npm - @iowarp/clio-coder - Versions diffs - 0.3.0 - Mend

@iowarp/clio-coder 0.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (226) hide show

package/CHANGELOG.md +407 -0
package/CODE_OF_CONDUCT.md +21 -0
package/CONTRIBUTING.md +224 -0
package/LICENSE +202 -0
package/NOTICE +9 -0
package/README.md +798 -0
package/SECURITY.md +72 -0
package/assets/clio-coder-logo-128.webp +0 -0
package/damage-control-rules.yaml +419 -0
package/dist/acp-UMLFVA3F.js +92 -0
package/dist/agents-Q4MYPMUW.js +91 -0
package/dist/auth-O6HYIJ6J.js +521 -0
package/dist/chunk-262G75JS.js +35 -0
package/dist/chunk-26BZQOAD.js +1281 -0
package/dist/chunk-2J63S4SF.js +508 -0
package/dist/chunk-3DANZDGR.js +717 -0
package/dist/chunk-4UQA7NCT.js +29 -0
package/dist/chunk-527KG6XR.js +497 -0
package/dist/chunk-5LDRNKX2.js +1063 -0
package/dist/chunk-5N2FG33Q.js +25 -0
package/dist/chunk-67MTHP2E.js +135 -0
package/dist/chunk-6CWDTGUC.js +20 -0
package/dist/chunk-7BHLZB3A.js +2115 -0
package/dist/chunk-7RBKDI66.js +348 -0
package/dist/chunk-AMFR5YA3.js +541 -0
package/dist/chunk-BBUH4VAA.js +1224 -0
package/dist/chunk-BYEU76JP.js +899 -0
package/dist/chunk-CLJ5HLUD.js +458 -0
package/dist/chunk-D5YD55AR.js +116 -0
package/dist/chunk-DXQNI4PC.js +61 -0
package/dist/chunk-E3NYWENM.js +1004 -0
package/dist/chunk-GNGDQYDU.js +34688 -0
package/dist/chunk-GOTUR54M.js +9 -0
package/dist/chunk-HBU5MTAM.js +41 -0
package/dist/chunk-HMYNFFY4.js +28 -0
package/dist/chunk-JPOWPFCU.js +1010 -0
package/dist/chunk-JWHCJDCI.js +1215 -0
package/dist/chunk-KBR4MZZR.js +41 -0
package/dist/chunk-KKKPTZLM.js +93 -0
package/dist/chunk-ME6DNWIU.js +66 -0
package/dist/chunk-NI4DEJMC.js +88 -0
package/dist/chunk-O4EJEDHO.js +659 -0
package/dist/chunk-PIDUD6M2.js +31 -0
package/dist/chunk-PS4PFJQP.js +29459 -0
package/dist/chunk-QV47YRF4.js +48 -0
package/dist/chunk-RQDWMVRB.js +279 -0
package/dist/chunk-TFSSEXL6.js +136 -0
package/dist/chunk-TKHQ4DGZ.js +8290 -0
package/dist/chunk-TPOCL34A.js +2876 -0
package/dist/chunk-UGYAX5YI.js +565 -0
package/dist/chunk-UHTSULZS.js +461 -0
package/dist/chunk-UU3R62TT.js +128 -0
package/dist/chunk-UWIJNAOB.js +3906 -0
package/dist/chunk-VOO7NYPP.js +914 -0
package/dist/chunk-VPAWTYLY.js +117 -0
package/dist/chunk-WD6AJM35.js +1216 -0
package/dist/chunk-X3BR7HWV.js +115 -0
package/dist/chunk-X3NE4WVW.js +120 -0
package/dist/chunk-XNISANGE.js +1395 -0
package/dist/chunk-XV4ZJ6ZM.js +3177 -0
package/dist/cli/index.js +236 -0
package/dist/clio-KIQ5SNDS.js +53 -0
package/dist/components-JVHMUBEB.js +653 -0
package/dist/config-ZFCDBMDC.js +372 -0
package/dist/configure-G4E3A2PG.js +27 -0
package/dist/context-CDXTP2MP.js +293 -0
package/dist/context-E3KIFVXI.js +185 -0
package/dist/context-clear-3F4PLXOS.js +102 -0
package/dist/context-index-Q7YSYTR3.js +106 -0
package/dist/docs-YIETIWZI.js +280 -0
package/dist/doctor-M5HJJZOL.js +61 -0
package/dist/domains/agents/builtins/architect.md +33 -0
package/dist/domains/agents/builtins/coder.md +31 -0
package/dist/domains/agents/builtins/context-bootstrap.md +38 -0
package/dist/domains/agents/builtins/debugger.md +30 -0
package/dist/domains/agents/builtins/documenter.md +31 -0
package/dist/domains/agents/builtins/git-master.md +30 -0
package/dist/domains/agents/builtins/provenance.md +30 -0
package/dist/domains/agents/builtins/researcher.md +71 -0
package/dist/domains/agents/builtins/scout.md +42 -0
package/dist/domains/agents/builtins/tester.md +31 -0
package/dist/domains/agents/builtins/verifier.md +30 -0
package/dist/domains/agents/builtins/wiki-writer.md +41 -0
package/dist/eval-B3KZZESM.js +2674 -0
package/dist/evidence-V67CHM35.js +233 -0
package/dist/evolve-YDZSUQYA.js +518 -0
package/dist/extensions-SRG7XCAH.js +207 -0
package/dist/fleet-CA2CRTVG.js +760 -0
package/dist/fleet-preflight-CLIAX7YR.js +21 -0
package/dist/init-2OZDJE2D.js +227 -0
package/dist/memory-3PIQQAKX.js +207 -0
package/dist/models-DY35XI7Y.js +237 -0
package/dist/paths-5OMXW7Z4.js +57 -0
package/dist/preload-KZVHET2B.js +11 -0
package/dist/reset-PIFYNOS3.js +216 -0
package/dist/run-3VSPP24F.js +735 -0
package/dist/share-D36RQCXM.js +241 -0
package/dist/skills-F2MRLELY.js +445 -0
package/dist/skills-eval-E2ZTW4PL.js +932 -0
package/dist/targets-DZMEZAH4.js +977 -0
package/dist/trace-7NYCUI2J.js +250 -0
package/dist/uninstall-AD3JWHBB.js +322 -0
package/dist/upgrade-WYYBKGDY.js +301 -0
package/dist/usage-ULIDAGFF.js +755 -0
package/dist/version-ROZ6CZKH.js +16 -0
package/dist/wiki-generate-PKFIX6OB.js +377 -0
package/dist/worker/entry.js +1739 -0
package/docs/README.md +93 -0
package/docs/acp.md +120 -0
package/docs/alcf-provider.md +72 -0
package/docs/architecture.md +172 -0
package/docs/artifact-versions.md +54 -0
package/docs/built-in-agents.md +265 -0
package/docs/capacity-and-scheduling.md +97 -0
package/docs/commands-and-modes.md +554 -0
package/docs/config-knobs-audit.md +115 -0
package/docs/configuration-and-targets.md +812 -0
package/docs/context-engine.md +236 -0
package/docs/dispatch-architecture-rationale.md +126 -0
package/docs/documentation-coverage.md +46 -0
package/docs/documentation-guide.md +166 -0
package/docs/environment-variables.md +105 -0
package/docs/eval-runner.md +205 -0
package/docs/evals-internal.md +298 -0
package/docs/evidence-and-memory.md +243 -0
package/docs/evolution.md +143 -0
package/docs/exit-codes-and-output.md +74 -0
package/docs/extensions-and-sharing.md +306 -0
package/docs/fleet-demo-runbook.md +179 -0
package/docs/fleet-dispatch.md +591 -0
package/docs/glossary.md +75 -0
package/docs/html/agents_blueprint.html +936 -0
package/docs/html/alcf_blueprint.html +324 -0
package/docs/html/architecture_blueprint.html +850 -0
package/docs/html/commands_blueprint.html +794 -0
package/docs/html/config_knobs_audit_blueprint.html +178 -0
package/docs/html/configuration_blueprint.html +1080 -0
package/docs/html/context_blueprint.html +603 -0
package/docs/html/documentation_blueprint.html +832 -0
package/docs/html/environment_blueprint.html +404 -0
package/docs/html/eval_blueprint.html +743 -0
package/docs/html/evals_internal_blueprint.html +190 -0
package/docs/html/evolution_blueprint.html +674 -0
package/docs/html/extensions_blueprint.html +2065 -0
package/docs/html/fleet_dispatch_blueprint.html +286 -0
package/docs/html/index.html +919 -0
package/docs/html/lifecycle_blueprint.html +723 -0
package/docs/html/memory_blueprint.html +699 -0
package/docs/html/middleware_blueprint.html +664 -0
package/docs/html/models_blueprint.html +2366 -0
package/docs/html/observability_blueprint.html +683 -0
package/docs/html/provider_adapter_blueprint.html +245 -0
package/docs/html/safety_blueprint.html +1386 -0
package/docs/html/shared.css +571 -0
package/docs/html/shared.js +143 -0
package/docs/html/skills_blueprint.html +671 -0
package/docs/html/soak_blueprint.html +182 -0
package/docs/html/tool_usage_blueprint.html +350 -0
package/docs/html/tools_blueprint.html +2249 -0
package/docs/html/trace_blueprint.html +235 -0
package/docs/html/tui_design_blueprint.html +314 -0
package/docs/html/validation_blueprint.html +961 -0
package/docs/html/worker_dispatch_blueprint.html +231 -0
package/docs/installation-and-lifecycle.md +308 -0
package/docs/middleware-and-components.md +148 -0
package/docs/model-catalog.md +189 -0
package/docs/observability.md +233 -0
package/docs/proactive-memory.md +452 -0
package/docs/prompt-envelope-and-tools.md +142 -0
package/docs/provider-adapter-cookbook.md +148 -0
package/docs/release-cut-checklist.md +138 -0
package/docs/safety-model.md +357 -0
package/docs/scientific-validation.md +105 -0
package/docs/session-lifecycle.md +156 -0
package/docs/skills-marketplace.md +46 -0
package/docs/tool-usage.md +527 -0
package/docs/trace-store.md +132 -0
package/docs/troubleshooting.md +33 -0
package/docs/tui-design.md +239 -0
package/docs/worker-dispatch-mechanics.md +242 -0
package/package.json +132 -0
package/skills/README.md +408 -0
package/skills/git/commit-crafting/SKILL.md +79 -0
package/skills/git/commit-crafting/evals.md +92 -0
package/skills/git/create-pr/SKILL.md +116 -0
package/skills/git/create-pr/evals.md +114 -0
package/skills/git/investigate-issue/SKILL.md +139 -0
package/skills/git/investigate-issue/evals.md +94 -0
package/skills/git/resolve-merge-conflicts/SKILL.md +96 -0
