@iowarp/clio-coder 0.3.7 → 0.3.8

package/dist/{chunk-UUANF5CR.js → chunk-TLQJPP24.js}

@@ -5,7 +5,26 @@ import {
   readAuditRows,
   readSessionEntriesForId,
   responseModelIdObservationFromRecord
-} from "./chunk-6TUKSZVF.js";
+} from "./chunk-YS5VLNH5.js";
+import {
+  RUN_RECEIPT_INTEGRITY_ALGORITHM,
+  RUN_RECEIPT_INTEGRITY_VERSION,
+  adaptFinishContractCompletionStatus,
+  adaptGateDecisionReviewStatus,
+  adaptGroundedEvidenceValidationStatus,
+  composeTrustStatus,
+  inspectRunReceiptTrustStatus,
+  isReceiptIntegrity,
+  isTrustStatusIdentifier,
+  loadEvalArtifact,
+  normalizeTrustStatus,
+  parseEvalArtifactV4,
+  redactArtifactForStorage,
+  retiredIntegrityVersionOf,
+  sumEvalHarnessMetrics,
+  verifyReceiptIntegrity,
+  withReceiptIntegrity
+} from "./chunk-K4XHGFR5.js";
 import {
   applyTaskWorktree,
   captureWorkspaceSnapshot,
@@ -13,26 +32,19 @@ import {
   createTaskWorktree,
   createWriteBoundaryEnforcer,
   gitCheckoutRoot
-} from "./chunk-KZ2H5X4G.js";
+} from "./chunk-MXKJU4JB.js";
 import {
   executionPlanAncestors,
   spliceExecutionPlan
-} from "./chunk-M4AKACEO.js";
+} from "./chunk-J3YUBZWY.js";
 import {
   parseRigorOverride,
   resolveRigor
 } from "./chunk-RVG5JXAL.js";
 import {
-  RUN_RECEIPT_INTEGRITY_ALGORITHM,
-  RUN_RECEIPT_INTEGRITY_VERSION,
-  isReceiptIntegrity,
-  loadEvalArtifact,
-  parseEvalArtifactV4,
-  redactArtifactForStorage,
-  sumEvalHarnessMetrics,
-  verifyReceiptIntegrity,
-  withReceiptIntegrity
-} from "./chunk-ZGH7FGS5.js";
+  FLEET_COMMAND_BASE_ENV,
+  normalizeWriteBoundary
+} from "./chunk-E77JEWSD.js";
 import {
   LOCAL_NODE_ID,
   computeSettingsFingerprint,
@@ -43,11 +55,7 @@ import {
   receiptAttestationFields,
   routeFactVerdict,
   spawnNativeWorker
-} from "./chunk-TSHXZTOQ.js";
-import {
-  FLEET_COMMAND_BASE_ENV,
-  normalizeWriteBoundary
-} from "./chunk-KCMKRQX4.js";
+} from "./chunk-2HEJ2F35.js";
 import {
   AGENT_LEDGER_PROMPT_MAX_CHARS,
   RETRYABLE_OUTCOMES,
@@ -69,6 +77,8 @@ import {
   claudeSubprocessPermissionConfigForAutonomy,
   competeStanceLiner,
   createRunEffectsRecorder,
+  declaredScopeReplacementDiagnostic,
+  declaredScopeReplacementNotice,
   describeCallAction,
   isBoundedGateRolePrompt,
   isClaudeCanonicalTool,
@@ -77,6 +87,7 @@ import {
   networkToolsDisabled,
   projectExecutionHandoffs,
   renderAgentLedger,
+  resolveDispatchPathScope,
   resolveToolBudgetEnvelope,
   responseSchemaConflictsWithTools,
   runKindSupportsLiveSteering,
@@ -84,11 +95,7 @@ import {
   serializeWorkerRuntimeDescriptor,
   toolPromptHintsForNames,
   validateJobSpec
-} from "./chunk-CEYBNUGC.js";
-import {
-  WRITE_ROOT_REFUSED_TOOLS,
-  assessFinishContract
-} from "./chunk-OBMAI2DP.js";
+} from "./chunk-A3WNZD3P.js";
 import {
   decideRoute,
   defaultRoutingIntent,
@@ -106,7 +113,7 @@ import {
   routingIntentRejection,
   sameRouteIdentity,
   toRouteCandidate
-} from "./chunk-5C77SEEY.js";
+} from "./chunk-P43ETTHK.js";
 import {
   appliesRecipeResultContract,
   gateRouteCorrelation,
@@ -114,15 +121,14 @@ import {
   requestExecutionRole,
   routeCorrelationFactsForRun,
   withAttemptRole
-} from "./chunk-UND3GU2L.js";
+} from "./chunk-H7IXIC72.js";
 import {
-  canonicalJson,
-  endpointIdentityHash,
-  parseAgentLedgerBody
-} from "./chunk-CMZWFGD2.js";
+  WRITE_ROOT_REFUSED_TOOLS,
+  assessFinishContract
+} from "./chunk-5H3GB5BO.js";
 import {
   compareCodepoints
-} from "./chunk-GH5622CP.js";
+} from "./chunk-A2NJGIB3.js";
 import {
   isSkillActivation
 } from "./chunk-GOXNB3AO.js";
@@ -134,9 +140,10 @@ import {
 import {
   parseJsonObjectPayload,
   parseVerifierResult,
+  pathBoundaryCovers,
   resultContractAuthorship,
   validateRecipeResult
-} from "./chunk-DJNLUABN.js";
+} from "./chunk-TTHACPOM.js";
 import {
   agentSpecFingerprint,
   assertAgentSpecPolicy,
@@ -160,6 +167,11 @@ import {
 import {
   canonicalizeExistingPath
 } from "./chunk-ECH6PKUQ.js";
+import {
+  canonicalJson,
+  endpointIdentityHash,
+  parseAgentLedgerBody
+} from "./chunk-CMZWFGD2.js";
 import {
   truncateUtf8
 } from "./chunk-6XLNIQDB.js";
@@ -171,44 +183,54 @@ import {
   canonicalizeWireModelId,
   firstRuntimeResolutionError,
   isDispatchEligibleRuntime,
-  resolveEffectivePricing,
   resolveModelCapabilities,
   resolveRuntimeTarget,
   runtimeResolutionWarnings,
   runtimeTargetSnapshot
-} from "./chunk-VQNODYQ4.js";
-import {
-  targetRequiresAuth
-} from "./chunk-JRIO5UD2.js";
+} from "./chunk-7RFXX52T.js";
 import {
   ceilChars
-} from "./chunk-GEYXPTRF.js";
-import {
-  DEFAULT_DELEGATION_CONNECT_TIMEOUT_MS,
-  DEFAULT_DELEGATION_TURN_TIMEOUT_MS,
-  DEFAULT_SETTINGS,
-  THINKING_LEVELS
-} from "./chunk-4DGYLA73.js";
-import {
-  atomicWrite
-} from "./chunk-FO5ZOVUY.js";
-import {
-  assertSafeId
-} from "./chunk-R346GLFC.js";
+} from "./chunk-RWSI4YD7.js";
 import {
   attributeCommitMessage,
   gitCommitAttributionEnabled,
   reportCommitAttributionDiagnostic,
   withManagedGitCommitAttributionEnvironment
-} from "./chunk-D4MDIG46.js";
+} from "./chunk-B5CSFE7B.js";
 import {
   MAX_TIMER_DELAY_MS,
   rawDurationMs
 } from "./chunk-FQ4SKYE4.js";
+import {
+  BusChannels
+} from "./chunk-TT36MB5S.js";
+import {
+  atomicWrite
+} from "./chunk-3BINW3FP.js";
+import {
+  assertSafeId
+} from "./chunk-R346GLFC.js";
+import {
+  AI_AGENT_NAME
+} from "./chunk-6EJMN2Y3.js";
+import {
+  readClioVersion,
+  readPiMonoVersion,
+  resolvePackageRoot
+} from "./chunk-IWHMRKLL.js";
+import {
+  DEFAULT_DELEGATION_CONNECT_TIMEOUT_MS,
+  DEFAULT_DELEGATION_TURN_TIMEOUT_MS,
+  DEFAULT_SETTINGS,
+  THINKING_LEVELS
+} from "./chunk-4DGYLA73.js";
 import {
   GUARDRAIL_DEFAULTS,
   resolveGuardrail
 } from "./chunk-4ZG3XFUR.js";
+import {
+  targetRequiresAuth
+} from "./chunk-EQ63NRB7.js";
 import {
   FILE_LOCK_ACQUIRE_TIMEOUT_MS,
   withStateFileLock,
@@ -225,16 +247,8 @@ import {
   stateRootRemoved
 } from "./chunk-BNAZZHFG.js";
 import {
-  AI_AGENT_NAME
-} from "./chunk-6EJMN2Y3.js";
-import {
-  BusChannels
-} from "./chunk-OB5HIGJY.js";
-import {
-  readClioVersion,
-  readPiMonoVersion,
-  resolvePackageRoot
-} from "./chunk-IWHMRKLL.js";
+  resolveEffectivePricing
+} from "./chunk-PT7HYKEM.js";
 import {
   init_esm_shims
 } from "./chunk-3R73A4XB.js";
@@ -1438,6 +1452,39 @@ function agentLedgerContribution(id, runId) {
   return { posted: contribution.posted, refused: contribution.refused, digest };
 }
 
+// src/domains/dispatch/intent-requirements.ts
+init_esm_shims();
+function renderDispatchIntentRequirements(intent) {
+  if (intent === void 0 || intent.expectedOutputs.length === 0 && intent.verification.length === 0) return null;
+  const lines = [
+    "# Declared Result Requirements",
+    "These entries are requirements to satisfy and verify. They are not evidence that an output exists or a check passed."
