@iowarp/clio-coder 0.4.3 → 0.4.4

package/dist/{wiki-generate-C7IQOXSP.js → wiki-generate-743CIGJW.js}

@@ -5,119 +5,125 @@ import {
 import {
   SchedulingDomainModule,
   createPromptsDomainModule
-} from "./chunk-WCXUNS7U.js";
-import {
-  SafetyDomainModule
-} from "./chunk-YQWYVTMC.js";
+} from "./chunk-YNFKXPEC.js";
 import {
   ConfigDomainModule,
   loadDomains
-} from "./chunk-WBKFA554.js";
+} from "./chunk-72YIHOZQ.js";
+import "./chunk-4WR7VSYB.js";
 import {
   createObservabilityDomainModule
-} from "./chunk-MWUZBSAQ.js";
-import "./chunk-VA5FNYMT.js";
-import "./chunk-4WR7VSYB.js";
+} from "./chunk-Y55JBDO5.js";
+import "./chunk-JT2RFCC5.js";
 import {
   ContextDomainModule,
   buildWikiPagePrompt,
   buildWikiPlanPrompt
-} from "./chunk-KK4JZPBQ.js";
+} from "./chunk-IZXGRF7P.js";
 import "./chunk-R6Q67RJH.js";
-import "./chunk-Y3CBHOR6.js";
-import "./chunk-BEPZRGGU.js";
+import {
+  SafetyDomainModule
+} from "./chunk-5636DCO5.js";
+import "./chunk-V6HJFQZE.js";
+import "./chunk-EL24TAU4.js";
 import {
   MAX_PAGE_ATTEMPTS,
   pendingPages,
   readAuthoredWikiPlan,
   writeWikiPlanFile
-} from "./chunk-NDINPTJ4.js";
+} from "./chunk-ELZVTCGV.js";
 import "./chunk-MXHC5QYU.js";
+import "./chunk-XXYSBZIQ.js";
 import {
   ResourcesDomainModule
-} from "./chunk-G76U63X4.js";
+} from "./chunk-RQCKCSRL.js";
 import {
   AgentsDomainModule
-} from "./chunk-UPZU6GE4.js";
-import "./chunk-RRNP2ANY.js";
+} from "./chunk-RZDWV63N.js";
+import "./chunk-7UGL4MB5.js";
 import "./chunk-DR52UMZW.js";
+import "./chunk-YAKGTXEV.js";
 import {
   DispatchDomainModule
-} from "./chunk-AF4YM7Z4.js";
-import "./chunk-B4VEBZKF.js";
-import "./chunk-E3TPLWFX.js";
-import "./chunk-WRBAGUNF.js";
-import "./chunk-IWT4SF4R.js";
+} from "./chunk-NRO2BJRH.js";
+import "./chunk-NXIMQY5W.js";
+import "./chunk-XRZT5WY5.js";
+import "./chunk-QUFRYSWI.js";
+import "./chunk-LTIKRKFL.js";
+import "./chunk-ODGTEFFI.js";
+import "./chunk-CUSRQKPU.js";
 import {
   SessionDomainModule
-} from "./chunk-JKKCYP3C.js";
+} from "./chunk-6UINWWS6.js";
 import "./chunk-FTMGRKEF.js";
-import "./chunk-XRZT5WY5.js";
-import "./chunk-RVG5JXAL.js";
 import "./chunk-VIA6RFQZ.js";
-import "./chunk-T56WDKA5.js";
 import "./chunk-W6GROXXM.js";
-import "./chunk-2VIKGWFZ.js";
+import "./chunk-I2DWJ4GM.js";
+import "./chunk-OEJSLEPW.js";
 import "./chunk-RKKLTLYB.js";
-import "./chunk-6PTFB5VS.js";
-import "./chunk-TXOTCRLG.js";
+import "./chunk-K6T2ZAMZ.js";
+import "./chunk-3UUXNFEX.js";
 import "./chunk-VKPAQYEB.js";
 import "./chunk-LCGCVYZ4.js";
-import "./chunk-LDJG7DW3.js";
+import "./chunk-2ZSONWVL.js";
 import "./chunk-NDDGJUXD.js";
-import "./chunk-CE5AX47J.js";
+import "./chunk-YECAMM3D.js";
+import "./chunk-V76WTFTW.js";
 import "./chunk-3DPEIQKN.js";
-import "./chunk-7DRAWPTZ.js";
+import "./chunk-TQAHXW6Y.js";
 import "./chunk-5MEZN6CB.js";
 import "./chunk-4O6MANBS.js";
 import "./chunk-JVCV3ICN.js";
 import "./chunk-HVDIIIQW.js";
 import {
   MiddlewareDomainModule
