@jeger-ai/opengantry 3.2.6 → 3.4.0

package/templates/.gitagent/planner/MISSION.schema.yaml

@@ -20,7 +20,59 @@ allOf:
       required: [interrogation]
     then:
       required: [interrogation_sha256]
+  - if:
+      required: [contract]
+    then:
+      required: [contract_sha256]
 properties:
+  contract:
+    type: object
+    additionalProperties: false
+    description: >-
+      Planner-sealed mission cage (ADR-0045). Tighten-only: tmvc_roots must be
+      a subset of the skill's manifest roots; forbidden_zones and banned_imports
+      are unioned with skill and org-policy sets. Allowed/banned lists match
+      bare specifiers (exact or prefix); relative and tsconfig-alias imports are
+      resolved to repo paths and checked against forbidden zones. gantry verify
+      re-reads this block from the Planner stamp commit and fails
+      GXT_CONTRACT_TAMPERED on drift.
+    properties:
+      tmvc_roots:
+        type: array
+        items:
+          type: string
+          minLength: 1
+      forbidden_zones:
+        type: array
+        items:
+          type: string
+          minLength: 1
+      allowed_imports:
+        type: array
+        items:
+          type: string
+          minLength: 1
+      banned_imports:
+        type: array
+        items:
+          type: string
+          minLength: 1
+      allow_dynamic_specifiers:
+        type: boolean
+        default: false
+        description: >-
+          When false, import(expr) / require(expr) with a non-literal argument
+          under effective TMVC roots fails GXT_CONTRACT_IMPORT_DYNAMIC.
+      strict_relative_imports:
+        type: boolean
+        default: false
+        description: >-
+          When true, relative or alias imports resolving outside effective TMVC
+          roots fail GXT_CONTRACT_SCOPE_ESCAPE (forbidden zones always fail).
+  contract_sha256:
+    type: string
+    pattern: "^[0-9a-f]{64}$"
+    description: SHA-256 of the canonical (normalized, sorted) contract block.
   msn_id:
     type: string
     pattern: "^MSN-[0-9]{4}$"
@@ -35,6 +87,16 @@ properties:
     minLength: 1
   gate_success_substring:
     type: ["string", "null"]
+  gate_adapter:
+    type: string
+    enum: [generic, eslint, tsc]
+    default: generic
+    description: >-
+      Explicit gate output parser (ADR-0041). generic: exit code + optional
+      success substring only. eslint: gate_command must emit `eslint --format
+      json`; tsc: gate_command must emit plain tsc diagnostics. Adapters map
+      tool output to envelope v3 findings with offending_file/line/rule_id.
+      Routing is never inferred from gate_command text.
   virtual_capture:
     type: boolean
     default: false
@@ -208,3 +270,44 @@ properties:
     items:
       type: string
       minLength: 1
+  depends_on:
+    type: array
+    default: []
+    description: >-
+      Cross-repo mission dependencies (ADR-0044). Resolved offline from fetched
+      refs/gxt/deps/<slug> ledger chains. gantry deps fetch is the only network
+      path; verify/doctor/check read local refs only.
+    items:
+      type: object
+      additionalProperties: false
+      required:
+        - repo
+        - msn_id
+      properties:
+        repo:
+          type: string
+          minLength: 1
+          description: Canonical host/owner/repo or git URL.
+        ref:
+          type: string
+          default: refs/gxt/ledger
+        msn_id:
+          type: string
+          pattern: "^MSN-[0-9]{4}$"
+        require:
+          type: object
+          additionalProperties: false
+          properties:
+            verify_status:
+              type: string
+              enum: [passed]
+              default: passed
+            signed:
+              type: boolean
+              default: false
+            max_age_days:
+              type: number
+              exclusiveMinimum: 0
+        expected_repository_hash:
+          type: string
+          pattern: "^[0-9a-f]{64}$"