package/skills/git/resolve-merge-conflicts/evals.md +58 -0
package/skills/git/review-changes/SKILL.md +103 -0
package/skills/git/review-changes/evals.md +85 -0
package/skills/git/worktree-create/SKILL.md +92 -0
package/skills/git/worktree-create/evals.md +97 -0
package/skills/git/worktree-create/references/worktree-setup.md +66 -0
package/skills/git/worktree-merge/SKILL.md +95 -0
package/skills/git/worktree-merge/evals.md +114 -0
package/skills/skill-marketplace.json +261 -0
package/skills/workflow/cut-it/SKILL.md +86 -0
package/skills/workflow/cut-it/evals.md +42 -0
package/src/domains/agents/builtins/architect.md +33 -0
package/src/domains/agents/builtins/coder.md +31 -0
package/src/domains/agents/builtins/context-bootstrap.md +38 -0
package/src/domains/agents/builtins/debugger.md +30 -0
package/src/domains/agents/builtins/documenter.md +31 -0
package/src/domains/agents/builtins/git-master.md +30 -0
package/src/domains/agents/builtins/provenance.md +30 -0
package/src/domains/agents/builtins/researcher.md +71 -0
package/src/domains/agents/builtins/scout.md +42 -0
package/src/domains/agents/builtins/tester.md +31 -0
package/src/domains/agents/builtins/verifier.md +30 -0
package/src/domains/agents/builtins/wiki-writer.md +41 -0
package/src/domains/agents/fleets/build-review.md +34 -0
package/src/domains/agents/fleets/build-test.md +35 -0
package/src/domains/agents/fleets/sdlc.md +86 -0
package/src/domains/prompts/fragments/identity/clio-worker.md +11 -0
package/src/domains/prompts/fragments/identity/clio.md +26 -0
package/src/domains/prompts/fragments/operating/contract.md +64 -0
package/src/domains/prompts/fragments/safety/auto-edit.md +14 -0
package/src/domains/prompts/fragments/safety/full-auto.md +14 -0
package/src/domains/prompts/fragments/safety/read-only.md +13 -0
package/src/domains/prompts/fragments/safety/suggest.md +13 -0
package/src/domains/prompts/fragments/wiki/page.md +75 -0
package/src/domains/prompts/fragments/wiki/plan.md +48 -0
package/src/domains/providers/models/cloud-models/alcf.yaml +40 -0
package/src/domains/providers/models/local-models/clio-local-coding-targets.yaml +993 -0

package/docs/html/safety_blueprint.html ADDED Viewed

@@ -0,0 +1,1386 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>Clio Coder Safety Model Blueprint (v0.3.0)</title>
+  <style>
+    :root {
+      --bg-dark: #090d16;
+      --bg-grid: rgba(255, 255, 255, 0.02);
+      --bg-card: rgba(13, 20, 38, 0.45);
+      --bg-card-hover: rgba(20, 30, 58, 0.6);
+      --border-card: rgba(255, 255, 255, 0.08);
+      --border-card-hover: rgba(0, 240, 255, 0.3);
+      --text-main: #f3f4f6;
+      --text-muted: #9ca3af;
+      --text-dim: #6b7280;
+      --color-cyan: #00f0ff;
+      --color-cyan-rgb: 0, 240, 255;
+      --color-purple: #bd00ff;
+      --color-purple-rgb: 189, 0, 255;
+      --color-emerald: #10b981;
+      --color-emerald-rgb: 16, 185, 129;
+      --color-amber: #f59e0b;
+      --color-amber-rgb: 245, 158, 11;
+      --color-rose: #ef4444;
+      --color-rose-rgb: 239, 68, 68;
+      --gradient-main: linear-gradient(135deg, var(--color-cyan), var(--color-purple));
+      --shadow-glow: 0 0 25px rgba(0, 240, 255, 0.15);
+      --font-sans: "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", Arial, sans-serif;
+      --font-mono: "SFMono-Regular", Consolas, "Liberation Mono", Menlo, monospace;
+      --glass-blur: blur(12px);
+    }
+    * {
+      box-sizing: border-box;
+      margin: 0;
+      padding: 0;
+    }
+    body {
+      background-color: var(--bg-dark);
+      background-image:
+        radial-gradient(circle at 10% 20%, rgba(var(--color-cyan-rgb), 0.05) 0%, transparent 40%),
+        radial-gradient(circle at 90% 80%, rgba(var(--color-purple-rgb), 0.05) 0%, transparent 40%),
+        radial-gradient(circle at 50% 50%, #0d1527 0%, var(--bg-dark) 100%);
+      color: var(--text-main);
+      font-family: var(--font-sans);
+      min-height: 100vh;
+      line-height: 1.6;
+      overflow-x: hidden;
+      position: relative;
+    }
+    body::before {
+      content: '';
+      position: absolute;
+      inset: 0;
+      background-image: linear-gradient(var(--bg-grid) 1px, transparent 1px),
+                        linear-gradient(90deg, var(--bg-grid) 1px, transparent 1px);
+      background-size: 40px 40px;
+      background-position: center top;
+      pointer-events: none;
+      z-index: 0;
+      opacity: 0.8;
+    }
+    .container {
+      max-width: 1400px;
+      margin: 0 auto;
+      padding: 2rem;
+      position: relative;
+      z-index: 1;
+    }
+    /* Header Styling */
+    header {
+      display: flex;
+      justify-content: space-between;
+      align-items: center;
+      margin-bottom: 2.5rem;
+      padding-bottom: 1.5rem;
+      border-bottom: 1px solid rgba(255, 255, 255, 0.05);
+    }
+    .header-left {
+      display: flex;
+      align-items: center;
+      gap: 1rem;
+    }
+    .header-logo {
+      display: inline-flex;
+      align-items: center;
+      justify-content: center;
+      width: 48px;
+      height: 48px;
+      background: rgba(255, 255, 255, 0.02);
+      border: 1px solid var(--border-card);
+      border-radius: 12px;
+      position: relative;
+    }
+    .header-logo svg {
+      width: 28px;
+      height: 28px;
+    }
+    .header-title-wrapper h1 {
+      font-size: 1.5rem;
+      font-weight: 800;
+      letter-spacing: -0.03em;
+      background: linear-gradient(to right, #ffffff, #c7d2fe, var(--color-cyan));
+      -webkit-background-clip: text;
+      -webkit-text-fill-color: transparent;
+    }
+    .header-title-wrapper p {
+      font-size: 0.825rem;
+      color: var(--text-muted);
+    }
+    .header-right {
+      display: flex;
+      align-items: center;
+      gap: 1rem;
+    }
+    .back-btn {
+      background: rgba(255, 255, 255, 0.03);
+      border: 1px solid var(--border-card);
+      color: var(--text-muted);
+      padding: 0.5rem 1rem;
+      border-radius: 8px;
+      font-size: 0.875rem;
+      font-weight: 600;
+      text-decoration: none;
+      display: inline-flex;
+      align-items: center;
+      gap: 0.5rem;
+      transition: all 0.2s;
+    }
+    .back-btn:hover {
+      background: rgba(255, 255, 255, 0.08);
+      color: var(--text-main);
+      border-color: rgba(var(--color-cyan-rgb), 0.3);
+    }
+    .version-badge {
+      background: rgba(0, 240, 255, 0.08);
+      border: 1px solid rgba(0, 240, 255, 0.25);
+      color: var(--color-cyan);
+      padding: 0.35rem 0.75rem;
+      border-radius: 50px;
+      font-size: 0.75rem;
+      font-weight: 600;
+      font-family: var(--font-mono);
+    }
+    /* Tabs Navigation */
+    .tabs-nav {
+      display: flex;
+      gap: 0.75rem;
+      margin-bottom: 2rem;
+    }
+    .tab-btn {
+      background: rgba(255, 255, 255, 0.03);
+      border: 1px solid var(--border-card);
+      color: var(--text-muted);
+      padding: 0.6rem 1.25rem;
+      border-radius: 8px;
+      font-size: 0.875rem;
+      font-weight: 600;
+      cursor: pointer;
+      display: flex;
+      align-items: center;
+      gap: 0.5rem;
+      transition: all 0.2s;
+    }
+    .tab-btn:hover {
+      background: rgba(255, 255, 255, 0.06);
+      color: var(--text-main);
+    }
+    .tab-btn.active {
+      background: var(--gradient-main);
+      color: #090d16;
+      border-color: transparent;
+      box-shadow: 0 4px 15px rgba(var(--color-cyan-rgb), 0.25);
+    }
+    /* Content Layout */
+    .tab-pane {
+      display: none;
+      animation: fadeIn 0.3s ease-out forwards;
+    }
+    .tab-pane.active {
+      display: block;
+    }
+    @keyframes fadeIn {
+      from { opacity: 0; transform: translateY(8px); }
+      to { opacity: 1; transform: translateY(0); }
+    }
+    /* Split layout: Specs + Simulator */
+    .blueprint-layout {
+      display: grid;
+      grid-template-columns: 1.1fr 0.9fr;
+      gap: 2rem;
+      align-items: start;
+    }
+    @media (max-width: 1100px) {
+      .blueprint-layout {
+        grid-template-columns: 1fr;
+      }
+    }
+    .glass-card {
+      background: var(--bg-card);
+      border: 1px solid var(--border-card);
+      border-radius: 16px;
+      padding: 1.75rem;
+      margin-bottom: 2rem;
+      backdrop-filter: var(--glass-blur);
