@junghanacs/entwurf 0.18.0 → 0.18.2

package/scripts/ci-qualify-decide.sh

@@ -0,0 +1,159 @@
+#!/usr/bin/env bash
+# Decide whether a push needs the qualification BODY (#103 piece 2).
+#
+# The body re-proves every committed mutant's kill-power and costs ~28 minutes.
+# Across 549 CI runs it produced five reds, and replaying the real push ranges
+# shows this filter would have run the body for all five (#99 stage-2 §1). So a
+# push that cannot have touched the qualification surface skips it -- and the
+# surface is READ FROM THE MANIFESTS, never copied into a list that can drift.
+#
+# TWO ENTRYPOINTS, ONE MATCHER:
+#   ci-qualify-decide.sh <before-sha> <head-sha>   # CI and replay: a git range
+#   ci-qualify-decide.sh --files-from <file|->     # a literal changed-file list
+# Both print `run_body=true|false` on stdout and their reasoning on stderr.
+#
+# Pure local git plus python3 for the manifest read: no gh, no network, so the
+# replay fixture gate runs offline and exercises this exact code.
+set -euo pipefail
+
+REPO_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+
+# Fail-open is numbered so a log line says WHICH one fired. Every one of these
+# means "we cannot compute an honest diff", and the honest answer to that is to
+# run the body, never to skip it.
+fail_open() {
+	echo "ci-qualify-decide: fail-open $1 ($2) -> run_body=true" >&2
+	echo "run_body=true"
+	exit 0
+}
+
+collect_paths_from_manifests() {
+	python3 - "$REPO_DIR" <<'PY'
+import glob
+import json
+import os
+import sys
+
+repo = sys.argv[1]
+out = set()
+for path in sorted(glob.glob(os.path.join(repo, "scripts/mutants/*.json"))):
+	with open(path, encoding="utf-8") as handle:
+		manifest = json.load(handle)
+	for mutant in manifest.get("mutants", []):
+		subject = mutant.get("subject")
+		if subject:
+			out.add(subject)
+		signature_source = mutant.get("signatureSource")
+		if signature_source:
+			out.add(signature_source)
+for entry in sorted(out):
+	print(entry)
+PY
+}
+
+# A changed path matters when it is a mutant's subject or signature source, or
+# when it sits in the machinery that decides what those mutants prove.
+matches_qualification_surface() {
+	local file="$1"
+	local subject
+	while IFS= read -r subject; do
+		[ "$file" = "$subject" ] && { echo "manifest-subject"; return 0; }
+	done <<< "$MANIFEST_PATHS"
+	case "$file" in
+		scripts/mutants/*) echo "glob:scripts/mutants/**"; return 0 ;;
+		scripts/check-*) echo "glob:scripts/check-*"; return 0 ;;
+		scripts/lib/*) echo "glob:scripts/lib/**"; return 0 ;;
+		# The replay fixture is the independent oracle input cell 8e reads. Once a
+		# claim rests on it, changing it changes what the body is qualified against.
+		scripts/fixtures/*) echo "glob:scripts/fixtures/**"; return 0 ;;
+		.github/workflows/*) echo "glob:.github/workflows/**"; return 0 ;;
+		run.sh) echo "exact:run.sh"; return 0 ;;
+		package.json) echo "exact:package.json"; return 0 ;;
+		# The decider itself: change the filter and the body runs, so a filter
+		# that stopped covering something cannot hide behind its own change.