package/templates/.gitagent/planner/ORG-POLICY.schema.yaml

@@ -0,0 +1,174 @@
+# ORG-POLICY.schema — JSON Schema (YAML encoding) for organization policy bundles
+# Consumed by gantry (Ajv). ADR-0042. Version label for docs only.
+$schema: https://json-schema.org/draft/2020-12/schema
+$id: https://opengantry.local/schemas/org-policy.v1.json
+title: OpenGantryOrgPolicy
+type: object
+additionalProperties: false
+required:
+  - schema_version
+  - org_id
+  - policy_id
+  - version
+properties:
+  schema_version:
+    type: string
+    const: "1.0.0"
+  org_id:
+    type: string
+    minLength: 1
+  policy_id:
+    type: string
+    minLength: 1
+  version:
+    type: string
+    minLength: 1
+    description: Semver or monotonic label for the bundle (not the CLI).
+  signers:
+    type: array
+    default: []
+    items:
+      type: object
+      additionalProperties: false
+      required:
+        - principal
+      properties:
+        principal:
+          type: string
+          minLength: 1
+          description: SSH or GPG principal allowed to sign the policy commit.
+        kind:
+          type: string
+          enum: [ssh, gpg]
+  mandatory_gates:
+    type: array
+    default: []
+    items:
+      type: object
+      additionalProperties: false
+      required:
+        - id
+        - command
+      properties:
+        id:
+          type: string
+          minLength: 1
+        command:
+          type: string
+          minLength: 1
+        adapter:
+          type: string
+          enum: [generic, eslint, tsc]
+          default: generic
+        success_substring:
+          type: ["string", "null"]
+  banned_imports:
+    type: array
+    default: []
+    items:
+      type: object
+      additionalProperties: false
+      required:
+        - specifier
+      properties:
+        specifier:
+          type: string
+          minLength: 1
+        scope:
+          type: string
+          enum: [changed, all]
+          default: changed
+          description: changed = gantry check-imports on the mission diff; all = whole tree.
+  producers:
+    type: object
+    default: {}
+    additionalProperties:
+      type: string
+      minLength: 1
+    description: >-
+      Map of KPI metric name to producer command. kpi_thresholds[].metric MUST
+      name a key in this object (CLI/schema error otherwise).
+  kpi_thresholds:
+    type: array
+    default: []
+    items:
+      type: object
+      additionalProperties: false
+      required:
+        - metric
+        - op
+        - value
+      properties:
+        metric:
+          type: string
+          minLength: 1
+          description: MUST match a key in producers.
+        op:
+          type: string
+          enum: ["<=", ">=", "==", "<", ">"]
+        value:
+          type: number
+  config_floor:
+    type: object
+    additionalProperties: false
+    properties:
+      planner_signature:
+        type: string
+        enum: [off, warn, require]
+      receipt_signature:
+        type: string
+        enum: [off, warn, require]
+      ledger_signature:
+        type: string
+        enum: [off, warn, require]
+      ledger_mode:
+        type: string
+        enum: [off, local]
+      flight_telemetry:
+        type: object
+        additionalProperties: false
+        properties:
+          body_mode:
+            type: string
+            enum: [hash_only, full]
+      break_glass:
+        type: object
+        additionalProperties: false
+        properties:
+          require_ledger_entry:
+            type: boolean
+  manifest_constraints:
+    type: object
+    additionalProperties: false
+    properties:
+      forbidden_zones_add:
+        type: array
+        items:
+          type: string
+          minLength: 1
+      path_risks_min:
+        type: object
+        additionalProperties:
+          type: string
+          enum: [Tier-1, Tier-2, Tier-3]
+      perimeter_protected_add:
+        type: array
+        items:
+          type: string
+          minLength: 1
+  expected_digests:
+    type: object
+    additionalProperties: false
+    properties:
+      schema_version:
+        type: string
+        const: "0.1.0"
+      manifest_sha256:
+        type: string
+        pattern: "^[0-9a-f]{64}$"
+      target_architecture_sha256:
+        type: ["string", "null"]
+        pattern: "^[0-9a-f]{64}$"
+      config_sha256:
+        type: ["string", "null"]
+        pattern: "^[0-9a-f]{64}$"

package/templates/.gitagent/planner/RULES.md

@@ -1,36 +1,89 @@
-# OpenGantry Rules (template)
+# OpenGantry Rules (v0.6.2 — Forensic Truth)
 
 Normative keywords **MUST**, **MUST NOT**, and **SHOULD** follow RFC 2119.
 
