@junghanacs/entwurf 0.13.0 → 0.14.0

package/scripts/mutants/release-gate.json

@@ -0,0 +1,140 @@
+{
+	"schemaVersion": 1,
+	"lane": "release-gate",
+	"mutants": [
+		{
+			"claim": "SKIP-EXIT-ONE-PROTOCOL",
+			"title": "the shell and TS halves name different skip codes — every honest skip silently reclassifies, and the summary says nothing",
+			"subject": "scripts/lib/step-outcome.sh",
+			"find": ["ENTWURF_STEP_SKIP_EXIT=97"],
+			"replace": ["ENTWURF_STEP_SKIP_EXIT=96"],
+			"gate": ["bash", "run.sh", "check-release-gate-outcomes"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:SKIP-EXIT-ONE-PROTOCOL]",
+			"signatureSource": "scripts/check-release-gate-outcomes.ts"
+		},
+		{
+			"claim": "STEP-OUTCOME-SKIP-NOT-PASS",
+			"title": "the classifier rounds a skip up to PASS — the pre-P1 defect restored at its source: a step that declined is reported as acceptance",
+			"subject": "scripts/lib/step-outcome.sh",
+			"find": ["\t\t\"$ENTWURF_STEP_SKIP_EXIT\") printf 'SKIP\\n' ;;"],
+			"replace": ["\t\t\"$ENTWURF_STEP_SKIP_EXIT\") printf 'PASS\\n' ;;"],
+			"gate": ["bash", "run.sh", "check-release-gate-outcomes"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:STEP-OUTCOME-SKIP-NOT-PASS]",
+			"signatureSource": "scripts/check-release-gate-outcomes.ts"
+		},
+		{
+			"claim": "CUT-REFUSES-SKIP",
+			"title": "--cut stops refusing a MUST SKIP — the release procedure goes back to prose and a 14-SKIP run can be quoted as acceptance",
+			"subject": "scripts/lib/step-outcome.sh",
+			"find": ["\tif [ \"$cut\" = \"1\" ] && [ \"$skipc\" -gt 0 ]; then"],
+			"replace": ["\tif [ \"$cut\" = \"1\" ] && [ \"$skipc\" -lt 0 ]; then"],
+			"gate": ["bash", "run.sh", "check-release-gate-outcomes"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:CUT-REFUSES-SKIP]",
+			"signatureSource": "scripts/check-release-gate-outcomes.ts"
+		},
+		{
+			"claim": "NO-SMOKE-SKIPS-WITH-ZERO",
+			"title": "one LIVE smoke goes back to exiting 0 on its skip — the hole re-opens for that lane alone, which is how it survived unnoticed",
+			"subject": "scripts/smoke-acp-mcp-live.ts",
+			"find": ["\tskipLive(\"smoke-acp-mcp-live\", \"set LIVE=1 to run the real pi provider turn.\");"],
+			"replace": [
+				"\tconsole.error(\"[smoke-acp-mcp-live] skipped — set LIVE=1 to run the real pi provider turn.\");",
+				"\tprocess.exit(0);"
+			],
+			"gate": ["bash", "run.sh", "check-release-gate-outcomes"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:NO-SMOKE-SKIPS-WITH-ZERO]",
+			"signatureSource": "scripts/check-release-gate-outcomes.ts"
+		},
+		{
+			"claim": "LIVE-SKIP-IS-PROTOCOL-EXIT",
+			"title": "skipLive exits 0 — every smoke still LOOKS converted (imports, no old shape) while the aggregate reads all of them as PASS",
+			"subject": "scripts/lib/live-skip.ts",
+			"find": ["\tprocess.exit(LIVE_SKIP_EXIT);"],
+			"replace": ["\tprocess.exit(0);"],
+			"gate": ["bash", "run.sh", "check-release-gate-outcomes"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:LIVE-SKIP-IS-PROTOCOL-EXIT]",
+			"signatureSource": "scripts/check-release-gate-outcomes.ts"
+		},
+		{
+			"claim": "WRAPPER-SKIP-IS-PROTOCOL-EXIT",
+			"title": "a run.sh smoke wrapper returns 0 on a missing prerequisite — the second skip surface, where cortex/matrix/spawn decline before their .ts is ever reached",
+			"subject": "run.sh",
+			"find": [
+				"    echo \"[entwurf:skip] smoke-acp-cortex-live — set LIVE=1 (+ ENTWURF_ACP_CORTEX_CONNECTION) to run.\"",
+				"    return \"$ENTWURF_STEP_SKIP_EXIT\""