+      box-shadow: 0 8px 32px 0 rgba(0, 0, 0, 0.3);
+    }
+    .glass-card h2 {
+      font-size: 1.25rem;
+      font-weight: 700;
+      color: #ffffff;
+      margin-bottom: 1.25rem;
+      display: flex;
+      align-items: center;
+      gap: 0.5rem;
+      border-bottom: 1px solid rgba(255, 255, 255, 0.05);
+      padding-bottom: 0.75rem;
+    }
+    .glass-card h2 svg {
+      width: 18px;
+      height: 18px;
+      color: var(--color-cyan);
+    }
+    .glass-card p {
+      font-size: 0.925rem;
+      color: var(--text-muted);
+      margin-bottom: 1rem;
+    }
+    /* Autonomy Matrix Style */
+    .matrix-wrapper {
+      overflow-x: auto;
+      margin-bottom: 1.5rem;
+      border-radius: 8px;
+      border: 1px solid var(--border-card);
+    }
+    .matrix-table {
+      width: 100%;
+      border-collapse: collapse;
+      font-size: 0.85rem;
+    }
+    .matrix-table th, .matrix-table td {
+      padding: 0.75rem 1rem;
+      text-align: left;
+      border-bottom: 1px solid rgba(255, 255, 255, 0.05);
+    }
+    .matrix-table th {
+      background: rgba(0,0,0,0.3);
+      color: var(--text-muted);
+      font-weight: 600;
+    }
+    .matrix-table td.col-hdr {
+      font-weight: 600;
+    }
+    .matrix-table td {
+      color: var(--text-main);
+    }
+    /* Matrix Highlight Columns */
+    .matrix-table th.highlight, .matrix-table td.highlight {
+      background: rgba(var(--color-cyan-rgb), 0.08);
+      border-left: 1px solid rgba(var(--color-cyan-rgb), 0.15);
+      border-right: 1px solid rgba(var(--color-cyan-rgb), 0.15);
+    }
+    .matrix-table tr:hover td {
+      background: rgba(255,255,255,0.02);
+    }
+    .badge-decision {
+      display: inline-block;
+      padding: 0.15rem 0.5rem;
+      border-radius: 4px;
+      font-weight: 700;
+      font-size: 0.75rem;
+      text-transform: uppercase;
+      font-family: var(--font-mono);
+    }
+    .badge-decision.allow { background: rgba(16, 185, 129, 0.1); border: 1px solid rgba(16, 185, 129, 0.25); color: var(--color-emerald); }
+    .badge-decision.ask { background: rgba(245, 158, 11, 0.1); border: 1px solid rgba(245, 158, 11, 0.25); color: var(--color-amber); }
+    .badge-decision.deny { background: rgba(239, 68, 68, 0.1); border: 1px solid rgba(239, 68, 68, 0.25); color: var(--color-rose); }
+    .badge-decision.block { background: rgba(239, 68, 68, 0.15); border: 1px solid rgba(239, 68, 68, 0.4); color: var(--color-rose); text-shadow: 0 0 5px rgba(239, 68, 68, 0.3); }
+    /* SVG Flowchart */
+    .flowchart-container {
+      background: rgba(9, 13, 22, 0.6);
+      border: 1px solid var(--border-card);
+      border-radius: 12px;
+      padding: 1.5rem;
+      text-align: center;
+      margin: 1.5rem 0;
+    }
+    .flowchart-container svg {
+      width: 100%;
+      height: auto;
+      max-height: 280px;
+    }
+    /* Simulator Panel Styling */
+    .simulator-panel {
+      position: sticky;
+      top: 2rem;
+    }
+    .form-group {
+      margin-bottom: 1.25rem;
+    }
+    .form-group label {
+      display: block;
+      font-size: 0.8rem;
+      font-weight: 600;
+      color: var(--text-muted);
+      margin-bottom: 0.5rem;
+      text-transform: uppercase;
+      letter-spacing: 0.05em;
+    }
+    .form-row {
+      display: grid;
+      grid-template-columns: 1fr 1fr;
+      gap: 1rem;
+    }
+    select, input, textarea {
+      width: 100%;
+      background: rgba(9, 13, 22, 0.7);
+      border: 1px solid var(--border-card);
+      border-radius: 8px;
+      padding: 0.65rem 0.85rem;
+      color: #fff;
+      font-family: var(--font-sans);
+      font-size: 0.9rem;
+      outline: none;
+      transition: all 0.2s;
+    }
+    select:focus, input:focus, textarea:focus {
+      border-color: var(--color-cyan);
+      box-shadow: 0 0 10px rgba(var(--color-cyan-rgb), 0.15);
+    }
+    textarea {
+      font-family: var(--font-mono);
+      font-size: 0.8rem;
+      resize: vertical;
+    }
+    /* Preset list */
+    .presets-list {
+      display: flex;
+      flex-wrap: wrap;
+      gap: 0.4rem;
+      margin-bottom: 1.25rem;
+    }
+    .preset-btn {
+      background: rgba(255, 255, 255, 0.03);
+      border: 1px solid var(--border-card);
+      color: var(--text-muted);
+      padding: 0.3rem 0.6rem;
+      border-radius: 4px;
+      font-size: 0.725rem;
+      cursor: pointer;
+      font-family: var(--font-mono);
+      transition: all 0.2s;
+    }
+    .preset-btn:hover {
+      background: rgba(0, 240, 255, 0.08);
+      border-color: var(--color-cyan);
+      color: #fff;
+    }
+    /* Simulation Verdict Displays */
+    .verdict-header {
+      font-size: 0.8rem;
+      font-weight: 600;
+      color: var(--text-muted);
+      margin-bottom: 0.5rem;
+      text-transform: uppercase;
+    }
+    .verdict-card {
+      border-radius: 12px;
+      padding: 1.25rem;
+      margin-bottom: 1.5rem;
+      display: flex;
+      align-items: center;
+      justify-content: space-between;
+      transition: all 0.3s ease;
+    }
+    .verdict-info h3 {
+      font-size: 1.35rem;
+      font-weight: 800;
+      letter-spacing: 0.05em;
+    }
+    .verdict-info p {
+      font-size: 0.825rem;
+      color: var(--text-main);
+      margin: 0.25rem 0 0 0;
+    }
+    .verdict-status-badge {
+      font-size: 2.25rem;
+      font-weight: 900;
+    }
+    /* Verdict classes */
+    .v-allow {
+      background: rgba(16, 185, 129, 0.08);
+      border: 1px solid rgba(16, 185, 129, 0.3);
+      color: var(--color-emerald);
+      box-shadow: 0 0 15px rgba(16, 185, 129, 0.08);
+    }
+    .v-ask {
+      background: rgba(245, 158, 11, 0.08);
+      border: 1px solid rgba(245, 158, 11, 0.3);
+      color: var(--color-amber);
+      box-shadow: 0 0 15px rgba(245, 158, 11, 0.08);
+    }
+    .v-deny {
+      background: rgba(239, 68, 68, 0.08);
+      border: 1px solid rgba(239, 68, 68, 0.3);
+      color: var(--color-rose);
+      box-shadow: 0 0 15px rgba(239, 68, 68, 0.08);
+    }
+    .v-block {
+      background: rgba(239, 68, 68, 0.12);
+      border: 1px solid rgba(239, 68, 68, 0.45);
+      color: var(--color-rose);
+      box-shadow: 0 0 20px rgba(239, 68, 68, 0.12);
+    }
+    /* Live trace console */
+    .console-header {
+      display: flex;
+      justify-content: space-between;
+      align-items: center;
+      margin-bottom: 0.5rem;
+    }
+    .console-title {
+      font-size: 0.8rem;
+      font-weight: 600;
+      color: var(--text-muted);
+      text-transform: uppercase;
+    }
+    .console-body {
+      background: #020408;
+      border: 1px solid var(--border-card);
+      border-radius: 8px;
+      padding: 1rem;
+      font-family: var(--font-mono);
+      font-size: 0.8rem;
+      height: 180px;
+      overflow-y: auto;
+      white-space: pre-wrap;
+      color: #a5b4fc;
+      box-shadow: inset 0 2px 10px rgba(0,0,0,0.8);
+    }
+    /* Code block style */
+    pre {
+      background: rgba(0,0,0,0.3);
+      border: 1px solid var(--border-card);
+      border-radius: 8px;
+      padding: 1rem;
+      overflow-x: auto;
+      margin: 1rem 0;
+    }
+    code {
+      font-family: var(--font-mono);
+      font-size: 0.85rem;
+    }
+    /* Markdown styling classes */
+    .ref-table {
+      width: 100%;
+      border-collapse: collapse;
+      margin: 1.5rem 0;
+    }
+    .ref-table th, .ref-table td {
+      padding: 0.65rem 0.85rem;
+      border: 1px solid var(--border-card);
+      text-align: left;
+    }
+    .ref-table th {
+      background: rgba(255,255,255,0.03);
+    }
+    .alert-tip {
+      background: rgba(16, 185, 129, 0.06);
+      border-left: 4px solid var(--color-emerald);
+      padding: 1rem;
+      border-radius: 0 8px 8px 0;
+      margin: 1.5rem 0;
+      font-size: 0.9rem;
+    }
+    .alert-tip strong {
+      color: var(--color-emerald);
+    }
+    /* Footer */
+    footer {
+      text-align: center;
+      margin-top: 4rem;
+      padding-top: 2rem;
+      border-top: 1px solid rgba(255, 255, 255, 0.05);
+      color: var(--text-dim);
+      font-size: 0.875rem;
+    }
+  </style>
+</head>
+<body>
+  <div class="container">
+    <header>
+      <div class="header-left">
+        <div class="header-logo">
+          <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" style="color: var(--color-cyan);"><title>Icon</title>