-} from "./chunk-2UG5F4C5.js";
+} from "./chunk-XULDXHTN.js";
 import "./chunk-5PSMVOLM.js";
 import "./chunk-2WZ546HR.js";
 import "./chunk-VG7TBQIY.js";
-import "./chunk-PAJQJ7BS.js";
-import "./chunk-EKCHAPYA.js";
-import "./chunk-L47TF46W.js";
-import "./chunk-RSJ25QSL.js";
-import "./chunk-XIVNBFZS.js";
+import "./chunk-75W7L2E2.js";
+import "./chunk-6QOTUPRG.js";
+import "./chunk-AUPNRN7C.js";
+import "./chunk-6PAZTBPA.js";
+import "./chunk-6Q3CYFD3.js";
 import "./chunk-NEDJ26B5.js";
-import "./chunk-42FMPA75.js";
-import "./chunk-H7IXIC72.js";
-import "./chunk-7DICMOS6.js";
 import "./chunk-OQE5J4C6.js";
+import "./chunk-NAI6ZFCY.js";
+import "./chunk-OZNBF4L3.js";
+import "./chunk-QZWQA4DE.js";
+import "./chunk-H7IXIC72.js";
+import "./chunk-KFV5L5SK.js";
+import "./chunk-NXYCB2VD.js";
+import "./chunk-ECH6PKUQ.js";
+import "./chunk-IRXAATOX.js";
+import "./chunk-BJVFZO5U.js";
+import "./chunk-DXKJURES.js";
 import "./chunk-HHV2GANA.js";
-import "./chunk-B4OAX3SI.js";
-import "./chunk-I7ZPNEJM.js";
 import "./chunk-GYV6VZOC.js";
 import "./chunk-UL3WSD3F.js";
-import "./chunk-JDAY6FIL.js";
-import "./chunk-OZNBF4L3.js";
-import "./chunk-ECH6PKUQ.js";
-import "./chunk-6XLNIQDB.js";
 import "./chunk-5B2AEOW5.js";
 import "./chunk-VAVR4IJY.js";
-import "./chunk-JGRC33J2.js";
 import "./chunk-4BJ5BYCE.js";
+import "./chunk-54X7T7DK.js";
+import "./chunk-I5FWO7L5.js";
+import "./chunk-6XLNIQDB.js";
 import {
   ToolNames
-} from "./chunk-K6BSR66V.js";
+} from "./chunk-4NSRCOYP.js";
 import {
   ProvidersDomainModule,
   canonicalizeWireModelId
-} from "./chunk-XPWWI35G.js";
+} from "./chunk-JSD46VO2.js";
 import "./chunk-CFGTUFWB.js";
 import "./chunk-NZMNUPZZ.js";
 import "./chunk-2JH2WHGE.js";
-import "./chunk-HAXOFFRH.js";
-import "./chunk-R346GLFC.js";
 import "./chunk-KXDSS5WJ.js";
 import "./chunk-GHS5EBTQ.js";
 import "./chunk-D7E7WCDF.js";
+import "./chunk-HAXOFFRH.js";
+import "./chunk-R346GLFC.js";
 import "./chunk-BTK3SSSK.js";
-import "./chunk-NMJXSHBJ.js";
+import "./chunk-W54I7H25.js";
 import "./chunk-PMZVFWSR.js";
 import "./chunk-F4EKGO4N.js";
 import "./chunk-BWH6N36D.js";
@@ -128,15 +134,15 @@ import "./chunk-33YXPOE3.js";
 import "./chunk-7CR24IG7.js";
 import "./chunk-XPLRXC72.js";
 import "./chunk-IWHMRKLL.js";
-import "./chunk-VW6DOEDG.js";
+import "./chunk-6OSVSQL5.js";
 import "./chunk-UXCU4E3T.js";
 import "./chunk-LL4KHSZI.js";
-import "./chunk-JSC3U7TI.js";
 import "./chunk-S66XZJOF.js";
-import "./chunk-JIEGK6UF.js";
+import "./chunk-TOIVGRUX.js";
+import "./chunk-U6TMQNSI.js";
 import "./chunk-EBY63B7G.js";
 import "./chunk-6EJMN2Y3.js";
-import "./chunk-LLDJM5XK.js";
+import "./chunk-26QSH3EJ.js";
 import "./chunk-ID64D7PE.js";
 import "./chunk-336NSSKI.js";
 import "./chunk-IKCO5N3L.js";
@@ -328,6 +334,7 @@ async function runPagePhase(dispatch, input, plan, page, route, position) {
       codewiki: input.codewiki,
       page,
       siblings: plan.pages,
+      ...input.decisions ? { decisions: input.decisions } : {},