+			],
+			"replace": [
+				"    echo \"[entwurf:skip] smoke-acp-cortex-live — set LIVE=1 (+ ENTWURF_ACP_CORTEX_CONNECTION) to run.\"",
+				"    return 0"
+			],
+			"gate": ["bash", "run.sh", "check-release-gate-outcomes"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:WRAPPER-SKIP-IS-PROTOCOL-EXIT]",
+			"signatureSource": "scripts/check-release-gate-outcomes.ts"
+		},
+		{
+			"claim": "CUT-VERDICT-NAMES-CAUSE",
+			"title": "a cut blocked only by SKIP reports itself as a FAIL block — the record can no longer tell a broken call from an absent prerequisite",
+			"subject": "scripts/lib/step-outcome.sh",
+			"find": ["\t\tprintf 'cut: BLOCKED (MUST SKIP)\\n'"],
+			"replace": ["\t\tprintf 'cut: BLOCKED (MUST FAIL)\\n'"],
+			"gate": ["bash", "run.sh", "check-release-gate-outcomes"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:CUT-VERDICT-NAMES-CAUSE]",
+			"signatureSource": "scripts/check-release-gate-outcomes.ts"
+		},
+		{
+			"claim": "NO-SILENT-AGGREGATE-OMISSION",
+			"title": "the cross-harness delivery chain drops out of the aggregate — a green cut goes back to saying nothing about multi-harness delivery, with no doc stating the exclusion",
+			"subject": "run.sh",
+			"find": [
+				"  run_live_step \"smoke-entwurf-chain-live (P3: Claude Code -> pi GPT -> pi ACP Sonnet -> mailbox, identity + receipt)\" gate bash \"$self\" smoke-entwurf-chain-live"
+			],
+			"replace": ["  : # the chain quietly dropped from the aggregate"],
+			"gate": ["bash", "run.sh", "check-release-gate-outcomes"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:NO-SILENT-AGGREGATE-OMISSION]",
+			"signatureSource": "scripts/check-release-gate-outcomes.ts"
+		},
+		{
+			"claim": "QUALIFICATION-SCHEDULING-REACHABLE",
+			"title": "release_gate stops invoking check-gate-qualification — the discriminating-power step moved out of the default chain silently vanishes from the cut while VERIFY still promises it",
+			"subject": "run.sh",
+			"find": ["  if (cd \"$REPO_DIR\" && bash \"$self\" check-gate-qualification); then"],
+			"replace": ["  if (cd \"$REPO_DIR\" && true); then"],
+			"gate": ["bash", "run.sh", "check-release-gate-outcomes"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:QUALIFICATION-SCHEDULING-REACHABLE]",
+			"signatureSource": "scripts/check-release-gate-outcomes.ts"
+		},
+		{
+			"claim": "CI-FULL-FLOOR-QUALIFIED",
+			"title": "the CI check job is downgraded from the full deterministic floor back to the ≤60s everyday core — the #70 tier rename regression, where qualification still runs once on every push but now certifies kill-power over a floor no candidate ships on, and the hermetic/package tiers reach machine time nowhere",
+			"subject": ".github/workflows/ci.yml",
+			"find": ["      - run: pnpm run check:full"],
+			"replace": ["      - run: pnpm check"],
+			"gate": ["bash", "run.sh", "check-release-gate-outcomes"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:CI-FULL-FLOOR-QUALIFIED]",
+			"signatureSource": "scripts/check-release-gate-outcomes.ts"
+		},
+		{
+			"claim": "MUX-LIFECYCLE-IS-RELEASE-MUST",
+			"title": "the integrated mux lifecycle stays listed but bypasses run_live_step, so a missing prerequisite returns SKIP into a branch that never classifies it and the cut reads green",
+			"subject": "run.sh",
+			"find": [
+				"  run_live_step \"smoke-mux-lifecycle-live (mux public-harness lifecycle: fresh -> send -> dormant -> same-id visible resume -> recall)\" gate bash \"$self\" smoke-mux-lifecycle-live"