+            <rect x="3" y="11" width="18" height="11" rx="2" ry="2"></rect>
+            <path d="M7 11V7a5 5 0 0 1 10 0v4"></path>
+          </svg>
+        </div>
+        <div class="header-title-wrapper">
+          <h1>Clio Coder Safety Model</h1>
+          <p>Execution-gated guardrails, autonomy mappings, and policy enforcement engine</p>
+          <div class="meta-chips-row">
+            <span class="chip">Source: docs/safety-model.md</span>
+            <span class="chip chip-orange">clio-coder docs safety</span>
+          </div>
+        </div>
+      </div>
+      <div class="header-right">
+        <span class="version-badge">Clio Coder v0.3.0</span>
+        <a href="index.html" class="back-btn">
+          <svg width="14" height="14" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><title>Icon</title><line x1="19" y1="12" x2="5" y2="12"></line><polyline points="12 19 5 12 12 5"></polyline></svg>
+          Dashboard Hub
+        </a>
+      </div>
+    </header>
+    <div class="tabs-nav">
+      <button type="button" class="tab-btn active" onclick="switchTab('interactive')">
+        <svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><title>Icon</title><polyline points="22 12 18 12 15 21 9 3 6 12 2 12"></polyline></svg>
+        Interactive Spec &amp; Simulator
+      </button>
+      <button type="button" class="tab-btn" onclick="switchTab('reference')">
+        <svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><title>Icon</title><path d="M14 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V8z"></path><polyline points="14 2 14 8 20 8"></polyline><line x1="16" y1="13" x2="8" y2="13"></line><line x1="16" y1="17" x2="8" y2="17"></line><polyline points="10 9 9 9 8 9"></polyline></svg>
+        Full Technical Reference
+      </button>
+    </div>
+    <!-- TAB 1: INTERACTIVE -->
+    <main class="tab-pane active" id="pane-interactive">
+      <div class="blueprint-layout">
+        <!-- Left: Matrix & Flows -->
+        <div class="specs-col">
+          <div class="glass-card">
+            <h2>
+              <svg width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><title>Icon</title><path d="M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10z"></path></svg>
+              Autonomy Level Matrix
+            </h2>
+            <p>The <code>autonomy</code> setting in <code>settings.yaml</code> (read-only | suggest | auto-edit | full-auto) controls tool execution gates. The safety net blocks apply regardless of this level.</p>
+            <div class="matrix-wrapper">
+              <table class="matrix-table" id="matrixTable">
+                <thead>
+                  <tr>
+                    <th>Action Class</th>
+                    <th id="hdr-read-only">read-only</th>
+                    <th id="hdr-suggest">suggest</th>
+                    <th id="hdr-auto-edit" class="highlight">auto-edit (default)</th>
+                    <th id="hdr-full-auto">full-auto</th>
+                  </tr>
+                </thead>
+                <tbody>
+                  <tr id="row-read">
+                    <td class="col-hdr">read</td>
+                    <td><span class="badge-decision allow">allow</span></td>
+                    <td><span class="badge-decision allow">allow</span></td>
+                    <td class="highlight"><span class="badge-decision allow">allow</span></td>
+                    <td><span class="badge-decision allow">allow</span></td>
+                  </tr>
+                  <tr id="row-write">
+                    <td class="col-hdr">write</td>
+                    <td><span class="badge-decision deny">deny</span></td>
+                    <td><span class="badge-decision ask">ask</span></td>
+                    <td class="highlight"><span class="badge-decision allow">allow</span></td>
+                    <td><span class="badge-decision allow">allow</span></td>
+                  </tr>
+                  <tr id="row-execute-builtin">
+                    <td class="col-hdr">execute (builtin / project command)</td>
+                    <td><span class="badge-decision deny">deny</span></td>
+                    <td><span class="badge-decision ask">ask</span></td>
+                    <td class="highlight"><span class="badge-decision allow">allow</span></td>
+                    <td><span class="badge-decision allow">allow</span></td>
+                  </tr>
+                  <tr id="row-execute-other">
+                    <td class="col-hdr">execute (any other bash)</td>
+                    <td><span class="badge-decision deny">deny</span></td>
+                    <td><span class="badge-decision ask">ask</span></td>
+                    <td class="highlight"><span class="badge-decision ask">ask</span></td>
+                    <td><span class="badge-decision allow">allow</span></td>
+                  </tr>
+                  <tr id="row-dispatch">
+                    <td class="col-hdr">dispatch</td>
+                    <td><span class="badge-decision deny">deny</span></td>
+                    <td><span class="badge-decision ask">ask</span></td>
+                    <td class="highlight"><span class="badge-decision allow">allow</span></td>
+                    <td><span class="badge-decision allow">allow</span></td>
+                  </tr>
+                  <tr id="row-system-modify">
+                    <td class="col-hdr">system_modify</td>
+                    <td><span class="badge-decision deny">deny</span></td>
+                    <td><span class="badge-decision ask">ask</span></td>
+                    <td class="highlight"><span class="badge-decision ask">ask</span></td>
+                    <td><span class="badge-decision ask">ask</span></td>
+                  </tr>
+                  <tr id="row-git-destructive">
+                    <td class="col-hdr">git_destructive</td>
+                    <td><span class="badge-decision block">net block</span></td>
+                    <td><span class="badge-decision block">net block</span></td>
+                    <td class="highlight"><span class="badge-decision block">net block</span></td>
+                    <td><span class="badge-decision block">net block</span></td>
+                  </tr>
+                  <tr id="row-unknown">
+                    <td class="col-hdr">unknown</td>
+                    <td><span class="badge-decision deny">deny</span></td>
+                    <td><span class="badge-decision ask">ask</span></td>
+                    <td class="highlight"><span class="badge-decision ask">ask</span></td>
+                    <td><span class="badge-decision ask">ask</span></td>
+                  </tr>
+                </tbody>
+              </table>
+            </div>
+          </div>
+          <div class="glass-card">
+            <h2>
+              <svg width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><title>Icon</title><polyline points="22 12 18 12 15 21 9 3 6 12 2 12"></polyline></svg>
+              Enforcement Path Flow
+            </h2>
+            <p>Every tool call evaluates through the Safety Net filters first, followed by Autonomy level mapping, and finally queues through the Approvals resolver.</p>
+            <div class="flowchart-container">
+              <svg viewBox="0 0 600 220" fill="none" xmlns="http://www.w3.org/2000/svg"><title>Icon</title>
+                <!-- Marker def -->
+                <defs>
+                  <marker id="arrow" viewBox="0 0 10 10" refX="6" refY="5" markerWidth="6" markerHeight="6" orient="auto-start-reverse">
+                    <path d="M 0 1.5 L 8 5 L 0 8.5 z" fill="var(--color-cyan)"/>
+                  </marker>
+                </defs>
+                <!-- Box 1 -->
+                <rect x="10" y="70" width="115" height="50" rx="8" fill="rgba(255,255,255,0.02)" stroke="var(--border-card)" stroke-width="1"/>
+                <text x="67" y="94" fill="#fff" font-size="10" font-family="var(--font-sans)" text-anchor="middle" font-weight="600">Tool Call Input</text>
+                <text x="67" y="108" fill="var(--text-muted)" font-size="8" font-family="var(--font-sans)" text-anchor="middle">(bash, write, etc.)</text>
+                <!-- Arrow 1 -> 2 -->