-## 1. Governance and risk tiers
+## 1. Governance & risk tiers
 
-- **Tier 1 (SAFE)**: deterministic gate required; single-provider verifier is acceptable.
-- **Tier 2 (LOGIC)**: deterministic gate required; single-provider verifier output is advisory and a human audit is required before merge.
-- **Tier 3 (SUBSTRATE)**: strictest review path; human audit of trace-mapped evidence is mandatory.
+- **Tier 1 (SAFE)**: Routine work; deterministic gate required; single-provider automated verifier permitted when trace mapping is satisfied.
+- **Tier 2 (LOGIC)**: Deterministic gate required; single-provider verifier output is **ADVISORY_ONLY**; a human MUST audit trace references before merge.
+- **Tier 3 (SUBSTRATE)**: Multi-provider verification **SHOULD** be used when available; if only one provider exists, a **mandatory full human audit** of trace-mapped evidence and gate logs is required before merge.
 
-## 2. Segregation of duties
+## 2. Segregation of duties (SOD)
 
-- The agent executing the gate MUST NOT be the same actor declaring PASS.
-- Mission law is Planner-owned; executors MUST NOT silently rewrite mission law.
+- The agent that executes the gate command (Executor) MUST NOT be the same agent that declares the gate **PASS** (Verifier).
+- Mission law (work order) is Planner-owned; executors MUST NOT modify mission law during execution without Planner re-legislation.
 
-## 3. Trace-mapped verification
+## 3. Trace-mapped verification (anti-lie)
 
-- PASS claims MUST quote `EXECUTOR_LOG.md` with a valid anchor (line or timestamp).
-- Missing quotes/anchors for claimed PASS is evidence tampering and MUST fail verification.
+- For every claimed verifier **PASS**, the Verifier MUST provide a **Trace Reference**: a verbatim substring copied from `EXECUTOR_LOG.md` and an anchor (**line number** or **timestamp**) that ties the quote to the execution trace.
+- Verifiers MUST NOT use source-code quotations as the sole or primary evidence for PASS; code may supplement only after a valid trace reference exists.
+- If the quoted substring does **not** appear in `EXECUTOR_LOG.md`, or no valid trace reference is provided for a claimed PASS → **Evidence Tampering** → the mission MUST auto-fail (no merge).
+- **`gantry verify` stale-evidence (v1.1+):** for committed PASS quote lines, verify binds the line's attestation commit (`git blame` on `EXECUTOR_LOG.md`) to the mission skill's full `tmvc_roots` via `git diff --name-only`; TMVC drift after attestation → **STALE** (`GXT_TRACE_STALE`). Uncommitted quote lines skip stale check until committed.
 
-## 4. Dynamic TMVC
+## 4. Dynamic TMVC (roots + context requests)
 
-- Work is bounded to manifest roots unless explicit mission expansion is approved.
-- Access outside effective TMVC requires a context request recorded in `EXECUTOR_LOG.md`.
-- Access into forbidden zones MUST fail closed unless Planner policy explicitly allows it.
+- TMVC is anchored by **tmvc_roots** from [`.gitagent/foreman/MANIFEST.json`](.gitagent/foreman/MANIFEST.json) unless the Planner narrows scope further in the mission **`contract.tmvc_roots`** ([ADR-0045](../out-of-scope/ADR-0045-mission-contracts.md)).
+- The mission `contract` block is **Planner law** under §2. Executors MUST NOT edit `contract` or `contract_sha256`. Drift versus the Planner stamp commit is **Evidence Tampering** under §3 (`GXT_CONTRACT_TAMPERED`).
+- Effective TMVC = `contract.tmvc_roots` when present, else the skill roots. Effective forbidden zones and banned imports are the **union** of skill, contract, and org policy (tighten-only; §8). `contract.tmvc_roots` MUST be a subset of skill roots (empty skill roots accept Planner-declared roots).
+- Executors MAY discover and edit files only under the **effective** TMVC roots (recursive within each root) unless the mission explicitly allows expansion steps.
+- Any access **outside** the effective TMVC boundary MUST be preceded by a **Context Request** recorded in `EXECUTOR_LOG.md` (path, reason, proposed files). The Verifier MUST accept or reject before such access proceeds.
+- Expansion into any **effective forbidden_zones** path MUST NOT proceed; escalate to Planner or fail closed per mission.
 