+			],
+			"replace": ["  bash \"$self\" smoke-mux-lifecycle-live"],
+			"gate": ["bash", "run.sh", "check-release-gate-outcomes"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:MUX-LIFECYCLE-IS-RELEASE-MUST]",
+			"signatureSource": "scripts/check-release-gate-outcomes.ts"
+		}
+	]
+}

package/scripts/mutants/resume-args.json

@@ -0,0 +1,76 @@
+{
+	"schemaVersion": 1,
+	"lane": "resume-args",
+	"mutants": [
+		{
+			"claim": "RESUMEARGS-NO-HEADLESS",
+			"title": "the headless prefix comes back — the shape that puts a JSON stream in the operator's window instead of a session",
+			"subject": "pi-extensions/lib/entwurf-resume-args.ts",
+			"find": ["\tconst args: string[] = [\"--entwurf-control\"];"],
+			"replace": ["\tconst args: string[] = [\"--mode\", \"json\", \"-p\", \"--entwurf-control\"];"],
+			"gate": ["bash", "run.sh", "check-entwurf-resume-args"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:RESUMEARGS-NO-HEADLESS]",
+			"signatureSource": "scripts/check-entwurf-resume-args.ts"
+		},
+		{
+			"claim": "RESUMEARGS-CONTROL-FIRST",
+			"title": "the control flag stops leading the argv, so the resumed session's socket posture depends on argv order",
+			"subject": "pi-extensions/lib/entwurf-resume-args.ts",
+			"find": ["\tconst args: string[] = [\"--entwurf-control\"];\n\targs.push(...input.explicitExtensionArgs);"],
+			"replace": [
+				"\tconst args: string[] = [];\n\targs.push(...input.explicitExtensionArgs);\n\targs.push(\"--entwurf-control\");"
+			],
+			"gate": ["bash", "run.sh", "check-entwurf-resume-args"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:RESUMEARGS-CONTROL-FIRST]",
+			"signatureSource": "scripts/check-entwurf-resume-args.ts"
+		},
+		{
+			"claim": "RESUMEARGS-EXT-ONCE-BEFORE-SESSION",
+			"title": "the bridge args are emitted twice — a different broken argv than dropping them, and just as invisible",
+			"subject": "pi-extensions/lib/entwurf-resume-args.ts",
+			"find": ["\targs.push(...input.explicitExtensionArgs);\n\targs.push(\"--session\", input.sessionFile);"],
+			"replace": [
+				"\targs.push(...input.explicitExtensionArgs);\n\targs.push(...input.explicitExtensionArgs);\n\targs.push(\"--session\", input.sessionFile);"
+			],
+			"gate": ["bash", "run.sh", "check-entwurf-resume-args"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:RESUMEARGS-EXT-ONCE-BEFORE-SESSION]",
+			"signatureSource": "scripts/check-entwurf-resume-args.ts"
+		},
+		{
+			"claim": "RESUMEARGS-SESSION-IS-FILE",
+			"title": "--session-id returns, which CREATES the id when missing and mints an empty session instead of resuming one",
+			"subject": "pi-extensions/lib/entwurf-resume-args.ts",
+			"find": ["\targs.push(\"--session\", input.sessionFile);"],
+			"replace": ["\targs.push(\"--session-id\", input.sessionFile);"],
+			"gate": ["bash", "run.sh", "check-entwurf-resume-args"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:RESUMEARGS-SESSION-IS-FILE]",
+			"signatureSource": "scripts/check-entwurf-resume-args.ts"
+		},
+		{
+			"claim": "RESUMEARGS-PROVIDER-OPTIONAL",
+			"title": "an absent provider is emitted as an empty flag value instead of no flag",
+			"subject": "pi-extensions/lib/entwurf-resume-args.ts",
+			"find": ["\tif (input.provider) args.push(\"--provider\", input.provider);"],
+			"replace": ["\targs.push(\"--provider\", input.provider ?? \"\");"],
+			"gate": ["bash", "run.sh", "check-entwurf-resume-args"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:RESUMEARGS-PROVIDER-OPTIONAL]",