+  ];
+  if (intent.expectedOutputs.length > 0) {
+    lines.push("", "Expected outputs:", ...intent.expectedOutputs.map((output) => `- ${output}`));
+  }
+  if (intent.verification.length > 0) {
+    lines.push(
+      "",
+      "Verification requirements:",
+      ...intent.verification.map(
+        (entry) => `- ${entry.check} must pass within its declared timeout of ${entry.timeoutMs}ms`
+      )
+    );
+  }
+  return lines.join("\n");
+}
+function renderDispatchReviewerTask(originalTask, builderRunId, cycle, intent) {
+  const requirements = renderDispatchIntentRequirements(intent);
+  return [
+    `Review the work of builder run ${builderRunId} (review cycle ${cycle}).`,
+    "The builder's final answer is provided as input data; verify it against the workspace, do not trust it blindly.",
+    "Original task the builder was given:",
+    originalTask,
+    ...requirements === null ? [] : [requirements]
+  ].join("\n\n");
+}
+
 // src/domains/dispatch/receipt-findings.ts
 init_esm_shims();
 import { createHash as createHash12 } from "node:crypto";
@@ -3906,6 +3953,12 @@ async function reconcileOrphanAssignments(deps) {
   const summary = { recovered: 0, abandoned: 0 };
   for (const record of deps.listRunning()) {
     if (record.status !== "running") continue;
+    if (deps.ownerAlive(record)) continue;
+    if (record.verdictOwner !== void 0) {
+      await deps.settle(record.assignmentId, record.assignmentId, "failed", record.verdictOwner);
+      summary.abandoned += 1;
+      continue;
+    }
     const views = record.attempts.map((runId) => deps.lookupAttempt(runId)).filter((view) => view !== null);
     const succeeded = views.find((view) => view.succeeded);
     if (succeeded) {
@@ -3934,10 +3987,15 @@ var MAX_ASSIGNMENT_RECORDS = 1e3;
 function storePath2() {
   return join4(clioStateDir(), "assignments.json");
 }
+function validProcessOwner(value) {
+  if (typeof value !== "object" || value === null || Array.isArray(value)) return false;
+  const owner = value;
+  return Number.isSafeInteger(owner.pid) && (owner.pid ?? 0) > 0 && typeof owner.processBirthToken === "string" && typeof owner.acquiredAt === "string" && Number.isFinite(Date.parse(owner.acquiredAt));
+}
 function validRecord2(value) {
   if (typeof value !== "object" || value === null) return false;
   const record = value;
-  return typeof record.assignmentId === "string" && Array.isArray(record.attempts) && record.attempts.every((runId) => typeof runId === "string") && (record.terminalRunId === null || typeof record.terminalRunId === "string") && (record.status === "running" || record.status === "succeeded" || record.status === "failed" || record.status === "canceled" || record.status === "timed_out");
+  return typeof record.assignmentId === "string" && Array.isArray(record.attempts) && record.attempts.every((runId) => typeof runId === "string") && (record.terminalRunId === null || typeof record.terminalRunId === "string") && (record.verdictOwner === void 0 || record.verdictOwner === "fleet") && (record.processOwner === void 0 || validProcessOwner(record.processOwner)) && (record.status === "running" || record.status === "succeeded" || record.status === "failed" || record.status === "canceled" || record.status === "timed_out");
 }
 function readStore3() {
   const path2 = storePath2();
@@ -3951,7 +4009,24 @@ function readStore3() {
   }
 }
 function copyRecord2(record) {
-  return { ...record, attempts: [...record.attempts] };
+  return {
+    ...record,
+    attempts: [...record.attempts],
+    ...record.processOwner === void 0 ? {} : { processOwner: { ...record.processOwner } }
+  };
+}
+var defaultProcessOwnerProbe = {
+  birthToken: processBirthToken,
+  tokenProvesDeath: BIRTH_TOKEN_SOURCE_AVAILABLE,
+  alive: processAlive
+};
+function assignmentProcessOwnerAlive(record, probe = defaultProcessOwnerProbe) {
+  const owner = record.processOwner;
+  if (owner === void 0) return false;
+  const current = probe.birthToken(owner.pid);
+  if (current === null || current !== owner.processBirthToken) return false;
+  if (probe.tokenProvesDeath === false) return probe.alive?.(owner.pid) ?? false;
+  return true;
 }
 function writeStore3(assignments) {
   const file = {
@@ -3996,41 +4071,75 @@ async function renameStoredAssignment(fromAssignmentId, toAssignmentId) {
   });
   return copyRecord2(result);
 }
-function registerAssignment(assignmentId) {
-  return updateRecord(
+function currentProcessOwner() {
+  const token = processBirthToken();
+  if (token === null) throw new Error("dispatch: cannot establish assignment owner process birth token");
+  return {
+    pid: process.pid,
+    processBirthToken: token,
+    acquiredAt: (/* @__PURE__ */ new Date()).toISOString()
+  };
+}
+function openRecord(assignmentId) {
+  return {
     assignmentId,
-    (current) => current ?? { assignmentId, attempts: [], terminalRunId: null, status: "running" }
-  );
+    attempts: [],
+    terminalRunId: null,
+    status: "running",
+    processOwner: currentProcessOwner()
+  };
+}
+function ensureRunningProcessOwner(record) {
+  if (record.status !== "running" || record.processOwner !== void 0) return record;
+  return { ...record, processOwner: currentProcessOwner() };
+}
+function clearProcessOwner(record) {
+  const result = { ...record };
+  delete result.processOwner;
+  return result;
+}
+function registerAssignment(assignmentId) {
+  return updateRecord(assignmentId, (current) => ensureRunningProcessOwner(current ?? openRecord(assignmentId)));
+}
+function claimAssignmentVerdict(assignmentId, owner) {
+  return updateRecord(assignmentId, (current) => ({
+    ...ensureRunningProcessOwner(current ?? openRecord(assignmentId)),
+    verdictOwner: owner
+  }));
 }
 function recordAssignmentAttempt(assignmentId, runId) {
   return updateRecord(assignmentId, (current) => {
-    const base = current ?? { assignmentId, attempts: [], terminalRunId: null, status: "running" };
+    const base = ensureRunningProcessOwner(current ?? openRecord(assignmentId));
     return base.attempts.includes(runId) ? base : { ...base, attempts: [...base.attempts, runId] };
   });
 }
 function failQueuedAssignment(assignmentId) {
   return updateRecord(assignmentId, (current) => {
-    const base = current ?? { assignmentId, attempts: [], terminalRunId: null, status: "running" };
-    return base.status === "running" ? { ...base, status: "failed" } : base;
+    const base = current ?? openRecord(assignmentId);
+    if (base.verdictOwner !== void 0) return base;
+    return base.status === "running" ? clearProcessOwner({ ...base, status: "failed" }) : base;
   });
 }
 function timeoutStoredAssignment(assignmentId) {
   return updateRecord(assignmentId, (current) => {
-    const base = current ?? { assignmentId, attempts: [], terminalRunId: null, status: "running" };
-    return base.status === "running" ? { ...base, status: "timed_out" } : base;
+    const base = current ?? openRecord(assignmentId);
+    if (base.verdictOwner !== void 0) return base;
+    return base.status === "running" ? clearProcessOwner({ ...base, status: "timed_out" }) : base;
   });
 }
 function cancelStoredAssignment(assignmentId) {
   return updateRecord(assignmentId, (current) => {
-    const base = current ?? { assignmentId, attempts: [], terminalRunId: null, status: "running" };
-    return base.status === "running" ? { ...base, status: "canceled" } : base;
+    const base = current ?? openRecord(assignmentId);
+    if (base.verdictOwner !== void 0) return base;
+    return base.status === "running" ? clearProcessOwner({ ...base, status: "canceled" }) : base;
   });
 }
-function settleStoredAssignment(assignmentId, terminalRunId, status) {
+function settleStoredAssignment(assignmentId, terminalRunId, status, owner) {
   return updateRecord(assignmentId, (current) => {
-    const base = current ?? { assignmentId, attempts: [], terminalRunId: null, status: "running" };
+    const base = current ?? openRecord(assignmentId);
     const attempts = base.attempts.includes(terminalRunId) ? base.attempts : [...base.attempts, terminalRunId];
-    return { ...base, attempts, terminalRunId, status };
+    if (base.verdictOwner !== owner) return { ...base, attempts };
+    return clearProcessOwner({ ...base, attempts, terminalRunId, status });
   });
 }
 
@@ -7304,6 +7413,7 @@ function recordWorkerRunEffect(recorder, event) {
   if (event.type === "tool_execution_end") recorder.finish(toolCallId, event.isError === true);
 }
 var DISPATCH_DRAIN_GRACE_MS = 2e3;
+var RUN_WRITE_TARGET_HISTORY = 512;
 async function awaitEventDrain(drained, graceMs = DISPATCH_DRAIN_GRACE_MS) {
   let timer;
   const grace = new Promise((resolve5) => {
@@ -7391,9 +7501,10 @@ function mergeRouteWarningDetail(routeWarning, base) {
 function pickOrchestratorScope(safety) {
   return safety.scopes.workspace;
 }
-function pickWorkerScope(safety, requestedActions) {
+function pickWorkerScope(safety, requestedActions, pathScope) {
   if (requestedActions.every((action) => action === "read")) return safety.scopes.readonly;
-  return safety.scopes.workspace;
+  if (pathScope.writeBoundaries.length === 0) return safety.scopes.workspace;
+  return { ...safety.scopes.workspace, allowedWriteRoots: pathScope.writeBoundaries };
 }
 function deriveRequestedActions(tools, safety) {
   const actions = /* @__PURE__ */ new Set();
@@ -7520,6 +7631,10 @@ function projectContextProvenanceFor(tier, messages) {
 function hasPersonaOverride(req) {
   return typeof req.systemPrompt === "string" && req.systemPrompt.trim().length > 0;
 }
+function hasCallerPersonaOverride(req) {
+  if (!hasPersonaOverride(req)) return false;
+  return !isBoundedGateRolePrompt({ role: req.gate?.role, autonomy: req.autonomy, systemPrompt: req.systemPrompt });
+}
 function personaOverrideFor(req, staticCompositionHash) {
   if (!hasPersonaOverride(req) || staticCompositionHash === null) return null;
   return { promptHash: staticCompositionHash };
@@ -7556,19 +7671,6 @@ function renderWorkerProjectContext(project, options = {}) {
 function workerProjectContextIncludesVerification(body) {
   return body.includes("\nVerification expectations:\n");
 }
-var PATH_TOKEN_RE = /(?:[\w.-]+\/)+[\w.-]+|\b[\w-]+\.[A-Za-z0-9]{1,8}\b/g;
-function workerWorkingContextPaths(req) {
-  const out = /* @__PURE__ */ new Set();
-  for (const root of req.writeRoots ?? []) out.add(root);
-  const text = `${req.task}
-${req.briefing ?? ""}`;
-  for (const match of text.matchAll(PATH_TOKEN_RE)) {
-    const token = match[0];
-    if (token.startsWith("http://") || token.startsWith("https://")) continue;
-    out.add(token);
-  }
-  return [...out];
-}
 function buildDynamicPromptMessages(req, dynamicContext = {}) {
   const messages = [];
   if (dynamicContext.workspace) {
@@ -7589,6 +7691,10 @@ function buildDynamicPromptMessages(req, dynamicContext = {}) {
     const body = `Safety posture: autonomy ${autonomy}. ${workerSafetyOneLiner(autonomy, permission)} Worker permission routing: ${permission}.`;