+		scripts/ci-qualify-decide.sh) echo "exact:scripts/ci-qualify-decide.sh"; return 0 ;;
+	esac
+	return 1
+}
+
+decide_from_files() {
+	local files="$1"
+	local count=0
+	local hits=0
+	local file rule
+	while IFS= read -r file; do
+		[ -n "$file" ] || continue
+		count=$((count + 1))
+		if rule="$(matches_qualification_surface "$file")"; then
+			hits=$((hits + 1))
+			[ "$hits" -le 5 ] && echo "ci-qualify-decide: hit $file ($rule)" >&2
+		fi
+	done <<< "$files"
+	if [ "$hits" -gt 0 ]; then
+		echo "ci-qualify-decide: $hits of $count changed files touch the qualification surface -> run_body=true" >&2
+		echo "run_body=true"
+	else
+		echo "ci-qualify-decide: no qualification-surface path among $count changed files -> run_body=false" >&2
+		echo "run_body=false"
+	fi
+}
+
+MANIFEST_PATHS="$(collect_paths_from_manifests)"
+[ -n "$MANIFEST_PATHS" ] || { echo "ABORT: no mutant manifests read from $REPO_DIR/scripts/mutants" >&2; exit 1; }
+
+if [ "${1:-}" = "--files-from" ]; then
+	SRC="${2:-}"
+	[ -n "$SRC" ] || { echo "ABORT: --files-from needs a path or -" >&2; exit 1; }
+	if [ "$SRC" = "-" ]; then FILES="$(cat)"; else FILES="$(cat "$SRC")"; fi
+	decide_from_files "$FILES"
+	exit 0
+fi
+
+BEFORE="${1:-}"
+HEAD_SHA="${2:-}"
+EVENT="${CI_EVENT_NAME:-push}"
+FORCED="${CI_FORCED:-false}"
+
+# 3. A human or the schedule asked for this run; there is no push range to read.
+#    `qualify` is what makes the dispatch an explicit request for the BODY. A
+#    dispatch WITHOUT it is a floor-only rerun, so it must not silently satisfy
+#    the release oracle's fourth axis -- the input would be dead configuration if
+#    every dispatch ran the body regardless of its value.
+case "$EVENT" in
+	workflow_dispatch)
+		[ "${CI_QUALIFY:-false}" = "true" ] && fail_open 3 "event=workflow_dispatch with qualify=true asked for the body"
+		echo "ci-qualify-decide: dispatch without qualify=true is a floor-only rerun; the release oracle will still refuse this SHA until the body runs -> run_body=false" >&2
+		echo "run_body=false"
+		exit 0
+		;;
+	schedule) fail_open 3 "event=schedule runs the body unconditionally (drift ceiling)" ;;
+	# 5. A pull_request event carries no `before`, and GitHub compares it
+	#    three-dot. Narrowing PRs would need a second comparison rule for an
+	#    event this repo barely uses, so PRs always run the body.
+	pull_request) fail_open 5 "event=pull_request has no two-dot push range" ;;
+esac
+
+[ -n "$BEFORE" ] && [ -n "$HEAD_SHA" ] || { echo "ABORT: usage: $0 <before-sha> <head-sha>" >&2; exit 1; }
+
+# 1. A new branch's first push: GitHub sends all-zeros, and its own documented
+#    base ("the parent of the ancestor of the deepest commit pushed") is not
+#    what a two-dot diff from zeros would give.
+case "$BEFORE" in
+	*[!0]*) ;;
+	*) fail_open 1 "before=$BEFORE is the all-zero SHA (new branch)" ;;
+esac
+
+# 2. Force push. What `before` even means here is UNDOCUMENTED (#99 stage-2,
+#    "measured not"): if it is the old head, the two-dot diff runs backwards and
+#    the verdict can invert. Never guess -- run the body.
+[ "$FORCED" = "true" ] && fail_open 2 "the push was forced; its two-dot base is undocumented"
+
+# 4. The range is unreadable on this checkout -- a shallow clone, or an object
+#    the remote no longer has (which is also how a force push's old base
+#    disappears, so 2 and 4 can both be true and each still names itself).