+			"signatureSource": "scripts/check-entwurf-resume-args.ts"
+		},
+		{
+			"claim": "RESUMEARGS-NO-PROMPT-TAIL",
+			"title": "a positional rides after the model again — a resume that runs a turn instead of just reopening the window",
+			"subject": "pi-extensions/lib/entwurf-resume-args.ts",
+			"find": ["\targs.push(\"--model\", input.model);"],
+			"replace": ["\targs.push(\"--model\", input.model, \"continue\");"],
+			"gate": ["bash", "run.sh", "check-entwurf-resume-args"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:RESUMEARGS-NO-PROMPT-TAIL]",
+			"signatureSource": "scripts/check-entwurf-resume-args.ts"
+		}
+	]
+}

package/scripts/mutants/resume-launch-identity.json

@@ -0,0 +1,96 @@
+{
+	"schemaVersion": 1,
+	"lane": "resume-launch-identity",
+	"mutants": [
+		{
+			"claim": "RESUME-ID-HEADER-INTEGRITY",
+			"title": "the C3 integrity check is dropped, so a stale or foreign transcriptPath resumes another being's session",
+			"subject": "pi-extensions/lib/resume-launch-identity.ts",
+			"find": [
+				"\tif (identity.sessionId !== record.nativeSessionId) {",
+				"\t\tthrow new Error(",
+				"\t\t\t`resume-launch-identity: ${gardenId} transcript header id \"${identity.sessionId ?? \"(none)\"}\" ` +",
+				"\t\t\t\t`does not match the record's nativeSessionId \"${record.nativeSessionId}\" — the recorded transcriptPath ` +",
+				"\t\t\t\t`is stale or points at a foreign session file; refusing to resume another being's transcript.`,",
+				"\t\t);",
+				"\t}"
+			],
+			"replace": ["\t// integrity check removed"],
+			"gate": ["bash", "run.sh", "check-resume-launch-identity"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:RESUME-ID-HEADER-INTEGRITY]",
+			"signatureSource": "scripts/check-resume-launch-identity.ts"
+		},
+		{
+			"claim": "RESUME-ID-ADDRESSABLE-READ",
+			"title": "the leaf is \"simplified\" back to the plain targeted read, so two records sharing one native session both resolve and resume one transcript under two locks (#52)",
+			"subject": "pi-extensions/lib/resume-launch-identity.ts",
+			"find": ["import { readAddressableMetaIdentity } from \"./meta-session.ts\";"],
+			"replace": ["import { readMetaIdentityByGardenId as readAddressableMetaIdentity } from \"./meta-session.ts\";"],
+			"gate": ["bash", "run.sh", "check-resume-launch-identity"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:RESUME-ID-ADDRESSABLE-READ]",
+			"signatureSource": "scripts/check-resume-launch-identity.ts"
+		},
+		{
+			"claim": "RESUME-ID-MISSING-TRANSCRIPT-CAUSE",
+			"title": "the transcript existence guard is removed, so a deleted transcript falls through readSessionIdentity's ENOENT swallow and is reported as \"no recorded model\" (F7)",
+			"subject": "pi-extensions/lib/resume-launch-identity.ts",
+			"find": [
+				"\tif (!existsSync(sessionFile)) {",
+				"\t\tthrow new Error(",
+				"\t\t\t`resume-launch-identity: ${gardenId} recorded transcriptPath \"${sessionFile}\" ` +",
+				"\t\t\t\t`does not exist on disk — the transcript was deleted, or the record carries a phantom ` +",
+				"\t\t\t\t`path from a pre-guard birth; nothing to resume.`,",
+				"\t\t);",
+				"\t}"
+			],
+			"replace": ["\t// existence guard removed"],
+			"gate": ["bash", "run.sh", "check-resume-launch-identity"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:RESUME-ID-MISSING-TRANSCRIPT-CAUSE]",
+			"signatureSource": "scripts/check-resume-launch-identity.ts"
+		},
+		{
+			"claim": "RESUME-ID-GATE-SSOT",
