg's escalation is a record, never a climb (tier 1.3) ([de939dd](https://github.com/event4u-app/agent-config/commit/de939ddb627fca4dd098aefcedaf8d872cfb4fd2))
-* **hooks:** the delegation nudge names the model value the table earned (tier 1.2) ([1f48d0f](https://github.com/event4u-app/agent-config/commit/1f48d0ff15c1ea848377cdb0731066ebd4c05f33))
-* **telemetry:** every recorded dispatch carries its tier fields (tier 1.1) ([aa74c70](https://github.com/event4u-app/agent-config/commit/aa74c70c5f36d548ed6cac4a134ba02f38b93631))
-* **council:** the Anthropic seat launches light on a probed version ([b63871b](https://github.com/event4u-app/agent-config/commit/b63871b61f8576492470a4aa0d385e1e673c4bec))
-* **council:** probe a lighter seat launch per CLI version (cold-start 5.1) ([eaf5811](https://github.com/event4u-app/agent-config/commit/eaf5811486e9c97891969b46cceae966c63dbb1a))
-* **subagents:** package workers skip project instructions (cold-start 2.5) ([d5afdea](https://github.com/event4u-app/agent-config/commit/d5afdea316a0f816e601c8360fa8b71364a4821e))
-* **release:** review credential-shaped fixtures redacted; replace a detected value everywhere (#2578) ([84beafc](https://github.com/event4u-app/agent-config/commit/84beafcfa099aa1991369e8821533478b3d36fa8))
-* **release:** let a local self-review run be scoped and run to completion (#2575) ([66b8105](https://github.com/event4u-app/agent-config/commit/66b81058818d8a3c3bc4dfa2c7ee59c776fa0c63))
-* **roadmaps:** route a human-owned blocker through the council before filing ([6bfd836](https://github.com/event4u-app/agent-config/commit/6bfd83679927e7d561e645cbaf93c9ad1c995617))
-* **install:** keep every skill a surviving artefact declares in the scoped projection ([d3067c8](https://github.com/event4u-app/agent-config/commit/d3067c8dfa9b9006a6542e298c8b12a8c3e9081e))
-* **retro:** read an analysis round as a retro unit, with adoption only once a roadmap is archived (#2489) ([6fd7c66](https://github.com/event4u-app/agent-config/commit/6fd7c66acc7f7d6d00b6c6a94dc200e4283eab73))
-* **doctor:** report the update verdict read-only in doctor --json (release-impact 4.3) (#2483) ([3ec8d6b](https://github.com/event4u-app/agent-config/commit/3ec8d6b1ecce3dbaf9b9aa8531f7c9b4d017576c))
-* **retro:** held, recurred, or first — and a revert reopens the record (#2453) ([e12c6ab](https://github.com/event4u-app/agent-config/commit/e12c6ab6385c3a31168801d9ff9c1b48e70687be))
-* **release:** Consumer-Impact trailer, prerelease-aware comparator and a pure update classifier (#2421) ([a739e50](https://github.com/event4u-app/agent-config/commit/a739e508c90079f6794f4c6bbd24b39c197ffb40))
-* **self-repair:** scan the pushed commits, name the account, cite one threshold (#2436) ([f147efd](https://github.com/event4u-app/agent-config/commit/f147efd948c21d50ef10c03a28075d64ba2e5fb5))
-* **report:** build the content repeat-share instrument before its window closes (#2423) ([5a70acb](https://github.com/event4u-app/agent-config/commit/5a70acb8c64676b7b40069393fb6a6659580ed25))
-* **install:** compute the rule-layer form from evidence, shadow-only (#2414) ([ee49fd8](https://github.com/event4u-app/agent-config/commit/ee49fd88839e037cd8ec17ee18625b1e40a41d5d))
-* **skills:** resolve every reference link against its own file, one split canon (#2411) ([e1956ea](https://github.com/event4u-app/agent-config/commit/e1956ead7e4014aed572f257825db24874a9634c))
-* **analysis:** scope resolver, run core and loop ledger for the analysis family (#2407) ([629b19d](https://github.com/event4u-app/agent-config/commit/629b19d04308529384578ee21faeeda28391ac59))
-* **skills:** free the host's context key, reach uninstalled skills from the shell path (#2398) ([4b655be](https://github.com/event4u-app/agent-config/commit/4b655be8c045c9b64490144f2cebdfe24e2f1f5b))
-* **cold-start:** runs per leg, reuse decision, capability atoms and baselines (#2403) ([7d9d4ca](https://github.com/event4u-app/agent-config/commit/7d9d4caf4522ff7822511f359b9257f3e5ca3c96))
-* **turnaround:** throughput figures in the turnaround probe, correction and baseline (#2397) ([37d68ce](https://github.com/event4u-app/agent-config/commit/37d68ce64460c76cc22b934f69cb2684d6fd863c))
-* **report:** classify content results exactly as the PREREG registers them (#2396) ([80f646d](https://github.com/event4u-app/agent-config/commit/80f646d34d5168259c5667b3bb0e94cc0b70b305))
-* **egress:** generate the census of this package's own model senders (#2394) ([6e55ba4](https://github.com/event4u-app/agent-config/commit/6e55ba462f084c6691feddaff300a14f5f35ee74))
-* **council:** an unpriced billable seat is a state, not a zero (#2392) ([0a4ffff](https://github.com/event4u-app/agent-config/commit/0a4ffff674d1830c97786c9206b7227b07e59674))
-* **merge:** clearances name their head, a bypass has a closing, the owner's load is a number (#2381) ([73eb694](https://github.com/event4u-app/agent-config/commit/73eb69439b5b9169e9af9311bff69df0d102ace4))
-* **merge:** a danger gate that sees what governs and runs from the base (#2375) ([85d00e5](https://github.com/event4u-app/agent-config/commit/85d00e56a74832f74b4d5c4817181b50ba166097))
-* **hooks:** egress stage in the dispatcher, observe and protect views (placeholders Phase 1) (#2371) ([38542f8](https://github.com/event4u-app/agent-config/commit/38542f8eebaffd240b0e97b240884e72aec709c2))
-* **egress:** contract, rule table and token grammar for egress placeholders (#2366) ([7cd7564](https://github.com/event4u-app/agent-config/commit/7cd7564ebcbd646205dc62e042032e998ecca213))
-* **account-surface:** wire the detector into production-validator and launch-readiness (#2361) ([fd62723](https://github.com/event4u-app/agent-config/commit/fd62723872a1d7f0c4a645403328d6a4eba16dfc))
-* **account-surface:** reconcile threat rows and add the lexical account-flow detector (#2356) ([6aa338f](https://github.com/event4u-app/agent-config/commit/6aa338fd4ae3c9db399b0b2e1ae1f73575a9f7fa))
-* **svg:** discharge the SVG obligation only on a render the hook observed (#2355) ([7614604](https://github.com/event4u-app/agent-config/commit/7614604dc6e74ba63f24445e258f4c760e89b6f1))
-* **release:** apply the owner answer on what a minor may remove (#2344) ([d23dcec](https://github.com/event4u-app/agent-config/commit/d23dcec562b8bc61c2966b3c3545c9ce5bd23b92))
+* **bench:** rerun the tier pair on a pinned tree; both tier claims underpowered ([479bcf0](https://github.com/event4u-app/agent-config/commit/479bcf0c2428d83dca4c21b71471415cbea5cec8))
+* **gate:** a ticked step's tested symbols must reach a production entry ([1fd70d8](https://github.com/event4u-app/agent-config/commit/1fd70d8160dffa8a8cce04912493b405329189f9))
+* **bench:** refuse to price with a stale or older-generation price row ([fe4fa4b](https://github.com/event4u-app/agent-config/commit/fe4fa4bcd7b9bffaba49a233b18a6e82bdcfcc7b))
+* **bench:** bind bench evidence to the commit whose bytes it measured ([9972c55](https://github.com/event4u-app/agent-config/commit/9972c5575f64f8469a05da6e35307e2a1f38b202))
+* **lint:** the owner lock reaches the roadmap decision and blocker lints ([b5bb1a5](https://github.com/event4u-app/agent-config/commit/b5bb1a5e83f2b0f4d9a386c8912b21026a5d4000))
+* **bench:** free-hands shadow harness over the production ask path ([d148952](https://github.com/event4u-app/agent-config/commit/d1489529b8fff772175854d5ec269aea1b7349cc))
+* **bench:** paired quality run for egress placeholders, PREREG (e) ([d5f7f45](https://github.com/event4u-app/agent-config/commit/d5f7f453d9ff94d0e7e1e0fe79fdc9aa5d5a1608))
+* **spawn-guard:** reconstruct the reuse verdict per spawn at report time ([bc48e93](https://github.com/event4u-app/agent-config/commit/bc48e93a918a3c5c19d3e0d36307e1434b79e3d1))
+* **council:** catalogue a keyless first-party route, maintainer-only ([e9009ba](https://github.com/event4u-app/agent-config/commit/e9009baac5f06db9e978e638bc2c5690489ca33b))
+* **spawn-guard:** live worker_resume probe and reconstruction stamps ([4671ab7](https://github.com/event4u-app/agent-config/commit/4671ab758cb2ec6d3505f5121e2785d2eacd0c3c))
+* **hooks:** field-level payload projection for advisory concerns ([e2e04d1](https://github.com/event4u-app/agent-config/commit/e2e04d1aa3f3fcfc6508532d5f82cb93a329927c))
+* **egress:** the IBAN table names its registry release ([ce7783b](https://github.com/event4u-app/agent-config/commit/ce7783bd9f788291df6141bc5052cf5fec874aa4))
+* **council:** a real self-hosted probe for loopback routes ([7b4054e](https://github.com/event4u-app/agent-config/commit/7b4054e5f94b0585384486fe8b3e65e48165bfc6))
+* **ask:** shadow public-artifact typed asks on a free route ([a45480a](https://github.com/event4u-app/agent-config/commit/a45480aaf451d68775c90d22d0956719278bf2ba))
+* **spawn-guard:** index the worker register instead of reading a ledger tail ([40786bb](https://github.com/event4u-app/agent-config/commit/40786bb420c2b52732664c04fd4d098a9f595ea9))
 