+git -C "$REPO_DIR" cat-file -e "$BEFORE^{commit}" 2>/dev/null || fail_open 4 "before=$BEFORE is not a commit object in this checkout"
+git -C "$REPO_DIR" cat-file -e "$HEAD_SHA^{commit}" 2>/dev/null || fail_open 4 "head=$HEAD_SHA is not a commit object in this checkout"
+
+CHANGED="$(git -C "$REPO_DIR" diff --name-only "$BEFORE".."$HEAD_SHA" 2>/dev/null)" || fail_open 4 "git diff $BEFORE..$HEAD_SHA failed"
+
+decide_from_files "$CHANGED"

package/scripts/fixtures/qualify-replay.json

@@ -0,0 +1,149 @@
+{
+	"note": "Every qualification RED this repo's CI has ever produced (#99 stage-2 SS1), with the file list of the two-dot push range GitHub actually compared. `before` is the head of the previous ci.yml run on the same branch. `files` was measured from this clone's history on 2026-09-06 and is committed BECAUSE history is not readable everywhere the gate runs: check-gate-qualification executes gates inside a snapshot with its own fresh git baseline, where these commits do not exist. `tipOnlyFiles` is the same push read the wrong way -- the tip commit alone -- which is how four of these five once looked like docs-only pushes; it is kept as the record of the misreading, not as an input.",
+	"runs": [
+		{
+			"runId": "32421631735",
+			"branch": "issue-82-copilot-citizen",
+			"before": "1da40c9994d5",
+			"head": "dff731d415d5",
+			"diedAt": "manifest validation (head)",
+			"files": [
+				"DELIVERY.md",
+				"NEXT--issue-82-copilot-citizen.md",
+				"ROADMAP.md",
+				"mcp/entwurf-bridge/tsconfig.build.json",
+				"package.json",
+				"pi-extensions/lib/meta-session.ts",
+				"pi-extensions/meta-bridge-hook-copilot.ts",
+				"pi/entwurf-capabilities.json",
+				"pi/meta-bridge-copilot/.claude-plugin/marketplace.json",
+				"pi/meta-bridge-copilot/entwurf-meta-receive-copilot/.claude-plugin/plugin.json",
+				"pi/meta-bridge-copilot/entwurf-meta-receive-copilot/hooks/hooks.json",
+				"pi/meta-bridge-copilot/entwurf-meta-receive-copilot/scripts/copilot-hook-launch.sh",
+				"run.sh",
+				"scripts/check-copilot-birth-hook.ts",
+				"scripts/check-entwurf-capabilities.ts",
+				"scripts/check-gate-qualification.ts",
+				"scripts/check-meta-doctor-oracle.sh",
+				"scripts/check-meta-manifest-schema.py",
+				"scripts/copilot-bridge-doctor.sh",
+				"scripts/copilot-bridge-install.sh",
+				"scripts/meta-bridge-hook-log.sh",
+				"scripts/mutants/copilot-birth.json",
+				"scripts/tsconfig.json",
+				"tsconfig.json"
+			],
+			"tipOnlyFiles": ["NEXT--issue-82-copilot-citizen.md"]
+		},
+		{
+			"runId": "32450955048",
+			"branch": "issue-82-copilot-citizen",
+			"before": "0aed67df2f22",
+			"head": "88d0641b001e",
+			"diedAt": "lane inventory (head)",
+			"files": [
+				"AGENTS.md",
+				"NEXT--issue-82-copilot-citizen.md",
+				"VERIFY.md",
+				"docs/adding-a-harness.md",
+				"docs/external-mcp-host.md",
+				"package.json",
+				"pi-extensions/lib/meta-sender-identity.ts",
+				"pi-extensions/lib/meta-session.ts",
+				"pi-extensions/meta-bridge-hook-copilot.ts",
+				"pi/meta-bridge-copilot/entwurf-meta-receive-copilot/.claude-plugin/plugin.json",
+				"pi/meta-bridge-copilot/entwurf-meta-receive-copilot/scripts/copilot-hook-launch.sh",
+				"run.sh",
+				"scripts/check-copilot-birth-hook.ts",
+				"scripts/check-meta-session.ts",
+				"scripts/copilot-bridge-doctor.sh",
+				"scripts/copilot-mcp-bridge.sh",
+				"scripts/copilot-mcp-config.py",
+				"scripts/copilot-statusline-bridge.sh",