-## 5. Mission commit indexing
+## 4.5 Interrogation record (legislation gate)
 
-- Mission-related commits MUST begin with `[MSN-XXXX]` in the subject line.
-- Keep mission files for `gantry verify` under `.gitagent/missions/`.
+- Before legislation, **`gantry interrogate`** / **`gxt_interrogate`** MUST compute gap findings from manifest, `TARGET_ARCHITECTURE.yaml`, and ADR hints. A Planner MUST NOT legislate while any computed finding lacks a documented `operator_answer` in the mission `interrogation` block.
+- The `interrogation` block in mission YAML is the authoritative operator rationale for computed gaps. Placeholder or fabricated answers are **Evidence Tampering** under §3.
+- `interrogation_sha256` is a checksum for schema consistency, not a cryptographic seal; the Planner stamp commit is the seal on mission bytes (§6.1).
+- Tier-3 gap findings SHOULD reference ADRs (`adr_refs`) rather than inline prose alone.
 
-## 6. Break-glass (v0.8.0)
+## 5. Rule 4.4 — Planner-driven manifest sync
 
-- Set `GXT_BYPASS_SECRET` to match `.gitagent/foreman/BYPASS.sha256` (SHA-256 hex of the team secret).
-- Use `gantry verify --break-glass --reason "..."` only in emergencies; push `refs/notes/gxt-bypass` with the branch.
-- Forbidden-zone runtime policy is never bypassed.
+- Any change that adds, removes, or renames a skill entry or materially edits per-skill fields in `MANIFEST.json` MUST include those manifest edits in the **same commit set** as the skill definition change.
+- The Verifier MUST fail the mission if manifest state does not match the repository’s skill reality.
+
+## 6. Git-native mission index
+
+- Every mission-related commit message MUST start with **`[MSN-XXXX]`** (four digits, e.g. `MSN-0007`) so history is greppable: `git log --grep='MSN-0007'`.
+- No tracked synthetic mission-history index file is required in the repository; git history is the index.
+
+## 6.1 Planner legislation proof (`gantry verify` v0.6.2)
+
+- Missions verified by **`gantry verify`** MUST live under **`.gitagent/missions/`** (repo-relative).
+- Before the deterministic gate runs, **`gantry verify`** requires **native Git evidence** that the Planner legislated this mission for its MSN:
+  - Among the last **200** commits (configurable later), the **newest** commit whose subject begins with **`[MSN-XXXX]`** (matching the mission’s MSN) and whose **author email** is listed in **`GANTRY_PLANNER_EMAILS`** (comma-separated allowlist; silent legacy fallback: `GAPMAN_PLANNER_EMAILS`) is the **Planner stamp**.
+  - That stamp commit MUST **modify** the mission file passed to `--mission`.
+- Architectural ADRs under [`.gitagent/out-of-scope/`](../out-of-scope/) are the record of prior decisions. **Planner** MUST review relevant ADRs when authoring or amending missions. **`gantry triage`** MAY emit non-binding `adr_hints` when ADR `match_terms` overlap intent; those hints do **not** change Foreman routing (still manifest-only binary).
+
+## 6.2 Break-glass (`gantry verify` v0.8.0)
+
+- Emergency bypass MUST NOT rely on forgeable commit-subject strings alone. Authorization requires **`GXT_BYPASS_SECRET`** matching the SHA-256 anchor in [`.gitagent/foreman/BYPASS.sha256`](../foreman/BYPASS.sha256) (never commit the plaintext secret).