 ### Bug Fixes
 
-* **ask:** kind_flip binds isKindFlipped locally after the state split ([f0348e9](https://github.com/event4u-app/agent-config/commit/f0348e97f6bf15efeabfd783dd5e5973825849bd))
-* **spawn-guard:** a worker name reaches the ledger only as a session-bound digest ([7d1db2e](https://github.com/event4u-app/agent-config/commit/7d1db2e068569d8d2a5b0b4763a056d68c6c259e))
-* **egress:** a TokenScope that throws is withheld visibly too ([9c2260c](https://github.com/event4u-app/agent-config/commit/9c2260c94000865ea16af84bf5cf6247bac04a16))
-* **delegation-nudge:** name the free rung only for a kind that has flipped ([2ace081](https://github.com/event4u-app/agent-config/commit/2ace081b28e4521b84ee007bd3c9fcf415af6d8d))
-* **egress:** a throwing engine withholds injected text visibly instead of escaping ([234581b](https://github.com/event4u-app/agent-config/commit/234581b6f79970b70ed5fc0e0bc26a1b4886facb))
-* **council:** the codex seat records thread.started and keeps its sandbox bound on resume ([defbc6f](https://github.com/event4u-app/agent-config/commit/defbc6fdae0c2185e93b4713b9e1b8b98bd38f8d))
-* **ask:** the route adapter reads a base_url member's billing field (free-hands 3.2) ([dde0284](https://github.com/event4u-app/agent-config/commit/dde028435e1b09b5928041a041324c9c696f8260))
-* **egress:** every IBAN registry country masks; credential minimums exercised ([dc8648b](https://github.com/event4u-app/agent-config/commit/dc8648b9acb952c6917804c2223ebec1ad1e4661))
-* **egress:** the canary runs in protect mode and spells no value the census counts (free-hands 1.3) ([61bb246](https://github.com/event4u-app/agent-config/commit/61bb2463f60887c409a6cf1ed2a55fcd6bffc55a))
-* **egress:** the three free-tier rows join every per-row suite (free-hands 1.2) ([9725442](https://github.com/event4u-app/agent-config/commit/9725442e470687dc02a65bc00cfca750abe5de64))
-* **egress:** NANP row matches every shape the stores' old phone regex tagged ([b7b88f3](https://github.com/event4u-app/agent-config/commit/b7b88f35e7c2857023aee57173d89748de963c22))
-* **egress:** stores redact recall-first; balanced phone parentheses; .md domains ([db29db4](https://github.com/event4u-app/agent-config/commit/db29db4ccbe7586aec20fb69f36d4b8fed3ddedf))
-* **egress:** mask bare Hugging Face, NVIDIA and Replicate keys (free-hands 1.2) ([0677711](https://github.com/event4u-app/agent-config/commit/06777113cca281f347328ba49c3ab4136af27cab))
-* **council:** the content ceiling fails closed (free-hands 1.1) ([ec9df20](https://github.com/event4u-app/agent-config/commit/ec9df200789ad9a59e635ad0a105bc9ebf516db5))
-* **claims:** a retired phrasing may not justify parked work either (free-hands 0.2) ([e7c2462](https://github.com/event4u-app/agent-config/commit/e7c2462d9f054da71bd3b3cf5de2a408837e3a36))
-* **bench:** no discordant pair bounds the difference by the rule of three ([b1881b9](https://github.com/event4u-app/agent-config/commit/b1881b977dd527fb5acc915cda5be6f6ab28cb9b))
-* **canary:** a suite whose router never answered is not a routing score ([40482d3](https://github.com/event4u-app/agent-config/commit/40482d31cbd05b583ffc8ed021b7ef99432cb81f))
-* the 17.0.0 self-review findings, second and third wave (#2580) ([5d64cba](https://github.com/event4u-app/agent-config/commit/5d64cba1bde6eb32b9722f00e601a12ca9f947c5))
-* **release:** take back the key 16.5.0 never shipped from the released surface (#2579) ([0a78c53](https://github.com/event4u-app/agent-config/commit/0a78c53e2f064bf276c4562bcfc8d271bcad5eda))
-* the 17.0.0 self-review findings, first wave (#2576) ([816a98e](https://github.com/event4u-app/agent-config/commit/816a98e7381f0ea613e23652d5198cfde22a8a8d))
-* **hooks:** refuse every abbreviation git reads as --no-verify, and scope short -n (#2572) ([feec560](https://github.com/event4u-app/agent-config/commit/feec560b54e2af4cf7caaf23b2f490a91a691ac4))
-* three 17.0.0 self-review findings, and a roadmap for the three accepted as risk (#2571) ([369b8b4](https://github.com/event4u-app/agent-config/commit/369b8b4aac947479cec93e04e6d944142db4fb82))
-* **release:** let the release-shape gate accept the impact-map entry the release writes (#2569) ([4123ea8](https://github.com/event4u-app/agent-config/commit/4123ea8f8ddae26b02a6620a5a35c5d14e85776d))
-* **release:** stop refusing a breaking commit that lost its Consumer-Impact trailer (#2567) ([95dbe28](https://github.com/event4u-app/agent-config/commit/95dbe28f6eea722535bda769d08ad2c61f9f8a82))
-* **ci:** let sync-visibility write metadata with RELEASE_PR_TOKEN (#2566) ([88df4bc](https://github.com/event4u-app/agent-config/commit/88df4bc75ee1a9c4c49d81b089a064f15c2c0fa1))
-* **skill:** keep roadmap-writing within its body ceiling ([4c1cc58](https://github.com/event4u-app/agent-config/commit/4c1cc5822f3c31f91459a80f171d83af05c02071))
-* **review:** R2 findings on the routing ratchet and the settled closures ([cc83373](https://github.com/event4u-app/agent-config/commit/cc83373eb90ff95b586d04bf5a3bb7a99398a738))
-* **language-pin:** a host-wrapped agent message never sets the pin ([0c85ece](https://github.com/event4u-app/agent-config/commit/0c85ece41519d5855744f0f323af41b07f6afa84))
-* **hooks:** re-establish the two drifted Claude Code doc pages (#2514) ([44253c1](https://github.com/event4u-app/agent-config/commit/44253c1027713205ad3c1ad308ee85389c492a8b))
-* **docs:** write the claim's new clause in the house dialect ([620c51e](https://github.com/event4u-app/agent-config/commit/620c51eda9f1b13810acdb703f0df135b15c3be0))
-* **ci:** hold the README word budget and lower the source-size baseline to the CI total ([74db765](https://github.com/event4u-app/agent-config/commit/74db765ef446c6b9b576d9b2bafb5b8684bbf250))
-* **hooks:** judge an inbox path against the tree the command runs in, and let the guard's own remediation through ([2bf64f6](https://github.com/event4u-app/agent-config/commit/2bf64f69910c1a4adb1e38577fabd1f64aa555ec))
-* **upgrade:** an installed package is not a source checkout, so --unattended stops refusing on every one (#2492) ([81a6e63](https://github.com/event4u-app/agent-config/commit/81a6e63fd8a7fcce9e7d837a45303281a9d3cd68))
-* **gates:** retire the expired relates baseline instead of extending it (#2488) ([cf887ff](https://github.com/event4u-app/agent-config/commit/cf887ff746acd20519ce7293d793361dd29f9d8b))
-* **skills:** every SKILL.md link resolves or is a named repo-only class (AC-1) (#2482) ([95b00b6](https://github.com/event4u-app/agent-config/commit/95b00b6569a53d6f0f49626b966278fdb8ff0109))
-* **release:** read Consumer-Impact from every trailer block, not only the last (#2479) ([b2d7b41](https://github.com/event4u-app/agent-config/commit/b2d7b41ce58787e3d4a767d9d8ccc676f28351fd))
-* **analysis:** validated publication target and redirect-free clone (#2477) ([504308f](https://github.com/event4u-app/agent-config/commit/504308ffaa0ef127b90d6837adbffd3ffbe1da48))
-* **tests:** drop the removed linearity field from the session-table fixture (#2478) ([7106101](https://github.com/event4u-app/agent-config/commit/71061011717483a725e1c1fd86f6b423f26e7b45))
-* **ci:** build before measuring the payload, and re-baseline the built surface (#2445) ([2884530](https://github.com/event4u-app/agent-config/commit/288453077e0f4485003c37182cd127c6c17c09ef))
-* **lineage:** parse quoted parents and read direction before reporting (#2417) ([dc480bf](https://github.com/event4u-app/agent-config/commit/dc480bf90fe9b1bd2cac1407b69e0281ca2c114b))
-* **design-fidelity:** one handover shape list, reserved host design names, DTCG alias record (#2412) ([a536e78](https://github.com/event4u-app/agent-config/commit/a536e787795f6744c3e87f682a00d7d5ed5889f2))
-* **drain:** lower the parity baseline to CI's 25 after 2.2e (#2408) ([5fe028f](https://github.com/event4u-app/agent-config/commit/5fe028fd4b1dea233a46344b43ad3a3058f0d4c6))
-* **uninstall:** what the end-to-end run found after #2399 (#2401) ([7af0039](https://github.com/event4u-app/agent-config/commit/7af00395b2d7f17caaa8e610c029e9b3aa2ee809))
-* **uninstall:** purge only the files this package recorded writing (#2399) ([b352d9a](https://github.com/event4u-app/agent-config/commit/b352d9ab8d31a19fcedcd8dd4ed0d1d60f1e16b0))
-* **test-gates:** close road-to-unknowns-that-say-so steps 5.1 and 5.4 (#2393) ([bbae275](https://github.com/event4u-app/agent-config/commit/bbae275b229eab9de799143cf07c2a4a84bac5ea))
-* **ratification:** restore the strippable subject calculator and end the danger-gate window (#2387) ([5fa963c](https://github.com/event4u-app/agent-config/commit/5fa963cec5c9801c589d85990a96fc75b3dcc779))
-* **ratification:** gate the subject calculator and retire its pin (stage 2 of 2) (#2386) ([a7de456](https://github.com/event4u-app/agent-config/commit/a7de45670676940d7675d818fdd6bcf45a4baefb))
-* **ratification:** restore the subject calculator to its pinned blob (#2383) ([9a43fab](https://github.com/event4u-app/agent-config/commit/9a43fabe5fddfbd053811e39bd94844746bc6ace))
-* **ratification:** gate the modules the kernel-edit gate's verdict runs through (stage 1 of 2) (#2379) ([a10aa16](https://github.com/event4u-app/agent-config/commit/a10aa16a1fe1a27b7ff54bcb564154a28877625f))
-* **ratification:** classify the dispatcher closure's base side at the named base commit on every run (#2376) ([e789a13](https://github.com/event4u-app/agent-config/commit/e789a13f823ecc0e44ab180f31a694115d64f5a0))
-* **tests:** deliver the stalled-stdout harness through the stream, not fs.writeSync (#2368) ([a139cd6](https://github.com/event4u-app/agent-config/commit/a139cd6bf273499c65695b38ac0843939a17e508))
-* **hooks:** make the plugin's no-dispatcher branch say so (#2360) ([90ed4e6](https://github.com/event4u-app/agent-config/commit/90ed4e697b28a48c6b1ab80f288d9b3310aa36ed))
-* **scripts:** let large-output gates drain stdout before exiting (#2357) ([555e50a](https://github.com/event4u-app/agent-config/commit/555e50a292eb70fa8beeb4b9fb555682f79a471a))
-* **hooks:** re-establish six drifted vendor docs rows and route the next drift to an issue (#2353) ([7a31fa0](https://github.com/event4u-app/agent-config/commit/7a31fa0edeca93272abcf4e754a0b43a2dc25530))
-* **council:** read member CLI output beyond the default spawn buffer (#2348) ([2fa431c](https://github.com/event4u-app/agent-config/commit/2fa431ccee78cc8f4f165a002b23ab464bb65887))
-* **release-drill:** keep step-2 bump writes off the real tree (#2347) ([b75aaeb](https://github.com/event4u-app/agent-config/commit/b75aaeb39c7d2078642f172c65d0b70a226687a4))
-* **closure:** council decides owner-labelled questions before the owner sees one (#2322) ([1a72534](https://github.com/event4u-app/agent-config/commit/1a725343aa47f13195303f9d5b306acd003ee3fb))
+* **bench:** pace free-hands shadow calls from the last free reply ([c28d888](https://github.com/event4u-app/agent-config/commit/c28d888b6e003db06a642a43db9ccbab829dbaa9))
+* **free-route:** record the id a keyless route actually serves ([9235bdc](https://github.com/event4u-app/agent-config/commit/9235bdc342cf360b36c2a318d67df759d6d3e153))
+* **install:** a pre-ledger global refresh updates untouched files instead of preserving thousands (#2590) ([601abd8](https://github.com/event4u-app/agent-config/commit/601abd83d6a9817435d481267c85c8a69d1b1ae8))
+* **ci:** put the SC2016 directive on the node command it covers ([029da1a](https://github.com/event4u-app/agent-config/commit/029da1a4b509efcc873fb716db4a84338d271e5d))
+* **tests:** pin the aging-hour notice case to midday UTC ([0d2efc5](https://github.com/event4u-app/agent-config/commit/0d2efc5a820bca0a8626e56e933c1b1a35e5ae22))
+* **gate:** assemble the reach self-test fixtures so prepack reads no shipped import ([839a4d5](https://github.com/event4u-app/agent-config/commit/839a4d564c4dd21aaf9d2da4805fd071ac32f69e))
+* **release:** a release waits for no review ledger (#2591) ([e1dde82](https://github.com/event4u-app/agent-config/commit/e1dde822d02de813349b49c23b73317bfa43b27c))
+* **tests:** the identity fixture carries the content ceiling too ([6a35ab8](https://github.com/event4u-app/agent-config/commit/6a35ab8a244b33b3351f0e46a4bac1220ac8d7e2))
+* **tests:** free route fixtures carry the content ceiling the client now requires ([bdaeb97](https://github.com/event4u-app/agent-config/commit/bdaeb972e0ade5281287c6a88c4c493b568de6e8))
+* **config:** the egress chunk raise names only the rows it carries ([8d8f84b](https://github.com/event4u-app/agent-config/commit/8d8f84b41055d3dd70114221ae38569a8982adc0))
+* **bench:** read the store precision bar as PREREG (b) states it ([7c33852](https://github.com/event4u-app/agent-config/commit/7c33852caccbac7097d7d80381a8e0de96d2533b))
+* **redaction:** store rows tag a digit run only where its shape is evidence ([50aa48d](https://github.com/event4u-app/agent-config/commit/50aa48d3019e0555d1948df2957c1e2e997ee67a))
+* **docs:** correct four texts the #2585 review found stale, pin ratification answers ([140eb36](https://github.com/event4u-app/agent-config/commit/140eb36adc4b1f6396d3edb2a4c811f55ca734a5))
+* **hooks:** a host rate marker sets its own source and parked_at ([d4b8475](https://github.com/event4u-app/agent-config/commit/d4b84753c0c7cc111f19d8971f81fa8f6dcdb2b6))
+* **council:** a stance repair never leaves a resume flag behind ([dd2860f](https://github.com/event4u-app/agent-config/commit/dd2860f4d189f1deb3476d6dac05e7c6eb1d6d38))
+* **council:** a base_url route member never holds a head role ([89af384](https://github.com/event4u-app/agent-config/commit/89af38437035c1daf0d3a153739374986d332b05))
+* **council:** shadow calls send the hand payload, not the raw prompt ([788b002](https://github.com/event4u-app/agent-config/commit/788b0029e34a6c419eaae1d58b45c2834efda263))
+* **council:** route members carry their content ceiling ([4ff3a8d](https://github.com/event4u-app/agent-config/commit/4ff3a8d307bb047c2282c6c6f15dd70a3326f883))
+* **council:** refuse a callee that holds more than one declaration ([57c3ba1](https://github.com/event4u-app/agent-config/commit/57c3ba14458288485b9cb503d4514d71f98ad5ce))
+* **tier-verdict:** read quality from an exact one-sided Clopper-Pearson bound ([f7383bd](https://github.com/event4u-app/agent-config/commit/f7383bd7b16f06fd78e87fb4b8d9863830320795))
+* **update:** leave the global installed.lock to the global install ([2a01a5f](https://github.com/event4u-app/agent-config/commit/2a01a5f785ba11698bc047f4e3da95e6d77e5fb8))
+* **ci:** silence the deliberate SC2016 in the egress latency step ([d104626](https://github.com/event4u-app/agent-config/commit/d10462685e34a131cfbe4c63bf5d80c6e1660480))
+* **report:** close the reconstruction review findings and add the secondary (c) reading ([607fe33](https://github.com/event4u-app/agent-config/commit/607fe33bbc05b3b430d32995dc1ab21016ffcc5b))
+* **bench:** free-hands shadow harness — retry, streak stop, window-scoped report ([1f6b85f](https://github.com/event4u-app/agent-config/commit/1f6b85f691a4f58a11f566a3c5e40df611cc67fe))
+* **council:** hand a route member's key reference to the self-hosted probe ([73e7bf8](https://github.com/event4u-app/agent-config/commit/73e7bf85592539ac3621b4d04b9a6c608679caa8))
+* **hooks:** close the review findings on the ledger index and the projection ([3158fc5](https://github.com/event4u-app/agent-config/commit/3158fc5e741b3af321db9abba0d9730c9b5bd188))
+* **bench:** exclude unparsed sessions and re-read the warm-worker claims ([5de579f](https://github.com/event4u-app/agent-config/commit/5de579f5a7af78cf737cb92dd811514d945ee9a3))
+* **council:** give the first-party route gate a roster writer, a shared root and a normalised match ([3b1ebcc](https://github.com/event4u-app/agent-config/commit/3b1ebcc71f0563f92e62c895f40ca611137f6a15))
+* **council:** harden the self-hosted probe memo, scratch dir, models dir and auth ([96ed61d](https://github.com/event4u-app/agent-config/commit/96ed61de0d61546c9bc771e138a09c2cd72cdd83))
+* **ask:** bound the shadow wait and record free exposure only when called ([32fc497](https://github.com/event4u-app/agent-config/commit/32fc4978c8dec8087464b669742e7a0e3387cddb))
+* **spawn-guard:** close the ratification's three non-blocking findings ([667ec17](https://github.com/event4u-app/agent-config/commit/667ec17701e61628a3c07f8da1269ac8083dd19e))
+* **council:** forward base_url route fields through the settings block ([e9312ba](https://github.com/event4u-app/agent-config/commit/e9312bad3de02a155e182b1c44dc137920cc74dd))
 