     messages.push({ id: "dispatch-safety-posture", body, contentHash: sha2565(body) });
   }
+  const requirements = renderDispatchIntentRequirements(req.intent);
+  if (requirements !== null) {
+    messages.push({ id: "dispatch-intent-requirements", body: requirements, contentHash: sha2565(requirements) });
+  }
   if (req.competeStance !== void 0) {
     const body = competeStanceLiner(req.competeStance);
     messages.push({ id: "dispatch-compete-stance", body, contentHash: sha2565(body) });
@@ -7719,9 +7825,6 @@ function explicitToolCapability(providers, target, wireModelId) {
   const fromKnowledgeBase = hit?.entry.capabilities?.tools;
   return typeof fromKnowledgeBase === "boolean" ? fromKnowledgeBase : null;
 }
-function writeConfinedRequest(req) {
-  return req.writeRoots !== void 0 && req.writeRoots.length > 0;
-}
 function effectiveToolNames(allowedTools, target, writeConfined = false, denied = /* @__PURE__ */ new Set()) {
   if (!targetToolCapability(target)) return [];
   const networkStripped = networkToolsDisabled();
@@ -7866,7 +7969,7 @@ function readWorkerTargets(settings) {
   const targetOrder = settings?.targets?.map((target) => target.id) ?? [];
   return { workerDefault, workerProfiles, agentBindings, targetOrder };
 }
-function resolveDispatchAdmissionStage(req, recipe, safety) {
+function resolveDispatchAdmissionStage(req, recipe, safety, pathScope) {
   const recipeTools = recipe.tools;
   const candidateTools = recipeTools && recipeTools.length > 0 ? Array.from(recipeTools) : [];
   const allowedTools = applyToolProfile(candidateTools, req.toolProfile, { agentId: req.agentId, task: req.task });
@@ -7879,7 +7982,7 @@ function resolveDispatchAdmissionStage(req, recipe, safety) {
   }
   const requestedActions = deriveRequestedActions(allowedTools, safety);
   const orchScope = pickOrchestratorScope(safety);
-  const workerScope = pickWorkerScope(safety, requestedActions);
+  const workerScope = pickWorkerScope(safety, requestedActions, pathScope);
   const verdict = admit(
     {
       requestedScope: workerScope,
@@ -7903,7 +8006,7 @@ function resolveDelegationAdmissionStage(req, safety) {
   const allowedTools = applyToolProfile([], req.toolProfile);
   const requestedActions = deriveRequestedActions(allowedTools, safety);
   const orchScope = pickOrchestratorScope(safety);
-  const workerScope = pickWorkerScope(safety, requestedActions);
+  const workerScope = pickWorkerScope(safety, requestedActions, resolveDispatchPathScope(req));
   const verdict = admit(
     {
       requestedScope: workerScope,
@@ -7970,9 +8073,8 @@ function buildDispatchWorkerSpec(input, config) {
     };
   }
   if (input.req.responseSchema !== void 0) spec.responseSchema = input.req.responseSchema;
-  if (appliesRecipeResultContract(input.req.gate?.role) && input.recipe?.resultContract) {
-    spec.resultContract = input.req.resultContractOverride ?? input.recipe.resultContract;
-  }
+  const workerResultContract = appliesRecipeResultContract(input.req.gate?.role) ? input.req.resultContractOverride ?? input.recipe?.resultContract : void 0;
+  if (workerResultContract) spec.resultContract = workerResultContract;
   const product = input.req.product ?? input.recipe?.product;
   if (product) spec.product = product;
   const resolutionSnapshot = runtimeTargetSnapshot(input.target.runtimeResolution);
@@ -8005,10 +8107,7 @@ function buildDispatchWorkerSpec(input, config) {
     if (escalation) spec.escalation = { timeoutMs: escalation.timeoutMs, fallback: escalation.fallback };
   }
   assertRuntimeCanHonorWorkerPermissionMode(input.target.runtime, spec.onPermission);
-  if (input.req.writeRoots !== void 0 && input.req.writeRoots.length > 0) {
-    const jobCwd = input.req.cwd !== void 0 && input.req.cwd.length > 0 ? input.req.cwd : process.cwd();
-    spec.writeRoots = input.req.writeRoots.map((root) => resolvePath(jobCwd, root));
-  }
+  if (input.pathScope.writeBoundaries.length > 0) spec.writeRoots = [...input.pathScope.writeBoundaries];
   assertWriteRootsEnforceable(input.target.runtime, spec.writeRoots);
   if (input.admission.toolProfile !== void 0) spec.toolProfile = input.admission.toolProfile;
   spec.autonomy = input.effectiveAutonomy;
@@ -8403,6 +8502,15 @@ function createDispatchBundle(context, options) {
   const active = /* @__PURE__ */ new Map();
   const targetCooldowns = /* @__PURE__ */ new Map();
   const ownedReservations = /* @__PURE__ */ new Set();
+  const runWriteTargets = /* @__PURE__ */ new Map();
+  const recordRunWriteTargets = (runId, paths) => {
+    runWriteTargets.set(runId, paths);
+    while (runWriteTargets.size > RUN_WRITE_TARGET_HISTORY) {
+      const oldest = runWriteTargets.keys().next();
+      if (oldest.done === true) break;
+      runWriteTargets.delete(oldest.value);
+    }
+  };
   const capacityAdmission = createCapacityAdmissionController({
     limits: () => {
       const settings = getEffectiveSettings();
@@ -9005,6 +9113,19 @@ function createDispatchBundle(context, options) {
     if (cooldownMs <= 0) return;
     targetCooldowns.set(key, { until: now() + cooldownMs, reason: failureClass });
   }
+  function publishDispatchPathScope(req, pathScope) {
+    const replacementDiagnostic = declaredScopeReplacementDiagnostic(pathScope);
+    if (replacementDiagnostic !== null) {
+      reportDispatchDiagnostic("typed scope replacement", new Error(replacementDiagnostic));
+    }
+    const notice = declaredScopeReplacementNotice(pathScope);
+    if (notice !== null) {
+      context.bus.emit(BusChannels.DispatchScopeNotice, {
+        ...notice,
+        agentId: req.agentId
+      });
+    }
+  }
   async function resolveLifecycle(req, settings) {
     const recipe = agents.get(req.agentId);
     if (!recipe) {
@@ -9016,7 +9137,7 @@ function createDispatchBundle(context, options) {
         `dispatch: agent '${req.agentId}' is a ${spec.audience} agent reserved for Clio internal orchestration`
       );
     }
-    if (hasPersonaOverride(req) && (spec.audience === "shadow" || spec.audience === "internal")) {
+    if (hasCallerPersonaOverride(req) && (spec.audience === "shadow" || spec.audience === "internal")) {
       throw new Error(`dispatch: persona overrides are not allowed for ${spec.audience} agent '${req.agentId}'`);
     }
     const capabilityMismatch = req.gate !== void 0 ? null : assessCapabilityMismatch({
@@ -9028,7 +9149,9 @@ function createDispatchBundle(context, options) {
       specs: agents.listSpecs()
     });
     if (capabilityMismatch?.verdict === "refuse") throw new Error(capabilityMismatch.detail);
-    const admission = resolveDispatchAdmissionStage(req, recipe, safety);
+    const pathScope = resolveDispatchPathScope(req);
+    publishDispatchPathScope(req, pathScope);
+    const admission = resolveDispatchAdmissionStage(req, recipe, safety, pathScope);
     const targets = readWorkerTargets(settings);
     const target = resolveDispatchTarget(
       req,
@@ -9046,7 +9169,7 @@ function createDispatchBundle(context, options) {
     const sessionAutonomy = settings?.autonomy ?? "auto-edit";
     const effectiveAutonomy = clampWorkerAutonomy(sessionAutonomy, req.autonomy);
     const effectiveTools = withLedgerToolNarrowing(
-      effectiveToolNames(admission.allowedTools, target, writeConfinedRequest(req), deniedToolNames(req)),
+      effectiveToolNames(admission.allowedTools, target, pathScope.writeBoundaries.length > 0, deniedToolNames(req)),
       req
     );
     assertPostRuntimeToolCompatibility(req.agentId, spec, effectiveTools, target);
@@ -9071,7 +9194,7 @@ function createDispatchBundle(context, options) {
         dynamic: false
       },
       cwd,
-      workingContextPaths: workerWorkingContextPaths(req)
+      workingContextPaths: pathScope.workingContextPaths
     });
     const systemPrompt = compiledWorkerPrompt.systemPrompt;
     const budgetEnvelope = resolveEffectiveWorkerBudget({
@@ -9105,6 +9228,7 @@ function createDispatchBundle(context, options) {
     const limitations = runtimeLimitations(runtimeKind, target.runtime.id);
     return {
       recipe,
+      pathScope,
       admission: effectiveAdmission,
       target,
       cwd,
@@ -9138,12 +9262,7 @@ function createDispatchBundle(context, options) {
   function resolveAcpDelegationLifecycle(req, settings) {
     const agentId = req.delegationAgentId;
     if (!agentId) throw new Error("dispatch: missing delegationAgentId");
-    const boundedGateRolePrompt = isBoundedGateRolePrompt({
-      role: req.gate?.role,
-      autonomy: req.autonomy,
-      systemPrompt: req.systemPrompt
-    });
-    if (hasPersonaOverride(req) && !boundedGateRolePrompt) {
+    if (hasCallerPersonaOverride(req)) {
       throw new Error(`dispatch: persona overrides are not allowed for ACP delegation agent '${agentId}'`);
     }
     if (req.agentId && maybeAgents) {
@@ -9172,6 +9291,7 @@ function createDispatchBundle(context, options) {
       );
     }
     const cwd = req.cwd ?? process.cwd();
+    const pathScope = resolveDispatchPathScope(req);
     const personaBody = workerPersonaBody(req, null, []);
     const systemPrompt = personaBody;
     const tier = configured.projectContext ?? "none";
@@ -9191,6 +9311,7 @@ function createDispatchBundle(context, options) {
     const personaOverride = personaOverrideFor(req, staticCompositionHash);
     return {
       admission,
+      pathScope,
       agentConfig: configured,
       cwd,
       systemPrompt,
@@ -9215,6 +9336,7 @@ function createDispatchBundle(context, options) {
   }
   async function dispatchAcpDelegation(req, settings, timing, routeDecision, observer) {
     const lifecycle = resolveAcpDelegationLifecycle(req, settings);
+    publishDispatchPathScope(req, lifecycle.pathScope);
     timing.decisionCompletedAt = new Date(now()).toISOString();
     const targetId = `delegation:${lifecycle.agentConfig.id}`;
     const runtimeId = "acp";
@@ -9526,6 +9648,7 @@ function createDispatchBundle(context, options) {
         requestOrigin: lifecycle.requestOrigin,
         task: req.task,
         ...req.intent !== void 0 ? { intent: structuredClone(req.intent) } : {},
+        pathScope: structuredClone(lifecycle.pathScope.provenance),
         targetId,
         wireModelId,
         runtimeId,
@@ -9961,6 +10084,7 @@ function createDispatchBundle(context, options) {
     const spec = buildDispatchWorkerSpec(
       {
         req,
+        pathScope: lifecycle.pathScope,
         target: lifecycle.target,
         admission: lifecycle.admission,
         recipe: lifecycle.recipe,
@@ -10435,6 +10559,7 @@ function createDispatchBundle(context, options) {
         outcomeCode,
         lineage,
         ...req.intent !== void 0 ? { intent: structuredClone(req.intent) } : {},
+        pathScope: structuredClone(lifecycle.pathScope.provenance),
         identity,
         node: placement?.node ?? LOCAL_RUN_NODE,
         ...receiptAttestationFields(worker.attestation?.() ?? null),