+- **`gantry verify --break-glass --reason "<text>"`** skips git-proof, gate, and trace when authorized; it MUST write a forensic record as a **`refs/notes/gxt-bypass`** git note (or `--audit-commit` when notes cannot be pushed).
+- PR CI accepts GXT-touched commits that either have a normal **`[MSN-XXXX]`** subject or a valid **gxt-bypass** note on that commit. Push notes with the branch: `git push origin refs/notes/gxt-bypass`.
+- Break-glass does **not** disable **`gantry runtime exec`** forbidden-zone enforcement. Planner MUST review bypass usage post-incident.
+
+## 7. Local history (no bloat)
+
+- Bulky traces live under `.gitagent/history/` (git-ignored). Optional local `MISSION_LOG.md` may be generated from `git log` when needed; it MUST NOT be required in-repo for v0.6.2.
+
+## 8. Organization policy floor (v3.3.0)
+
+- When `.gitagent/foreman/POLICY.pointer.json` is present, Executors and Verifiers MUST treat the cached org policy bundle as a **tighten-only floor** ([ADR-0042](../out-of-scope/ADR-0042-org-policy-bundle.md)): sets are unioned, risk tiers take the maximum, signature and telemetry tiers take the stricter value. Policy MUST NOT loosen local law.
+- **`gantry policy pull`** is the only network path for policy. **`gantry doctor`** and **`gantry verify`** MUST read the pointer plus `.gitagent/history/policy/` cache only — no sockets.
+- A present pointer with missing cache, sha mismatch, or invalid signer is fail-closed (`GXT_POLICY_*`). A missing pointer is opt-in (no failure).
+- `kpi_thresholds[].metric` MUST name a key in the bundle `producers` map.
+- Receipt schema stays **0.2.0**; policy digests belong in ledger entries ([ADR-0043](../out-of-scope/ADR-0043-compliance-ledger-git-ref.md)), not receipts.
+
+## 9. Compliance ledger (v3.3.0)
+
+- When `.gitagent/config.json` `ledger.mode` is `local`, verify, attest, break-glass, and policy-pull MUST append a digest-only entry to **`refs/gxt/ledger`** ([ADR-0043](../out-of-scope/ADR-0043-compliance-ledger-git-ref.md)).
+- Append MUST use compare-and-swap `git update-ref` with bounded retries and jitter. Exhaustion MUST fail closed (`GXT_LEDGER_CAS_EXHAUSTED`) so parallel CI jobs never fork the chain.
+- Unsigned ledger entries are checksums, not proofs. `ledger.signature` `require` demands `git commit -S`.
+- A break-glass bypass with no `break_glass` ledger row is a failed control ([ADR-0021](../out-of-scope/ADR-0021-break-glass-protocol.md)).
+- Ledger payloads MUST NOT contain source bodies or gate stdout.
+
+## 10. Cross-repository mission dependencies (v3.3.0)
+
+- Optional mission `depends_on[]` is resolved **offline** from fetched `refs/gxt/deps/<slug>` ([ADR-0044](../out-of-scope/ADR-0044-cross-repo-mission-dependencies.md)).
+- **`gantry deps fetch`** is the only network path. Verify's `dependencies` phase, `gantry deps check`, and doctor MUST NOT fetch.
+- Same-org proof: recompute `repository_hash` for `depends_on.repo` with the consumer's `GANTRY_ORG_PEPPER` and require equality with the entry. Mismatch → `GXT_DEPENDENCY_ORG_MISMATCH`.
+- Unfetched, unsatisfied, unsigned (when required), or stale entries MUST fail closed (`GXT_DEPENDENCY_*`). Cross-repo *trigger* (workflow dispatch) is advisory glue, not enforcement.