 ### Reverts
 
-* **skills:** keep llm-provider-knowledge triggers at the pinned corpus bytes ([78c0df7](https://github.com/event4u-app/agent-config/commit/78c0df72c14e5705fad228ecf041f8abb9abe706))
-* **hooks:** withdraw the speaking-inbox guard change the council refused 2/2 ([37f0be5](https://github.com/event4u-app/agent-config/commit/37f0be502766f119eb964499c4d54309687e5007))
+* **subagents:** package workers load project instructions and ac-researcher inherits again ([e3f32ac](https://github.com/event4u-app/agent-config/commit/e3f32ac44a414d4e2bc25491c0ccf283004e0b3b))
 
 ### Documentation
 
-* **decisions:** admit the host-rate-marker concern ([8bb61b5](https://github.com/event4u-app/agent-config/commit/8bb61b5e5d7c97379af412ba30bc9fccdabac36f))
-* **roadmaps:** cold-start claims the one concern its step 4.3 adds ([053ac1e](https://github.com/event4u-app/agent-config/commit/053ac1e63ff6f6e7f5e2005dadd4bc05e76eb9fd))
-* **roadmaps:** re-review the cold-start and one-detector risk registers ([7e786f5](https://github.com/event4u-app/agent-config/commit/7e786f5ee75cd845240b0fcd2677c266b20d86d7))
-* **roadmaps:** close one-detector 2.3, 2.5, 2.6, 3.3, AC-1 and AC-2 ([c862ea4](https://github.com/event4u-app/agent-config/commit/c862ea4f420ceeb16b2545b5296cfe14d61a9913))
-* **evidence:** ratification of the branch's gated hook plumbing, 2/2 after three rounds ([787f8a3](https://github.com/event4u-app/agent-config/commit/787f8a3ec0acda1a25e3ddbf7f46e720a8546074))
-* **evidence:** commit the ratification round-3 prompt verbatim ([5f3c5be](https://github.com/event4u-app/agent-config/commit/5f3c5be58790db96b178c44fa67ab5fa200961f1))
-* **roadmaps:** cold-start 3.6 note fits the complexity cap ([f3534c4](https://github.com/event4u-app/agent-config/commit/f3534c490aa977cff6d37f5be991be525ccc22d0))
-* **roadmaps:** cold-start 3.3 records the name digest; 3.6 owes an indexed register before a flip ([166991b](https://github.com/event4u-app/agent-config/commit/166991b86be490ae600fab9bdbae8384d8d6f71b))
-* **evidence:** commit the ratification round-2 prompt verbatim ([4719956](https://github.com/event4u-app/agent-config/commit/4719956bf4f908f8ee8cd756e6568012aef9510b))
-* **hooks:** reconcile the engine chunk measurement and say rate_limit is unobserved ([be08dc0](https://github.com/event4u-app/agent-config/commit/be08dc0b678218b788cb72ce390b8ac19d0e6107))
-* **evidence:** commit the ratification round-1 prompt verbatim ([cd57650](https://github.com/event4u-app/agent-config/commit/cd57650c3751559187435e6e8b53b06a5f3dabfd))
-* **roadmaps:** free-hands 1.2 names egress_credential_env.ts ([e9e658c](https://github.com/event4u-app/agent-config/commit/e9e658cba69af2988d44db362ea5b8e603ec7516))
-* **hosts:** Claude Code binds ten lifecycle slots since StopFailure ([835716a](https://github.com/event4u-app/agent-config/commit/835716a6d6ac645c4aeb1bc4c8cbf68ff06ad07e))
-* **egress:** the route catalogue's /models discovery joins the sender census ([198e176](https://github.com/event4u-app/agent-config/commit/198e17629fe7be5d57a8803118fd8cf4b16c13cf))
-* **evidence:** type the owner-blocker council question ([ae861da](https://github.com/event4u-app/agent-config/commit/ae861da112fe5c8189b981837df35e9edfdde8c8))
-* **roadmaps:** close free-hands 5.1-5.3, 6.3 and AC-6; 6.2 built, waiting on its window ([d43c719](https://github.com/event4u-app/agent-config/commit/d43c719e7ccf38b9b962cdfc994072f06921cb85))
-* **council:** route liveness streaks in the base_url route contract (free-hands 5.1) ([5518071](https://github.com/event4u-app/agent-config/commit/5518071217e56b8eb0866fa310c99f9fc277b6ad))
-* **roadmaps:** step evidence fits the complexity cap ([3b1c434](https://github.com/event4u-app/agent-config/commit/3b1c434e27b08dc448de77c84700c5eb59a56f7d))
-* **roadmaps:** free-hands 3.6 names the paid-route exposure question as an owner item ([9583254](https://github.com/event4u-app/agent-config/commit/9583254c5ed110c4828cd3495d70a4317c71d348))
-* **roadmaps:** close free-hands 2.2-2.5, 3.1-3.6, 4.1-4.3, 6.1, 7.1 and five acceptance criteria ([c6f9eb2](https://github.com/event4u-app/agent-config/commit/c6f9eb2060386e3036ae7b9bf70eba018937c08e))
-* **roadmaps:** close cold-start 3.3, 4.3, 4.5, 5.2, 5.3 and six acceptance criteria ([aaf8c99](https://github.com/event4u-app/agent-config/commit/aaf8c99cc1096ff60c5c043caea9ad1bdc545e40))
-* **council:** describe base_url route members ([b64e3ef](https://github.com/event4u-app/agent-config/commit/b64e3ef140dc544b722536ad5a32b22cc02a3222))
-* **claims:** pre-register free-jury-effective-independence, free-hands-limit-relief and free-hands-quality-held ([25df57a](https://github.com/event4u-app/agent-config/commit/25df57a81477eaf7455195cce98a8ca5a11e8cdb))
-* **roadmaps:** cold-start 3.5 and 3.6 built, waiting on the shadow window ([9a613e4](https://github.com/event4u-app/agent-config/commit/9a613e4d35dbf35835ec03993a5e9401a6f4f508))
-* **egress:** commit the round-6 ratification prompt verbatim ([c63c854](https://github.com/event4u-app/agent-config/commit/c63c85441eecacb4a0f9e05ad382e9e8cae90cda))
-* **roadmaps:** close free-hands 2.1 ([458275c](https://github.com/event4u-app/agent-config/commit/458275c9608608b0c0556e0ceaf7428037a7709c))
-* **roadmaps:** close free-hands 1.3 ([0a930e6](https://github.com/event4u-app/agent-config/commit/0a930e6c4703ed7dd4844d82b8322f51b62fcfde))
-* **egress:** commit the round-5 ratification prompt verbatim ([c6d61d5](https://github.com/event4u-app/agent-config/commit/c6d61d589b191c2a63dedfdda4ec1b46df89f83b))
-* **roadmaps:** close tier 3.2 and AC-1 to AC-6 ([25d323c](https://github.com/event4u-app/agent-config/commit/25d323c3b95969207ab325229416e2cb5354a6b2))
-* **evidence:** the advisor pairing run is a recorded null (tier 3.2) ([23428d8](https://github.com/event4u-app/agent-config/commit/23428d8b20a84246c7897954f614f9bdf5cab149))
-* **egress:** commit the round-4 ratification prompt verbatim ([ef09b25](https://github.com/event4u-app/agent-config/commit/ef09b25f20f14024acf943c8fc2b446f4af541b6))
-* **egress:** commit the round-3 ratification prompt verbatim ([372cea3](https://github.com/event4u-app/agent-config/commit/372cea38223b0a4d0e67d98a48be27843e92de2c))
-* **egress:** commit the round-2 ratification prompt verbatim ([3dc8350](https://github.com/event4u-app/agent-config/commit/3dc83504c55381bfc3ed185c636e511d210fce06))
-* **egress:** name how each credential-only reader reads, and why 2.7 precedes 3.3 ([5f12233](https://github.com/event4u-app/agent-config/commit/5f1223392aef7a05466e716fd23b51764bab0381))
-* **egress:** contract and roadmap for 1.2, 2.3, 2.4, 2.5 and 3.2 ([0721e39](https://github.com/event4u-app/agent-config/commit/0721e39091535e60b13c9b2457e9666c70af2819))
-* **roadmaps:** close free-hands 1.2 ([0541883](https://github.com/event4u-app/agent-config/commit/054188396de723e649cdfb95499c00ccd45bc5d6))
-* **roadmaps:** close free-hands 1.1 ([d811e5b](https://github.com/event4u-app/agent-config/commit/d811e5bc11022e1eb5710740bf4fd50b45e3aa72))
-* **roadmaps:** close free-hands 0.2 ([88fd495](https://github.com/event4u-app/agent-config/commit/88fd49569b601d8f44dc9bc38a4aada45706713b))
-* **roadmaps:** close free-hands 0.1 ([fe74027](https://github.com/event4u-app/agent-config/commit/fe740272fd98fb845f38dc82e0dd654097892ec3))
-* **evidence:** classify the canary's uniform zero (free-hands 0.1) ([15d00c9](https://github.com/event4u-app/agent-config/commit/15d00c94204361ba41f0c9bb8601fe58971fbd0b))
-* **roadmaps:** council defaults for the three owner blockers; close tier 2.2, 2.3, 4.4 ([4b00985](https://github.com/event4u-app/agent-config/commit/4b009857dc7d2c5fb0e777dacba1c3db399d39c5))
-* **evidence:** the tier-downshift paired run, 60 pairs (tier 2.2) ([573393f](https://github.com/event4u-app/agent-config/commit/573393fd0fa5a8359bf98e5945451b0d879cdf2c))
-* **claims:** pre-register the advisor pairing claim (tier 3.2) ([a8ac989](https://github.com/event4u-app/agent-config/commit/a8ac989ea3631e6f2864c3cd4f3f84aef0ea3654))
-* **roadmaps:** close tier 3.1 ([c52d26f](https://github.com/event4u-app/agent-config/commit/c52d26fa854e970acc838fd8a7a26cd10127186f))
-* **evidence:** a dispatched worker can run with an advisor on 2.1.308 (tier 3.1) ([f3a3b4d](https://github.com/event4u-app/agent-config/commit/f3a3b4dcc7a28f077a441d136d4cfa8276a5db25))
-* **roadmaps:** close tier 2.1 ([f4e20ba](https://github.com/event4u-app/agent-config/commit/f4e20ba12f15afb11b3fee54a21a15fa64b738d6))
-* **claims:** pre-register the two tier-downshift claims (tier 2.1) ([e61a0db](https://github.com/event4u-app/agent-config/commit/e61a0db79c926a7c381807ca0853b9419fe9dc72))
-* **roadmaps:** close tier 1.3 ([c3bcf6d](https://github.com/event4u-app/agent-config/commit/c3bcf6d99f4aaa021bd44bca06d25f7bc053c913))
-* **roadmaps:** close tier 1.2 ([48e6a34](https://github.com/event4u-app/agent-config/commit/48e6a343d8bd44ca5e8b932188adeb1d5b666e18))
-* **roadmaps:** close tier 1.1 ([6c78380](https://github.com/event4u-app/agent-config/commit/6c783806b84cfa3485329034f5040328b05884a9))
-* **roadmaps:** close tier 0.1 and 0.2 ([a2bc18e](https://github.com/event4u-app/agent-config/commit/a2bc18eb94669f783750e8169b7c435b9c115c75))
-* **evidence:** tier realisation over 14 days and the per-call model probe (tier 0.1, 0.2) ([7042888](https://github.com/event4u-app/agent-config/commit/70428884f15a0cadc7d6846754d961fc01664481))
-* **roadmaps:** close cold-start 5.1 ([5de4c73](https://github.com/event4u-app/agent-config/commit/5de4c73626e5fb6a91ecf5d58fc449a7efb274d5))
-* **roadmaps:** close cold-start 2.5 and 6.5 ([fdc91fe](https://github.com/event4u-app/agent-config/commit/fdc91febe7f1cd8eb06350eba7b8773cc399a7d7))
-* **evidence:** hand the skip reading to the per-spawn standing report (cold-start 6.5) ([5e390f6](https://github.com/event4u-app/agent-config/commit/5e390f63ab840bf3496123ae1f486e735aa8322e))
-* **roadmaps:** loopback is a precondition, not proof; the canary may refuse (#2584) ([5653d32](https://github.com/event4u-app/agent-config/commit/5653d32f328a155710f49c364c1a8a9d1317b696))
-* **roadmaps:** a tier the dispatch carries, folded into the #2582 free-hands plan (#2583) ([43a0cb2](https://github.com/event4u-app/agent-config/commit/43a0cb20ec3356ea00591ddc66f731d22d9b8cf7))
-* **roadmaps:** free routes as bounded hands, seat failure classes, host inputs, workflow floors (#2582) ([01ae122](https://github.com/event4u-app/agent-config/commit/01ae122acbbaac8fdf11b968b59f9dbcb877e53e))
-* **placeholders:** record three review rounds on the rewrite path and the reverted change (#2560) ([ee183b7](https://github.com/event4u-app/agent-config/commit/ee183b7a4804c359a2789030fde970cb32e7ba6e))
-* **evidence:** observe resume admission, the skip flag and named spawns on 2.1.306 (#2554) ([3d3a357](https://github.com/event4u-app/agent-config/commit/3d3a3576fc1a0fd6eef18fb561b8937732e79c37))
-* **evidence:** probe Claude Code 2.1.304 rewrite channels and record one release of observe readings (#2530) ([8e23f81](https://github.com/event4u-app/agent-config/commit/8e23f812572e5477d038a951a5369944473a2884))
-* **review:** rebind the R2 findings after the verify-clause fix ([8d78347](https://github.com/event4u-app/agent-config/commit/8d78347cf87a04d0fced19cc558cb63d339d0bf1))
-* **roadmap:** verify clauses state an oracle the gate can read ([6267d59](https://github.com/event4u-app/agent-config/commit/6267d594d39fd22b0adb108cf84286fdb6569fba))
-* **review:** rebind the R2 findings after the skill-ceiling fix ([81a27c1](https://github.com/event4u-app/agent-config/commit/81a27c103ba8d86956e0b94e589a34317e63f511))