@@ -10769,6 +10894,8 @@ function createDispatchBundle(context, options) {
         }
         ledgerRef.update(envelope.id, ledgerPatch);
         const receipt = ledgerRef.recordReceipt(envelope.id, sealRouteDecision(receiptDraft, routeObservation.decision));
+        const writeRecordUsable = receipt.safety?.toolTelemetry?.coverage === "complete" && observedRunEffects.writeRecordComplete;
+        recordRunWriteTargets(envelope.id, writeRecordUsable ? [...observedRunEffects.mutatedPaths] : null);
         await ledgerRef.persist();
         if (worktreeReceipt?.applied === true && req.taskWorktree !== void 0) {
           try {
@@ -10972,10 +11099,11 @@ function createDispatchBundle(context, options) {
         `dispatch: agent '${req.agentId}' is a ${agentSpec.audience} agent reserved for Clio internal orchestration`
       );
     }
-    if (hasPersonaOverride(req) && (agentSpec.audience === "shadow" || agentSpec.audience === "internal")) {
+    if (hasCallerPersonaOverride(req) && (agentSpec.audience === "shadow" || agentSpec.audience === "internal")) {
       throw new Error(`dispatch: persona overrides are not allowed for ${agentSpec.audience} agent '${req.agentId}'`);
     }
-    const admission = resolveDispatchAdmissionStage(req, recipe, safety);
+    const pathScope = resolveDispatchPathScope(req);
+    const admission = resolveDispatchAdmissionStage(req, recipe, safety, pathScope);
     const targets = readWorkerTargets(settings);
     const target = resolveDispatchTarget(
       req,
@@ -10988,14 +11116,14 @@ function createDispatchBundle(context, options) {
     );
     enforceCapabilityGate(target.target.id, target.modelCapabilities, req.requiredCapabilities);
     const effectiveTools = withLedgerToolNarrowing(
-      effectiveToolNames(admission.allowedTools, target, writeConfinedRequest(req), deniedToolNames(req)),
+      effectiveToolNames(admission.allowedTools, target, pathScope.writeBoundaries.length > 0, deniedToolNames(req)),
       req
     );
     assertPostRuntimeToolCompatibility(req.agentId, agentSpec, effectiveTools, target);
     assertRuntimeCanHonorWorkerPermissionMode(target.runtime, settings?.workers.onPermission ?? "deny");
     assertWorkerBudgetEnforceable(target.runtime, agentSpec.budget !== null || req.budget !== void 0);
     assertResponseSchemaEnforceable(target.runtime, target.modelCapabilities, req.responseSchema, effectiveTools.length);
-    assertWriteRootsEnforceable(target.runtime, req.writeRoots);
+    assertWriteRootsEnforceable(target.runtime, pathScope.writeBoundaries);
     assertProtectedArtifactsEnforceable(
       target.runtime.id,
       target.runtime.kind !== "subprocess",
@@ -11376,6 +11504,7 @@ function createDispatchBundle(context, options) {
         const reconciledLedger = ledger;
         const reconciled = await reconcileOrphanAssignments({
           listRunning: () => listStoredAssignments().filter((record) => record.status === "running"),
+          ownerAlive: assignmentProcessOwnerAlive,
           lookupAttempt: (runId) => {
             const envelope = reconciledLedger?.get(runId) ?? null;
             if (!envelope) return null;
@@ -11385,7 +11514,7 @@ function createDispatchBundle(context, options) {
               succeeded: envelope.outcome === "succeeded"
             };
           },
-          settle: (assignmentId, terminalRunId, status) => settleStoredAssignment(assignmentId, terminalRunId, status)
+          settle: (assignmentId, terminalRunId, status, owner) => settleStoredAssignment(assignmentId, terminalRunId, status, owner)
         });
         if ((reconciled.recovered > 0 || reconciled.abandoned > 0) && process.env.CLIO_CODER_INTERACTIVE !== "1") {
           process.stderr.write(
@@ -11566,6 +11695,9 @@ function createDispatchBundle(context, options) {
       if (!ledger) return null;
       return ledger.get(runId);
     },
+    observedRunWrites(runId) {
+      return runWriteTargets.get(runId) ?? null;
+    },
     assignments: {
       get: (id) => assignments.get(id),
       getStored: (id) => getStoredAssignment(id),
@@ -11708,9 +11840,6 @@ ${proposal.output}`).join("\n\n");
   return `${source.subarray(0, end).toString("utf8")}${suffix}`;
 }
 var ID_RE = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/u;
-function insideBoundary(path2, boundary) {
-  return boundary.some((root) => root.endsWith("/") ? path2.startsWith(root) : path2 === root);
-}
 function malformed(detail) {
   return { ok: false, reason: "delegation_plan_malformed", detail };
 }
@@ -11755,7 +11884,7 @@ function validateDelegationPlan(input) {
     } catch (error) {
       return malformed(`task '${task.id}' has invalid writes: ${error instanceof Error ? error.message : String(error)}`);
     }
-    const outside = writes.find((path2) => !insideBoundary(path2, input.writes));
+    const outside = writes.find((path2) => !pathBoundaryCovers(input.writes, path2));
     if (outside !== void 0) {
       return {
         ok: false,
@@ -12347,13 +12476,28 @@ async function executeFleetRun(input) {
     dynamicPlans: []
   };
   await writeFleetRun(fleetRunRecord);
+  await claimAssignmentVerdict(fleetRootId, "fleet");
+  const fileStepAttempt = (terminalRunId) => recordAssignmentAttempt(fleetRootId, terminalRunId);
+  const settleFleetAssignment = (cleanRun2) => settleStoredAssignment(
+    fleetRootId,
+    fleetRunRecord.steps.at(-1)?.result.terminalRunId ?? fleetRootId,
+    cleanRun2 ? "succeeded" : "failed",
+    "fleet"
+  ).catch(() => void 0);
   const boundaryEnforcer = createWriteBoundaryEnforcer({
     root: workspaceRoot,
     rootId: fleetRootId,
     boundaryFor: (stepId) => livePlan.steps.find((step) => step.id === stepId)?.writes,
+    recordedWritesFor: (stepId) => {
+      const step = livePlan.steps.find((entry) => entry.id === stepId);
+      if (step === void 0 || step.kind !== "agent") return null;
+      const receipt = receiptsByStep.get(stepId);
+      if (receipt === void 0) return null;
+      return dispatch.observedRunWrites?.(receipt.runId) ?? null;
+    },
     onVerdict(verdict, path2) {
-      if (verdict.reason === null) return;
-      notice(`write boundary ${verdict.window}: ${verdict.detail ?? verdict.reason} record=${path2}`, "write-boundary");
+      if (verdict.detail === null) return;
+      notice(`write boundary ${verdict.window}: ${verdict.detail} record=${path2}`, "write-boundary");
     }
   });
   const receipts = [];
@@ -12384,6 +12528,7 @@ async function executeFleetRun(input) {
       costUsd: receiptsByStep.get(stepId)?.costUsd ?? 0,
       result: replayedResult
     });
+    await fileStepAttempt(replayedResult.terminalRunId);
   }
   const planStep = (stepId) => livePlan.steps.find((entry) => entry.id === stepId);
   let validationFresh = false;
@@ -12728,6 +12873,7 @@ async function executeFleetRun(input) {
       onStepSettled: async (step, stepResult) => {
         fleetRunRecord.steps.push({ stepId: step.id, result: stepResult });
         await writeFleetRun(fleetRunRecord);
+        await fileStepAttempt(stepResult.terminalRunId);
       },
       spliceAfter(currentPlan, step, stepResult) {
         if (stepResult.delegationPlan === void 0) return null;
@@ -12767,6 +12913,7 @@ async function executeFleetRun(input) {
   } catch (error) {
     fleetRunRecord.endedAt = (/* @__PURE__ */ new Date()).toISOString();
     await writeFleetRun(fleetRunRecord);
+    await settleFleetAssignment(false);
     throw error;
   }
   fleetRunRecord.endedAt = (/* @__PURE__ */ new Date()).toISOString();
@@ -12774,6 +12921,8 @@ async function executeFleetRun(input) {
   const required = livePlan.steps.filter((step) => step.loop === void 0 && !result.unneeded.includes(step.id));
   const failedLoops = result.loops.filter((loop) => !loop.resolved);
   const succeededStepCount = required.filter((step) => result.results.get(step.id)?.succeeded === true).length;
+  const cleanRun = failedLoops.length === 0 && result.skipped.length === 0 && succeededStepCount === required.length;
+  await settleFleetAssignment(cleanRun);
   return {
     rootId: fleetRootId,
     planHash: input.plan.hash,
@@ -12783,7 +12932,7 @@ async function executeFleetRun(input) {
     requiredStepCount: required.length,
     succeededStepCount,
     resolvedLoopCount: result.loops.length - failedLoops.length,
-    cleanRun: failedLoops.length === 0 && result.skipped.length === 0 && succeededStepCount === required.length
+    cleanRun
   };
 }
 
@@ -12840,6 +12989,19 @@ function extractRunProvenance(receipt) {
   if (receipt.autonomyEnforcement !== void 0) view.autonomyEnforcement = receipt.autonomyEnforcement;
   return view;
 }
+function admitRunProvenance(view, status) {
+  const admitted = {};
+  if (status === void 0 || status.artifactIntegrity.state === "verified") {
+    if (view.pipeline !== void 0) admitted.pipeline = view.pipeline;
+    if (view.personaOverride !== void 0) admitted.personaOverride = view.personaOverride;
+    if (view.escalation !== void 0) admitted.escalation = view.escalation;
+  }
+  const autonomy = status?.autonomyEnforcement.state;
+  if (view.autonomyEnforcement !== void 0 && (autonomy === "enforced" || autonomy === "approximated" || autonomy === "bypassed")) {
+    admitted.autonomyEnforcement = view.autonomyEnforcement;
+  }
+  return admitted;
+}
 function hasRunProvenance(view) {
   return view.pipeline !== void 0 || view.personaOverride !== void 0 || view.escalation !== void 0 || view.autonomyEnforcement !== void 0;
 }
@@ -12910,13 +13072,14 @@ function formatPersonaHashPrefix(promptHash2) {
   if (promptHash2.length <= PERSONA_HASH_PREFIX_CHARS) return promptHash2;
   return `${promptHash2.slice(0, PERSONA_HASH_PREFIX_CHARS)}...`;
 }
-function provenanceTranscriptLines(view) {
+function provenanceTranscriptLines(source, status) {
+  const view = admitRunProvenance(source, status);
   const lines = [];
   if (view.pipeline !== void 0) {
     const { fromRunId, position, inputBytes, inputTruncated } = view.pipeline;
-    const source = fromRunId ?? "unknown";
+    const source2 = fromRunId ?? "unknown";
     const truncation = inputTruncated ? "input truncated" : "not truncated";
-    lines.push(`pipeline: step ${position}, input ${inputBytes} bytes from ${source} (${truncation})`);
+    lines.push(`pipeline: step ${position}, input ${inputBytes} bytes from ${source2} (${truncation})`);
   }
   if (view.personaOverride !== void 0) {
     lines.push(`persona override: prompt hash ${formatPersonaHashPrefix(view.personaOverride.promptHash)}`);
@@ -12926,14 +13089,15 @@ function provenanceTranscriptLines(view) {
     lines.push(`escalations: ${requested} requested, ${approved} approved, ${denied} denied, ${timedOut} timed out`);
   }
   if (view.autonomyEnforcement !== void 0) {
-    const { grade, autonomy, externalMode, dangerousBypass } = view.autonomyEnforcement;
+    const { autonomy, externalMode, dangerousBypass } = view.autonomyEnforcement;