+				"scripts/copilot-statusline-config.py",
+				"scripts/mutants/copilot-birth.json",
+				"scripts/smoke-copilot-mcp-state.sh",
+				"scripts/smoke-copilot-statusline-state.sh"
+			],
+			"tipOnlyFiles": [
+				"AGENTS.md",
+				"NEXT--issue-82-copilot-citizen.md",
+				"docs/adding-a-harness.md",
+				"docs/external-mcp-host.md",
+				"pi-extensions/lib/meta-sender-identity.ts",
+				"pi-extensions/meta-bridge-hook-copilot.ts",
+				"pi/meta-bridge-copilot/entwurf-meta-receive-copilot/.claude-plugin/plugin.json",
+				"pi/meta-bridge-copilot/entwurf-meta-receive-copilot/scripts/copilot-hook-launch.sh",
+				"run.sh",
+				"scripts/check-copilot-birth-hook.ts",
+				"scripts/copilot-bridge-doctor.sh",
+				"scripts/mutants/copilot-birth.json"
+			]
+		},
+		{
+			"runId": "33154263432",
+			"branch": "issue-87-omp-vendor-measurement",
+			"before": "7c414f55bd69",
+			"head": "9b70a4938fd0",
+			"diedAt": "lane inventory (head)",
+			"files": [
+				"NEXT.md",
+				"mcp/entwurf-bridge/src/index.ts",
+				"package.json",
+				"pi-extensions/lib/entwurf-self-address.ts",
+				"run.sh",
+				"scripts/check-entwurf-self-address.ts",
+				"scripts/mutants/self-address.json",
+				"scripts/omp-mcp-bridge.sh",
+				"scripts/omp-tool-surface.py",
+				"scripts/smoke-omp-mcp-state.sh"
+			],
+			"tipOnlyFiles": ["NEXT.md"]
+		},
+		{
+			"runId": "30991752256",
+			"branch": "mux-placement",
+			"before": "e5689808c9ba",
+			"head": "e05af7294724",
+			"diedAt": "CONTROL pre-red",
+			"files": [
+				"AGENTS.md",
+				"NEXT--mux-placement.md",
+				"README.md",
+				"ROADMAP.md",
+				"VERIFY.md",
+				"docs/mux-launch-rail.md",
+				"mcp/entwurf-bridge/src/index.ts",
+				"package.json",
+				"pi-extensions/entwurf-control.ts",
+				"pi-extensions/lib/entwurf-v2-contract.ts",
+				"pi-extensions/lib/mux-fresh-call.ts",
+				"pi-extensions/lib/mux-launch.ts",
+				"pi-extensions/lib/mux-placement.ts",
+				"run.sh",
+				"scripts/check-gate-qualification.ts",
+				"scripts/check-mux-fresh-call.ts",
+				"scripts/check-mux-launch.ts",
+				"scripts/check-release-gate-outcomes.ts",
+				"scripts/mutants/mux-fresh-call.json",
+				"scripts/smoke-mux-fresh-call-live.ts",
+				"tsconfig.json"
+			],
+			"tipOnlyFiles": ["NEXT--mux-placement.md"]
+		},
+		{
+			"runId": "31062287903",
+			"branch": "mux-placement",
+			"before": "e05af7294724",
+			"head": "79edfe7738a4",
+			"diedAt": "CONTROL pre-red",
+			"files": [
+				"demo/demo-baseline.sh",
+				"demo/demo.sh",
+				"scripts/lib/mutation-qualify.ts",
+				"scripts/new-session-id.ts"
+			],
+			"tipOnlyFiles": ["demo/demo-baseline.sh", "demo/demo.sh", "scripts/new-session-id.ts"]
+		}
+	]
+}

package/scripts/mutants/bridge-command-boot.json

@@ -19,7 +19,7 @@
 			"subject": "scripts/agy-bridge.sh",
 			"find": ["      if command_boots \"$invocation\"; then"],
 			"replace": ["      if true; then"],
-			"gate": ["bash", "scripts/smoke-agy-install-state.sh"],
+			"gate": ["bash", "run.sh", "smoke-agy-install-state"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:AGY-DOCTOR-BOOT-NEGATIVE]",
 			"signatureSource": "scripts/smoke-agy-install-state.sh"
@@ -43,7 +43,7 @@
 			"subject": "scripts/agy-bridge-config.py",
 			"find": ["    args = server.get(\"args\", [])"],
 			"replace": ["    args = []"],
-			"gate": ["bash", "scripts/smoke-agy-install-state.sh"],
+			"gate": ["bash", "run.sh", "smoke-agy-install-state"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:AGY-DOCTOR-PROBES-ARGS]",