-* **review:** bind the R2 findings to the re-applied fix commit ([abf07a5](https://github.com/event4u-app/agent-config/commit/abf07a5d81b8b4c41f1415a104c3ba9dda29d08d))
-* **review:** R2 completion review for the blocker-routing change, nine findings dispositioned ([7929df8](https://github.com/event4u-app/agent-config/commit/7929df85836969d7555588e80a949432a6494295))
-* **roadmap:** close two blockers the tree settled, archive the routing roadmap ([981b285](https://github.com/event4u-app/agent-config/commit/981b285139982bcb341a599d0e98f0490e586356))
-* **roadmap:** close the replay blocker its own Resolved-when already settled (#2523) ([88efaa5](https://github.com/event4u-app/agent-config/commit/88efaa56822c821730931c9c1d0c9e703c9e949d))
-* **roadmap:** blocker causes measured, plan to route blockers before filing ([f511892](https://github.com/event4u-app/agent-config/commit/f51189289124c7697bada6a2db07938a5a9e2261))
-* **roadmap:** close 3.1 and 6.3, record the 0.2 and 0.3 probe rounds ([51cacf1](https://github.com/event4u-app/agent-config/commit/51cacf14c04990113c8e90d985a3d62928b4a6d9))
-* **roadmap:** authority routing — classification taxonomy round and the owed AC-4 widening (#2511) ([97393d8](https://github.com/event4u-app/agent-config/commit/97393d8479972f60a024cdb30282f7d3e4e5b139))
-* **roadmap:** reopen Phase 3 after the council refused the guard change ([6cfbfe3](https://github.com/event4u-app/agent-config/commit/6cfbfe32edffb83b552bbeb9d5668431cd73c6e7))
-* **evidence:** record the speaking-inbox guard review, refused 2/2 — prompt, both seat texts, the record ([56ce772](https://github.com/event4u-app/agent-config/commit/56ce772f3dd245d6b57092997034248e416eed7e))
-* **roadmap:** close Phase 3 of road-to-gates-that-read-what-was-written ([0c32dc7](https://github.com/event4u-app/agent-config/commit/0c32dc78dab4230eb1a59680eb9fe1db04881fc6))
-* screen Phase 7 of the authority-routing roadmap (#2475) ([9f1abaf](https://github.com/event4u-app/agent-config/commit/9f1abaf577a1cf5c3396f3777245bfc26c89fcb5))
-* record what Codex reads of the global install (#2474) ([ee1c771](https://github.com/event4u-app/agent-config/commit/ee1c77192d160fb61a7558c99d89cc179b3d7b87))
-* **roadmap:** record the 2026-10-18 screen of tool results that leave a handle (#2456) ([324a230](https://github.com/event4u-app/agent-config/commit/324a230ade7cedb4955393152c2e4b86e987ad1e))
-* **roadmap:** screen every open throughput step, and record 4.3's blocker (#2451) ([d4675ef](https://github.com/event4u-app/agent-config/commit/d4675ef29c5c3f2e7ac02f4cf4937069ada8d868))
-* **roadmap:** route Phase 4 and 5 through the council and re-open the pilot pick (#2452) ([1600f78](https://github.com/event4u-app/agent-config/commit/1600f782d800e48a4c9568de8a31c65b3174a25e))
-* **roadmap:** close AC-8 and archive road-to-truthful-surfaces (#2446) ([8d7d0d7](https://github.com/event4u-app/agent-config/commit/8d7d0d7e8341c1ff504d3d9af521560019d67fc2))
-* **roadmap:** say why no agent lane can close the rest of self-modification (#2443) ([5cc0841](https://github.com/event4u-app/agent-config/commit/5cc0841dfa460a42a33e444ba8e17353b6e722e5))
-* **roadmap:** re-measure the 16 live-tree checks for authority-routing 7.1 (#2437) ([5a9f563](https://github.com/event4u-app/agent-config/commit/5a9f563056840cb0384e01e5c801d04709a8b5f2))
-* **retro:** file the owner directive and write the retro v1 contract (#2413) ([fe7a22c](https://github.com/event4u-app/agent-config/commit/fe7a22c6d6a36750e256e31748b0dc70e1b19d71))
-* **adr:** ADR-287 — the estate shrinks by finishing, not by capping (#2405) ([d324067](https://github.com/event4u-app/agent-config/commit/d324067878cb33873d0c6c8c29542eff8bfe2ee6))
-* **typography:** one value per question, font delivery mechanics, counter rule, registry intake (#2404) ([7686dbf](https://github.com/event4u-app/agent-config/commit/7686dbfa8a0b9b4948db2d33d6e2cd7736452538))
-* **runtime-classes:** classify the request gateway before it is built (#2402) ([8f22f6b](https://github.com/event4u-app/agent-config/commit/8f22f6b7aad28b5559efc117fb1efbbec4c25e6f))
-* **adr:** ADR-286 — discoverability is a goal, asking is not (#2395) ([26c06ae](https://github.com/event4u-app/agent-config/commit/26c06aef7fee1af9c8247b605b2744409313e367))
-* **roadmaps:** seven plans from inbox round inbox-2026-10-t (#2391) ([0382c08](https://github.com/event4u-app/agent-config/commit/0382c08855a94f18308d5cbf6038c911a723bff8))
-* **ratification:** the gate's header states which of its paths no hook denies (#2390) ([31a0c61](https://github.com/event4u-app/agent-config/commit/31a0c6181db578bd113abf86e5c382960cb13e9b))
-* **roadmap:** re-screen the installed-layer roadmap with a fresh opt-in measurement (#2389) ([8d0fade](https://github.com/event4u-app/agent-config/commit/8d0fade11eda32aa8e3c8fe5dba430a212b71e3e))
-* **ratification:** record the owner's after-the-fact decision on #2376 (#2380) ([fb5f199](https://github.com/event4u-app/agent-config/commit/fb5f199b82c7adb7b3ec328734be8f9a1e5bc4d8))
-* **roadmaps:** record the owner's four decisions from inbox round inbox-2026-10-s (#2377) ([f998ea3](https://github.com/event4u-app/agent-config/commit/f998ea3b52d9c505f38a85dc235b46759ec4eabc))
-* **roadmaps:** inbox round inbox-2026-10-s — three ready roadmaps (#2373) ([fd29490](https://github.com/event4u-app/agent-config/commit/fd29490204b9abcc097a0baa8dae881176bb57a1))
-* **roadmap:** redesign tool results that leave a handle around a content profile (#2372) ([8716c22](https://github.com/event4u-app/agent-config/commit/8716c227665ecc4508879dde1c89b063c94522e3))
-* **roadmaps:** record why placeholders-on-the-wire Phase 1 cannot start yet (#2364) ([be11ed6](https://github.com/event4u-app/agent-config/commit/be11ed686855e74d800c338619fe31e08cb49875))
-* **roadmaps:** record why tool-results-handle cannot start yet (#2362) ([13c13e4](https://github.com/event4u-app/agent-config/commit/13c13e40031ee24c6a3b26e16d3fbfea02f74ba8))
-* state the SKILL.md format instead of claiming standard conformance (#2350) ([0e0d95c](https://github.com/event4u-app/agent-config/commit/0e0d95c8481fb8cccba843e3b1a80ff056cfca36))
-* **evidence:** a project skillOverrides value beats a user value (#2349) ([7b236a0](https://github.com/event4u-app/agent-config/commit/7b236a00f0e7166a31f69c8db446278e130bced5))
-* **roadmaps:** close 6.1 on the calendar, and mark what shares the Phase 2-3 gate (#2314) ([5673eff](https://github.com/event4u-app/agent-config/commit/5673effeff9b4288444f1286a1327082ef352ca4))
-
-### Refactoring
-
-* **council:** the seat launch environment moves out of clients.ts ([fb0a5e7](https://github.com/event4u-app/agent-config/commit/fb0a5e72cc3cb70efc31106829538a67bacb52f7))
-* **council:** one provider table (free-hands 2.1) ([09507c1](https://github.com/event4u-app/agent-config/commit/09507c15103c7c4cf5582ad213555ec13f5f02f9))
+* **roadmaps:** record the owner round and the council answers of 2026-10-23 ([f255228](https://github.com/event4u-app/agent-config/commit/f255228f48439cf83733535896162ccf537ca35f))
+* **roadmap:** give the two new verify clauses an expectation ([948233e](https://github.com/event4u-app/agent-config/commit/948233effddd60a6275eb04ec0034f2fbc6795a1))
+* **evidence:** ratify the raise_log correction, council round 3 of 2026-10-23 ([cb7da1f](https://github.com/event4u-app/agent-config/commit/cb7da1f8c2d747df7563999cd286a54c9eaa1ccd))
+* **roadmap:** close AC-1, 2, 3, 5 and 7 of the tick roadmap ([16824c0](https://github.com/event4u-app/agent-config/commit/16824c000193e87fd0a002e5fa99ed319056db43))
+* **roadmap:** receipts on the last six ticks ([59ec06d](https://github.com/event4u-app/agent-config/commit/59ec06df41184cea1df56fa1c082dcf094966071))
+* **roadmap:** tick Phase 4, 1.4 and 6.1; receipts on every new tick ([7f9509f](https://github.com/event4u-app/agent-config/commit/7f9509fdc03c080407cce6e52b4dce50bfd4f2f0))
+* **evidence:** replay every #2585 tick and fingerprint the main residue ([f3de42e](https://github.com/event4u-app/agent-config/commit/f3de42eff643a023ad3b14edc4460e8f97d04691))
+* **bench:** record the PREREG (b) store reading, 0.55 % of tree files ([342cc7a](https://github.com/event4u-app/agent-config/commit/342cc7a374b1b52dd6dea4544f335dc2c5565f3b))
+* **roadmap:** keep step 2.2 under the step cap ([2c28cc8](https://github.com/event4u-app/agent-config/commit/2c28cc826830d13f1810450cfba7927917c5dcf1))
+* **roadmap:** shorten the one-detector 2.5 reopen note under the step cap ([a336969](https://github.com/event4u-app/agent-config/commit/a3369697781104026a0122fc48de41f7072b25b0))
+* **roadmap:** road to a tick the shipped path earns, from inbox round 2026-10-aa ([9023428](https://github.com/event4u-app/agent-config/commit/90234285623d0727fc23e5cbd4fd568f4c6c40a3))
+* **readme:** move the downloads badge beside the artefact counts ([6a0c9ea](https://github.com/event4u-app/agent-config/commit/6a0c9ea156785fc861bedcf8af9488120d0eefb5))
+* **roadmaps:** owner rows read 'owner'; step notes trimmed under the word cap ([656a135](https://github.com/event4u-app/agent-config/commit/656a13553994a8b04b6271217d30412689ad1089))
+* **roadmaps:** risk registers re-reviewed 2026-10-23; owned digest regenerated ([5831666](https://github.com/event4u-app/agent-config/commit/5831666901f4b7f8dea0ee4b1f2d57ea98b4eff0))
+* **roadmaps:** archive the completed tier roadmap; risk registers re-reviewed ([5e46c8a](https://github.com/event4u-app/agent-config/commit/5e46c8a49afd6f320139044221a39d54d00df950))
+* **roadmaps:** cold-start 3.5, 6.2, AC-2 and AC-8 close; 3.6 stays open, evaluated ([b6f7142](https://github.com/event4u-app/agent-config/commit/b6f7142204ccbbfbc447ee8b0dfeb3fd2462feab))
+* **bench:** amend the free-hands PREREG before the first scored call ([4449316](https://github.com/event4u-app/agent-config/commit/44493165ebbeee3673ae2ad6ff4c9de6c6494fc2))
+* **council:** condition (c) split twice; keep it and add a second reading ([df1947a](https://github.com/event4u-app/agent-config/commit/df1947a2542d7f650a9004308ce5c16157f09d80))
+* **claims:** dated verdicts for the four cold-start claims ([c8028f5](https://github.com/event4u-app/agent-config/commit/c8028f5b27a72d096e4652268dda8121374ec2d7))
+* **evidence:** file the reconstructed reuse window and the warm-worker readings ([d38df92](https://github.com/event4u-app/agent-config/commit/d38df921bf13401c08ee0e7d6e539b75f22ef25b))
+* **roadmaps:** free-hands 6.2 and AC-3 — wired, harnessed, live run pending an operator ([b5d61ac](https://github.com/event4u-app/agent-config/commit/b5d61acb36fe602c8e1a9c2edb432ebd6cff3681))
+* **ratification:** gated hook plumbing of the #2583 rest, 2/2 ratified ([bc07604](https://github.com/event4u-app/agent-config/commit/bc07604dd44faae97d7bd4c93802506cca8d220c))
+* **roadmaps:** track the block-credential-reads false positive on filter expressions ([e157166](https://github.com/event4u-app/agent-config/commit/e1571668041fe58eb53a36758fe10db21fcd8da2))
+* **roadmaps:** record the indexed register, the real probe, the attested route and AC-6 (c)/(e) ([a9da06f](https://github.com/event4u-app/agent-config/commit/a9da06f81a39658c7a12bc049f9a096d889d07b1))
+* **bench:** pre-register the free-hands shadow window ([1bc9c41](https://github.com/event4u-app/agent-config/commit/1bc9c41c5dcc2ae4f6713c093e583072dd6d9936))
+* **evidence:** accepted evidence-type marker on the two council prompts ([45b288d](https://github.com/event4u-app/agent-config/commit/45b288d451141188177676fa80c0a8fcbd0cd3e4))
+* **roadmaps:** owner decisions O1–O6 and the council's three design calls ([a3c9cce](https://github.com/event4u-app/agent-config/commit/a3c9cce472ab21658f98f8f9a4acbd4240c7811b))
 