       outputDir: input.outputDir,
       seeded
     }),
@@ -466,4 +473,4 @@ export {
   modelWikiGenerate,
   resolveDocumenterModelId
 };
-//# sourceMappingURL=wiki-generate-C7IQOXSP.js.map
+//# sourceMappingURL=wiki-generate-743CIGJW.js.map

package/dist/{with-panes-4GCGSL7J.js → with-panes-BDQEWBRT.js}

@@ -9,7 +9,7 @@ import {
   createYaziSession,
   resolveYaziBinaries,
   watchViewerCommand
-} from "./chunk-KKOJXO6R.js";
+} from "./chunk-OMQNJVKW.js";
 import {
   ensureYaziProfile,
   yaziProfileDir
@@ -611,4 +611,4 @@ export {
   createWatchPaneController,
   createYaziBridge
 };
-//# sourceMappingURL=with-panes-4GCGSL7J.js.map
+//# sourceMappingURL=with-panes-BDQEWBRT.js.map

package/dist/worker/entry.js

@@ -17,25 +17,25 @@ import {
   resolveDeliveryTools,
   sanitizeLockedSynthesisMessage,
   workerLoopBlockBudget
-} from "../chunk-GI7YYQ3F.js";
+} from "../chunk-36CT5VVL.js";
+import "../chunk-BMS5RKQY.js";
 import {
   createMiddlewareContractFromSnapshot,
   createMiddlewareToolChoiceControl,
   shouldRequestStalledTurnContinuation
-} from "../chunk-2UG5F4C5.js";
+} from "../chunk-XULDXHTN.js";
+import "../chunk-2CU2H6KE.js";
+import "../chunk-GX5WYQO4.js";
+import "../chunk-RXTN6AKH.js";
+import "../chunk-3UNOLWNZ.js";
 import {
   CONFIRMED_SCOPE,
   READONLY_SCOPE,
   WORKSPACE_SCOPE,
   isSubset
 } from "../chunk-5PSMVOLM.js";
-import "../chunk-BMS5RKQY.js";
 import "../chunk-2WZ546HR.js";
-import "../chunk-MCEPRMZW.js";
-import "../chunk-ZDN3Y73Y.js";
-import "../chunk-64I3JVYM.js";
 import "../chunk-VG7TBQIY.js";
-import "../chunk-IUE3Y34X.js";
 import {
   DEFAULT_ESCALATION_FALLBACK,
   DEFAULT_ESCALATION_TIMEOUT_MS,
@@ -52,40 +52,41 @@ import {
   startAntigravityWorkerRun,
   startClaudeCodeWorkerRun,
   validateRehydratedWorkerRuntime
-} from "../chunk-PAJQJ7BS.js";
-import "../chunk-EKCHAPYA.js";
-import "../chunk-L47TF46W.js";
+} from "../chunk-75W7L2E2.js";
 import {
   createLoopState,
   observe
-} from "../chunk-RSJ25QSL.js";
+} from "../chunk-6QOTUPRG.js";
+import "../chunk-AUPNRN7C.js";
+import "../chunk-6PAZTBPA.js";
 import {
   createSafetyPolicyEngine
-} from "../chunk-XIVNBFZS.js";
+} from "../chunk-6Q3CYFD3.js";
 import {
   describeCallTarget
 } from "../chunk-NEDJ26B5.js";
-import "../chunk-42FMPA75.js";
-import "../chunk-H7IXIC72.js";
-import "../chunk-7DICMOS6.js";
 import "../chunk-OQE5J4C6.js";
-import "../chunk-HHV2GANA.js";
+import "../chunk-NAI6ZFCY.js";
+import "../chunk-OZNBF4L3.js";
+import "../chunk-QZWQA4DE.js";
+import "../chunk-H7IXIC72.js";
 import {
   RESULT_CONTRACT_REPAIR_LIMIT,
   classify,
   parseWorkerResultContract,
   resultContractRepairMessages,
   validateResultContract
-} from "../chunk-B4OAX3SI.js";
+} from "../chunk-KFV5L5SK.js";
 import {
   protectedArtifactMutationBlockReason
-} from "../chunk-I7ZPNEJM.js";
+} from "../chunk-NXYCB2VD.js";
+import "../chunk-ECH6PKUQ.js";
+import "../chunk-IRXAATOX.js";
+import "../chunk-BJVFZO5U.js";
+import "../chunk-DXKJURES.js";