+                <path d="M 125 95 L 150 95" fill="none" stroke="var(--color-cyan)" stroke-width="1.5" marker-end="url(#arrow)"/>
+                <!-- Box 2 -->
+                <rect id="flow-net" x="160" y="60" width="110" height="70" rx="8" fill="rgba(255,255,255,0.02)" stroke="var(--border-card)" stroke-width="1"/>
+                <text x="215" y="85" fill="#fff" font-size="11" font-family="var(--font-sans)" text-anchor="middle" font-weight="700">1. Safety Net</text>
+                <text x="215" y="100" fill="var(--color-rose)" font-size="8" font-family="var(--font-sans)" text-anchor="middle" font-weight="600">Block / Confirm</text>
+                <text x="215" y="115" fill="var(--color-emerald)" font-size="8" font-family="var(--font-sans)" text-anchor="middle" font-weight="600">Pass →</text>
+                <!-- Arrow 2 -> 3 -->
+                <path d="M 270 95 L 295 95" fill="none" stroke="var(--color-cyan)" stroke-width="1.5" marker-end="url(#arrow)"/>
+                <!-- Box 3 -->
+                <rect id="flow-autonomy" x="305" y="60" width="110" height="70" rx="8" fill="rgba(0, 240, 255, 0.03)" stroke="var(--color-cyan)" stroke-width="1.5"/>
+                <text x="360" y="85" fill="#fff" font-size="11" font-family="var(--font-sans)" text-anchor="middle" font-weight="700">2. Autonomy</text>
+                <text x="360" y="100" fill="var(--text-muted)" font-size="8" font-family="var(--font-sans)" text-anchor="middle">Mapping Matrix</text>
+                <text x="360" y="115" fill="var(--color-cyan)" font-size="8" font-family="var(--font-sans)" text-anchor="middle" font-weight="600">Allow / Ask / Deny</text>
+                <!-- Arrow 3 -> 4 -->
+                <path d="M 415 95 L 440 95" fill="none" stroke="var(--color-cyan)" stroke-width="1.5" marker-end="url(#arrow)"/>
+                <!-- Box 4 -->
+                <rect id="flow-approvals" x="450" y="60" width="130" height="70" rx="8" fill="rgba(255,255,255,0.02)" stroke="var(--border-card)" stroke-width="1"/>
+                <text x="515" y="85" fill="#fff" font-size="11" font-family="var(--font-sans)" text-anchor="middle" font-weight="700">3. Approvals Flow</text>
+                <text x="515" y="100" fill="var(--color-amber)" font-size="8" font-family="var(--font-sans)" text-anchor="middle">TUI: Queue overlay</text>
+                <text x="515" y="115" fill="var(--color-rose)" font-size="8" font-family="var(--font-sans)" text-anchor="middle">Headless: Deny</text>
+                <!-- Safety Net reject branch -->
+                <path d="M 215 130 L 215 170 L 450 170" fill="none" stroke="var(--color-rose)" stroke-width="1" stroke-dasharray="3 3" marker-end="url(#arrow)"/>
+                <text x="330" y="165" fill="var(--color-rose)" font-size="8" font-family="var(--font-sans)">Safety block / escape block</text>
+              </svg>
+            </div>
+          </div>
+        </div>
+        <!-- Right: Simulator -->
+        <div class="simulator-panel">
+          <div class="glass-card">
+            <h2>
+              <svg width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><title>Icon</title><path d="M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10z"></path></svg>
+              Safety Evaluation Simulator
+            </h2>
+            <div class="presets-list">
+              <span class="preset-btn" onclick="loadPreset('status')">git status</span>
+              <span class="preset-btn" onclick="loadPreset('npm-test')">npm test</span>
+              <span class="preset-btn" onclick="loadPreset('write-src')">write index.ts</span>
+              <span class="preset-btn" onclick="loadPreset('write-env')">write .env</span>
+              <span class="preset-btn" onclick="loadPreset('rm-rf')">rm -rf /</span>
+              <span class="preset-btn" onclick="loadPreset('stash-drop')">git stash drop</span>
+              <span class="preset-btn" onclick="loadPreset('force-push')">git push --force</span>
+              <span class="preset-btn" onclick="loadPreset('escape-write')">write /etc/hosts</span>
+              <span class="preset-btn" onclick="loadPreset('unrecognized-exec')">apt-get install</span>
+            </div>
+            <div class="form-row">
+              <div class="form-group">
+                <label for="autonomyLevel">Autonomy Level</label>
+                <select id="autonomyLevel" onchange="runSimulation()">
+                  <option value="read-only">read-only</option>
+                  <option value="suggest">suggest</option>
+                  <option value="auto-edit" selected>auto-edit (default)</option>
+                  <option value="full-auto">full-auto</option>
+                </select>
+              </div>
+              <div class="form-group">
+                <label for="operatingPosture">Posture Mode</label>
+                <select id="operatingPosture" onchange="runSimulation()">
+                  <option value="interactive">Interactive TUI</option>
+                  <option value="headless">Headless (clio-coder run)</option>
+                </select>
+              </div>
+            </div>
+            <div class="form-row">
+              <div class="form-group">
+                <label for="toolGroup">Tool Group</label>
+                <select id="toolGroup" onchange="onToolChange()">
+                  <option value="read">read (read, grep, find, ls)</option>
+                  <option value="write" selected>write / edit</option>
+                  <option value="git">git (status, diff, log, checkout)</option>
+                  <option value="bash">bash (general commands)</option>
+                  <option value="dispatch">dispatch (worker delegation)</option>
+                </select>
+              </div>
+              <div class="form-group">
+                <label for="cmdCwd">Working Directory</label>
+                <input type="text" id="cmdCwd" value="/workspace/project" oninput="runSimulation()">
+              </div>
+            </div>
+            <div class="form-group" id="group-command" style="display:none;">
+              <label for="commandInput">Shell Command</label>
+              <input type="text" id="commandInput" value="" placeholder="e.g. npm test" oninput="runSimulation()">
+            </div>
+            <div class="form-group" id="group-filepath">
+              <label for="filepathInput">File Path</label>
+              <input type="text" id="filepathInput" value="src/core/config.ts" placeholder="e.g. src/index.ts" oninput="runSimulation()">
+            </div>
+            <div class="form-group">
+              <label for="projectPolicy">Simulated .clio-coder/safety.yaml</label>
+              <textarea id="projectPolicy" rows="6" oninput="runSimulation()">zeroAccessPaths:
+  - secrets/
+  - .env
+readOnlyPaths:
+  - vendor/
+noDeletePaths:
+  - out/validated/
+commands:
+  - id: local-test
+    command: npm test
+    cwd: .
+    requireConfirmation: false</textarea>
+            </div>
+            <div class="verdict-header">Evaluation Verdict</div>
+            <div id="verdictCard" class="verdict-card v-allow">
+              <div class="verdict-info">
+                <h3 id="verdictTitle">ALLOW</h3>
+                <p id="verdictDesc">Tool call passes all checks and runs immediately.</p>
+              </div>
+              <div id="verdictIcon" class="verdict-status-badge">✓</div>
+            </div>
+            <div class="console-header">
+              <span class="console-title">Engine Decision Trace</span>
+              <span class="preset-btn" style="padding: 0.15rem 0.4rem; font-size:0.65rem;" onclick="clearConsole()">Clear</span>
+            </div>
+            <div id="traceConsole" class="console-body">Initializing Safety Policy Engine...</div>
+          </div>
+        </div>
+      </div>
+    </main>
+    <!-- TAB 2: TECHNICAL REFERENCE -->
+    <main class="tab-pane" id="pane-reference">
+      <div class="glass-card">
+        <h2>Clio Coder Safety Model Specification</h2>
+        <div class="alert-tip">
+          <strong>Interactive Spec Available:</strong> Use the <strong>Interactive Spec &amp; Simulator</strong> tab above to simulate policy enforcement runs in real-time.