 			"signatureSource": "scripts/smoke-agy-install-state.sh"
@@ -54,7 +54,7 @@
 			"subject": "scripts/agy-bridge-config.py",
 			"find": ["    env = server.get(\"env\", {})"],
 			"replace": ["    env = {}"],
-			"gate": ["bash", "scripts/smoke-agy-install-state.sh"],
+			"gate": ["bash", "run.sh", "smoke-agy-install-state"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:AGY-DOCTOR-PROBES-ENV]",
 			"signatureSource": "scripts/smoke-agy-install-state.sh"

package/scripts/mutants/gate-qualification.json

@@ -0,0 +1,28 @@
+{
+	"schemaVersion": 1,
+	"lane": "gate-qualification",
+	"mutants": [
+		{
+			"claim": "MANIFEST-SET-INTEGRITY-REFUSED",
+			"title": "a committed manifest points a claim at a gate source that does not carry its token — the cross-manifest contract that makes a KILLED verdict mean anything is broken, and the run must refuse rather than certify kills whose signature nothing can attribute (the 08-20 CI catch, run 32421631735, which died in validateManifestSet in 5s)",
+			"subject": "scripts/mutants/probe-ordering.json",
+			"find": ["\"signatureSource\": \"scripts/check-probe-ordering.ts\""],
+			"replace": ["\"signatureSource\": \"run.sh\""],
+			"gate": ["bash", "run.sh", "check-gate-manifests"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:MANIFEST-SET-INTEGRITY-REFUSED]",
+			"signatureSource": "scripts/check-gate-qualification.ts"
+		},
+		{
+			"claim": "LANE-INVENTORY-DECLARED",
+			"title": "a lane is renamed in its manifest and the declared inventory is not moved with it — the vacuous-green shape where the run reports n/n killed over whatever set happened to be on disk (the 08-21 and 08-28 CI catches, runs 32450955048 and 33154263432, both dead at the inventory assertion in under 5s)",
+			"subject": "scripts/mutants/capability-cache.json",
+			"find": ["\"lane\": \"capability-cache\","],
+			"replace": ["\"lane\": \"capability-cache-renamed\","],
+			"gate": ["bash", "run.sh", "check-gate-manifests"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:LANE-INVENTORY-DECLARED]",
+			"signatureSource": "scripts/check-gate-qualification.ts"
+		}
+	]
+}

package/scripts/mutants/pack-install.json

@@ -4,14 +4,25 @@
 	"mutants": [
 		{
 			"claim": "PACK-INSTALL-PIN-MATCHER-BOUNDED",
-			"title": "the pin-leak matcher loses its version boundary and blesses substring lookalikes — @0.84.30 reads as the pinned 0.84.3 and the gate announces a verified tree it never verified (independent review, 2026-08-25)",
+			"title": "the pin-leak matcher loses its version boundary and blesses substring lookalikes — @0.85.10 reads as the pinned 0.85.1 and the gate announces a verified tree it never verified (independent review, 2026-08-25)",
 			"subject": "run.sh",
-			"find": ["  grep '^@earendil-works+pi-' | grep -Ev '@0\\.84\\.4(_|$)' || true"],
-			"replace": ["  grep '^@earendil-works+pi-' | grep -v '@0\\.84\\.4' || true"],
+			"find": ["  grep '^@earendil-works+' | grep -Ev '@0\\.85\\.1(_|$)' || true"],
+			"replace": ["  grep '^@earendil-works+' | grep -v '@0\\.85\\.1' || true"],
 			"gate": ["bash", "run.sh", "check-pack-pin-matcher"],
 			"timeoutSeconds": 120,
 			"signature": "[QK:PACK-INSTALL-PIN-MATCHER-BOUNDED]",
 			"signatureSource": "run.sh"
+		},
+		{
+			"claim": "PACK-INSTALL-PIN-MATCHER-COVERS-CLOSURE",