 ### Tests
 
-* **egress:** the store-redaction test moves out of the shipped tree ([b48e33b](https://github.com/event4u-app/agent-config/commit/b48e33b53b7e52fc93b99b2b9333e0238e640c0b))
-* **spawn-guard:** payload bodies and the raw agent id never reach the ledger ([ef3b951](https://github.com/event4u-app/agent-config/commit/ef3b951c2a7958c0e0d8b494b50f0f76243acc4e))
-* **worker-reuse:** type the spawn helper's reuse as present ([38bbdf9](https://github.com/event4u-app/agent-config/commit/38bbdf919bd00926bc239fbd883137a4a6d47aa3))
-* **council:** pin the self-hosted route's probe gate ([15d021b](https://github.com/event4u-app/agent-config/commit/15d021b4a28d49c9e1e948b5bddb0fee9cbe0b30))
-* **egress:** the F1 sample leaves with five placeholders; the canary is shown sensitive (one-detector 3.3) ([34b0f37](https://github.com/event4u-app/agent-config/commit/34b0f37d698a345928463d04ad31042bf9f42392))
-* **egress:** the IBAN checksum mutation joins the mutation suite (one-detector 2.6) ([8332c8b](https://github.com/event4u-app/agent-config/commit/8332c8be015a6869ba95ab2ea7f84aa9ba408659))
-* **egress:** compact NANP and deliberate losses run through both stores ([925c4e1](https://github.com/event4u-app/agent-config/commit/925c4e19d53ecef464d24982196b47ff2565ba02))
-* **subagents:** ac-researcher's tier follows the backed claims (tier 2.3 gate) ([6935b7a](https://github.com/event4u-app/agent-config/commit/6935b7ae51339709a1f2b29b46cdab6a7d3fd40f))
-* **probes:** record the second host's skill-listing behaviour ([5378bdc](https://github.com/event4u-app/agent-config/commit/5378bdc6ff5243f88d768b3aefa0dfdb0fa9db3b))
-* **install:** back hook-dispatch-latency with a real-install harness case (#2480) ([2950094](https://github.com/event4u-app/agent-config/commit/2950094566ea720cba6adc8929f705ffc3666f26))
-* **install:** back two consumer claims with real-install harness cases (#2459) ([97421e8](https://github.com/event4u-app/agent-config/commit/97421e883caf74f163b0b4a892b96cac228132f8))
-* **egress:** prove the stage counted the credential in the same dispatch (#2426) ([0122c02](https://github.com/event4u-app/agent-config/commit/0122c02f9aec04c1581bd3473faf94b25d312187))
-* **merge:** skip the strip-types danger-gate test exactly while the pinned blob is in place (#2384) ([9b6ff1a](https://github.com/event4u-app/agent-config/commit/9b6ff1a5b3d1f5572670f4b1c1d091441065b9cd))
-* ratchet consumer-fragile npx tsx invocations and pin the release-e2e selector refusal (#2369) ([94f9143](https://github.com/event4u-app/agent-config/commit/94f91431abaabae256b3ecbd616014449add99b0))
-
-### CI
-
-* green in minutes — four CI-speed roadmaps, executed (#2577) ([e6d0652](https://github.com/event4u-app/agent-config/commit/e6d0652c4283596f33afed201b9d3a032373d430))
-* **drain:** wire step 2.2's residue (2.2f) (#2410) ([4a5ac1a](https://github.com/event4u-app/agent-config/commit/4a5ac1a59c6bdccedd60b65583bd5bf8204e8bb7))
-* **drain:** wire step 2.2's fifth batch, the last of the wire-class window (2.2e) (#2406) ([00b23ab](https://github.com/event4u-app/agent-config/commit/00b23aba3d1085620ad7fd8b4049161990eff21c))
-* **drain:** wire step 2.2's fourth batch of local-only gates (2.2d) (#2400) ([a5cef31](https://github.com/event4u-app/agent-config/commit/a5cef31e1673842ee26ec4d0daf63dde60321b06))
-* **drain:** wire step 2.2's third batch of local-only gates (2.2c) (#2388) ([b174141](https://github.com/event4u-app/agent-config/commit/b17414109f933d0d241c63e40f826dab5c517b4d))
-* **drain:** wire step 2.2's second batch of local-only gates (2.2b) (#2385) ([433d3eb](https://github.com/event4u-app/agent-config/commit/433d3ebc5b578b7284eea2f1589d6b993ce30b35))
+* **advisories:** pin the aging-hour case to midday UTC ([5412135](https://github.com/event4u-app/agent-config/commit/54121352fa8924dcf174764f84cc644d9e05824f))
+* **bench:** worker-resume harness over a roadmap citation audit ([e382a41](https://github.com/event4u-app/agent-config/commit/e382a419691d38140987e17846c74c329831c61c))
+* **bench:** measure PREREG (c) round trip on the identifier class ([86e8f46](https://github.com/event4u-app/agent-config/commit/86e8f467889c438cb1682efd38416e431254b078))
 