     const mode = externalMode !== void 0 ? ` mode=${externalMode}` : "";
     const bypass = dangerousBypass === true ? " dangerousBypass=true" : "";
-    lines.push(`autonomy enforcement: ${grade} autonomy=${autonomy}${mode}${bypass}`);
+    lines.push(`autonomy: ${autonomy}${mode}${bypass}`);
   }
   return lines;
 }
-function provenanceCompactSuffix(view) {
+function provenanceCompactSuffix(source, status) {
+  const view = admitRunProvenance(source, status);
   const parts = [];
   if (view.pipeline !== void 0) {
     const { fromRunId, position, inputBytes, inputTruncated } = view.pipeline;
@@ -12948,10 +13112,10 @@ function provenanceCompactSuffix(view) {
     parts.push(`escalations=${requested}req/${approved}appr/${denied}deny/${timedOut}timeout`);
   }
   if (view.autonomyEnforcement !== void 0) {
-    const { grade, autonomy, externalMode, dangerousBypass } = view.autonomyEnforcement;
+    const { autonomy, externalMode, dangerousBypass } = view.autonomyEnforcement;
     const mode = externalMode !== void 0 ? `/${externalMode}` : "";
     const bypass = dangerousBypass === true ? "/bypass" : "";
-    parts.push(`enforcement=${grade}:${autonomy}${mode}${bypass}`);
+    parts.push(`autonomy=${autonomy}${mode}${bypass}`);
   }
   return parts.length === 0 ? "" : ` ${parts.join(" ")}`;
 }
@@ -12959,521 +13123,6 @@ function provenanceCompactSuffix(view) {
 // src/domains/evidence/run-trust.ts
 init_esm_shims();
 
-// src/domains/evidence/trust-status.ts
-init_esm_shims();
-var TRUST_STATUS_VERSION = 1;
-var TRUST_STATUS_MAX_ARTIFACT_REFERENCES = 16;
-var TRUST_STATUS_MAX_IDENTIFIER_LENGTH = 512;
-var TRUST_STATUS_AXES = [
-  "artifactIntegrity",
-  "validationGrounding",
-  "independentReview",
-  "contextProvenance",
-  "autonomyEnforcement",
-  "completionEvidence"
-];
-var TRUST_STATUS_STATES = {
-  artifactIntegrity: ["verified", "failed", "absent", "unknown", "not_applicable"],
-  validationGrounding: ["validated", "failed", "ungrounded", "absent", "unknown", "not_applicable"],
-  independentReview: ["passed", "failed", "inconclusive", "not_independent", "absent", "unknown", "not_applicable"],
-  contextProvenance: ["recorded", "invalid", "absent", "unknown", "not_applicable"],
-  autonomyEnforcement: ["enforced", "approximated", "bypassed", "absent", "unknown", "not_applicable"],
-  completionEvidence: ["evidenced", "incomplete", "limited", "absent", "unknown", "not_applicable"]
-};
-var SELF_REPORTED_ARTIFACT_KINDS = /* @__PURE__ */ new Set([
-  "finish_contract_evidence",
-  "run_receipt"
-]);
-var AXIS_STATES = {
-  artifactIntegrity: new Set(TRUST_STATUS_STATES.artifactIntegrity),
-  validationGrounding: new Set(TRUST_STATUS_STATES.validationGrounding),
-  independentReview: new Set(TRUST_STATUS_STATES.independentReview),
-  contextProvenance: new Set(TRUST_STATUS_STATES.contextProvenance),
-  autonomyEnforcement: new Set(TRUST_STATUS_STATES.autonomyEnforcement),
-  completionEvidence: new Set(TRUST_STATUS_STATES.completionEvidence)
-};
-var AXIS_SOURCES = {
-  artifactIntegrity: /* @__PURE__ */ new Set(["receipt_integrity_verification", "compatibility"]),
-  validationGrounding: /* @__PURE__ */ new Set(["run_receipt", "evidence_bundle", "compatibility"]),
-  independentReview: /* @__PURE__ */ new Set(["gate_decision", "compatibility"]),
-  contextProvenance: /* @__PURE__ */ new Set(["run_receipt", "evidence_bundle", "compatibility"]),
-  autonomyEnforcement: /* @__PURE__ */ new Set(["run_receipt", "compatibility"]),
-  completionEvidence: /* @__PURE__ */ new Set(["finish_contract", "compatibility"])
-};
-var SOURCE_AUTHORITIES = {
-  receipt_integrity_verification: /* @__PURE__ */ new Set(["clio"]),
-  run_receipt: /* @__PURE__ */ new Set(["clio", "validator", "runtime", "external_system", "unknown"]),
-  gate_decision: /* @__PURE__ */ new Set(["clio", "reviewer", "operator", "unknown"]),
-  evidence_bundle: /* @__PURE__ */ new Set(["clio"]),
-  finish_contract: /* @__PURE__ */ new Set(["clio"]),
-  compatibility: /* @__PURE__ */ new Set(["clio", "unknown"])
-};
-var ABSENCE_REASONS = /* @__PURE__ */ new Set([
-  "not_recorded",
-  "not_observed",
-  "artifact_missing",
-  "historical_format"
-]);
-var SOURCE_KINDS = /* @__PURE__ */ new Set([
-  "receipt_integrity_verification",
-  "run_receipt",
-  "gate_decision",
-  "evidence_bundle",
-  "finish_contract",
-  "compatibility"
-]);
-var AUTHORITY_KINDS = /* @__PURE__ */ new Set([
-  "clio",
-  "validator",
-  "reviewer",
-  "operator",
-  "runtime",
-  "external_system",
-  "unknown"
-]);
-var ARTIFACT_KINDS = /* @__PURE__ */ new Set([
-  "run_receipt",
-  "validation_result",
-  "gate_decision",
-  "briefing",
-  "project_context",
-  "autonomy_policy",
-  "finish_contract_evidence",
-  "evidence_bundle",
-  "session_entry"
-]);
-function isRecord10(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function hasExactKeys(value, keys) {
-  const expected = new Set(keys);
-  return Object.keys(value).length === expected.size && Object.keys(value).every((key) => expected.has(key));
-}
-function isTrustStatusIdentifier(value) {
-  if (typeof value !== "string" || value.trim().length === 0 || value.length > TRUST_STATUS_MAX_IDENTIFIER_LENGTH) {
-    return false;
-  }
-  for (const character of value) {
-    const codePoint = character.codePointAt(0);
-    if (codePoint !== void 0 && (codePoint < 32 || codePoint === 127)) return false;
-  }
-  return true;
-}
-function compareArtifactReferences(left, right) {
-  const leftKey = `${left.kind}\0${left.id}\0${left.digest?.value ?? ""}`;
-  const rightKey = `${right.kind}\0${right.id}\0${right.digest?.value ?? ""}`;
-  return leftKey < rightKey ? -1 : leftKey > rightKey ? 1 : 0;
-}
-function normalizeArtifactReference(value, path2) {
-  if (!isRecord10(value)) throw new Error(`${path2} must be an object`);
-  if (!hasExactKeys(value, value.digest === void 0 ? ["kind", "id"] : ["kind", "id", "digest"])) {
-    throw new Error(`${path2} has unknown or missing fields`);
-  }
-  if (typeof value.kind !== "string" || !ARTIFACT_KINDS.has(value.kind)) {
-    throw new Error(`${path2}.kind is invalid`);
-  }
-  if (!isTrustStatusIdentifier(value.id)) throw new Error(`${path2}.id is invalid`);
-  const reference = { kind: value.kind, id: value.id };
-  if (value.digest !== void 0) {
-    if (!isRecord10(value.digest) || !hasExactKeys(value.digest, ["algorithm", "value"]) || value.digest.algorithm !== "sha256" || typeof value.digest.value !== "string" || !/^[a-f0-9]{64}$/u.test(value.digest.value)) {
-      throw new Error(`${path2}.digest is invalid`);
-    }
-    reference.digest = { algorithm: "sha256", value: value.digest.value };
-  }
-  return reference;
-}
-function normalizeAttributedStatus(axis, value) {
-  if (!hasExactKeys(value, ["state", "source", "authority", "artifacts"])) {
-    throw new Error(`${axis} has unknown or missing fields`);
-  }
-  if (!isRecord10(value.source) || !hasExactKeys(value.source, ["kind", "id"])) {
-    throw new Error(`${axis}.source is invalid`);
-  }
-  if (typeof value.source.kind !== "string" || !SOURCE_KINDS.has(value.source.kind) || !AXIS_SOURCES[axis].has(value.source.kind) || !isTrustStatusIdentifier(value.source.id)) {
-    throw new Error(`${axis}.source is invalid`);
-  }
-  if (!isRecord10(value.authority) || !hasExactKeys(value.authority, ["kind", "id"])) {
-    throw new Error(`${axis}.authority is invalid`);
-  }
-  if (typeof value.authority.kind !== "string" || !AUTHORITY_KINDS.has(value.authority.kind) || !SOURCE_AUTHORITIES[value.source.kind].has(
-    value.authority.kind
-  ) || !isTrustStatusIdentifier(value.authority.id)) {
-    throw new Error(`${axis}.authority is invalid`);
-  }
-  if (value.source.kind === "compatibility" && value.state !== "unknown" && value.state !== "not_applicable") {
-    throw new Error(`${axis} compatibility source cannot establish ${value.state}`);
-  }
-  if (!Array.isArray(value.artifacts) || value.artifacts.length > TRUST_STATUS_MAX_ARTIFACT_REFERENCES) {
-    throw new Error(`${axis}.artifacts exceeds the bounded reference list`);
-  }
-  const artifacts = value.artifacts.map(
-    (entry, index) => normalizeArtifactReference(entry, `${axis}.artifacts[${index}]`)
-  );
-  artifacts.sort(compareArtifactReferences);
-  for (let index = 1; index < artifacts.length; index += 1) {
-    if (compareArtifactReferences(
-      artifacts[index - 1],
-      artifacts[index]
-    ) === 0) {
-      throw new Error(`${axis}.artifacts contains a duplicate reference`);
-    }
-  }
-  return {
-    state: value.state,
-    source: { kind: value.source.kind, id: value.source.id },
-    authority: { kind: value.authority.kind, id: value.authority.id },
-    artifacts
-  };
-}
-function normalizeAxis(axis, value) {
-  if (!isRecord10(value) || typeof value.state !== "string" || !AXIS_STATES[axis].has(value.state)) {
-    throw new Error(`${axis}.state is invalid`);
-  }
-  if (value.state === "absent") {
-    if (!hasExactKeys(value, ["state", "reason"]) || typeof value.reason !== "string" || !ABSENCE_REASONS.has(value.reason)) {
-      throw new Error(`${axis} absent state is invalid`);
-    }
-    return { state: "absent", reason: value.reason };
-  }
-  return normalizeAttributedStatus(axis, value);
-}
-function normalizeTrustStatus(value) {
-  if (!isRecord10(value) || !hasExactKeys(value, ["version", ...TRUST_STATUS_AXES])) {
-    throw new Error("trust status has unknown or missing fields");
-  }
-  if (value.version !== TRUST_STATUS_VERSION) throw new Error("trust status version is invalid");
-  return {
-    version: TRUST_STATUS_VERSION,
-    artifactIntegrity: normalizeAxis("artifactIntegrity", value.artifactIntegrity),
-    validationGrounding: normalizeAxis("validationGrounding", value.validationGrounding),
-    independentReview: normalizeAxis("independentReview", value.independentReview),
-    contextProvenance: normalizeAxis("contextProvenance", value.contextProvenance),
-    autonomyEnforcement: normalizeAxis("autonomyEnforcement", value.autonomyEnforcement),
-    completionEvidence: normalizeAxis("completionEvidence", value.completionEvidence)
-  };
-}
-function absentTrustStatus(reason) {
-  return { state: "absent", reason };
-}
-function composeTrustStatus(...projections) {
-  const axes = {
-    artifactIntegrity: absentTrustStatus("not_recorded"),
-    validationGrounding: absentTrustStatus("not_recorded"),
-    independentReview: absentTrustStatus("not_recorded"),
-    contextProvenance: absentTrustStatus("not_recorded"),
-    autonomyEnforcement: absentTrustStatus("not_recorded"),
-    completionEvidence: absentTrustStatus("not_recorded")
-  };
-  for (const projection of projections) {
-    if (projection.artifactIntegrity !== void 0) axes.artifactIntegrity = projection.artifactIntegrity;
-    if (projection.validationGrounding !== void 0) axes.validationGrounding = projection.validationGrounding;
-    if (projection.independentReview !== void 0) axes.independentReview = projection.independentReview;