+			"title": "the preserved leaf's header stops naming the gate that certifies it, so a consumer-zero identity module ships on prose again",
+			"subject": "pi-extensions/lib/resume-launch-identity.ts",
+			"find": [
+				" * So this leaf is preserved deliberately, with no consumer in the shipped tree today.",
+				" * `check-resume-launch-identity` holds its contract so the record-integrity rules below —"
+			],
+			"replace": [
+				" * So this leaf is preserved deliberately for the later visible lane.",
+				" * The record-integrity rules below —"
+			],
+			"gate": ["bash", "run.sh", "check-resume-launch-identity"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:RESUME-ID-GATE-SSOT]",
+			"signatureSource": "scripts/check-resume-launch-identity.ts"
+		},
+		{
+			"claim": "RESUME-ID-BACKEND-TYPED-REFUSAL",
+			"title": "the backend miss degrades to a bare Error, so callers must parse a sentence or read the record twice to learn it was a capability boundary",
+			"subject": "pi-extensions/lib/resume-launch-identity.ts",
+			"find": ["\t\tthrow new ResumeBackendUnsupportedError(gardenId, record.backend);"],
+			"replace": [
+				"\t\tthrow new Error(`resume-launch-identity: ${gardenId} is a ${record.backend} citizen — resume is pi-only.`);"
+			],
+			"gate": ["bash", "run.sh", "check-resume-launch-identity"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:RESUME-ID-BACKEND-TYPED-REFUSAL]",
+			"signatureSource": "scripts/check-resume-launch-identity.ts"
+		},
+		{
+			"claim": "RESUME-ID-SESSION-ABSOLUTE",
+			"title": "a relative recorded transcriptPath is accepted, so --session resolves inside the window's own cwd and a different transcript is reopened under a correct-looking receipt",
+			"subject": "pi-extensions/lib/resume-launch-identity.ts",
+			"find": ["\tif (!path.isAbsolute(sessionFile)) {"],
+			"replace": ["\tif (path.isAbsolute(sessionFile) && false) {"],
+			"gate": ["bash", "run.sh", "check-resume-launch-identity"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:RESUME-ID-SESSION-ABSOLUTE]",
+			"signatureSource": "scripts/check-resume-launch-identity.ts"
+		}
+	]
+}

package/scripts/mutants/v2-surface.json

@@ -7,17 +7,10 @@
 			"title": "MCP long description reverts to the false \"socket paths take a per-target lock\" claim",
 			"subject": "mcp/entwurf-bridge/src/index.ts",
 			"find": [
-				"\t\t\"(delivered / rejected / lock-retained / delivered-but-lock-dirty). LOCK POLICY (do not \" +",
-				"\t\t\"over-generalize it): the per-target lock is taken for a control-socket-DOMAIN dispatch, which is \" +",
-				"\t\t\"both the live send AND the dormant cell's spawn-bg resume — spawn-bg is a separate relaunch \" +",
-				"\t\t\"transport yet it still runs under that domain's lock. The mailbox and native-push rails are \" +",
-				"\t\t\"lock-free: the mailbox is guarded instead by active-receiver deliverability, and native-push by \" +",
-				"\t\t\"its adapter probe. The decider — not the \" +"
-			],
-			"replace": [
-				"\t\t\"(delivered / rejected / lock-retained / delivered-but-lock-dirty). LOCK POLICY: socket paths \" +",
-				"\t\t\"take a per-target lock; the mailbox path does not. The decider — not the \" +"
+				"\t\t\"LOCK: taken for a control-socket-DOMAIN dispatch. The \" +",
+				"\t\t\"mailbox and native-push rails are lock-free — deliverability and the adapter probe guard them. mode \" +"
 			],
+			"replace": ["\t\t\"LOCK POLICY: socket paths take a per-target lock; the mailbox path does not. mode \" +"],