package/templates/.githooks/pre-commit

@@ -23,4 +23,16 @@ fi
 
 echo "pre-commit: gantry tmvc guard --mission ${mission} (advisory default)" >&2
 "${GANTRY_CLI[@]}" tmvc guard --mission "$mission"
+
+# Advisory contract import scan over staged source files (mission contract cage, ADR-0045).
+staged_sources=()
+while IFS= read -r f; do
+  case "$f" in
+    *.ts|*.tsx|*.mts|*.cts|*.js|*.jsx|*.mjs|*.cjs) staged_sources+=("$f") ;;
+  esac
+done < <(git diff --cached --name-only --diff-filter=ACMR)
+if [[ ${#staged_sources[@]} -gt 0 ]]; then
+  echo "pre-commit: gantry contract check --mission ${mission} (advisory, ${#staged_sources[@]} staged source file(s))" >&2
+  "${GANTRY_CLI[@]}" contract check --mission "$mission" --file "${staged_sources[@]}" >&2 || true
+fi
 exit 0

package/templates/.github/workflows/gxt-attest-ingest.yml

@@ -9,12 +9,18 @@ permissions:
 jobs:
   attest_ingest:
     runs-on: ubuntu-latest
+    env:
+      HAS_ORG_EXPORT: ${{ vars.GANTRY_ORG_ID != '' && secrets.GANTRY_ORG_PEPPER != '' }}
+      HAS_PLANE_INGEST: ${{ vars.PLANE_INGEST_URL != '' && secrets.PLANE_INGEST_TOKEN != '' }}
     steps:
       - uses: actions/checkout@v7
         with:
           ref: ${{ github.event.pull_request.head.sha }}
           fetch-depth: 0
 
+      - name: Install ripgrep
+        run: sudo apt-get update && sudo apt-get install -y ripgrep
+
       - uses: actions/setup-node@v7
         with:
           node-version: 24
@@ -28,13 +34,40 @@ jobs:
           echo "GANTRY_SIGNER_PRINCIPAL_KIND=github_actor" >> "$GITHUB_ENV"
           echo "GANTRY_BRANCH_NAME=${{ github.event.pull_request.head.ref }}" >> "$GITHUB_ENV"
 
+      - name: Resolve ingest configuration
+        run: |
+          if [ "${HAS_ORG_EXPORT}" != "true" ]; then
+            echo "Skipping envelope export: GANTRY_ORG_ID or GANTRY_ORG_PEPPER not configured"
+          fi
+          if [ "${HAS_PLANE_INGEST}" != "true" ]; then
+            echo "Skipping plane ingest: PLANE_INGEST_URL or PLANE_INGEST_TOKEN not configured"
+          fi
+
       - name: Resolve changed mission
         id: mission
         run: |
-          m="$(git diff --name-only --diff-filter=ACMRT \
-                "${{ github.event.pull_request.base.sha }}...HEAD" \
-                -- '.gitagent/missions/*.yaml' | head -n1)"
-          echo "path=$m" >> "$GITHUB_OUTPUT"
+          json="$(node dist/cli/index.js mission changed --base-ref "${{ github.event.pull_request.base.sha }}" --json)" || {
+            echo "$json"
+            exit 1
+          }
+          path="$(printf '%s' "$json" | node -e '
+            let s = "";
+            process.stdin.setEncoding("utf8");
+            process.stdin.on("data", (c) => { s += c; });
+            process.stdin.on("end", () => {
+              const j = JSON.parse(s);
+              if (j.status !== "ok") {
+                console.error(j.message || "mission changed failed");
+                process.exit(1);
+              }
+              process.stdout.write((j.missions && j.missions[0]) || "");
+            });
+          ')"
+          echo "path=$path" >> "$GITHUB_OUTPUT"
+
+      - name: Fetch cross-repo mission dependencies
+        if: steps.mission.outputs.path != ''
+        run: node dist/cli/index.js deps fetch --mission "${{ steps.mission.outputs.path }}"
 