+			"title": "the pin-leak matcher narrows back to the pi-* families and goes blind to a non-pi member of the same runtime closure — @earendil-works/chord (new in pi 0.85.0, a runtime dependency of pi-coding-agent/pi-agent-core/pi-client/pi-protocol) floats unpinned while the gate prints a verified pin (measured 2026-09-06 on a real 0.85.1 install tree)",
+			"subject": "run.sh",
+			"find": ["  grep '^@earendil-works+' | grep -Ev '@0\\.85\\.1(_|$)' || true"],
+			"replace": ["  grep '^@earendil-works+pi-' | grep -Ev '@0\\.85\\.1(_|$)' || true"],
+			"gate": ["bash", "run.sh", "check-pack-pin-matcher"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:PACK-INSTALL-PIN-MATCHER-COVERS-CLOSURE]",
+			"signatureSource": "run.sh"
 		}
 	]
 }

package/scripts/mutants/release-gate.json

@@ -114,7 +114,7 @@
 		},
 		{
 			"claim": "CI-FULL-FLOOR-QUALIFIED",
-			"title": "the CI check job is downgraded from the full deterministic floor back to the ≤60s everyday core — the #70 tier rename regression, where qualification still runs once on every push but now certifies kill-power over a floor no candidate ships on, and the hermetic/package tiers reach machine time nowhere",
+			"title": "the CI check job is downgraded from the full deterministic floor back to the ≤60s everyday core — the #70 tier rename regression, where qualification still runs once on the pushes the filter sends it but now certifies kill-power over a floor no candidate ships on, and the hermetic/package tiers reach machine time nowhere",
 			"subject": ".github/workflows/ci.yml",
 			"find": ["      - run: pnpm run check:full"],
 			"replace": ["      - run: pnpm check"],
@@ -123,6 +123,50 @@
 			"signature": "[QK:CI-FULL-FLOOR-QUALIFIED]",
 			"signatureSource": "scripts/check-release-gate-outcomes.ts"
 		},
+		{
+			"claim": "RELEASE-SHA-QUALIFIED-IN-CI",
+			"title": "the exact-SHA CI oracle stops requiring the qualification BODY step, so a release SHA whose body never executed is certified by three green job names",
+			"subject": ".claude/skills/entwurf-release/scripts/verify-exact-ci.sh",
+			"find": ["if qual != \"success\":"],
+			"replace": ["if False:"],
+			"gate": ["bash", "run.sh", "check-release-gate-outcomes"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:RELEASE-SHA-QUALIFIED-IN-CI]",
+			"signatureSource": "scripts/check-release-gate-outcomes.ts"
+		},
+		{
+			"claim": "QUALIFY-FILTER-COVERS-SUBJECTS",
+			"title": "the CI qualification filter stops collecting signatureSource paths, so a change to a gate that owns a claim's signature no longer re-proves it in CI",
+			"subject": "scripts/ci-qualify-decide.sh",
+			"find": ["\t\tsignature_source = mutant.get(\"signatureSource\")"],
+			"replace": ["\t\tsignature_source = None"],
+			"gate": ["bash", "run.sh", "check-release-gate-outcomes"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:QUALIFY-FILTER-COVERS-SUBJECTS]",
+			"signatureSource": "scripts/check-release-gate-outcomes.ts"
+		},
+		{
+			"claim": "QUALIFY-FILTER-READS-PUSH-RANGE",
+			"title": "the filter reads the tip commit instead of the two-dot push range - the exact misreading that once concluded four of the five historical qualification reds would have been skipped",
+			"subject": "scripts/ci-qualify-decide.sh",
+			"find": ["CHANGED=\"$(git -C \"$REPO_DIR\" diff --name-only \"$BEFORE\"..\"$HEAD_SHA\" 2>/dev/null)\""],
+			"replace": ["CHANGED=\"$(git -C \"$REPO_DIR\" diff --name-only \"$HEAD_SHA~1\"..\"$HEAD_SHA\" 2>/dev/null)\""],
+			"gate": ["bash", "run.sh", "check-release-gate-outcomes"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:QUALIFY-FILTER-READS-PUSH-RANGE]",