-    if (projection.contextProvenance !== void 0) axes.contextProvenance = projection.contextProvenance;
-    if (projection.autonomyEnforcement !== void 0) axes.autonomyEnforcement = projection.autonomyEnforcement;
-    if (projection.completionEvidence !== void 0) axes.completionEvidence = projection.completionEvidence;
-  }
-  return normalizeTrustStatus({ version: TRUST_STATUS_VERSION, ...axes });
-}
-function sha256Reference(kind, id, digest) {
-  const reference = { kind, id };
-  if (digest !== void 0 && /^[a-f0-9]{64}$/u.test(digest)) {
-    reference.digest = { algorithm: "sha256", value: digest };
-  }
-  return reference;
-}
-function receiptReference(receipt) {
-  return sha256Reference("run_receipt", receipt.runId, receipt.integrity?.digest);
-}
-function attributed(state, source, authority, artifacts) {
-  return { state, source, authority, artifacts: [...artifacts].sort(compareArtifactReferences) };
-}
-function receiptSource(receipt) {
-  return { kind: "run_receipt", id: receipt.runId };
-}
-function compatibilitySource(receipt, field) {
-  return { kind: "compatibility", id: `run_receipt:${receipt.runId}:${field}` };
-}
-var DISPATCH_AUTHORITY = { kind: "clio", id: "dispatch" };
-var COMPATIBILITY_AUTHORITY = { kind: "unknown", id: "historical-persisted-format" };
-function adaptReceiptIntegrityStatus(receipt, verification) {
-  if (receipt === null || receipt === void 0) return absentTrustStatus("artifact_missing");
-  const artifacts = [receiptReference(receipt)];
-  if (verification === void 0 || verification.ok && receipt.integrity === void 0) {
-    return attributed(
-      "unknown",
-      {
-        kind: "compatibility",
-        id: `run_receipt:${receipt.runId}:${receipt.integrity === void 0 ? "integrity-missing" : "integrity-unchecked"}`
-      },
-      COMPATIBILITY_AUTHORITY,
-      artifacts
-    );
-  }
-  return attributed(
-    verification.ok ? "verified" : "failed",
-    { kind: "receipt_integrity_verification", id: receipt.runId },
-    { kind: "clio", id: "receipt-integrity" },
-    artifacts
-  );
-}
-function validationArtifacts(receipt) {
-  const artifacts = [receiptReference(receipt)];
-  for (const fact of receipt.quality?.typedValidations ?? []) {
-    artifacts.push(sha256Reference("validation_result", fact.sourceId, fact.validatorDigest));
-  }
-  const resultContract = receipt.quality?.resultContract;
-  if (resultContract !== null && resultContract !== void 0) {
-    artifacts.push(sha256Reference("validation_result", resultContract.sourceId, resultContract.validatorDigest));
-  }
-  return uniqueBoundedReferences(artifacts);
-}
-function qualityHasFailure(quality) {
-  if (quality === void 0) return false;
-  if (quality.typedValidations.some((fact) => !fact.passed)) return true;
-  return quality.resultContract?.conformance === "fail" || quality.resultContract?.quality === "fail";
-}
-function qualityHasValidation(quality) {
-  if (quality === void 0) return false;
-  if (quality.typedValidations.some((fact) => fact.passed)) return true;
-  return quality.resultContract?.quality === "pass";
-}
-function verificationStatus(verification, receipt, artifacts) {
-  if (verification.state === "verified") {
-    return attributed("validated", receiptSource(receipt), { kind: "validator", id: verification.basis }, artifacts);
-  }
-  if (verification.state === "unverified") return absentTrustStatus("not_observed");
-  if (verification.state === "not_applicable") {
-    return attributed("not_applicable", receiptSource(receipt), DISPATCH_AUTHORITY, artifacts);
-  }
-  return attributed(
-    "unknown",
-    receiptSource(receipt),
-    verification.basis === "acp-external-unobserved" ? { kind: "external_system", id: "acp-delegation" } : COMPATIBILITY_AUTHORITY,
-    artifacts
-  );
-}
-function adaptRunReceiptValidationStatus(receipt) {
-  if (receipt === null || receipt === void 0) return absentTrustStatus("artifact_missing");
-  const artifacts = validationArtifacts(receipt);
-  if (receipt.hostVerification?.status === "rejected") {
-    return attributed("failed", receiptSource(receipt), { kind: "validator", id: "host-verification" }, artifacts);
-  }
-  if (receipt.hostVerification?.status === "verified") {
-    return attributed("validated", receiptSource(receipt), { kind: "validator", id: "host-verification" }, artifacts);
-  }
-  if (qualityHasFailure(receipt.quality)) {
-    return attributed("failed", receiptSource(receipt), { kind: "validator", id: "receipt-quality" }, artifacts);
-  }
-  if ((receipt.validationGrounding?.ungrounded.length ?? 0) > 0 || receipt.validationGrounding !== void 0 && receipt.validationGrounding.claimed > receipt.validationGrounding.grounded) {
-    return attributed("ungrounded", receiptSource(receipt), { kind: "validator", id: "command-grounding" }, artifacts);
-  }
-  if (qualityHasValidation(receipt.quality)) {
-    return attributed("validated", receiptSource(receipt), { kind: "validator", id: "receipt-quality" }, artifacts);
-  }
-  if (receipt.verification !== void 0) {
-    return verificationStatus(receipt.verification, receipt, artifacts);
-  }
-  return attributed("unknown", compatibilitySource(receipt, "verification"), COMPATIBILITY_AUTHORITY, artifacts);
-}
-function validBriefing(briefing) {
-  return Number.isSafeInteger(briefing.bytes) && briefing.bytes >= 0 && /^[a-f0-9]{64}$/u.test(briefing.contentHash);
-}
-function validBoundedProjectContext(context) {
-  return context.tier === "bounded" && Number.isSafeInteger(context.chars) && (context.chars ?? -1) >= 0 && typeof context.contentHash === "string" && /^[a-f0-9]{64}$/u.test(context.contentHash);
-}
-function contextArtifacts(receipt) {
-  const artifacts = [receiptReference(receipt)];
-  if (receipt.briefing !== void 0 && validBriefing(receipt.briefing)) {
-    artifacts.push(sha256Reference("briefing", `${receipt.runId}:briefing`, receipt.briefing.contentHash));
-  }
-  if (receipt.projectContext?.tier === "bounded" && validBoundedProjectContext(receipt.projectContext)) {
-    artifacts.push(
-      sha256Reference("project_context", `${receipt.runId}:project-context`, receipt.projectContext.contentHash)
-    );
-  }
-  return uniqueBoundedReferences(artifacts);
-}
-function adaptRunReceiptContextStatus(receipt) {
-  if (receipt === null || receipt === void 0) return absentTrustStatus("artifact_missing");
-  const artifacts = contextArtifacts(receipt);
-  const source = receiptSource(receipt);
-  const briefingInvalid = receipt.briefing !== void 0 && !validBriefing(receipt.briefing);
-  if (briefingInvalid) return attributed("invalid", source, DISPATCH_AUTHORITY, artifacts);
-  const context = receipt.projectContext;
-  if (context === void 0) {
-    if (receipt.briefing !== void 0) return attributed("recorded", source, DISPATCH_AUTHORITY, artifacts);
-    return attributed("unknown", compatibilitySource(receipt, "projectContext"), COMPATIBILITY_AUTHORITY, artifacts);
-  }
-  if (context.tier === "none") {
-    if (context.chars !== void 0 || context.contentHash !== void 0 || context.sections !== void 0) {
-      return attributed("invalid", source, DISPATCH_AUTHORITY, artifacts);
-    }
-    return receipt.briefing === void 0 ? attributed("not_applicable", source, DISPATCH_AUTHORITY, artifacts) : attributed("recorded", source, DISPATCH_AUTHORITY, artifacts);
-  }
-  return attributed(validBoundedProjectContext(context) ? "recorded" : "invalid", source, DISPATCH_AUTHORITY, artifacts);
-}
-function adaptRunReceiptAutonomyStatus(receipt) {
-  if (receipt === null || receipt === void 0) return absentTrustStatus("artifact_missing");
-  const enforcement = receipt.autonomyEnforcement;
-  const artifacts = [receiptReference(receipt)];
-  if (enforcement === void 0) {
-    return attributed("unknown", compatibilitySource(receipt, "autonomyEnforcement"), COMPATIBILITY_AUTHORITY, artifacts);
-  }
-  artifacts.push({ kind: "autonomy_policy", id: `${receipt.runId}:${enforcement.autonomy}` });
-  const authority = enforcement.grade === "mediated" ? { kind: "clio", id: "safety-autonomy" } : { kind: "runtime", id: enforcement.externalMode ?? "external-runtime" };
-  const state = enforcement.dangerousBypass === true || enforcement.grade === "bypassed" ? "bypassed" : enforcement.grade === "approximated" ? "approximated" : "enforced";
-  return attributed(state, receiptSource(receipt), authority, artifacts);
-}
-function receiptClaimsAreAuthenticated(receipt, integrity) {
-  return receipt?.integrity !== void 0 && integrity?.ok === true;
-}
-function unauthenticatedReceiptProjection(receipt) {
-  if (receipt === null || receipt === void 0) {
-    return {
-      validationGrounding: absentTrustStatus("artifact_missing"),
-      contextProvenance: absentTrustStatus("artifact_missing"),
-      autonomyEnforcement: absentTrustStatus("artifact_missing")
-    };
-  }
-  if (receipt.integrity === void 0) {
-    const artifacts = [receiptReference(receipt)];
-    return {
-      validationGrounding: attributed(
-        "unknown",
-        compatibilitySource(receipt, "canonical-projection"),
-        COMPATIBILITY_AUTHORITY,
-        artifacts
-      ),
-      contextProvenance: attributed(
-        "unknown",
-        compatibilitySource(receipt, "canonical-projection"),
-        COMPATIBILITY_AUTHORITY,
-        artifacts
-      ),
-      autonomyEnforcement: attributed(
-        "unknown",
-        compatibilitySource(receipt, "canonical-projection"),
-        COMPATIBILITY_AUTHORITY,
-        artifacts
-      )
-    };
-  }
-  return {
-    validationGrounding: absentTrustStatus("not_observed"),
-    contextProvenance: absentTrustStatus("not_observed"),
-    autonomyEnforcement: absentTrustStatus("not_observed")
-  };
-}
-function adaptRunReceiptTrustStatus(receipt, options = {}) {
-  const authenticated2 = receiptClaimsAreAuthenticated(receipt, options.integrity);
-  const receiptProjection = authenticated2 ? {
-    validationGrounding: adaptRunReceiptValidationStatus(receipt),
-    contextProvenance: adaptRunReceiptContextStatus(receipt),
-    autonomyEnforcement: adaptRunReceiptAutonomyStatus(receipt)
-  } : unauthenticatedReceiptProjection(receipt);
-  return composeTrustStatus({
-    artifactIntegrity: adaptReceiptIntegrityStatus(receipt, options.integrity),
-    ...receiptProjection,
-    independentReview: absentTrustStatus(receipt === null || receipt === void 0 ? "artifact_missing" : "not_recorded"),
-    completionEvidence: absentTrustStatus(
-      receipt === null || receipt === void 0 ? "artifact_missing" : "not_recorded"
-    )
-  });
-}
-function inspectRunReceiptTrustStatus(receipt, envelope) {
-  let integrity;
-  if (receipt === null || receipt === void 0) {
-    integrity = { ok: false, reason: "receipt unavailable" };
-  } else if (envelope === null || envelope === void 0) {
-    integrity = { ok: false, reason: "run ledger envelope unavailable" };
-  } else {
-    try {
-      integrity = verifyReceiptIntegrity(receipt, envelope);