 			"gate": ["bash", "run.sh", "check-entwurf-v2-surface"],
 			"timeoutSeconds": 60,
 			"signature": "[QK:V2SURF-MCP-LOCK-DOMAIN]",
@@ -28,12 +21,10 @@
 			"title": "pi-native mode param reverts to \"Delivery mode for a live send\" (false for native-push)",
 			"subject": "pi-extensions/entwurf-control.ts",
 			"find": [
-				"\t\t\t\tdescription:",
 				"\t\t\t\t\t\"Injection style for a CONTROL-SOCKET send only: steer (immediate) or follow_up (after task). \" +",
-				"\t\t\t\t\t\"The mailbox, native-push, and spawn-bg plans carry no mode, so it has no effect on those rails.\","
+				"\t\t\t\t\t\"The mailbox and native-push plans carry no mode, so it has no effect on those rails.\","
 			],
 			"replace": [
-				"\t\t\t\tdescription:",
 				"\t\t\t\t\t\"Delivery mode for a live send: steer (immediate, interrupt the current turn) or follow_up \" +",
 				"\t\t\t\t\t\"(queued after the current task finishes running to completion).\","
 			],
@@ -64,23 +55,83 @@
 			"signatureSource": "scripts/check-entwurf-v2-surface.ts"
 		},
 		{
-			"claim": "V2SURF-MERGED-REJECT",
-			"title": "MCP long description merges the two owned rejects back under backend-liveness-unsupported",
+			"claim": "V2SURF-DORMANT-HONESTY",
+			"title": "MCP long description advertises owned-outcome as a selectable dormant verb again and drops the reason a dormant target actually returns",
+			"subject": "mcp/entwurf-bridge/src/index.ts",
+			"find": [
+				"\t\t\"DORMANT IS UNREACHABLE: a socket-domain citizen that is not running gets dormant-fire-forget-unsupported \" +",
+				"\t\t\"— same receiver rule as the mailbox, no active drainer means no delivery. \" +",
+				"\t\t\"The intent that used to answer there, owned-outcome, resumed it by launching a hidden background child \" +",
+				"\t\t\"and was withdrawn under the visible-first rule — re-open the session yourself, then dispatch again. \" +"
+			],
+			"replace": [
+				"\t\t\"owned-outcome wakes a DORMANT socket-domain citizen by spawn-bg resume ONLY and is never auto-converted. \" +"
+			],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-surface"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:V2SURF-DORMANT-HONESTY]",
+			"signatureSource": "scripts/check-entwurf-v2-surface.ts"
+		},
+		{
+			"claim": "V2SURF-INDETERMINATE-NO-START",
+			"title": "the indeterminate hint reverts to a socket that \"answered\" and drops the no-start facts — overclaiming a reply that a permission-refused or timed-out probe never got",
+			"subject": "pi-extensions/lib/entwurf-v2-surface.ts",
+			"find": [
+				"\t\tcase \"indeterminate-no-spawn\":",
+				"\t\t\t// The socket probe did not settle, so liveness is UNKNOWN — an unestablished probe",
+				"\t\t\t// is not a measured death, and dispatching into it could double-deliver. Say",
+				"\t\t\t// \"the PROBE was inconclusive\", never \"the socket answered inconclusively\":",
+				"\t\t\t// `indeterminate` also covers a probe that got no answer at all, was refused by",
+				"\t\t\t// permissions, or timed out, and \"answered\" claims a reply that may never have",
+				"\t\t\t// existed. The wire id is FROZEN and still spells \"-no-spawn\"; it names the rule",
+				"\t\t\t// (never dispatch into an indeterminate target), not a capability that still",
+				"\t\t\t// exists. So the hint's job is to say plainly what did NOT happen: nothing",
+				"\t\t\t// delivered, nothing started.",
+				"\t\t\treturn (",