+        </div>
+        <p>Clio Coder's safety posture is code-enforced, not prompt-only. Prompt text tells the model how to behave, but execution is gated by target capabilities, the tool registry, safety policy engine, project policy, protected-artifact checks, and receipts.</p>
+        <p>Source of truth: <code>src/domains/safety/**</code>, <code>src/tools/registry.ts</code>, <code>src/tools/bootstrap.ts</code>, and <code>damage-control-rules.yaml</code>.</p>
+        <h3 style="margin: 1.5rem 0 0.5rem 0; color:#fff;">Two axes: autonomy and the safety net</h3>
+        <p>The <code>autonomy</code> setting (<code>read-only</code> | <code>suggest</code> | <code>auto-edit</code> | <code>full-auto</code>) is an enforced dial. It controls exactly one thing: which action classes run immediately, which park for operator approval, and which are auto-denied. Effective autonomy is resolved through <code>resolveEffectiveAutonomy</code> and <code>resolveBaselineAutonomy</code> in <code>src/entry/orchestrator.ts</code> across all admission surfaces. The safety net (damage-control rules, path policy, protected artifacts, loop guard, dispatch scope admission) is independent of the dial and identical at every level.</p>
+        <h3 style="margin: 1.5rem 0 0.5rem 0; color:#fff;">Enforcement path</h3>
+        <p>Every tool call, orchestrator or worker, evaluates in this order:</p>
+        <ol style="margin-left: 2rem; margin-bottom: 1rem; font-size: 0.925rem; color: var(--text-muted);">
+          <li style="margin-bottom: 0.5rem;"><strong>Safety net</strong> (policy engine + middleware guards): <code>block</code> is final at every level; <code>ask</code> is a confirm rail (damage-control <code>ask</code> rules, project <code>requireConfirmation</code>) that parks at every level; <code>pass</code> hands off to step 2.</li>
+          <li style="margin-bottom: 0.5rem;"><strong>Autonomy mapping</strong>: the action class plus the level produce allow, ask, or deny per the matrix.</li>
+          <li style="margin-bottom: 0.5rem;"><strong>Approvals</strong>: whatever asked in step 1 or 2 parks interactively, denies deterministically headless, resolves per <code>workers.onPermission</code> in workers, and non-stall denies in delegations.</li>
+        </ol>
+        <h3 style="margin: 1.5rem 0 0.5rem 0; color:#fff;">Damage-control rules</h3>
+        <p><code>damage-control-rules.yaml</code> is compiled into rule packs. Base rules apply broadly. Rules with <code>ask: true</code> park for one-shot confirmation (for example <code>git stash drop</code> and remote-branch deletion); hard-block rules and classifier-pattern <code>git_destructive</code> hits are always blocked. Both behaviors apply at every autonomy level.</p>
+        <h3 style="margin: 1.5rem 0 0.5rem 0; color:#fff;">Bash recognition</h3>
+        <p>The policy engine tags every bash command as recognized or unrecognized:</p>
+        <ul style="margin-left: 2rem; margin-bottom: 1rem; font-size: 0.925rem; color: var(--text-muted);">
+          <li style="margin-bottom: 0.5rem;"><strong>Recognized</strong>: a valid <code>.clio-coder/safety.yaml</code> command entry, or the narrow built-in no-prompt set such as <code>pwd</code>, simple <code>ls</code>, <code>git status</code>, bounded <code>git diff/log</code>, common test/lint/build commands. Recognized commands run without prompting at <code>auto-edit</code> and <code>full-auto</code>.</li>
+          <li style="margin-bottom: 0.5rem;"><strong>Unrecognized</strong>: anything else. Unrecognized bash asks for one-shot approval at <code>auto-edit</code> and runs at <code>full-auto</code>; at <code>suggest</code> it asks like every mutation, and at <code>read-only</code> it is denied.</li>
+        </ul>
+        <h3 style="margin: 1.5rem 0 0.5rem 0; color:#fff;">Project safety policy</h3>
+        <p>Clio searches upward from the current working directory for <code>.clio-coder/safety.yaml</code>. Minimum schema is version-locked (v1) and parses into standard path boundaries (<code>zeroAccessPaths</code>, <code>readOnlyPaths</code>, <code>noDeletePaths</code>) and customized command sets.</p>
+        <pre><code>version: 1
+zeroAccessPaths:
+  - secrets/
+  - .env
+readOnlyPaths:
+  - vendor/
+noDeletePaths:
+  - out/validated/
+commands:
+  - id: local-test
+    command: npm test
+    cwd: .
+    actionClass: execute
+    shellOperators: deny
+    requireConfirmation: false
+    rationale: Standard local test command.</code></pre>
+        <h3 style="margin: 1.5rem 0 0.5rem 0; color:#fff;">Typed validation tools</h3>
+        <p>Prefer typed tools over Bash: <code>git</code> (status/diff/log) and <code>verify</code>. <code>verify(check="frontend")</code> accepts <code>.html</code>, <code>.css</code>, <code>.js</code> under the workspace root, performing syntax checks and optionally validating references in headless browsers.</p>
+        <h3 style="margin: 1.5rem 0 0.5rem 0; color:#fff;">Dispatch and delegation runtimes</h3>
+        <p>Clio dispatches tasks to worker runtimes and delegation agents under different safety postures:</p>
+        <ul style="margin-left: 2rem; margin-bottom: 1rem; font-size: 0.925rem; color: var(--text-muted);">
+          <li style="margin-bottom: 0.5rem;"><strong><code>claude-sdk</code> (Enforced Safety):</strong> The Claude Code SDK worker is the <strong>strong safety path</strong>. It gates every tool request through Clio's safety net and active autonomy dial before execution via PreToolUse hooks. Worker denials resolve non-interactively based on <code>workers.onPermission</code>.</li>
+          <li style="margin-bottom: 0.5rem;"><strong><code>claude-code</code> (Subprocess Gating):</strong> Drives <code>claude -p</code> as a subprocess. Gating is restricted to command-line parameters mapping the autonomy level to CLI permission modes, without per-tool callbacks.</li>
+          <li style="margin-bottom: 0.5rem;"><strong>Claude Code over ACP (Advisory Gating):</strong> Drives the agent over ACP delegation. Gating is <strong>advisory</strong> because Claude self-governs its tools; <code>claude-sdk</code> is preferred for fully enforced safety.</li>
+        </ul>
+        <h3 style="margin: 1.5rem 0 0.5rem 0; color:#fff;">Write boundaries: detect-and-rollback</h3>
+        <p>Post-run enforcement of declared write boundaries is strictly detect-and-rollback, never sandboxing (<code>src/domains/dispatch/write-boundary.ts</code>). Nothing prevents a write during step execution: no container, no seccomp filter, and no filesystem interception. After execution, the orchestrator compares the checkout against pre-step snapshots, rolls back unpermitted modifications, and fails the step with a <code>WriteBoundaryViolation</code>.</p>
+        <h3 style="margin: 1.5rem 0 0.5rem 0; color:#fff;">Receipts and evidence</h3>
+        <p>Safety decisions feed receipts, audit rows, and evidence. The interactive <code>/view</code> surface can inspect receipt artifacts without mutating them, detailing rules matched, command hashes, and active decisions counts.</p>
+      </div>
+    </main>
+    <footer>
+      <p>Clio Coder Safety Model Specification Dashboard &bull; Version 0.3.0</p>
+    </footer>
+  </div>
+  <script>
+    // Tab switching
+    function switchTab(tabId) {
+      document.querySelectorAll('.tab-btn').forEach(btn => { btn.classList.remove('active'); });
+      document.querySelectorAll('.tab-pane').forEach(pane => { pane.classList.remove('active'); });
+      if (tabId === 'interactive') {
+        document.querySelector('.tab-btn:nth-child(1)').classList.add('active');
+        document.getElementById('pane-interactive').classList.add('active');
+      } else {
+        document.querySelector('.tab-btn:nth-child(2)').classList.add('active');
+        document.getElementById('pane-reference').classList.add('active');
+      }
+    }
+    // Rules Definitions
+    const DAMAGE_CONTROL_RULES = [
+      { id: "rm-rf-root", pattern: /\brm\s+-rf?\s+\/(?![a-z0-9]*tmp\/)/, class: "system_modify", block: true, reason: "Destructive filesystem operation on root" },
+      { id: "git-push-force", pattern: /\bgit\s+push\s+.*(--force|-f)(?!-with-lease)\b/, class: "git_destructive", block: true, reason: "Force push overwrites branch history" },
+      { id: "curl-pipe-sh", pattern: /\bcurl\b[^|]*\|\s*(sudo\s+)?(sh|bash|zsh)\b/, class: "execute", block: true, reason: "Remote-script-to-shell installer is prohibited" },
+      { id: "git-stash-drop", pattern: /\bgit\s+stash\s+drop\b/, class: "git_destructive", block: false, ask: true, reason: "Stash drop permanently discards uncommitted code" },
+      { id: "git-restore-dot", pattern: /\bgit\s+restore\s+\.\s*$/, class: "git_destructive", block: false, ask: true, reason: "Git restore discards all local workspace edits" },
+    ];
+    const BUILTIN_RECOGNIZED = [