-    } catch (error) {
-      integrity = {
-        ok: false,
-        reason: `receipt invalid: ${error instanceof Error ? error.message : String(error)}`
-      };
-    }
-  }
-  return {
-    integrity,
-    status: adaptRunReceiptTrustStatus(receipt, { integrity })
-  };
-}
-function gateReference(artifact) {
-  return sha256Reference("gate_decision", artifact.id, artifact.integrity.digest);
-}
-function gateAuthority(artifact) {
-  if (artifact.outcome === "operator-confirmed") return { kind: "operator", id: "gate-confirmation" };
-  if (artifact.outcome === "full-auto-applied") return { kind: "clio", id: "full-auto-gate-policy" };
-  return { kind: "reviewer", id: artifact.decider?.runId ?? "unavailable-decider" };
-}
-function adaptGateDecisionReviewStatus(artifact, subjectRunId, verification) {
-  if (artifact === null || artifact === void 0) return absentTrustStatus("artifact_missing");
-  const source = { kind: "gate_decision", id: artifact.id };
-  const artifacts = [gateReference(artifact)];
-  const authority = gateAuthority(artifact);
-  if (!artifact.subjects.some((subject) => subject.runId === subjectRunId)) return absentTrustStatus("not_recorded");
-  if (verification === void 0 || !verification.ok) {
-    return attributed(
-      "unknown",
-      source,
-      verification === void 0 ? COMPATIBILITY_AUTHORITY : { kind: "unknown", id: "unauthenticated-gate-artifact" },
-      artifacts
-    );
-  }
-  if (artifact.decider === void 0 || artifact.correlation === void 0) {
-    if (artifact.outcome === "operator-confirmed" || artifact.outcome === "full-auto-applied") {
-      return attributed("not_applicable", source, authority, artifacts);
-    }
-    return attributed("inconclusive", source, authority, artifacts);
-  }
-  if (!artifact.correlation.independent) return attributed("not_independent", source, authority, artifacts);
-  if (artifact.outcome === "pass") return attributed("passed", source, authority, artifacts);
-  if (artifact.outcome === "fail") return attributed("failed", source, authority, artifacts);
-  if (artifact.outcome === "winner") {
-    return attributed(
-      artifact.winner?.subject.runId === subjectRunId ? "passed" : "failed",
-      source,
-      authority,
-      artifacts
-    );
-  }
-  return attributed("inconclusive", source, authority, artifacts);
-}
-function adaptGroundedEvidenceValidationStatus(input) {
-  const observed = (input.artifacts ?? []).filter((artifact) => !SELF_REPORTED_ARTIFACT_KINDS.has(artifact.kind));
-  if (observed.length === 0) return absentTrustStatus("not_observed");
-  return attributed(
-    "validated",
-    { kind: "evidence_bundle", id: `${input.evidenceId}:${input.runId}` },
-    { kind: "clio", id: "evidence-grounding" },
-    uniqueBoundedReferences([{ kind: "evidence_bundle", id: input.evidenceId }, ...observed])
-  );
-}
-function adaptFinishContractCompletionStatus(assessment, options = {}) {
-  const artifacts = uniqueBoundedReferences(
-    options.artifacts ?? assessment.evidence.map((evidence, index) => ({
-      kind: evidence.turnId === void 0 ? "finish_contract_evidence" : "session_entry",
-      id: evidence.turnId ?? `${evidence.kind}:${index + 1}`
-    }))
-  );
-  const source = { kind: "finish_contract", id: options.sourceId ?? assessment.reason };
-  const authority = { kind: "clio", id: "finish-contract" };
-  if (assessment.reason === "no_mutation") return attributed("not_applicable", source, authority, artifacts);
-  if (assessment.reason === "validation_evidence") return attributed("evidenced", source, authority, artifacts);
-  if (assessment.reason === "explicit_limitation") return attributed("limited", source, authority, artifacts);
-  return attributed("incomplete", source, authority, artifacts);
-}
-function uniqueBoundedReferences(references) {
-  const sorted = [...references].sort(compareArtifactReferences);
-  const unique = sorted.filter(
-    (reference, index) => index === 0 || compareArtifactReferences(sorted[index - 1], reference) !== 0
-  );
-  return unique.slice(0, TRUST_STATUS_MAX_ARTIFACT_REFERENCES);
-}
-
 // src/domains/evidence/types.ts
 init_esm_shims();
 var EVIDENCE_VERSION = 1;
@@ -13676,7 +13325,7 @@ async function loadEvidenceTrustStatus(dataDir, evidenceId) {
   }
   const source = `${evidenceId}/trust-status.json`;
   const parsed = parseJson(raw, source);
-  if (!isRecord11(parsed)) throw new Error(`${source}: expected object`);
+  if (!isRecord10(parsed)) throw new Error(`${source}: expected object`);
   if (parsed.version !== 1) throw new Error(`${source}: expected version 1`);
   if (readString(parsed, source, "evidenceId") !== evidenceId) {
     throw new Error(`${source}.evidenceId: expected ${evidenceId}`);
@@ -13689,7 +13338,7 @@ async function loadEvidenceTrustStatus(dataDir, evidenceId) {
     projection: "canonical",
     runs: parsed.runs.map((entry, index) => {
       const entrySource = `${source}.runs[${index}]`;
-      if (!isRecord11(entry)) throw new Error(`${entrySource}: expected object`);
+      if (!isRecord10(entry)) throw new Error(`${entrySource}: expected object`);
       return {
         runId: readString(entry, entrySource, "runId"),
         status: normalizeTrustStatus(entry.status)
@@ -13707,10 +13356,10 @@ async function loadEvidenceRunProvenance(dataDir, evidenceId) {
     throw error;
   }
   const parsed = parseJson(raw, `${evidenceId}/receipt.json`);
-  if (!isRecord11(parsed) || !Array.isArray(parsed.receipts)) return [];
+  if (!isRecord10(parsed) || !Array.isArray(parsed.receipts)) return [];
   const out = [];
   for (const entry of parsed.receipts) {
-    if (!isRecord11(entry) || typeof entry.runId !== "string") continue;
+    if (!isRecord10(entry) || typeof entry.runId !== "string") continue;
     const view = runProvenanceFromUnknown(entry);
     if (hasRunProvenance(view)) out.push({ runId: entry.runId, view });
   }
@@ -13735,7 +13384,7 @@ async function listEvidenceOverviews(dataDir) {
   return overviews;
 }
 function parseOverview(value, source) {
-  if (!isRecord11(value)) throw new Error(`${source}: expected object`);
+  if (!isRecord10(value)) throw new Error(`${source}: expected object`);
   if (value.version !== 1) throw new Error(`${source}: expected version 1`);
   const evidenceId = readString(value, source, "evidenceId");
   const sourceValue = readSource(value.source, `${source}.source`);
@@ -13776,13 +13425,13 @@ function parseOverview(value, source) {
   };
 }
 function parseFindingsFile(value, source) {
-  if (!isRecord11(value)) throw new Error(`${source}: expected object`);
+  if (!isRecord10(value)) throw new Error(`${source}: expected object`);
   if (value.version !== 1) throw new Error(`${source}: expected version 1`);
   if (!Array.isArray(value.findings)) throw new Error(`${source}.findings: expected array`);
   return value.findings.map((entry, index) => parseFinding(entry, `${source}.findings[${index}]`));
 }
 function parseFinding(value, source) {
-  if (!isRecord11(value)) throw new Error(`${source}: expected object`);
+  if (!isRecord10(value)) throw new Error(`${source}: expected object`);
   const severity = readString(value, source, "severity");
   if (severity !== "info" && severity !== "warn") throw new Error(`${source}.severity: expected info or warn`);
   const tag = readString(value, source, "tag");
@@ -13795,14 +13444,14 @@ function parseFinding(value, source) {
   };
 }
 function readSource(value, source) {
-  if (!isRecord11(value)) throw new Error(`${source}: expected object`);
+  if (!isRecord10(value)) throw new Error(`${source}: expected object`);
   if (value.kind === "run") return { kind: "run", runId: readString(value, source, "runId") };
   if (value.kind === "session") return { kind: "session", sessionId: readString(value, source, "sessionId") };
   if (value.kind === "eval") return { kind: "eval", evalId: readString(value, source, "evalId") };
   throw new Error(`${source}.kind: expected run, session, or eval`);
 }
 function readTotals(value, source) {
-  if (!isRecord11(value)) throw new Error(`${source}: expected object`);
+  if (!isRecord10(value)) throw new Error(`${source}: expected object`);
   return {
     runs: readNumber(value, source, "runs"),
     receipts: readNumber(value, source, "receipts"),
@@ -13860,7 +13509,7 @@ function parseJson(raw, source) {
     throw new Error(`${source}: invalid JSON: ${message}`);
   }
 }
-function isRecord11(value) {
+function isRecord10(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function findingsFile(evidenceId, findings) {
@@ -13946,7 +13595,10 @@ async function buildEvidence(options) {
     redactedToolEvents,
     protectedArtifacts
   );
-  const transcript = redactSecretsText(renderTranscript(overview, redactedRunSources, sessionLinks), tally);
+  const transcript = redactSecretsText(
+    renderTranscript(overview, redactedRunSources, sessionLinks, trustStatusRaw),
+    tally
+  );
   const finalOverview = { ...overview, redactionCount: tally.count };
   await writeEvidenceFiles(
     directory,
@@ -14019,8 +13671,9 @@ function buildFindings(runSources, trustStatus, sessionLinks, auditLinks, protec
     const status = trustByRun.get(source.envelope.id);
     if (status === void 0) throw new Error(`canonical trust status missing for run ${source.envelope.id}`);
     if (source.receiptError !== null) {
-      const tag = source.receiptIntegrityFailed ? "receipt-integrity" : "unknown";
-      findings.push(finding(findings.length, "warn", tag, source.envelope.id, source.receiptError));
+      const retired = retiredIntegrityVersionOf(status.artifactIntegrity) !== null;
+      const tag = retired ? "receipt-retired" : source.receiptIntegrityFailed ? "receipt-integrity" : "unknown";
+      findings.push(finding(findings.length, retired ? "info" : "warn", tag, source.envelope.id, source.receiptError));
     }
     if (isSuccessfulRun(source) && (status.validationGrounding.state === "absent" || status.validationGrounding.state === "unknown")) {
       findings.push(
@@ -14081,6 +13734,7 @@ function buildFindings(runSources, trustStatus, sessionLinks, auditLinks, protec
         )
       );
     }
+    findings.push(...axisFindings(findings.length, source, status));
     if (source.envelope.status === "stale" || source.envelope.status === "dead") {
       findings.push(
         finding(findings.length, "warn", "timeout", source.envelope.id, `run status ${source.envelope.status}`)
@@ -14231,7 +13885,7 @@ function validationToolCallCandidate(entry, linked, runSources) {
 }
 function validationToolCallSummary(toolName, args) {
   const parsed = parseMaybeJson(args);
-  const argRecord = isRecord12(parsed) ? parsed : null;
+  const argRecord = isRecord11(parsed) ? parsed : null;
   if (toolName === "bash") {
     const command = readOptionalString2(argRecord?.command);
     if (command === null) return null;
@@ -14253,8 +13907,8 @@ function validationToolCallSummary(toolName, args) {