+import "../chunk-HHV2GANA.js";
 import "../chunk-GYV6VZOC.js";
 import "../chunk-UL3WSD3F.js";
-import "../chunk-JDAY6FIL.js";
-import "../chunk-OZNBF4L3.js";
-import "../chunk-ECH6PKUQ.js";
-import "../chunk-6XLNIQDB.js";
 import "../chunk-5B2AEOW5.js";
 import {
   UNKNOWN_RESOURCE,
@@ -103,14 +104,16 @@ import {
   workerSpecDigest
 } from "../chunk-VAVR4IJY.js";
 import "../chunk-QSNYB6ZV.js";
+import "../chunk-4BJ5BYCE.js";
 import {
   DEFAULT_AUTONOMY_LEVEL,
   agentSkillToolPolicy
-} from "../chunk-JGRC33J2.js";
-import "../chunk-4BJ5BYCE.js";
+} from "../chunk-54X7T7DK.js";
+import "../chunk-I5FWO7L5.js";
+import "../chunk-6XLNIQDB.js";
 import {
   ToolNames
-} from "../chunk-K6BSR66V.js";
+} from "../chunk-4NSRCOYP.js";
 import "../chunk-QDC3K2U3.js";
 import {
   FileKnowledgeBase,
@@ -122,20 +125,20 @@ import {
   setGlobalDefaultMaxOutputTokens,
   setProtectedModelsProvider,
   setResidencyNoticeSink
-} from "../chunk-XPWWI35G.js";
+} from "../chunk-JSD46VO2.js";
 import "../chunk-CFGTUFWB.js";
 import "../chunk-NZMNUPZZ.js";
 import "../chunk-2JH2WHGE.js";
-import "../chunk-HAXOFFRH.js";
-import "../chunk-R346GLFC.js";
 import "../chunk-KXDSS5WJ.js";
 import {
   readSettings,
   validateSettingsFile
 } from "../chunk-GHS5EBTQ.js";
 import "../chunk-D7E7WCDF.js";
+import "../chunk-HAXOFFRH.js";
+import "../chunk-R346GLFC.js";
 import "../chunk-BTK3SSSK.js";
-import "../chunk-NMJXSHBJ.js";
+import "../chunk-W54I7H25.js";
 import "../chunk-PMZVFWSR.js";
 import "../chunk-F4EKGO4N.js";
 import "../chunk-65DEGPJ6.js";
@@ -144,25 +147,25 @@ import {
 } from "../chunk-IWHMRKLL.js";
 import {
   registerBuiltinRuntimes
-} from "../chunk-VW6DOEDG.js";
+} from "../chunk-6OSVSQL5.js";
 import "../chunk-UXCU4E3T.js";
 import "../chunk-LL4KHSZI.js";
-import "../chunk-JSC3U7TI.js";
 import {
   configureGuardrails,
   guardrailValuesFromSettings,
   isWorkerToolCallCapExceededReason,
   isWorkerToolCallCapSynthesisReason
 } from "../chunk-S66XZJOF.js";
+import "../chunk-TOIVGRUX.js";
 import {
   setGitCommitAttributionEnabled,
   withManagedGitCommitAttributionEnvironment
-} from "../chunk-JIEGK6UF.js";
+} from "../chunk-U6TMQNSI.js";
 import "../chunk-EBY63B7G.js";
 import {
   AI_AGENT_NAME
 } from "../chunk-6EJMN2Y3.js";
-import "../chunk-LLDJM5XK.js";
+import "../chunk-26QSH3EJ.js";
 import "../chunk-ID64D7PE.js";
 import "../chunk-336NSSKI.js";
 import "../chunk-IKCO5N3L.js";

package/docs/README.md

@@ -135,8 +135,9 @@ repository.
 
 The [configuration-knob audit](history/config-knobs-audit.md) is a dated historical
 inventory, not the current settings reference. The
-[v0.4.1 release-cut checklist](history/release-cut-checklist.md) is retained as release
-engineering history and must not be reused unchanged for a future release.
+[release-cut checklist](process/release-cut-checklist.md) is the current release
+procedure; the earlier [v0.4.1 release-cut checklist](history/release-cut-checklist.md)
+is retained as release engineering history.