+      /^pwd$/,
+      /^ls(?:\s+-[a-zA-Z0-9]+|\s+[\w./-]+)*$/,
+      /^git\s+status$/,
+      /^git\s+diff(?:\s+[\w./-]+)*$/,
+      /^git\s+log(?:\s+-[0-9]+)?$/,
+      /^npm\s+test$/,
+      /^npm\s+run\s+test$/
+    ];
+    // Tool Groups Change
+    function onToolChange() {
+      const tool = document.getElementById('toolGroup').value;
+      const cmdGroup = document.getElementById('group-command');
+      const fileGroup = document.getElementById('group-filepath');
+      if (tool === 'bash' || tool === 'git') {
+        cmdGroup.style.display = 'block';
+        fileGroup.style.display = 'none';
+      } else if (tool === 'read' || tool === 'write') {
+        cmdGroup.style.display = 'none';
+        fileGroup.style.display = 'block';
+      } else {
+        cmdGroup.style.display = 'none';
+        fileGroup.style.display = 'none';
+      }
+      runSimulation();
+    }
+    // Load presets
+    function loadPreset(presetId) {
+      const toolGroup = document.getElementById('toolGroup');
+      const commandInput = document.getElementById('commandInput');
+      const filepathInput = document.getElementById('filepathInput');
+      switch(presetId) {
+        case 'status':
+          toolGroup.value = 'git';
+          commandInput.value = 'git status';
+          break;
+        case 'npm-test':
+          toolGroup.value = 'bash';
+          commandInput.value = 'npm test';
+          break;
+        case 'write-src':
+          toolGroup.value = 'write';
+          filepathInput.value = 'src/index.ts';
+          break;
+        case 'write-env':
+          toolGroup.value = 'write';
+          filepathInput.value = '.env';
+          break;
+        case 'rm-rf':
+          toolGroup.value = 'bash';
+          commandInput.value = 'rm -rf /';
+          break;
+        case 'stash-drop':
+          toolGroup.value = 'git';
+          commandInput.value = 'git stash drop';
+          break;
+        case 'force-push':
+          toolGroup.value = 'git';
+          commandInput.value = 'git push origin main --force';
+          break;
+        case 'escape-write':
+          toolGroup.value = 'write';
+          filepathInput.value = '/etc/hosts';
+          break;
+        case 'unrecognized-exec':
+          toolGroup.value = 'bash';
+          commandInput.value = 'sudo apt-get install build-essential';
+          break;
+      }
+      onToolChange();
+    }
+    // Clear console
+    function clearConsole() {
+      document.getElementById('traceConsole').innerHTML = '';
+    }
+    // Log to console helper
+    function logTrace(msg, type = 'info') {
+      const consoleEl = document.getElementById('traceConsole');
+      let prefix = '[INFO]';
+      if (type === 'warn') prefix = '[WARN]';
+      if (type === 'error') prefix = '[ERROR]';
+      if (type === 'success') prefix = '[SUCCESS]';
+      consoleEl.innerHTML += `\n${prefix} ${msg}`;
+      consoleEl.scrollTop = consoleEl.scrollHeight;
+    }
+    // Parse simple yaml zeroAccess/readOnly/noDelete paths
+    function parsePathPolicies(yamlText) {
+      const zeroAccess = [];
+      const readOnly = [];
+      const noDelete = [];
+      try {
+        const lines = yamlText.split('\n');
+        let currentSection = null;
+        lines.forEach(line => {
+          const trimmed = line.trim();
+          if (!trimmed || trimmed.startsWith('#')) return;
+          if (trimmed.startsWith('zeroAccessPaths:')) {
+            currentSection = 'zero';
+          } else if (trimmed.startsWith('readOnlyPaths:')) {
+            currentSection = 'readonly';
+          } else if (trimmed.startsWith('noDeletePaths:')) {
+            currentSection = 'nodelete';
+          } else if (trimmed.startsWith('commands:')) {
+            currentSection = 'commands';
+          } else if (trimmed.startsWith('-') && currentSection) {
+            const val = trimmed.replace(/^-/, '').trim().replace(/['"]/g, '');
+            if (currentSection === 'zero') zeroAccess.push(val);
+            if (currentSection === 'readonly') readOnly.push(val);
+            if (currentSection === 'nodelete') noDelete.push(val);
+          }
+        });
+      } catch (_) {
+        // fail silently
+      }
+      return { zeroAccess, readOnly, noDelete };
+    }
+    // Main simulator algorithm
+    function runSimulation() {
+      const autonomy = document.getElementById('autonomyLevel').value;
+      const posture = document.getElementById('operatingPosture').value;
+      const tool = document.getElementById('toolGroup').value;
+      const cwd = document.getElementById('cmdCwd').value.trim();
+      const command = document.getElementById('commandInput').value.trim();
+      const filepath = document.getElementById('filepathInput').value.trim();
+      const policyYaml = document.getElementById('projectPolicy').value;
+      clearConsole();
+      logTrace("Evaluating safety request...", 'info');
+      logTrace(`autonomy_level="${autonomy}" posture_mode="${posture}" tool="${tool}"`, 'info');
+      // Highlight active autonomy column in matrix table
+      document.querySelectorAll('#matrixTable th, #matrixTable td').forEach(el => { el.classList.remove('highlight'); });
+      const activeColId = `hdr-${autonomy}`;
+      const colIndex = Array.from(document.querySelectorAll('#matrixTable th')).findIndex(th => th.id === activeColId);
+      if (colIndex !== -1) {
+        document.querySelectorAll(`#matrixTable th:nth-child(${colIndex + 1})`).forEach(el => { el.classList.add('highlight'); });
+        document.querySelectorAll(`#matrixTable td:nth-child(${colIndex + 1})`).forEach(el => { el.classList.add('highlight'); });
+      }
+      // ----------------------------------------------------
+      // STAGE 1: CLASSIFY ACTION CLASS
+      // ----------------------------------------------------
+      let actionClass = "unknown";
+      if (tool === 'read') {
+        actionClass = "read";
+      } else if (tool === 'write') {
+        // Path safety overrides classification
+        const SYSTEM_ROOTS = ['/etc', '/usr', '/var', '/bin', '/sbin', '/run'];
+        const SCRATCH_EXEMPT = ['/var/tmp', '/var/folders'];
+        const underSystemRoot =
+          SYSTEM_ROOTS.some((root) => filepath === root || filepath.startsWith(root + '/')) &&
+          !SCRATCH_EXEMPT.some((root) => filepath === root || filepath.startsWith(root + '/'));
+        if (underSystemRoot) {
+          actionClass = "system_modify";
+          logTrace(`Path Escaping: file write path "${filepath}" is a system directory`, 'warn');
+        } else if (filepath.startsWith('..') || filepath.startsWith('/') && !filepath.startsWith(cwd)) {
+          actionClass = "system_modify";
+          logTrace(`Path Escaping: file write path "${filepath}" escapes workspace root`, 'warn');
+        } else {
+          actionClass = "write";
+        }
+      } else if (tool === 'git') {
+        // Parse git command
+        let isDestructive = false;
+        for (const rule of DAMAGE_CONTROL_RULES) {
+          if (rule.class === 'git_destructive' && rule.pattern.test(command)) {
+            actionClass = "git_destructive";
+            isDestructive = true;
+            break;
+          }
+        }
+        if (!isDestructive) {
+          if (command.startsWith('git diff') || command.startsWith('git status') || command.startsWith('git log')) {
+            actionClass = "read";
+          } else {
+            actionClass = "execute"; // git commit, add, stash, etc.
+          }
+        }
+      } else if (tool === 'bash') {
+        // Classify bash commands
+        let isDestructive = false;
+        let isSysModify = false;
+        for (const rule of DAMAGE_CONTROL_RULES) {
+          if (rule.pattern.test(command)) {
+            if (rule.class === 'git_destructive') {
+              actionClass = "git_destructive";
+              isDestructive = true;
+            } else if (rule.class === 'system_modify') {
+              actionClass = "system_modify";
+              isSysModify = true;
+            }
+            break;
+          }
+        }
+        if (!isDestructive && !isSysModify) {
+          if (command.includes('sudo') || command.includes('apt-get') || command.includes('npm install -g')) {
+            actionClass = "system_modify";
+          } else {
+            // Check if recognized
+            let recognized = false;
+            const hasOtherOperators = /\|\||[;|><\n]/.test(command);
+            const isChain = !hasOtherOperators && command.includes('&&');
+            if (hasOtherOperators) {
+              logTrace(`Sequencing or redirection operator found. Command is unrecognized.`, 'warn');
+            } else if (isChain) {
+              // An && chain is recognized only when every member is, capped at
+              // six members, and it takes the most restrictive member's verdict.