       - name: Verify and export envelope
         id: verify
@@ -45,19 +78,29 @@ jobs:
           GANTRY_ORG_PEPPER: ${{ secrets.GANTRY_ORG_PEPPER }}
           GANTRY_ORG_PEPPER_VERSION: ${{ vars.GANTRY_ORG_PEPPER_VERSION || '1' }}
         run: |
+          extra=()
+          if [ "${HAS_ORG_EXPORT}" != "true" ] || [ -z "${GANTRY_ORG_ID}" ] || [ -z "${GANTRY_ORG_PEPPER}" ]; then
+            echo "Skipping envelope export: GANTRY_ORG_ID or GANTRY_ORG_PEPPER not configured"
+          else
+            extra+=(--export envelope.json)
+          fi
           node dist/cli/index.js verify \
             --mission "${{ steps.mission.outputs.path }}" \
             --audience verifier \
             --ci \
             --base-ref "${{ github.event.pull_request.base.sha }}" \
-            --export envelope.json
+            "${extra[@]}"
 
       - name: Ingest to control plane
-        if: steps.mission.outputs.path != '' && hashFiles('envelope.json') != ''
+        if: steps.mission.outputs.path != '' && hashFiles('envelope.json') != '' && env.HAS_PLANE_INGEST == 'true'
         env:
           PLANE_INGEST_URL: ${{ vars.PLANE_INGEST_URL }}
           PLANE_INGEST_TOKEN: ${{ secrets.PLANE_INGEST_TOKEN }}
         run: |
+          if [ -z "${PLANE_INGEST_URL}" ] || [ -z "${PLANE_INGEST_TOKEN}" ]; then
+            echo "Skipping plane ingest: PLANE_INGEST_URL or PLANE_INGEST_TOKEN not configured"
+            exit 0
+          fi
           code="$(curl -sS -o response.json -w '%{http_code}' \
             -X POST "$PLANE_INGEST_URL/api/v1/attestations/ingest" \
             -H "Authorization: Bearer $PLANE_INGEST_TOKEN" \
@@ -84,6 +127,13 @@ jobs:
           echo "ingest poll timeout (request_id=$request_id)" >&2
           exit 1
 
+      - name: Append compliance ledger and push ref
+        if: steps.mission.outputs.path != '' && hashFiles('envelope.json') != '' && env.HAS_ORG_EXPORT == 'true'
+        continue-on-error: true
+        run: |
+          node dist/cli/index.js ledger append --from-envelope envelope.json || true
+          git push origin refs/gxt/ledger || echo "ledger push skipped (ref absent or no permission)"
+
       - name: Push pre-commit agent events
         if: steps.mission.outputs.path != ''
         continue-on-error: true

package/templates/.github/workflows/gxt-validate.yml

@@ -162,6 +162,39 @@ jobs:
       - name: Build gantry
         run: npm run build
 
+      - name: Fetch cross-repo mission dependencies
+        env:
+          BASE_SHA: ${{ github.event.pull_request.base.sha }}
+          HEAD_SHA: ${{ github.event.pull_request.head.sha }}
+        run: |
+          json="$(node dist/cli/index.js mission changed --base-ref "$BASE_SHA" --head-ref "$HEAD_SHA" --json)" || {
+            echo "$json"
+            exit 1
+          }
+          mapfile -t missions < <(
+            printf '%s' "$json" | node -e '
+              let s = "";
+              process.stdin.setEncoding("utf8");
+              process.stdin.on("data", (c) => { s += c; });
+              process.stdin.on("end", () => {
+                const j = JSON.parse(s);
+                if (j.status !== "ok") process.exit(1);
+                for (const m of j.missions || []) console.log(m);
+              });
+            '
+          )
+          if [ ${#missions[@]} -eq 1 ] && [ -z "${missions[0]:-}" ]; then
+            missions=()
+          fi
+          if [ ${#missions[@]} -eq 0 ]; then
+            echo "deps fetch: no PR-changed missions"
+            exit 0
+          fi
+          for m in "${missions[@]}"; do
+            [ -n "$m" ] || continue
+            node dist/cli/index.js deps fetch --mission "$m"
+          done
+
       - name: Full verify on PR-changed missions
         env:
           BASE_SHA: ${{ github.event.pull_request.base.sha }}