+				"\t\t\t\t\"the control-socket probe was inconclusive, so the target's liveness is UNKNOWN — this is not a \" +",
+				"\t\t\t\t\"measured death. NOTHING was delivered and NO process was started (the reason id keeps its frozen \" +",
+				"\t\t\t\t\"'-no-spawn' wire spelling from an era when one could be; entwurf_v2 starts nothing on any rail). \" +",
+				"\t\t\t\t\"Re-run entwurf_peers to re-probe; if it stays indeterminate, check for a stale socket file left at \" +",
+				"\t\t\t\t\"that garden id by a session that died without cleaning up.\"",
+				"\t\t\t);"
+			],
+			"replace": [
+				"\t\tcase \"indeterminate-no-spawn\":",
+				"\t\t\treturn \"the target's control socket answered inconclusively; retry.\";"
+			],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-surface"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:V2SURF-INDETERMINATE-NO-START]",
+			"signatureSource": "scripts/check-entwurf-v2-surface.ts"
+		},
+		{
+			"claim": "V2SURF-PEERS-DEAD-ROW",
+			"title": "entwurf_peers drops the dead-row sentence, so a dormant citizen is listed with nothing saying it is unreachable",
+			"subject": "mcp/entwurf-bridge/src/index.ts",
+			"find": [
+				"\t\t\"row. A `dead` row is a REPORTED FACT and nothing more: that citizen is dormant and is \" +",
+				"\t\t\"currently unreachable by any verb, so listing it grants no action — appearing here is not \" +",
+				"\t\t\"an invitation to dispatch. In particular `unsupported` does NOT mean mailbox: it means this backend has no \" +"
+			],
+			"replace": ["\t\t\"row. In particular `unsupported` does NOT mean mailbox: it means this backend has no \" +"],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-surface"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:V2SURF-PEERS-DEAD-ROW]",
+			"signatureSource": "scripts/check-entwurf-v2-surface.ts"
+		},
+		{
+			"claim": "V2SURF-DESC-FITS-HOST-CAP",
+			"title": "the v2 tool description grows back past the host's 2048-char cap — the INTENT contract is silently cut off before the model that must choose an intent ever reads it",
 			"subject": "mcp/entwurf-bridge/src/index.ts",
 			"find": [
-				"\t\t\"owned-outcome is ONLY for waking a DORMANT socket-domain citizen (spawn-bg resume, currently \" +",
-				"\t\t\"backend pi); on a live target it is rejected as owned-live-no-autosend. Neither self-fetch nor \" +",
-				"\t\t\"native-push has resume authority, but they reject under DIFFERENT reasons — self-fetch as \" +",
-				"\t\t\"backend-liveness-unsupported, native-push as native-push-no-resume-authority. \" +"
+				"\t\"CANONICAL DELIVERY SURFACE for garden ids: message, reply, or hand off to whoever an id names. The id \" +"
 			],
 			"replace": [
-				"\t\t\"owned-outcome is ONLY for waking a DORMANT socket-domain citizen (spawn-bg resume, currently \" +",
-				"\t\t\"backend pi); on a live target it is rejected as owned-live-no-autosend, and on self-fetch and \" +",
-				"\t\t\"native-push alike it is rejected as backend-liveness-unsupported. \" +"
+				"\t\"CANONICAL DELIVERY SURFACE for garden ids: message, reply, or hand off to whoever an id names. The id \" +\n\t\t\"PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING \" +\n\t\t\"PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING \" +"
 			],
 			"gate": ["bash", "run.sh", "check-entwurf-v2-surface"],
 			"timeoutSeconds": 60,
-			"signature": "[QK:V2SURF-MERGED-REJECT]",
+			"signature": "[QK:V2SURF-DESC-FITS-HOST-CAP]",
 			"signatureSource": "scripts/check-entwurf-v2-surface.ts"
 		}
 	]