-### Chores
-
-* **egress:** mark the canary's synthetic credentials as audited false positives ([85f74c9](https://github.com/event4u-app/agent-config/commit/85f74c9465ba2685ca9e2abb1135d5229e4f987f))
-* **dist:** project the restored llm-provider-knowledge triggers ([88bd5ff](https://github.com/event4u-app/agent-config/commit/88bd5ffe33cd82ee77abf56acbc0b91da9450929))
-* **budget:** source-size baseline lowered to the live total 17,358 ([9779d46](https://github.com/event4u-app/agent-config/commit/9779d460a169fa4bf9a8d0c60b32a6c2ca260008))
-* **plugin:** regenerate hooks/hooks.json for the StopFailure binding ([5df71aa](https://github.com/event4u-app/agent-config/commit/5df71aacd6e8eb2eaf1c3cfb5fb0194e3e5cb0cd))
-* **budget:** the egress engine chunk ceiling moves 28,000 -> 32,000 B ([11cc54f](https://github.com/event4u-app/agent-config/commit/11cc54fd4529bac9a59274c7944b0d3933032cb6))
-* **roadmaps:** track the 17.0.0 follow-up findings (#2581) ([447f8fd](https://github.com/event4u-app/agent-config/commit/447f8fd289fc65a81a3e8715f514b2ec9ba1ee6c))
-* **roadmaps:** park road-to-a-canvas-the-code-owns in later/ (#2535) ([6792887](https://github.com/event4u-app/agent-config/commit/67928878b24719d517473c286b449c763f30e476))
-* **roadmap:** park road-to-an-intake-the-queue-can-carry until its window opens ([253793c](https://github.com/event4u-app/agent-config/commit/253793cad57a77e616372ce398a636a5c5744a94))
-* **gates:** lower ci-parity local-only baseline to 104 after batch 2.2a (#2358) ([5a5a71f](https://github.com/event4u-app/agent-config/commit/5a5a71f30649d0b058d24bf835c9abbb0ebb3040))
-* **deps:** bump the github-actions group across 1 directory with 2 updates (#2318) ([013e864](https://github.com/event4u-app/agent-config/commit/013e864cacd9ef5c4abf16839279115adbac57a7))
-* **roadmap:** reopen three parked criteria whose ladder evidence was removed (#2351) ([55782c2](https://github.com/event4u-app/agent-config/commit/55782c2533da8a2b4bb11659404615c31b504806))
-
-### Other
-
-* **tests:** type-only import in the self-hosted route test ([22dd596](https://github.com/event4u-app/agent-config/commit/22dd596af8eea429e4e6ff57556619e759750304))
-* **egress:** PREREG (a) recall and (b) precision for the identifier rows ([1a0c081](https://github.com/event4u-app/agent-config/commit/1a0c081ac97736cb2e600f2133a60419e73664bc))
-* redact the maintainer's home paths from evidence prose (17.0.0 roadmap 5.1, 5.2) (#2574) ([5dcfa13](https://github.com/event4u-app/agent-config/commit/5dcfa13a6c3f44ca19a55666807f16e260b8b02f))
-* Advisories heard the same day, security fixes carried to the merge, worktrees that leave after it (#2568) ([8f47545](https://github.com/event4u-app/agent-config/commit/8f4754512d079796cbf8247c20f2aeb45cdf228c))
-* The update concerns' code, hardened and unregistered: eleven council rounds, two delivery gaps named (#2545) ([7aa764a](https://github.com/event4u-app/agent-config/commit/7aa764a899e27f595cb74ae4baa2e74b61dd9ef5))
-* The content classifier lands, the tool-output store waits for a real lock: eighteen refusals recorded (#2527) ([095e785](https://github.com/event4u-app/agent-config/commit/095e7855409cf4f564821933d6187dd6f6576b1b))
-* Advisories heard the same day, fixes carried to the merge, worktrees that leave after it: three ready roadmaps (#2564) ([d02445d](https://github.com/event4u-app/agent-config/commit/d02445d1664d4c60a41d5250913a4fef5788996f))
-* Self-modification: 6.1 landed; 5.2, 3.4 and 6.2 reviewed, refused by a split council, recorded for the owner (#2563) ([56395be](https://github.com/event4u-app/agent-config/commit/56395bebfab22e36019fb5961ec82762c5cbc86f))
-* A review that ends after five passes, a depth flip on structurally safe paths: both owner decisions applied (#2557) ([324969e](https://github.com/event4u-app/agent-config/commit/324969e7ebe1eeda7c75fdc9c54a21b248c61781))
-* One detector and the senders we own: concern injections pass the engine, and 21 commits that nearly went missing (#2550) ([ebf1b31](https://github.com/event4u-app/agent-config/commit/ebf1b313b2f09cad4a84ea9a7e96d29d6304b48c))
-* A retro the merge runs: the daily probe at session start, and the switch ratified on its own (#2561) ([8a2c3b4](https://github.com/event4u-app/agent-config/commit/8a2c3b4168f0d33d74d61f5c38a9e948dfcad7b2))
-* A setup that decides itself: Phase 4 removes the keys, and nothing reads them (#2532) ([d8f5590](https://github.com/event4u-app/agent-config/commit/d8f5590f3b6186810cd4f0702b17d1bed9b49e1e))
-* Gates that read what was written: the speaking-inbox deny hint says what the guard recognizes (#2559) ([cbf2b77](https://github.com/event4u-app/agent-config/commit/cbf2b7762d031ef21b1b65eaf1b81913ad3441ee))
-* Breadth with depth: the directive in the tree before the next release (#2562) ([42b70dc](https://github.com/event4u-app/agent-config/commit/42b70dca986103b3c0f390789d700a818c1032a7))
-* Release-impact roadmap: drain re-screen, owner residue unchanged (#2558) ([dbe588f](https://github.com/event4u-app/agent-config/commit/dbe588f630f0f57176568a61a524b4ac25850a3d))
-* Install and hook runtime: foreign skills are not ours, a global dry run shows the global plan, and a fresh worktree's hooks run (#2553) ([4338b2e](https://github.com/event4u-app/agent-config/commit/4338b2e3ab3a56f41721decf4452757f0a8be523))
-* Cold start paid once: skip-flag brief fixture, cap docs for resumes, and the 3.3 council record (#2556) ([5200f6b](https://github.com/event4u-app/agent-config/commit/5200f6bdfe6cc0c53e8fdbadb57c20064641677a))
-* Test runs that clean up after themselves: a run-scoped scratch root instead of a flooded $TMPDIR (#2552) ([aaaba3a](https://github.com/event4u-app/agent-config/commit/aaaba3a2f033e64320627ea46d701897365536a5))
-* A review that ends, and a step that costs what it changes: two ready roadmaps for the slow-run subject (#2551) ([8d69dea](https://github.com/event4u-app/agent-config/commit/8d69deaf7e1a1edf9a700d71042fc0071c1e1077))
-* Category A stops granting what it cannot prove: hard floor Phase 0, ratified (#2549) ([553e58d](https://github.com/event4u-app/agent-config/commit/553e58dfbbdb76620e427becc20c91f7c657f26e))
-* The source door takes its decided name, the observation slots stay unspent, and the calibration reads zero (#2544) ([32a66d7](https://github.com/event4u-app/agent-config/commit/32a66d76584ac83e60f62e87f62ef9cbee8f7248))
-* A retro the merge runs: one switch, /retro, the merge path and the stores (session-start probe held) (#2541) ([5100656](https://github.com/event4u-app/agent-config/commit/5100656c9ee754d95bffb333b5ce34a1644bf83e))
-* Cold start paid once: the rate surfaces observed on 2.1.305, handed to billing-cliff detection (#2546) ([8905fe7](https://github.com/event4u-app/agent-config/commit/8905fe7ef1611514b56eedf38f39e2424710bef6))
-* The release bump rule, scored on the window it was not written on (#2542) ([5ccee9c](https://github.com/event4u-app/agent-config/commit/5ccee9c232579674148c1093279c0fd5043d2bfa))
-* Authority routing 7.1: a drafted truth table for what blocks, and a council round that reached no quorum (#2547) ([7e09579](https://github.com/event4u-app/agent-config/commit/7e09579cb38289642674302229db4c70f9041f02))
-* A refusal that cannot ride its own branch: the tool-output store is recorded as refused (#2543) ([18f66f6](https://github.com/event4u-app/agent-config/commit/18f66f61dfcd52ce09f8ba30f6f8010f25f868a4))
-* Gates that read what was written: quoted lineage parents, and a speaking-inbox guard that probes only what it can place (#2540) ([a2aa408](https://github.com/event4u-app/agent-config/commit/a2aa408abe677f543e84b24b0fe64d9621dc1676))
-* A session learns its own PR merged: live PR state in every prompt (#2539) ([fba00aa](https://github.com/event4u-app/agent-config/commit/fba00aabf450b88fec691c38267e7f5f3557b3ce))
-* Sessions that cannot build the same roadmap twice, a queue that stops counting held work, and lanes that resume where they died (#2538) ([6690d98](https://github.com/event4u-app/agent-config/commit/6690d9877649bef0fd56390b6abbfb1f961b5805))
-* Self-modification 4.2 rebuilt and reviewed five rounds: not passed, reverted, recorded (#2537) ([418a093](https://github.com/event4u-app/agent-config/commit/418a09379d316b6da1dba3302b6d04c1115018a7))
-* Skills that arrive when called: codex reaches every unlisted skill through a finder, and the roadmap closes (#2536) ([e64ecb7](https://github.com/event4u-app/agent-config/commit/e64ecb7b2e6d5f2eb3a11cf9df813ac93cc2c1c9))
-* An update that installs itself only when it is safe: a machine-wide register, a provenance tie, and two concerns the council refused (#2534) ([2349b60](https://github.com/event4u-app/agent-config/commit/2349b605df0a15a3b1eb2d2a1ca3f0e128415aa9))
-* Update that installs itself: a machine-wide session register, a consent key and the ring-0 record land; the session concerns wait on the council (#2533) ([ea1e201](https://github.com/event4u-app/agent-config/commit/ea1e2016327b6885b049a396cb8ed5726eeef748))
-* Throughput recovery: 5.2 closes on its own gate, three holds become blockers, and two of the file's claims were wrong (#2531) ([a0bdb8f](https://github.com/event4u-app/agent-config/commit/a0bdb8f8ba2f491f2ae30117e3cfb078195d3f38))
-* Skills that arrive when called: Phase 3 closes HARM, Phase 4 ships, and the effect read changed 4.1 twice (#2529) ([c43740e](https://github.com/event4u-app/agent-config/commit/c43740e6bd2e4d124f76a564c72b0dd100cfc452))
-* Hook carrier roadmap closed: Pending breaking rows reach the release head (4.1) (#2524) ([5c4d546](https://github.com/event4u-app/agent-config/commit/5c4d546796b704fa5515971c2e6fd3d71a6def3e))
-* Revert "Revert "fix(review): R2 findings on the routing ratchet and the settled closures"" ([1e79ede](https://github.com/event4u-app/agent-config/commit/1e79edea943076459c4c349b0c66443e72cd6dd1))
-* Revert "fix(review): R2 findings on the routing ratchet and the settled closures" ([d536771](https://github.com/event4u-app/agent-config/commit/d536771e5c29f7e29c658e6110f1fb8d280c96a1))
-* Brand the tree can check: 5.5 user style.avoid, roadmap archived (#2526) ([efa1cca](https://github.com/event4u-app/agent-config/commit/efa1cca339ac20c92c548fc6c6104912de3f1a1b))
-* Upstream body from closed fields only; one-upstream roadmap archived (#2525) ([1e885a4](https://github.com/event4u-app/agent-config/commit/1e885a4a2b7038412760ac459d5a7f981719a267))
-* Setup that decides itself: 0.1 per-host layer baseline as a reproducible fixture (#2522) ([220f8af](https://github.com/event4u-app/agent-config/commit/220f8af88d38cabc394da5c20ba16d74912a8147))
-* Blocker sweep follow-up: the three owner answers recorded (#2521) ([221cd5d](https://github.com/event4u-app/agent-config/commit/221cd5ddb6408b7e150341ff34bf9e5132e96130))
-* Setup that decides itself: AC-2 closed on the 3.1 table test, bundle headroom re-measured (#2520) ([61cdf6f](https://github.com/event4u-app/agent-config/commit/61cdf6febe78dd4d3f0e0f31a75406090c535e08))
-* One detector: credential deny rows offered by hooks:doctor, known values, token variants (1.2, 2.4, 3.2) (#2517) ([499c4b4](https://github.com/event4u-app/agent-config/commit/499c4b44564954725ab8da11d13b741a92f384fa))
-* Cold start: the fork premise from the host row, and the rate-limit retry split (ratified, round 10) (#2518) ([7ea8f70](https://github.com/event4u-app/agent-config/commit/7ea8f707d5cdd849ef4335713f864a31368b8789))
-* Throughput recovery: 1.4 and 4.4 closed, the language-refusal split, a paused-night count for 2.1 (#2516) ([80809d5](https://github.com/event4u-app/agent-config/commit/80809d5a045ef4810fe5acd33daf8bd1ec5e21eb))
-* Analysis family: 3.5 replayed and validated, AC-5, stage CLIs, D19 council split (#2512) ([355dbcc](https://github.com/event4u-app/agent-config/commit/355dbcc9f44f0fb99ef9e80ca0028823452fa3da))
-* Blocker sweep 2026-10-19: three decided in council, four recorded, three for the owner (#2515) ([b2904b1](https://github.com/event4u-app/agent-config/commit/b2904b1edfdb86509bacb63fbf5dbe54363e7ba3))
-* Analysis family: the fourth door's caps, the source door's scope, eight criteria closed and four prose holds registered (#2508) ([6a4a295](https://github.com/event4u-app/agent-config/commit/6a4a2956f66ce10b5ceca7c85e15952bbdd77a50))
-* Snapshot fence: the update-snapshots warning reads shell words, not substrings (ratified) (#2509) ([c2cc924](https://github.com/event4u-app/agent-config/commit/c2cc9241a1c57866488ed7702c894abc94900840))
-* The D1 helper-level hold is registered, so the drain screen stops handing out 1.1 and AC-1 (#2510) ([ac69800](https://github.com/event4u-app/agent-config/commit/ac698004da3e850e99939335fbfc9f31a822d483))
-* Brand drain: the opt-in persisted-prose target (5.6), and the two owner decisions this roadmap was carrying as prose (#2503) ([a835846](https://github.com/event4u-app/agent-config/commit/a835846189ab8b868b78071fb76031565f2915cc))
-* Canvas 7.3: the taught baseline line, its corpus and the re-pinned routing measurements (#2502) ([6c84bdf](https://github.com/event4u-app/agent-config/commit/6c84bdfd346717843d6d7452a21894f797fb45b2))
-* The upstream roadmap says which of its open steps are held (#2504) ([c0a271c](https://github.com/event4u-app/agent-config/commit/c0a271cc03b22a59d008c9345333cac1c0f1bac4))
-* Consumer gates 4.1: claims backed where the consumer stands, a measured-in-repo status, archived (#2498) ([4bd0e54](https://github.com/event4u-app/agent-config/commit/4bd0e544a15a799153297905a9f397e2769deeb3))
-* Self-modification 3.4 (split half): the record's header and the run's disposition, from one call (#2499) ([e0df3e1](https://github.com/event4u-app/agent-config/commit/e0df3e1723db4f2d13c0b2d3e82179c304470a3f))
-* Self-modification 4.1 and 4.2 reviewed and refused 2/2: the record, the prompt, both seat texts (#2501) ([d37689f](https://github.com/event4u-app/agent-config/commit/d37689f3f57f72a140b52f9e415fa0a911636486))
-* Installed layer: an environment-independent total (D7), the thinned exposure state (2.4), and the 2026-10-19 re-screen (#2500) ([ca5f412](https://github.com/event4u-app/agent-config/commit/ca5f41246c8b9c42c7e48d163ac449d522eebc54))
-* Brand drain: lexicon and claim check on every finished draft, scenario fixtures, claims (5.3, 5.4, 7.2, 7.3) (#2486) ([6c312e1](https://github.com/event4u-app/agent-config/commit/6c312e1b576cf7aadb68a84cb2ab8ab0899b4f12))
-* Two-lane drains provisional, re-decided in throughput 2.3; a stricter complete; the CI waiter stub (#2497) ([d8c4ece](https://github.com/event4u-app/agent-config/commit/d8c4ece2dc1a1dece3434cd8880883c0f934c8ba))
-* self-repair: optional claim fields a retro can write; upstream body and key left to the owner (3.1/3.2 half) (#2496) ([c0968e1](https://github.com/event4u-app/agent-config/commit/c0968e1f5ecf9c8e01d6cc04f2a9802beb913f04))
-* Phase 6 pre-registered; the measurement spend waits on the owner (D18) (#2494) ([7ea90aa](https://github.com/event4u-app/agent-config/commit/7ea90aa82bfee5bc82eb65c1f44e5e228f5904d7))
-* Finish roadmaps before starting new ones: one drain queue, one lane brief, one PR per roadmap (#2495) ([fa9290e](https://github.com/event4u-app/agent-config/commit/fa9290ef85b9c6405b60709f191f1463af59e9ed))
-* Snapshot fence in block_config_weakening (canvas roadmap 7.1, ratified) (#2471) ([f7468c8](https://github.com/event4u-app/agent-config/commit/f7468c8e2d3e741e67f836ad4fb18021f744169a))
-* Type with a witness: 5.8 benchmark verdict partial, 5.9/5.10/AC-5/AC-6 closed, archived (#2493) ([1086a84](https://github.com/event4u-app/agent-config/commit/1086a84cde1a639a0919d4634b741e3a968e470f))
-* Analysis family: analyze:pr, analyze:and-optimize, inbox as final stage, router (1.3, 3.4, 4.5, 5.2, 5.3, 6.1, 6.2) (#2487) ([70cd4ce](https://github.com/event4u-app/agent-config/commit/70cd4cedf9286a084fbd09258df074fb6105aad8))
-* Roadmaps: re-measure what blocks hook-carrier 4.1 and consumer-gates 4.1 (#2490) ([728d4b4](https://github.com/event4u-app/agent-config/commit/728d4b4c1c68d39105a2b2ad93dcdf96b07cb851))
-* Hook carrier 4.1: the #2455 note placed as a breaking Pending row (#2491) ([e8b36d7](https://github.com/event4u-app/agent-config/commit/e8b36d7ce0f0847f3c67520ae9bdeb85a6e0d47b))
-* One upstream: AC-1 and AC-5 closed, the producer/consumer wait recorded (#2485) ([aa4185a](https://github.com/event4u-app/agent-config/commit/aa4185a1f884e4948279d852165896cc67f5392b))
-* Intake: a generated digest of what each roadmap owns, read before the recurrence grep (4.1, 4.2) (#2484) ([5f0bc8e](https://github.com/event4u-app/agent-config/commit/5f0bc8e13f946beba19e3bd1ddfb38d02cca7109))
-* Consumer lock keeps global entries without their $HOME paths (ownership-record roadmap 3.3) (#2481) ([6a15bb3](https://github.com/event4u-app/agent-config/commit/6a15bb362b37de7688a7c588e2bb78c3664d0945))