 
 ## Developer quick start
 

package/docs/architecture/acp.md

@@ -330,3 +330,20 @@ export class AcpProcessError extends AcpError {
   }
 }
 ```
+
+---
+
+## 9. Registry Submission
+
+To list Clio Coder in the upstream Agent Client Protocol registry (such as the registry used by the Zed editor), repository submission assets are maintained under `assets/acp-registry/`:
+
+- `assets/acp-registry/agent.json`: Agent registry manifest containing the agent identifier, display name, release version, description, repository URLs, and distribution specification launching `clio-coder acp`.
+- `assets/acp-registry/icon.svg`: A 16x16 monochrome icon using `currentColor` stroke and fill derived from the Clio logo.
+
+The submission procedure follows these steps:
+
+1. Fork the upstream registry repository at `https://github.com/agentclientprotocol/registry`.
+2. Create an entry directory matching the agent identifier: `mkdir clio-coder`.
+3. Copy `assets/acp-registry/agent.json` and `assets/acp-registry/icon.svg` into that directory.
+4. Verify that `agent.json` adheres to the registry schema and that `icon.svg` remains monochrome with viewBox `0 0 16 16`.
+5. Submit a pull request to the upstream registry repository. Once merged, clients that consume the ACP registry discover and install Clio Coder automatically.

package/docs/architecture/artifact-versions.md

@@ -43,7 +43,7 @@ normalization.
 | **Capacity State File** | `2` | `version: 2` in `interface CapacityStateFile`<br>`src/domains/dispatch/capacity-lease.ts:56` | `<stateDir>/dispatch-admission.json` | Active capacity leases, drain status, and whole-plan reservations. The cross-process advisory lock lives in a separate `.lock` file. | Corrupted or unparseable state file causes admission to fail closed. |
 | **Protected Artifact Journal** | `1` | `version: 1` in `interface PendingProtectedArtifactRecord`<br>`src/domains/session/protected-artifact-journal.ts:21` | `<stateDir>/protected-artifact-pending/<key>/<id>.json` | Write-ahead durability records for pending protected artifacts. | Leftover records reconciled during session initialization. |
 | **Fleet Run Record** | `1` | `version: 1` in `interface FleetRunRecord`<br>`src/domains/dispatch/state.ts` | `<stateDir>/fleet-runs/<runId>.json` | Durable record of one fleet run: contract name, plan hash, static step ids and steps, `--var` values, replayed and settled step results, and the delegation plan hash a `kind: plan` step produced. Read by `fleet run --resume`. | Resume refuses a changed plan hash with a per-step diff and refuses differing `--var` values. |
-| **Dispatch Run Ledger** | unversioned JSON array | `RunEnvelope`<br>`src/domains/dispatch/state.ts` | `<stateDir>/runs.json` | In-memory mirror of recent dispatch runs (id, agent, target, model, runtime, status, timing, receipt path, budget/briefing/steering provenance), newest-first, persisted as a settings-bounded ring (default 1000 runs). Read by the eval, evidence, CLI (`usage`), and TUI (Dispatch Board) domains, among others. | A missing file reads as empty; a non-array top-level JSON value reads as empty; malformed JSON throws. There is no per-record version field to check or reject on, since `RunEnvelope` carries none. |
+| **Dispatch Run Ledger** | `1` | `version: 1` in `interface RunEnvelope`<br>`src/domains/dispatch/state.ts` | `<stateDir>/runs.json` | In-memory mirror of recent dispatch runs (id, agent, target, model, runtime, status, timing, receipt path, budget/briefing/steering provenance), newest-first, persisted as a settings-bounded ring (default 1000 runs). Read by the eval, evidence, CLI (`usage`), and TUI (Dispatch Board) domains, among others. | A missing file reads as empty; a non-array top-level JSON value reads as empty; malformed JSON throws. A missing record version is treated as 1; records with any other version are skipped. |
 | **Durable Assignment Store** | `1` | `version: 1` in `interface AssignmentStoreFile`<br>`DurableAssignmentRecord`<br>`src/domains/dispatch/assignment-store.ts` | `<stateDir>/assignments.json` | Machine-wide logical-dispatch records: assignment id, attempt ids, terminal run id, status, optional fleet verdict owner, and—while running—`processOwner {pid, processBirthToken, acquiredAt}`. The owner is cleared on a true terminal transition. | A live sibling owner keeps the row running; a genuinely dead or legacy ownerless row is reconciled. An unsupported or unreadable store is treated as empty, and malformed records are ignored. |