+			"signatureSource": "scripts/check-release-gate-outcomes.ts"
+		},
+		{
+			"claim": "QUALIFY-FILTER-REPLAYS-PAST-CATCHES",
+			"title": "the matcher stops after the first changed path, so a push whose first file is outside the qualification surface decides false no matter what rides behind it - invisible to every single-file check, fatal to all five historical ranges",
+			"subject": "scripts/ci-qualify-decide.sh",
+			"find": ["\tdone <<< \"$files\""],
+			"replace": ["\tdone <<< \"${files%%$'\\n'*}\""],
+			"gate": ["bash", "run.sh", "check-release-gate-outcomes"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:QUALIFY-FILTER-REPLAYS-PAST-CATCHES]",
+			"signatureSource": "scripts/check-release-gate-outcomes.ts"
+		},
 		{
 			"claim": "MUX-LIFECYCLE-IS-RELEASE-MUST",
 			"title": "the integrated mux lifecycle stays listed but bypasses run_live_step, so a missing prerequisite returns SKIP into a branch that never classifies it and the cut reads green",
@@ -136,6 +180,28 @@
 			"signature": "[QK:MUX-LIFECYCLE-IS-RELEASE-MUST]",
 			"signatureSource": "scripts/check-release-gate-outcomes.ts"
 		},
+		{
+			"claim": "MUTANT-GATES-INSIDE-FULL-FLOOR",
+			"title": "a gate a committed mutant names drops out of check:full — the #99 B-4 shape, where check-omp-birth-hook was reachable in the whole repo only through qualification's control-pre, so the one CI class that half has ever caught (a gate already red on a clean tree) could be found only by paying the 28-minute mutant body",
+			"subject": "package.json",
+			"find": [" && ./run.sh check-omp-birth-hook"],
+			"replace": [""],
+			"gate": ["bash", "run.sh", "check-release-gate-outcomes"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:MUTANT-GATES-INSIDE-FULL-FLOOR]",
+			"signatureSource": "scripts/check-release-gate-outcomes.ts"
+		},
+		{
+			"claim": "CI-TAG-PUSH-NOT-REBUILT",
+			"title": "the CI push trigger loses its branch ref filter, so every release tag rebuilds a SHA its branch run already built — 66/66 historically, 28% of a release window's runner minutes, and not once a fact the branch run had not already reported",
+			"subject": ".github/workflows/ci.yml",
+			"find": ["    branches: ['**']"],
+			"replace": ["    # the branch ref filter was dropped, so a tag push rebuilds the SHA again"],
+			"gate": ["bash", "run.sh", "check-release-gate-outcomes"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:CI-TAG-PUSH-NOT-REBUILT]",
+			"signatureSource": "scripts/check-release-gate-outcomes.ts"
+		},
 		{
 			"claim": "PI-DOCTOR-IS-RELEASE-MUST",
 			"title": "the pi-provider boot doctor is quietly dropped from the gate — the operator's CONFIGURED bridge invocation is never booted, so a 127 launcher (the #81 relocated cmd-shim class) stays invisible until smoke-acp-bundled-mcp-live sixteen LIVE steps and real model spend later",

package/scripts/raw-acp-compaction-measure/README.md

@@ -0,0 +1,77 @@
+# raw-acp-compaction-measure — what a compacting turn looks like after claude-agent-acp 0.75.0
+
+Measurement receipts for the ONE change in the `claude-agent-acp 0.73.0 → 0.75.1` bump that
+reaches entwurf. Not a gate; nothing here runs in any check tier.
+
+```
+LIVE=1 node --experimental-strip-types scripts/raw-acp-compaction-measure/probe.ts
+```
+
+## The change
+
+`0.75.0` (#991, `f74a517`, "surface context compaction as an ACP tool lifecycle") stopped
+sending compaction as assistant text and started sending it as a **synthetic tool call**.