+              const segments = command.split('&&').map((part) => part.trim()).filter(Boolean);
+              const memberRecognized = (segment) =>
+                BUILTIN_RECOGNIZED.some((rx) => rx.test(segment)) || segment === 'npm test' || /^cd\s+\S+$/.test(segment);
+              if (segments.length > 6) {
+                logTrace(`Chain of ${segments.length} members exceeds the six-member cap. Command is unrecognized.`, 'warn');
+              } else if (segments.every(memberRecognized)) {
+                recognized = true;
+                logTrace(`Every member of the && chain is recognized. Chain classified as execute (recognized).`, 'success');
+              } else {
+                logTrace(`One or more && chain members are unrecognized. Command is unrecognized.`, 'warn');
+              }
+            } else {
+              for (const rx of BUILTIN_RECOGNIZED) {
+                if (rx.test(command)) {
+                  recognized = true;
+                  break;
+                }
+              }
+              // Check project policy command IDs
+              if (command === 'npm test') {
+                recognized = true; // matches simulated policy
+              }
+            }
+            if (recognized) {
+              actionClass = "execute"; // Recognized no-prompt set
+              logTrace(`Recognized command match: "${command}" classified as execute (recognized)`, 'success');
+            } else {
+              actionClass = "execute_other"; // Unrecognized bash
+              logTrace(`Unrecognized command: "${command}" classified as execute (any other bash)`, 'warn');
+            }
+          }
+        }
+      } else if (tool === 'dispatch') {
+        actionClass = "dispatch";
+      }
+      // Highlight active row in matrix
+      document.querySelectorAll('#matrixTable tbody tr').forEach(tr => { tr.style.background = 'none'; });
+      let rowEl = null;
+      if (actionClass === 'read') rowEl = document.getElementById('row-read');
+      else if (actionClass === 'write') rowEl = document.getElementById('row-write');
+      else if (actionClass === 'execute') rowEl = document.getElementById('row-execute-builtin');
+      else if (actionClass === 'execute_other') rowEl = document.getElementById('row-execute-other');
+      else if (actionClass === 'dispatch') rowEl = document.getElementById('row-dispatch');
+      else if (actionClass === 'system_modify') rowEl = document.getElementById('row-system-modify');
+      else if (actionClass === 'git_destructive') rowEl = document.getElementById('row-git-destructive');
+      else rowEl = document.getElementById('row-unknown');
+      if (rowEl) {
+        rowEl.style.background = 'rgba(0, 240, 255, 0.04)';
+      }
+      logTrace(`Resolved Action Class: "${actionClass === 'execute_other' ? 'execute: other bash' : actionClass}"`, 'info');
+      // ----------------------------------------------------
+      // STAGE 2: RUN THROUGH SAFETY NET (Damage Control Rules & Path Policies)
+      // ----------------------------------------------------
+      let safetyNetVerdict = "pass";
+      let safetyNetReason = "";
+      // Path policies from YAML
+      const policies = parsePathPolicies(policyYaml);
+      const activeScanPath = tool === 'write' ? filepath : command;
+      // Check zeroAccessPaths
+      for (const p of policies.zeroAccess) {
+        if (activeScanPath.includes(p)) {
+          safetyNetVerdict = "block";
+          safetyNetReason = `zeroAccessPaths breach: path contains "${p}"`;
+          break;
+        }
+      }
+      // Check command substitution confirm rail
+      if (safetyNetVerdict === 'pass' && (tool === 'bash' || tool === 'git')) {
+        const hasSubstitution = /\$\(|`/.test(command);
+        if (hasSubstitution) {
+          safetyNetVerdict = "confirm";
+          safetyNetReason = "Command substitution $(...) or backticks is an always-on Safety Net confirm rail";
+        }
+      }
+      // Check readOnlyPaths (for write commands)
+      if (safetyNetVerdict === 'pass' && tool === 'write') {
+        for (const p of policies.readOnly) {
+          if (filepath.includes(p)) {
+            safetyNetVerdict = "block";
+            safetyNetReason = `readOnlyPaths breach: writing to "${p}" is blocked`;
+            break;
+          }
+        }
+      }
+      // Check Damage Control rules regexes
+      if (safetyNetVerdict === 'pass') {
+        for (const rule of DAMAGE_CONTROL_RULES) {
+          if (rule.pattern.test(command) || rule.pattern.test(filepath)) {
+            if (rule.block) {
+              safetyNetVerdict = "block";
+              safetyNetReason = `Damage control match: ${rule.reason} (Rule: ${rule.id})`;
+            } else if (rule.ask) {
+              safetyNetVerdict = "confirm";
+              safetyNetReason = `Damage control confirm check: ${rule.reason} (Rule: ${rule.id})`;
+            }
+            break;
+          }
+        }
+      }
+      logTrace(`[Safety Net Check] Verdict: ${safetyNetVerdict.toUpperCase()} ${safetyNetReason ? `(${safetyNetReason})` : ''}`, safetyNetVerdict === 'block' ? 'error' : (safetyNetVerdict === 'confirm' ? 'warn' : 'success'));
+      // ----------------------------------------------------
+      // STAGE 3: AUTONOMY MAPPING
+      // ----------------------------------------------------
+      let autonomyVerdict = "allow";
+      if (safetyNetVerdict !== 'block') {
+        // Map matrix
+        if (autonomy === 'read-only') {
+          autonomyVerdict = (actionClass === 'read') ? 'allow' : 'deny';
+        } else if (autonomy === 'suggest') {
+          autonomyVerdict = (actionClass === 'read') ? 'allow' : 'ask';
+        } else if (autonomy === 'auto-edit') {
+          if (actionClass === 'read' || actionClass === 'write' || actionClass === 'execute' || actionClass === 'dispatch') {
+            autonomyVerdict = 'allow';
+          } else {
+            autonomyVerdict = 'ask'; // execute_other, system_modify, unknown
+          }
+        } else if (autonomy === 'full-auto') {
+          if (actionClass === 'system_modify' || actionClass === 'unknown') {
+            autonomyVerdict = 'ask';
+          } else {
+            autonomyVerdict = 'allow';
+          }
+        }
+        // git_destructive is net block regardless of autonomy level
+        // EXCEPT when it is overridden by an authored damage-control confirm (ask) rule (e.g. git stash drop)
+        const isAskRule = (safetyNetVerdict === 'confirm');
+        if (actionClass === 'git_destructive' && !isAskRule) {
+          autonomyVerdict = 'block';
+        }
+      } else {
+        autonomyVerdict = 'block';
+      }
+      logTrace(`[Autonomy Mapping] Matrix result: ${autonomyVerdict.toUpperCase()}`, autonomyVerdict === 'allow' ? 'success' : (autonomyVerdict === 'ask' ? 'warn' : 'error'));
+      // ----------------------------------------------------
+      // STAGE 4: RESOLVE APPROVALS / POSTURE
+      // ----------------------------------------------------
+      let finalVerdict = "ALLOW";
+      let finalDetails = "Tool call passes all checks and runs immediately.";
+      let cardClass = "v-allow";
+      let icon = "✓";
+      // Combine Safety Net + Autonomy Mappings
+      const resolvesToAsk = (safetyNetVerdict === 'confirm' || autonomyVerdict === 'ask');
+      const resolvesToBlock = (safetyNetVerdict === 'block' || autonomyVerdict === 'block');
+      const resolvesToDeny = (autonomyVerdict === 'deny');
+      if (resolvesToBlock) {
+        finalVerdict = "BLOCK";
+        finalDetails = `[safety-net] block: ${safetyNetReason || 'Action classified as destructive and hard blocked by rule.'}`;
+        cardClass = "v-block";
+        icon = "🛑";
+        logTrace(`Safety Net blocked execution. Final status: BLOCKED`, 'error');
+      } else if (resolvesToDeny) {
+        finalVerdict = "DENY";
+        finalDetails = `[autonomy] denied: Operating under "${autonomy}" level. Action is denied.`;
+        cardClass = "v-deny";
+        icon = "✕";
+        logTrace(`Autonomy level denied execution. Final status: DENIED`, 'error');
+      } else if (resolvesToAsk) {
+        if (posture === 'headless') {
+          // Headless mode automatically denies asks deterministically
+          finalVerdict = "DENY (HEADLESS)";
+          finalDetails = `clio-coder run cannot confirm permission requests; rerun interactively to approve this action.`;
+          cardClass = "v-block";
+          icon = "✕";
+          logTrace(`Headless mode auto-denied interactive request. Final status: DENIED`, 'error');
+        } else {
+          // Interactive TUI mode parks for overlay approval
+          finalVerdict = "ASK / PARK";
+          const askedBy = (safetyNetVerdict === 'confirm') ? 'Asked by: Safety Net rule' : 'Asked by: Autonomy Mapping Matrix';
+          finalDetails = `[approval] notice: Parked in TUI queue overlay. (${askedBy})`;
+          cardClass = "v-ask";
+          icon = "⏳";
+          logTrace(`Parked in TUI permission overlay queue. Waiting for operator...`, 'warn');
+        }
+      } else {
+        logTrace(`Tool call successfully allowed. Final status: ALLOWED`, 'success');
+      }
+      // Update UI displays
+      document.getElementById('verdictTitle').innerText = finalVerdict;
+      document.getElementById('verdictDesc').innerText = finalDetails;
+      const vCard = document.getElementById('verdictCard');
+      vCard.className = `verdict-card ${cardClass}`;
+      document.getElementById('verdictIcon').innerText = icon;
+    }
+    window.switchTab = switchTab;
+    window.loadPreset = loadPreset;
+    window.clearConsole = clearConsole;
+    // Initialize Simulator on load
+    window.onload = () => {
+      onToolChange();
+    };
+  </script>
+</body>
+</html>