 | **Checkout Writer Lease** | `1` | `version: 1` in `interface CheckoutWriterLeaseRecord`<br>`src/domains/dispatch/checkout-writer-lease.ts` | `<stateDir>/checkout-writer-leases/<key>.json` (key derived from the canonical checkout path) | Cross-process single-writer lease: checkout path, pid, process birth token, acquisition time. | A live sibling holder is refused with `checkout_writer_lease_held`; a dead owner is reclaimed; a malformed or unreadable record throws and fails admission closed. |
 | **Out-of-turn Usage Ledger** | unversioned JSONL | `OutOfTurnUsageRow`<br>`src/domains/observability/out-of-turn-usage.ts` | `<stateDir>/usage/out-of-turn.jsonl` | One row per recorded side question, handoff, prompt prewarm, background-memory call, or summary stream in an unsuccessful compaction. Labels are `side-question`, `handoff`, `prewarm`, `background-memory`, and `failed-compaction`; rows retain session/repository identity, timestamp, selected target/model, and observed usage. New failed-compaction rows add `callOutcome`, nullable unknown usage fields, and estimated/unknown cost provenance; legacy numeric rows remain readable. Successful compactions keep usage on their checkpoint. The ledger is a bounded ring of `MAX_OUT_OF_TURN_USAGE_ROWS = 1000`, rewritten atomically under the state-file lock. | Unparseable rows are skipped and counted by `usage report`; the session ledger is never affected. |

package/docs/architecture/dispatch-typed-intent.md

@@ -250,7 +250,7 @@ producer.
 | `intent_absent_legacy_inference` | classifier-only warn | No typed intent; scope came from legacy inference. Production admission does not emit it. |
 | `intent_partial_verification_absent` | classifier-only warn | Declares tree-changing work with no verification requirement. Production admission does not emit it. |
 | `typed_scope_replaced_inferred_paths` | warn | Typed intent was declared, so prose-only paths took no part in scope. |
-| `legacy_scope_inferred` | retained compatibility id | Accepted by the event projection for older producers; no current source emits it. |
+| `legacy_scope_inferred` | warn | Emitted by `path-scope.ts` when prose inference resolves a leading `../` run against the dispatch root. The detail lists each token as `<raw token> -> <path or dropped>`. |
 | `legacy_scope_empty` | retained compatibility id | Accepted by the event projection for older producers; no current source emits it. |
 | `intent_version_unsupported` | refuse | `intent.version` names a version this build does not speak. |
 | `intent_malformed` | refuse | Not a normalized intent for a reason other than its version. |

package/docs/architecture/evidence-and-memory.md

@@ -86,7 +86,7 @@ When a run was chained (pipeline), composed with a persona override, or escalate
 
 ### Task and decision provenance
 
-Session evidence retains the two operator-facing bookkeeping ledgers instead of flattening them into prose. A `taskLedger` projection names the stable board id, goal counts, active runs, required evidence, and bounded task rows with status, origin, `userTaskId`, reason, and evidence. This keeps an operator task traceable from the project inbox correlation through agent pickup and completion. A `decisionLedger` projection names the active-path anchor, interview identity and status, timing, round count, summary, and every settled or superseded decision. Operator revisions are explicit through `revisedAt`, `revisionSource=operator`, and the recorded correction text. Both kinds remain session facts in `trace.raw.jsonl`, `trace.cleaned.jsonl`, and the readable transcript; evidence does not reinterpret them as validation results.
+Session evidence retains the two operator-facing bookkeeping ledgers instead of flattening them into prose. A `taskLedger` projection names the stable board id, goal counts, active runs, required evidence, and bounded task rows with status, origin, `userTaskId`, reason, and evidence. This keeps an operator task traceable from the project inbox correlation through agent pickup and completion. A `decisionLedger` projection names the active-path anchor, interview identity and status, timing, round count, summary, and every settled or superseded decision. Operator revisions are explicit through `revisedAt`, `revisionSource=operator`, and the recorded correction text. Both kinds remain session facts in `trace.raw.jsonl`, `trace.cleaned.jsonl`, and the readable transcript; evidence does not reinterpret them as validation results. Authenticated receipt `decisionRefs` link runs to recorded arguments on the session's active path, with resolved records in `overview.json` and resolved or missing-reference findings in both readable evidence documents. Wiki page writers receive up to twelve active decisions matching their source paths or symbols and cite those refs in the body and optional `decisions` frontmatter instead of inferring rationale.