-* Council outcomes on eight owner decisions: four resolved, two decided without a blocker, two split (#2476) ([ce163bc](https://github.com/event4u-app/agent-config/commit/ce163bcf0cb52b637541668970e53cf08725fe3b))
-* Analysis family: ADR-288, analyze:reference, cli analysts, publish, network sources, anchors, run.json (#2461) ([316e552](https://github.com/event4u-app/agent-config/commit/316e552c4b92e8fbef57692029fb36058daa1a8e))
-* One detector: every credential consumer reads the rule table (2.2) (#2457) ([f974869](https://github.com/event4u-app/agent-config/commit/f974869fd28bf9cbe8b7c80a5d3c81483c1d085a))
-* Egress session table: no value at rest, restores that fail closed (placeholders Phase 2) (#2473) ([f55e5a7](https://github.com/event4u-app/agent-config/commit/f55e5a7600bfe2f67bc5581f365af1d636fcd02c))
-* Skills that arrive when called: probes on the first host, a reach report, every skill classified for forking (#2472) ([6194e27](https://github.com/event4u-app/agent-config/commit/6194e2769639d333fcf02fb1d29d031c5a79fe06))
-* A canvas the code owns: claude-design lane, /design-system:sync, Lock carrier (#2470) ([72f7580](https://github.com/event4u-app/agent-config/commit/72f75809e2c1285b51d1866665a65a6357d261b5))
-* Cold start: subagents.max_parallel becomes the host concurrency cap (#2464) ([f4fa037](https://github.com/event4u-app/agent-config/commit/f4fa037d047bf60a7d630377c615df915afa6bd4))
-* Update that installs itself: measure the mid-session swap, an unattended envelope that refuses to swap yet, and a pin advisor (#2469) ([820e070](https://github.com/event4u-app/agent-config/commit/820e0706e066007859ec26e624ee2e1c80c27715))
-* Hard floor: name which layer carries it per host, and let the doctor say when it is not running (#2467) ([fbc8e7c](https://github.com/event4u-app/agent-config/commit/fbc8e7c4221ddcd797ed3e389ca0891820969e48))
-* Blocker screen: seven owner-labelled blockers re-checked, canvas 3.2 split by council (#2468) ([3a0ad04](https://github.com/event4u-app/agent-config/commit/3a0ad04beca18dd256d873dc4d5c3274e0cdf3a9))
-* Steps the skill cannot skip: two pilots split, and a default-off procedure cursor (Phases 4-5) (#2466) ([e3cf6dc](https://github.com/event4u-app/agent-config/commit/e3cf6dc6827d9217f7d65d52ecfa47bee3d1ca37))
-* Type design: an original font as a measured system, gated and witnessed (#2462) ([1876e18](https://github.com/event4u-app/agent-config/commit/1876e186047f0316972cb421f4c9f1bc508a29b6))
-* Cold start: reuse fields in the subagent schema, two package workers, validators never reused (#2463) ([dba19d0](https://github.com/event4u-app/agent-config/commit/dba19d0f793e92f61dd2ae7baefbf1b1b64b868b))
-* A setup that decides itself: arrival record, install --full, doctor declares the layer form (#2460) ([3245c7e](https://github.com/event4u-app/agent-config/commit/3245c7e7ca49f833a2f3585e430eb8e9dbebb9e4))
-* Ownership record: close 3.4 on council verdict, escalate 3.3 as an owner blocker (#2458) ([2b05954](https://github.com/event4u-app/agent-config/commit/2b05954f7aed684ba61b780f89fdc46d68f4d538))
-* One upstream that checks what leaves: a clean commit, a noreply identity, an approved digest (#2454) ([bf4e2d1](https://github.com/event4u-app/agent-config/commit/bf4e2d19ef6d70a63d6c7f30d3c7314a9421f683))
-* Brand the tree can check: one resolver list, one voice slot, readers that ask (#2449) ([3a9b54d](https://github.com/event4u-app/agent-config/commit/3a9b54d4c7e20bee6476b2ca83e38949b93c779e))
-* Hook carrier that is never silent: staged dispatcher ahead of PATH, dead-carrier fail-full (#2455) ([3f8c98e](https://github.com/event4u-app/agent-config/commit/3f8c98e7487c7c6dba67f19efe139fe4287fbaca))
-* Intake: an archived depends row now fails the roadmap lint (#2448) ([a82598b](https://github.com/event4u-app/agent-config/commit/a82598bfa4f561e0ae0227c92c5b60fd494e0641))
-* Uninstall: keep the record the purge needs, claim the containment, archive the roadmap (#2450) ([b5cc80a](https://github.com/event4u-app/agent-config/commit/b5cc80aab6c6b6e63872a7f0f5fbdda17091e175))
-* Distribution ledger: every row on a live read, and the roadmap closes (#2447) ([6e94748](https://github.com/event4u-app/agent-config/commit/6e94748ea68c4470f0c09af1d0e36a273ef3235f))
-* Steps the skill cannot skip: cross-pack reference links, reference indexes, procedure sidecar lint, dispatch order (#2425) ([48e0af2](https://github.com/event4u-app/agent-config/commit/48e0af261ab3646a926b8d2cd4cd7d16b005aaeb))
-* Local gates: batch 2.2g wires the last five, and the residue gets its class (#2440) ([e9be773](https://github.com/event4u-app/agent-config/commit/e9be7731a571f94c40391bfc6d56b2822242fbbc))
-* Unknowns that say so: a closed network, a stitch that was checked, and three wrong reasons (#2442) ([2dd2738](https://github.com/event4u-app/agent-config/commit/2dd27381afb807b17b93273fd7ccd648c4a55067))
-* Ownership record: stop overwriting a file the ledger says we deployed (#2444) ([643f451](https://github.com/event4u-app/agent-config/commit/643f45147f30ae78bdbabf6cceb521b70848ef46))
-* Exit-code register: publish the pairs two surfaces must agree on (#2441) ([19a4d54](https://github.com/event4u-app/agent-config/commit/19a4d54842c8c7c74996bc9efbeced6a1c6b32a9))
-* Distribution ledger: a standing block recorded as a rule, not rediscovered (#2438) ([2ddb218](https://github.com/event4u-app/agent-config/commit/2ddb218c1310894b0e7964c5e903db8ad17630a7))
-* Truthful surfaces: AC-8 measured, and the two trunk reds that hold it open (#2439) ([a8b8d55](https://github.com/event4u-app/agent-config/commit/a8b8d5505a0543d7dada6a769a4313b609bb5ddf))
-* Ownership record that belongs to the user: a ledger for global deploys (#2422) ([8c90aad](https://github.com/event4u-app/agent-config/commit/8c90aad26ed9a3f220664c71a29a1f213c55e395))
-* Unknowns that say so: a reserved ceiling, a recorded downgrade, a verifiable resume (#2431) ([c804bd8](https://github.com/event4u-app/agent-config/commit/c804bd849187035b841d69298ce9d7bc333c9875))
-* Analysis family: analysts, exchange, gain gate, emit/validate, source adapters (2.4–2.7, 3.1–3.2, 4.1–4.2) (#2432) ([3c4b879](https://github.com/event4u-app/agent-config/commit/3c4b8792665dd49ceb059e4a6965387f9fb2476b))
-* Throughput recovery: a red turnaround reading gets a reader, C split by path, asks counted, D7 re-decided (#2435) ([6abb887](https://github.com/event4u-app/agent-config/commit/6abb887d7625cda0932924bb195a9fbee785f468))
-* Retro, the deterministic half: pre-registration, fact reader, composition, queue (steps 0.5, 1.x, 2.1-2.3, 3.1/3.5/3.6, 4.1/4.2) (#2434) ([8e90cb7](https://github.com/event4u-app/agent-config/commit/8e90cb743891ef09e7b559d9692609bf09abdb21))
-* A brand the tree can check: palette tags, voice slot, lexicon checker, zero brand bytes (#2433) ([debb26d](https://github.com/event4u-app/agent-config/commit/debb26d180b366084412d8e818bedc90f49d6bc8))
-* Cold start: observe resume and fork caching on Claude Code 2.1.302 (#2429) ([835660b](https://github.com/event4u-app/agent-config/commit/835660b0dfaa893c8ba0bdcba179aa35f3235dfa))
-* Type with a witness: the face that painted, T11/T12, filled counters (#2430) ([52c0dcd](https://github.com/event4u-app/agent-config/commit/52c0dcd4ceb87e28bc0b7f8f97cfcb134305d0ee))
-* Skills that arrive when called: census, projection snapshot, Codex page watch, skills: type check (#2427) ([2d7b4c0](https://github.com/event4u-app/agent-config/commit/2d7b4c090e0115487a882dd86d480e562158332e))
-* Step 3.4 of the self-modification roadmap: two refused reviews, recorded (#2428) ([22e32dc](https://github.com/event4u-app/agent-config/commit/22e32dc285024e07b615a6d1b1b618dff7d4f47a))
-* Egress: the three channels prevention cannot see, and why 2.2 waits on a ratification (#2424) ([87c4674](https://github.com/event4u-app/agent-config/commit/87c4674f16017a023105270f3911f3a6f0c42e8e))
-* A distribution ledger that is true: reconcile with upstream, detect answers (#2420) ([b30932a](https://github.com/event4u-app/agent-config/commit/b30932a787d438cc4a74d69505a6dabadb8f9aab))
-* Truthful surfaces: banner command, claim-row guard, pointers and metadata (#2416) ([7890bf3](https://github.com/event4u-app/agent-config/commit/7890bf3fe3aa3e3b70523ac74a8c5d68f4c51414))
-* Thirteen council rounds over the blocker estate: seven closed, three stale records corrected (#2419) ([b8efdcf](https://github.com/event4u-app/agent-config/commit/b8efdcf45a6a6366264ba5af775f5098c178fce9))
-* Gates that run where the consumer stands: consumer-gate count, harness contract, doctor artifact-location, exit-code register (#2418) ([c2e8082](https://github.com/event4u-app/agent-config/commit/c2e8082b2063ade053b7c4d0479b981068e69a3f))
-* Intake the queue can carry: depends that hold, owner-search report, roadmap ages, two council rounds (#2415) ([675ba0a](https://github.com/event4u-app/agent-config/commit/675ba0ace3e69470bfa10e9e943dab087b8ffc1b))
-* Brand the tree can check: profiles ignored, one token name, honest brand:status, DTCG 2025.10 (#2409) ([7559f13](https://github.com/event4u-app/agent-config/commit/7559f13630c41f346f421e21f3114024d262f5a4))
-* A timeout stays a timeout, and a parse failure is not replayed (#2378) ([abb5eac](https://github.com/event4u-app/agent-config/commit/abb5eac6dabce6cb82429e7f7c5f8545868d5dee))
-* **stub:** the visibility sync channel cannot write (#2374) ([d242548](https://github.com/event4u-app/agent-config/commit/d242548a76e442e3d72b404bddaa1b6a1f027f5e))
-* Select reducible tool-result classes from the payload distribution (D6: none) (#2370) ([085ec41](https://github.com/event4u-app/agent-config/commit/085ec41ff661f61513e8590efa5a2d984ceb4504))
-* Fix what the council found in the bytes-the-model-receives change (#2367) ([7c728f3](https://github.com/event4u-app/agent-config/commit/7c728f35b77c5b9eb96750b32b8e4ee950503a96))
-* **review:** close the gap this review names in itself (#2365) ([0c2abb2](https://github.com/event4u-app/agent-config/commit/0c2abb2970d6b44011d9fbaa3942cc3abf128c18))
-* Count the bytes that reached the model, and cut the package's own recurring traffic (#2363) ([26dd190](https://github.com/event4u-app/agent-config/commit/26dd1905ece77a4d7e48d0d51c5909a1414b06b1))
-* Measure why night runs close fewer roadmaps, and plan the recovery (#2359) ([2ad637a](https://github.com/event4u-app/agent-config/commit/2ad637acb6793a1bed295fa36f0bd7638e60e1e3))
-* Wire the first twenty of step 2.2's local-only gates (batch 2.2a) (#2354) ([4b8ec8c](https://github.com/event4u-app/agent-config/commit/4b8ec8c1fae13886bc2999187d64d9881bdb25d5))
-* Say how the ceiling decision actually came about, and let the nightly commit run (#2345) ([6164d92](https://github.com/event4u-app/agent-config/commit/6164d92354180f1d5e3a06faa3a097e7c8e3b671))
-* Close the never-ran roadmap on its CI reading and drain more local-only gates (#2352) ([144c0b2](https://github.com/event4u-app/agent-config/commit/144c0b20b492a1300744af9a85ba8f9019d3ee5d))
-* Bind a ratification record to the content it reviewed (#2325) ([4a379af](https://github.com/event4u-app/agent-config/commit/4a379af12231dd63383f88d704b1cebdcb82dd9b))
-* Write the Claude Code listing override for package-owned skills (#2346) ([af95015](https://github.com/event4u-app/agent-config/commit/af9501519b1f71414c3755ec997082217565e463))
-* Account lifecycle gets its own threat rows, and a skill that reaches them (#2327) ([1696ac4](https://github.com/event4u-app/agent-config/commit/1696ac45bd3fe4d0775991a7949548a230ddcf63))
-* Remove the continuation ladder the withdrawn concern left behind (#2343) ([3c65b5c](https://github.com/event4u-app/agent-config/commit/3c65b5cca9339f9584aaba6b20d585bcc36d10cf))
-* Two lints that never ran, a classifier that read the wrong diff, and three sentences about another tree (#2336) ([b663b60](https://github.com/event4u-app/agent-config/commit/b663b60759781e4140a3e407c46e52ef2b6aef8c))
-* A closing condition that moved, re-executed against build 2.1.299 (#2342) ([44a6a20](https://github.com/event4u-app/agent-config/commit/44a6a20d05551b5a9d155397371196241ae4cb0f))
-* the settings-key rule step 5.1 must edit is stated in eight places (#2341) ([89be7c8](https://github.com/event4u-app/agent-config/commit/89be7c8a41e20848da1eec6d004018255f4b7add))
-* owner and council answers on the inbox-2026-10-p/q/r residue (#2340) ([45de5b7](https://github.com/event4u-app/agent-config/commit/45de5b74365c2ecea9b4d4f41bb098cd186238ea))
-* Sentences this tree states and could not back (#2339) ([c6c82bb](https://github.com/event4u-app/agent-config/commit/c6c82bb5d18b5d58d70aa243f41510a10b8decbe))
-* A release that cannot be cut unreviewed, and a record that says what it carried (#2334) ([702d5e5](https://github.com/event4u-app/agent-config/commit/702d5e5f8bdf7f79167800660ff00a13e8c92e6a))
-* land inbox-2026-10-p, -q and -r as five ready roadmaps (#2338) ([8ad243d](https://github.com/event4u-app/agent-config/commit/8ad243d435dc5295f86bca7bebd3ddf76b5ba60e))
-* One upstream path, and the three documents that pointed away from it (#2337) ([52f2997](https://github.com/event4u-app/agent-config/commit/52f29970e5828061d8fb1887a57b2e4e330043fc))
-* The line a skill teaches, started on a machine that has only node (#2335) ([503b4e9](https://github.com/event4u-app/agent-config/commit/503b4e9d6c3ffa41f7a2e07aa549f8474d72e5cc))
-* A structure reading for the handover that carries no handles (#2332) ([9a943f3](https://github.com/event4u-app/agent-config/commit/9a943f30cc48e6565e9bdd6db9e9313718d7b20a))
-* The cut reads the settings surface it is about to ship (#2333) ([e123e74](https://github.com/event4u-app/agent-config/commit/e123e74b0d47058de067a6c0df08b295373c99a5))
-* A search answer a model can choose from (#2331) ([b8f248b](https://github.com/event4u-app/agent-config/commit/b8f248bd554002c80b351d1bd89f1d9729291bf7))
-* Twenty local-only gates wired where a pull request can hear them, and the three reds that blocked them (#2330) ([46d2f0b](https://github.com/event4u-app/agent-config/commit/46d2f0b3c07d5b15e8486b7b9cfd00fdd3c12657))
-* A frozen account-surface corpus and its claim, both before the detector (#2329) ([c107aaf](https://github.com/event4u-app/agent-config/commit/c107aaf0f15ff8d7f00ef4891d2df6e199597ff9))
-* Four claims this roadmap carried, executed against the tree (#2328) ([257e87d](https://github.com/event4u-app/agent-config/commit/257e87de0a8982aa33a2cbb29b8d56d149f3d46e))
-* A written no-go that names a path becomes a rule the host refuses on (#2326) ([8cd4c1e](https://github.com/event4u-app/agent-config/commit/8cd4c1e4d6e27579f9fc9e2078858e6d3d335f1e))
-* The authority hold nobody could check, measured and made checkable (#2324) ([b9446c9](https://github.com/event4u-app/agent-config/commit/b9446c91b363f3aedad05e1d75b2a3f8601ee252))
-* The installer's host axis, recorded; and three stuck steps re-screened against the tree (#2323) ([d68ce19](https://github.com/event4u-app/agent-config/commit/d68ce1943569bf82745ce9e0e8ac048fcf73f077))
-* land inbox-2026-10-o as three ready roadmaps (#2321) ([7335a38](https://github.com/event4u-app/agent-config/commit/7335a38f1d38696e7e8559c87be1aa43262e87fd))
-* Stop teaching the account-flow anti-patterns (#2319) ([2bc5715](https://github.com/event4u-app/agent-config/commit/2bc5715c70f79d32e2c36df8af37d792b6270bce))
-* land inbox-2026-10-n as three ready roadmaps (#2320) ([82a450c](https://github.com/event4u-app/agent-config/commit/82a450c4e8e8a25589e920fba3286733df18b22a))
-* A project contract written down: the goal and the no-gos init never asked for (#2317) ([d760ecb](https://github.com/event4u-app/agent-config/commit/d760ecbde5e1005674af0de6bc56aeff746ed171))
-* Self-modification Phase 1: the council reviews, the owner approves (#2313) ([63407b6](https://github.com/event4u-app/agent-config/commit/63407b6353cb0d2ddc49ff99e4aa06a086e6d58b))
-* Surfaces no gate reads: three numbers and a path, produced by the tree (#2316) ([4d2e042](https://github.com/event4u-app/agent-config/commit/4d2e0424fe4983860e313120e22adaf4c79ceeec))
-* Close road-to-blocking-time-by-cause: the second window, read against its targets (#2312) ([7ecdca8](https://github.com/event4u-app/agent-config/commit/7ecdca8654c19b48de3b20bb9fba220388dda093))
-* A trigger suite the host grades: compile, never run (#2315) ([1644355](https://github.com/event4u-app/agent-config/commit/16443553033d786b951aa51712cd50d0b4fbb0dc))
-* land inbox-2026-10-m as six ready roadmaps (#2311) ([52d206d](https://github.com/event4u-app/agent-config/commit/52d206d9a211eaf0b22e59002692c00e3cdac30f))
-
-Tests: 32002 (+4677 since 16.5.0)
-
-## [16.5.0](https://github.com/event4u-app/agent-config/compare/16.4.0...16.5.0) (2026-10-12)
+### Build
 