package/templates/.gitignore.gxt

@@ -2,6 +2,7 @@
 .gitagent/foreman/PLANNER.allowlist.local
 .gitagent/foreman/ORG.export.local
 .gitagent/history/
+.gitagent/history/policy/
 .gitagent/history/credentials/
 .gitagent/history/.ignored-last-error.json
 .gitagent/history/.draft-token-replay.json

package/templates/integrations/asset-catalog.json

@@ -14,6 +14,7 @@
     { "targetPath": ".gitagent/config.json", "mode": "scaffold_only", "tags": ["core"] },
     { "targetPath": ".gitagent/foreman/BYPASS.sha256", "mode": "scaffold_only", "tags": ["core"] },
     { "targetPath": ".gitagent/foreman/MANIFEST.json", "mode": "scaffold_only", "tags": ["core"] },
+    { "targetPath": ".gitagent/foreman/POLICY.pointer.json", "mode": "scaffold_only", "tags": ["core"] },
     { "targetPath": ".gitagent/foreman/SUBSTRATE.version.json", "mode": "scaffold_only", "tags": ["core"] },
     { "targetPath": ".gitagent/missions/README.md", "mode": "scaffold_only", "tags": ["core"] },
     { "targetPath": ".gitagent/planner/ARCHITECTURE-ACCESS.md", "mode": "scaffold_only", "tags": ["core"] },
@@ -22,6 +23,7 @@
     { "targetPath": ".gitagent/planner/KPI-REPORT.schema.yaml", "mode": "managed_strict", "tags": ["core"] },
     { "targetPath": ".gitagent/planner/MISSION-ARCHITECT.md", "mode": "scaffold_only", "tags": ["core"] },
     { "targetPath": ".gitagent/planner/MISSION.schema.yaml", "mode": "managed_strict", "tags": ["core"] },
+    { "targetPath": ".gitagent/planner/ORG-POLICY.schema.yaml", "mode": "managed_strict", "tags": ["core"] },
     { "targetPath": ".gitagent/planner/RULES.md", "mode": "scaffold_only", "tags": ["core"] },
     { "targetPath": ".githooks/post-checkout", "mode": "managed_strict", "executable": true, "tags": ["hooks"] },
     { "targetPath": ".githooks/pre-commit", "mode": "managed_strict", "executable": true, "tags": ["hooks"] },

package/templates/integrations/compatibility.json

@@ -1,6 +1,6 @@
 {
   "schema_version": "1",
-  "opengantry_version": "3.2.6",
+  "opengantry_version": "3.4.0",
   "asset_catalog": "integrations/asset-catalog.json",
   "integrations": {
     "cursor": {

package/templates/scripts/validate-mcp-dogfood.mjs

@@ -5,6 +5,7 @@ import { handleDraftLegislation } from "../dist/cli/lib/mcp-draft-legislation.js
 import { handleExecuteLegislation } from "../dist/cli/lib/mcp-execute-legislation.js";
 import { handleCheckSignature } from "../dist/cli/lib/mcp-check-signature.js";
 import { handlePinMission, handleRuntimeEnv } from "../dist/cli/lib/mcp-runtime.js";
+import { handleDoctor } from "../dist/cli/lib/mcp-doctor.js";
 
 const dest = process.env.GXT_DOGFOOD_TMP;
 if (!dest) throw new Error("GXT_DOGFOOD_TMP unset");
@@ -50,4 +51,8 @@ if (pinned.status !== "pinned") throw new Error("pin failed");
 const env = handleRuntimeEnv(executed.mission_file_path);
 if (env.status !== "ok") throw new Error(`runtime env failed: ${JSON.stringify(env)}`);
 
+const doctor = handleDoctor({});
+if (doctor.status === "error") throw new Error(`doctor failed: ${JSON.stringify(doctor)}`);
+if (!Array.isArray(doctor.lines)) throw new Error("doctor lines missing");
+
 console.log("OK: MCP dogfood flow passed");