 
 ---
 

package/docs/architecture/observability.md

@@ -172,7 +172,7 @@ Clio resolves directories under platform-specific XDG defaults (on Linux, these
 
 | Category | Description | Backing Path |
 | --- | --- | --- |
-| **Accountability** | Rolling first-pass-success rate and failure-cause histogram. | `<stateDir>/evidence-index.json` |
+| **Accountability** | Rolling first-pass-success rate, unverified successes, ungrounded claims, and failure-cause histogram. | `<stateDir>/evidence-index.json` |
 | **Evidence bundles** | Deterministic run or session overviews, findings, totals, and linked files. | `<dataDir>/evidence/<evidenceId>/` |
 | **Receipts** | Durable run receipts verified by SHA-256 integrity digests. | `<stateDir>/receipts/<runId>.json` |
 | **Dispatch outputs** | Logs and ledger records detailing worker execution. | `<stateDir>/runs.json` and `<stateDir>/receipts/<runId>.json` |
@@ -201,6 +201,12 @@ A run is marked as a first-pass success when:
 The TUI displays this rate as:
 `first-pass success: <succeeded-attempts>/<total-attempts> (<pct>%)`
 
+### Unverified Successes and Ungrounded Claims
+Two counters sit beside the rate in `/view`, `clio-coder usage`, and the observability contract. An unverified success is a run whose terminal outcome succeeded while its bundle carries the `no-validation` or `proxy-validation` tag or a warning-level `completion-evidence` finding. Ungrounded claims are the sum, over integrity-verified receipts, of validation claims with no matching command (`validationGrounding.claimed` minus `grounded`). Both fold only the fields an index row holds: a historical row without `succeeded`, `completionEvidenceWarning`, or `ungroundedClaims` contributes zero.
+
+The TUI displays them as:
+`unverified successes: <count>` and `ungrounded claims: <count>`
+
 ### Failure-Cause Histogram
 The TUI lists the top failure causes sorted by frequency (descending), then by tag name (ascending). The histogram filters out provenance and quality tags (such as `audit-linked`, `session-linked`, and `no-validation`) and displays only real failure causes:
 - `timeout`

package/docs/architecture/prompt-envelope-and-tools.md

@@ -81,9 +81,9 @@ The compiler runs after target capability and tool-profile admission. Its canoni
 
 Project context, memory, bounded dispatch briefing, pipeline input, the assigned task, and the per-run safety-posture reminder remain dynamic user messages. A briefing is a separately delimited message labeled as untrusted task context/data; it is never concatenated into the task or stable system prompt. Dynamic ordering is project, safety, memory, briefing, then pipeline input, with pipeline input last. These messages do not affect the stable composition hash. Persona, effective autonomy, target tool capability, or final toolkit changes do affect it.
 
-## Seven planes, twenty-one tools
+## Seven planes, twenty-four tools
 
-The canonical builtin catalog contains 21 tools organized in seven planes. A
+The canonical builtin catalog contains 24 tools organized in seven planes. A
 particular session or worker receives the subset whose dependencies and policy
 allow it to register. Each plane is one policy unit: its tools share an action
 class, a size posture, a details schema, and a concurrency rule.
@@ -95,6 +95,7 @@ engine assumes.
 | Plane | Tools | Action class | Concurrency |
 | --- | --- | --- | --- |
 | OBSERVE | `read`, `grep`, `find`, `ls`, `code_nav`, `context`, `credential_present` | read | parallel |
+| OBSERVE | `evidence` | read | sequential |
 | MUTATE | `write`, `edit` | write | sequential |
 | EXECUTE | `bash`, `verify` | execute | sequential |
 | EXECUTE | `git` | read | parallel |
@@ -103,6 +104,8 @@ engine assumes.
 | ORCHESTRATE | `tasks` | read | sequential |
 | ORCHESTRATE | `ledger` | read | sequential |
 | ORCHESTRATE | `panes` | read | sequential |
+| ORCHESTRATE | `limitation` | read | parallel |
+| ORCHESTRATE | `decide` | read | sequential |
 | RETRIEVE | `web_fetch` | read | parallel |
 | INTERACT | `ask_user` | read | sequential |
 | ARTIFACT | `artifact` | write | sequential |
@@ -120,7 +123,14 @@ and a read answers from a local mirror, so it touches no workspace and stays
 read class, and reviewers and judges are pinned to read-only autonomy where a
 write class would block the peer review the board exists for. `panes` controls
 only Clio-owned terminal panes through the live mux; it stays read class but is
-sequential so two operations cannot race the same pane registry.