+
+`[읽음, ~/repos/3rd/claude-agent-acp]` at `v0.73.0 src/acp-agent.ts:3437-3457` a compaction
+result produced two `agent_message_chunk` texts — `"\n\nCompacting completed."` and
+`"Compacting failed<reason>"`. At `v0.75.1` those are gone; `ContextCompactionLifecycle`
+(`git grep -c` in `src/`: **0** at v0.73.0 and v0.74.0, **2** at v0.75.0 and v0.75.1) drives
+`tool_call` / `tool_call_update` notifications instead
+(`dist/acp-agent.js:31`, `:1877`, `:2711-2742`).
+
+**What did NOT change:** the post-compaction occupancy refresh. `v0.73.0
+src/acp-agent.ts:3460+` already emitted a `usage_update` at `compact_boundary`, and 0.75.1
+still does (`dist/acp-agent.js:2740-2752`) — only its source moved, from a
+`getContextUsage` control request to `compact_metadata.post_tokens`. So the
+`used_end`-shrinks-mid-turn case that `backend.ts:1286-1288` already names as #96's weak
+floor is **not newly triggered by this bump**.
+
+## M1 — one live `/compact` turn, and the same notifications replayed through our mapper
+
+`[측정 2026-09-06, oracle, claude-agent-acp 0.75.1, model claude-sonnet-5]`
+`compact stopReason=end_turn`, 2 tool-lifecycle notifications. Verbatim from the probe:
+
+```
+tool_call        kind=think status=in_progress title="Compact conversation"
+                 meta={"contextCompaction":{"version":1},"claudeCode":{"toolName":"compact"}}
+tool_call_update kind=-     status=failed      title=null
+                 meta={"contextCompaction":{"version":1,"error":"Not enough messages to compact."},
+                       "claudeCode":{"toolName":"compact"}}
+```
+
+Those exact objects, replayed through the PRODUCTION `applyAcpSessionUpdate`
+(`pi-extensions/lib/acp/event-mapper.ts`) — the same function `backend.ts` calls — produce:
+
+```json
+[{"type":"text","text":"\n[tool:start] Compact conversation\n"},
+ {"type":"text","text":"\n[tool:failed] Compact conversation — Compaction failed: Not enough messages to compact.\n"}]
+```
+
+### What this establishes
+
+1. **No type or contract break.** `renderToolUpdate` (`event-mapper.ts:236-270`) routes every
+   `tool_call`/`tool_call_update` regardless of `kind`, so a `kind: "think"` synthetic call
+   needs no new branch. The turn ends `end_turn`, not an error.
+2. **`_meta.contextCompaction` reaches nothing.** It is carried on the notification and
+   dropped by the mapper, which reads only `toolCallId` / `title` / `status` / `content` /
+   `rawOutput`. No accounting path sees it — `usage.acp`, `_meta.quota` and the four pi
+   fields are untouched by this lifecycle.
+3. **What an operator now SEES changed.** Where 0.73.0 put `Compacting completed.` in the
+   assistant's own text, 0.75.1 puts a `[tool:start]` / `[tool:failed]` notice pair in the
+   transcript — that pair is what was OBSERVED. On a compaction that succeeds the second
+   notice is `[tool:done]`, which is inferred from the mapper's own status branch
+   (`event-mapper.ts:262-266`) and not observed here; see the limits below. Either way,
+   that notice pair is the whole reachable delta of this bump.
+
+### What this does NOT establish (measured limits, stated rather than rounded off)
+
+- **The `completed` branch was not observed.** The seeded session was too short, so the
+  vendor answered `"Not enough messages to compact."` and the lifecycle terminated at
+  `status: "failed"`. The success path — `status: "completed"` plus
+  `_meta.contextCompaction` carrying `trigger` / `preTokens` / `postTokens` / `durationMs`
+  (`f74a517` commit message; `contextCompactionMetadataFromBoundary`) — is **inferred from
+  source, not measured here.** In the mapper it is the same `status`-transition branch that
+  produced `[tool:failed]` above, one literal apart (`[tool:done]`,
+  `event-mapper.ts:262-266`).
+- **No organic (auto-trigger) compaction was driven.** Only the explicit `/compact` command.
+- One host, one model, one run.