 }
 function isSuccessfulSessionToolResult(result) {
   if (result.isError) return false;
-  const obj = isRecord12(result.result) ? result.result : null;
-  const details = isRecord12(obj?.details) ? obj.details : null;
+  const obj = isRecord11(result.result) ? result.result : null;
+  const details = isRecord11(obj?.details) ? obj.details : null;
   return details?.kind !== "error";
 }
 function finding(index, severity, tag, runId, message) {
@@ -14271,7 +13925,7 @@ async function writeEvidenceFiles(directory, overview, runSources, findings, ses
   await writeJson(join17(directory, "overview.json"), overview);
   await writeFile(
     join17(directory, "transcript.md"),
-    transcript ?? renderTranscript(overview, runSources, sessionLinks),
+    transcript ?? renderTranscript(overview, runSources, sessionLinks, trustStatus),
     "utf8"
   );
   await writeJsonl(join17(directory, "trace.raw.jsonl"), rawTraceRows(runSources));
@@ -14300,7 +13954,8 @@ function cleanedTraceRows(runSources, findings, toolEventRows) {
   const rows = [];
   for (const source of runSources) {
     const envelope = source.envelope;
-    const provenance = source.receipt === null ? {} : extractRunProvenance(source.receipt);
+    const receipt = authenticatedReceipt(source);
+    const provenance = receipt === null ? {} : extractRunProvenance(receipt);
     rows.push({
       kind: "run",
       runId: envelope.id,
@@ -14426,7 +14081,7 @@ function attributionWindows(ledger, runSources, sessionIds) {
   }
   const linkedSessions = new Set(sessionIds);
   for (const row of ledger.rows) {
-    if (!isRecord12(row)) continue;
+    if (!isRecord11(row)) continue;
     const id = readOptionalString2(row.id);
     const startedAt = readOptionalString2(row.startedAt);
     const sessionId = readOptionalString2(row.sessionId);
@@ -14767,7 +14422,8 @@ function protectedArtifactsFile(sessionLinks) {
 function compareProtectedArtifactEvents(left, right) {
   return compareCodepoints(left.timestamp, right.timestamp) || compareCodepoints(left.sessionId, right.sessionId) || compareCodepoints(left.turnId, right.turnId) || compareCodepoints(left.artifact.path, right.artifact.path);
 }
-function renderTranscript(overview, runSources, sessionLinks) {
+function renderTranscript(overview, runSources, sessionLinks, trustStatus) {
+  const trustByRun = new Map(trustStatus.runs.map((entry) => [entry.runId, entry.status]));
   const lines = [
     `# Evidence ${overview.evidenceId}`,
     "",
@@ -14784,7 +14440,8 @@ function renderTranscript(overview, runSources, sessionLinks) {
     );
     lines.push(`  task: ${truncateText(envelope.task, MAX_TASK_CHARS)}`);
     if (source.receipt !== null) {
-      for (const line of provenanceTranscriptLines(extractRunProvenance(source.receipt))) {
+      const status = trustByRun.get(envelope.id);
+      for (const line of provenanceTranscriptLines(extractRunProvenance(source.receipt), status)) {
         lines.push(`  ${line}`);
       }
     }
@@ -14926,6 +14583,37 @@ function renderSessionTranscriptEntry(linked) {
   const _exhaustive = entry;
   return [`${prefix} ${String(_exhaustive)}`];
 }
+function axisFindings(offset, source, status) {
+  const out = [];
+  const runId = source.envelope.id;
+  const next = (severity, tag, message) => {
+    out.push(finding(offset + out.length, severity, tag, runId, message));
+  };
+  const review = status.independentReview.state;
+  if (review === "failed") {
+    next("warn", "independent-review", "independent review failed for this run");
+  } else if (review === "not_independent") {
+    next("warn", "independent-review", "review was not independent of the run it judged");
+  } else if (review === "inconclusive") {
+    next("info", "independent-review", "independent review was inconclusive");
+  } else if (isSuccessfulRun(source) && (review === "absent" || review === "unknown")) {
+    next("info", "independent-review", "run was not independently reviewed; its result rests on its own receipt");
+  }
+  if (status.contextProvenance.state === "invalid") {
+    next("warn", "context-provenance", "context provenance record is contradictory; see trust-status.json");
+  }
+  const completion = status.completionEvidence.state;
+  if (completion === "incomplete") {
+    next(
+      "warn",
+      "completion-evidence",
+      "run mutated the workspace and finished without validation evidence at the completion boundary"
+    );
+  } else if (completion === "limited") {
+    next("info", "completion-evidence", "run finished with an explicit limitation instead of validation evidence");
+  }
+  return out;
+}
 function renderFindings(findings) {
   if (findings.length === 0) return "# Findings\n\nNo findings.\n";
   const lines = ["# Findings", ""];
@@ -14953,7 +14641,7 @@ async function readRunLedger(stateDir) {
 }
 function selectRunEnvelopes(ledger, source) {
   return ledger.rows.flatMap((entry, index) => {
-    if (!isRecord12(entry)) return [];
+    if (!isRecord11(entry)) return [];
     const selected = source.kind === "run" ? entry.id === source.runId : entry.sessionId === source.sessionId;
     return selected ? [parseRunEnvelope(entry, `${ledger.path}[${index}]`)] : [];
   });
@@ -14983,6 +14671,7 @@ async function readReceipt(stateDir, envelope) {
   }
   const integrity = inspectRunReceiptTrustStatus(receipt, envelope).integrity;
   if (!integrity.ok) {
+    if (integrity.retired !== void 0) return { receipt, error: integrity.reason, integrityFailed: false };
     return { receipt, error: `receipt integrity: ${integrity.reason}`, integrityFailed: true };
   }
   return { receipt, error: null, integrityFailed: false };
@@ -14993,7 +14682,7 @@ function readExecutionRole(value, source) {
   return role;
 }
 function parseRunEnvelope(value, source) {
-  if (!isRecord12(value)) throw new Error(`${source}: expected object`);
+  if (!isRecord11(value)) throw new Error(`${source}: expected object`);
   const reasoningTokenCount = readOptionalNumber2(value, source, "reasoningTokenCount");
   return {
     ...value,
@@ -15020,9 +14709,9 @@ function parseRunEnvelope(value, source) {
   };
 }
 function parseRunReceipt(value, source) {
-  if (!isRecord12(value)) throw new Error(`${source}: expected object`);
+  if (!isRecord11(value)) throw new Error(`${source}: expected object`);
   const integrity = value.integrity;
-  if (!isRecord12(integrity)) throw new Error(`${source}.integrity: expected object`);
+  if (!isRecord11(integrity)) throw new Error(`${source}.integrity: expected object`);
   const reasoningTokenCount = readOptionalNumber2(value, source, "reasoningTokenCount");
   const failureMessage = readOptionalString2(value.failureMessage);
   return {
@@ -15062,7 +14751,7 @@ function readToolStats(record, source, field) {
   if (!Array.isArray(value)) throw new Error(`${source}.${field}: expected array`);
   return value.map((entry, index) => {
     const itemSource = `${source}.${field}[${index}]`;
-    if (!isRecord12(entry)) throw new Error(`${itemSource}: expected object`);
+    if (!isRecord11(entry)) throw new Error(`${itemSource}: expected object`);
     return {
       tool: readString2(entry, itemSource, "tool"),
       count: readNumber2(entry, itemSource, "count"),
@@ -15127,11 +14816,11 @@ function parseJson2(raw, source) {
     throw new Error(`${source}: invalid JSON: ${message}`);
   }
 }
-function isRecord12(value) {
+function isRecord11(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function payloadObject(payload) {
-  return isRecord12(payload) ? payload : null;
+  return isRecord11(payload) ? payload : null;
 }
 function parseMaybeJson(value) {
   if (typeof value !== "string") return value;
@@ -15148,7 +14837,7 @@ function firstContentBlock(payload, type) {
   const content = obj?.content;
   if (!Array.isArray(content)) return null;
   for (const block of content) {
-    if (!isRecord12(block)) continue;
+    if (!isRecord11(block)) continue;
     if (block.type === type) return block;
   }
   return null;
@@ -15161,7 +14850,7 @@ function extractTextFromPayload(payload) {
   if (Array.isArray(obj.content)) {
     const parts = [];
     for (const block of obj.content) {
-      if (!isRecord12(block)) continue;
+      if (!isRecord11(block)) continue;
       if (block.type === "text" && typeof block.text === "string") parts.push(block.text);
     }
     return parts.join("\n");
@@ -15617,7 +15306,7 @@ async function readRunLedger2(stateDir) {
   try {
     const raw = await readFile3(join18(stateDir, "runs.json"), "utf8");
     const parsed = JSON.parse(raw);
-    return Array.isArray(parsed) ? parsed.filter(isRecord13) : [];
+    return Array.isArray(parsed) ? parsed.filter(isRecord12) : [];
   } catch {
     return [];
   }
@@ -15629,7 +15318,7 @@ async function readReceiptForRun(stateDir, envelope) {
   const path2 = envelope.receiptPath ?? join18(stateDir, "receipts", `${envelope.id}.json`);
   try {
     const parsed = JSON.parse(await readFile3(path2, "utf8"));
-    return isRecord13(parsed) ? parsed : null;
+    return isRecord12(parsed) ? parsed : null;
   } catch {
     return null;
   }
@@ -15644,7 +15333,7 @@ async function countSessionEntries(stateDir, sessionIds) {
       count += raw.split("\n").filter((line) => line.trim().length > 0).filter((line) => {
         try {
           const parsed = JSON.parse(line);
-          return isRecord13(parsed) && parsed.type !== "session";
+          return isRecord12(parsed) && parsed.type !== "session";
         } catch {
           return false;
         }
@@ -15693,7 +15382,7 @@ async function linkedEvalAuditRows(stateDir, runIds, artifact) {
       } catch {
         continue;
       }
-      if (!isRecord13(parsed)) continue;
+      if (!isRecord12(parsed)) continue;
       const directRunId = typeof parsed.runId === "string" ? parsed.runId : null;
       if (directRunId !== null && runIds.has(directRunId)) {
         rows.push(evalAuditRow(parsed, directRunId, "run-id", "exact", ["audit runId matched nested eval run"]));
@@ -15764,7 +15453,7 @@ function sanitizeEvidenceId2(value) {
   const sanitized = value.replace(/[^A-Za-z0-9._-]+/g, "-").replace(/^-+|-+$/g, "");
   return sanitized.length === 0 ? "unknown" : sanitized;
 }
-function isRecord13(value) {
+function isRecord12(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
@@ -15936,6 +15625,7 @@ export {
   openAgentLedger,
   renderAgentLedgerBoard,
   closeAgentLedger,
+  renderDispatchReviewerTask,
   createRunReceiptQuality,
   UNVERIFIABLE_RECEIPT_VERIFICATION,
   decideReviewGate,
@@ -15959,8 +15649,6 @@ export {
   extractRunProvenance,
   provenanceTranscriptLines,
   provenanceCompactSuffix,
-  adaptRunReceiptTrustStatus,
-  inspectRunReceiptTrustStatus,
   FAILURE_CAUSE_TAGS,
   evidenceDirectory,
   EvidenceNotFoundError,
@@ -15971,4 +15659,4 @@ export {
   summarizeEvalResults,
   buildEvalEvidence
 };
-//# sourceMappingURL=chunk-UUANF5CR.js.map
+//# sourceMappingURL=chunk-TLQJPP24.js.map