-### Release highlights
+* **dist:** project the host-capability manifest context ([ecd24af](https://github.com/event4u-app/agent-config/commit/ecd24af6bde6dc8a89b1dd619c8bc049063643ef))
+* **install:** regenerate the install bundle for the worker_resume probe ([7318dff](https://github.com/event4u-app/agent-config/commit/7318dffac580b546e42506905fe211b49aa54b09))
 
-- **Behaviour changes:** give hand-authored SVG a witness, an owner, and five recorded runs (#2300) (bdeb65c).
-- **Default changes + migration:** _none_
-- **Security and correctness:** close the two real findings of the third 16.5.0 review, plus road-to-svg-witness-provenance (#2309) (d1f7c3b); close the security findings from the 16.5.0 re-cut review (#2307) (9904258); close the five medium-security findings from the 16.5.0 release review (#2305) (5593838); close the sixth review round of #2302 (#2303) (c88865f); strip only generic glob classes from an inbox name (fda00b3); admit a date suffix only on the families that are dated (fd5be56); +3 more.
-- **Honest nulls:** _none_
-- **Known limitations:** _none_
-
-> **Governance mix:** governance-only 6 vs consumer-only 1 (taxonomy 1.1.0; range d411219277ce..d1f7c3b834bb).
-
-### Features
-
-* **svg:** close all three SVG roadmaps — routing, review follow-ups and the live-session findings (#2302) ([5098697](https://github.com/event4u-app/agent-config/commit/50986972088029db18a90c6f7d198c5ab0e26da5))
-* give hand-authored SVG a witness, an owner, and five recorded runs (#2300) ([bdeb65c](https://github.com/event4u-app/agent-config/commit/bdeb65c37533825c2a3061fb7a33ef5778454d11))
-
-### Bug Fixes
-
-* **svg:** close the two real findings of the third 16.5.0 review, plus road-to-svg-witness-provenance (#2309) ([d1f7c3b](https://github.com/event4u-app/agent-config/commit/d1f7c3b834bb43b8937dee44b7e38733d5eb70f2))
-* **svg:** close the security findings from the 16.5.0 re-cut review (#2307) ([9904258](https://github.com/event4u-app/agent-config/commit/990425836285eded0a6cb4370f8ded95823dd6c8))
-* **svg:** close the five medium-security findings from the 16.5.0 release review (#2305) ([5593838](https://github.com/event4u-app/agent-config/commit/5593838c01fab686e0856fba227ae4f37cd7b8f0))
-* **svg-engine:** close the sixth review round of #2302 (#2303) ([c88865f](https://github.com/event4u-app/agent-config/commit/c88865fdc1aad9337b4f98a868483d571848d7ea))
-* **hooks:** strip only generic glob classes from an inbox name ([fda00b3](https://github.com/event4u-app/agent-config/commit/fda00b35ef5a0d2b603b56511a986081a261dc11))
-* **hooks:** admit a date suffix only on the families that are dated ([fd5be56](https://github.com/event4u-app/agent-config/commit/fd5be56f6f17ebe96b17579ffdd452cbef3dfc39))
-* **hooks:** accept only wildcard-suffixed family heads and keep bracket payloads ([8446cc0](https://github.com/event4u-app/agent-config/commit/8446cc05e322c6d084df502319daff8c1bc79e63))
-* **hooks:** let a glob over an opaque family prefix through block-speaking-inbox-dir ([22904a5](https://github.com/event4u-app/agent-config/commit/22904a51d58dd8d3bbed7a6db08b717b7336adb1))
-* **lineage:** count a present non-road-to parent as present ([4b40ab6](https://github.com/event4u-app/agent-config/commit/4b40ab692f85bbc2b642f98603a9d601879cd5a1))
-
-### Documentation
-
-* **contracts:** point the hook-concern row at the manifest instead of a count ([3406ae5](https://github.com/event4u-app/agent-config/commit/3406ae53848f7cf2ca866c2d03d297ad549743d1))
-
-### Tests
+### CI
 
-* **hooks:** table-drive the opaque-family glob cases over all five heads ([52c9e0e](https://github.com/event4u-app/agent-config/commit/52c9e0e40ebd736aadcf8f37831f994ba1fe0dc6))
+* **bench:** read PREREG (f) egress engine latency on the CI runner class ([7f23bb3](https://github.com/event4u-app/agent-config/commit/7f23bb3813bfc736087c1604369f863bae73070e))
 
 ### Chores
 
-* **ratification:** record the council review of the inbox-name guard change ([a03c9e9](https://github.com/event4u-app/agent-config/commit/a03c9e95a6b7cb58065fd9e9c30b104ebcb4911b))
-
-### Other
-
-* add road-to-svg-from-a-live-session from the continued raster-to-SVG session (#2301) ([a17bd4a](https://github.com/event4u-app/agent-config/commit/a17bd4aa2bcca14cc787096be644647be6188f2e))
-* road-to-svg-review-followups from two reviews of the SVG roadmaps (#2299) ([b015b74](https://github.com/event4u-app/agent-config/commit/b015b747f7c2eea4a8206aba846b82dcc6e84f40))
-* add two ready SVG roadmaps from inbox-2026-10-l (#2298) ([fd02787](https://github.com/event4u-app/agent-config/commit/fd02787ef8e0e9eb21e9a0256e5f3ea9bca21492))
-* give six added verify clauses an expectation that can fail ([9a5338a](https://github.com/event4u-app/agent-config/commit/9a5338aebd49923a894e803b7e21f0d5dbb5d7d3))
-* add thirteen ready roadmaps from inbox-2026-10-g..k ([d8a9e43](https://github.com/event4u-app/agent-config/commit/d8a9e43a881bcf6ad9a8a96c83a4e4958f321098))
-* record inbox-2026-10-g..k arrivals on held stubs and parked roadmaps ([243b6f3](https://github.com/event4u-app/agent-config/commit/243b6f30251da478e03a5f9aa3d60636a14ea0e1))
+* **roadmap:** regenerate the owned digest for the new roadmap ([de05ef7](https://github.com/event4u-app/agent-config/commit/de05ef770947d5603418f3d20c2317529b85cf84))
 
-Tests: 27325 (+127 since 16.4.0)
+Tests: 32215 (+213 since 17.0.0)
 
 # Era: pre-4.0.0 — archived