+sequential so two operations cannot race the same pane registry. `evidence` sits in the OBSERVE plane
+because it only reads canonical evidence, trust status, gate decisions, and
+findings, but it is sequential because `run` mode may materialize a bundle
+under Clio's data directory. `limitation` and `decide` sit in the ORCHESTRATE
+plane as read class: each appends one typed receipt or decision-board entry
+to the session ledger and touches nothing else. `limitation` is parallel
+because the call is pure; `decide` is sequential so two decisions in one batch
+cannot race the supersede lookup.
 
 Registration is conditional on wiring: `context` gains its workspace scope only
 when a session contract is bound, `dispatch`/`monitor`/`steer` register only
@@ -154,7 +164,7 @@ Several tools absorb what used to be separate tools:
 
 ## The observation envelope
 
-The six content-returning OBSERVE tools (`read`, `grep`, `find`, `ls`, `code_nav`, `context`) close every result through one shared envelope in `src/tools/observation.ts`. `credential_present` sits in the OBSERVE plane but returns a typed boolean and carries no envelope cap. The envelope owns four guarantees.
+The six content-returning OBSERVE tools (`read`, `grep`, `find`, `ls`, `code_nav`, `context`) close every result through one shared envelope in `src/tools/observation.ts`. `credential_present` sits in the OBSERVE plane but returns a typed boolean and carries no envelope cap, and `evidence` returns bounded JSON under its own 16KB summary policy. The envelope owns four guarantees.
 
 **One notice line, one format.** A truncated text result appends exactly one notice:
 
@@ -190,7 +200,7 @@ Tool descriptions are tiered by how much a wrong call costs. The hot tools the m
 
 Clio uses two context-protection mechanisms.
 
-1. Tool results are capped at the source and again at the registry boundary. OBSERVE tools use the envelope caps above. Exact mutation tools (`write`, `edit`, `artifact`) use 8KB; `steer` and `credential_present` use 4KB; `ledger` uses 16KB; `panes` uses 8KB; and `ask_user` has a 20KB policy. Summary-kind tools (`bash`, `git`, `verify`, `dispatch`, `monitor`) use 16KB at the registry boundary. Bash also exposes the canonical per-call `output_policy`: omitted/`bounded` keeps its diagnostic tail, `summary` selects stable redacted head/error/tail evidence, `metadata-only` keeps facts and retrieval without stdout/stderr context, and `full` succeeds only inside the same hard result budget or records a typed downgrade. This model-context choice does not change the folded tail-biased operator presentation. `web_fetch` is bounded at 16KB after shaping and may read more before it: its `max_bytes` argument defaults to 600KB and is hard-capped at 5MB. Tools without an explicit result-size policy use an approximately 18KB generic backstop. Over-cap generic results are shown briefly and, when possible, saved under `<stateDir>/scratch/<sessionId>/<sha256 of the captured text>.txt` with an `offloadPath` detail and a 10MB scratch-file cap.
+1. Tool results are capped at the source and again at the registry boundary. OBSERVE tools use the envelope caps above. Exact mutation tools (`write`, `edit`, `artifact`) use 8KB; `steer` and `credential_present` use 4KB; `ledger` uses 16KB; `panes` uses 8KB; `limitation` and `decide` use 4KB; and `ask_user` has a 20KB policy. Summary-kind tools (`bash`, `git`, `verify`, `dispatch`, `monitor`, `evidence`) use 16KB at the registry boundary. Bash also exposes the canonical per-call `output_policy`: omitted/`bounded` keeps its diagnostic tail, `summary` selects stable redacted head/error/tail evidence, `metadata-only` keeps facts and retrieval without stdout/stderr context, and `full` succeeds only inside the same hard result budget or records a typed downgrade. This model-context choice does not change the folded tail-biased operator presentation. `web_fetch` is bounded at 16KB after shaping and may read more before it: its `max_bytes` argument defaults to 600KB and is hard-capped at 5MB. Tools without an explicit result-size policy use an approximately 18KB generic backstop. Over-cap generic results are shown briefly and, when possible, saved under `<stateDir>/scratch/<sessionId>/<sha256 of the captured text>.txt` with an `offloadPath` detail and a 10MB scratch-file cap.
 2. Auto-compaction uses one pressure threshold. The default threshold is 0.8. When pressure crosses the threshold, Clio first applies a non-destructive working-set eviction and records the evicted items in the session ledger. If pressure remains above the threshold, it runs the LLM summary compaction path and replays from the compacted session view. The older destructive observation/thinking mask is available only as a compatibility escape hatch when `CLIO_CODER_LEGACY_MASK=1`.
 
 Manual `/context compact`, `CLIO_CODER_FORCE_COMPACT=1`, and overflow recovery force the LLM summary path directly.