@junghanacs/entwurf 0.18.1 → 0.19.0

package/scripts/ci-qualify-decide.sh

@@ -0,0 +1,159 @@
+#!/usr/bin/env bash
+# Decide whether a push needs the qualification BODY (#103 piece 2).
+#
+# The body re-proves every committed mutant's kill-power and costs ~28 minutes.
+# Across 549 CI runs it produced five reds, and replaying the real push ranges
+# shows this filter would have run the body for all five (#99 stage-2 §1). So a
+# push that cannot have touched the qualification surface skips it -- and the
+# surface is READ FROM THE MANIFESTS, never copied into a list that can drift.
+#
+# TWO ENTRYPOINTS, ONE MATCHER:
+#   ci-qualify-decide.sh <before-sha> <head-sha>   # CI and replay: a git range
+#   ci-qualify-decide.sh --files-from <file|->     # a literal changed-file list
+# Both print `run_body=true|false` on stdout and their reasoning on stderr.
+#
+# Pure local git plus python3 for the manifest read: no gh, no network, so the
+# replay fixture gate runs offline and exercises this exact code.
+set -euo pipefail
+
+REPO_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+
+# Fail-open is numbered so a log line says WHICH one fired. Every one of these
+# means "we cannot compute an honest diff", and the honest answer to that is to
+# run the body, never to skip it.
+fail_open() {
+	echo "ci-qualify-decide: fail-open $1 ($2) -> run_body=true" >&2
+	echo "run_body=true"
+	exit 0
+}
+
+collect_paths_from_manifests() {
+	python3 - "$REPO_DIR" <<'PY'
+import glob
+import json
+import os
+import sys
+
+repo = sys.argv[1]
+out = set()
+for path in sorted(glob.glob(os.path.join(repo, "scripts/mutants/*.json"))):
+	with open(path, encoding="utf-8") as handle:
+		manifest = json.load(handle)
+	for mutant in manifest.get("mutants", []):
+		subject = mutant.get("subject")
+		if subject:
+			out.add(subject)
+		signature_source = mutant.get("signatureSource")
+		if signature_source:
+			out.add(signature_source)
+for entry in sorted(out):
+	print(entry)
+PY
+}
+
+# A changed path matters when it is a mutant's subject or signature source, or
+# when it sits in the machinery that decides what those mutants prove.
+matches_qualification_surface() {
+	local file="$1"
+	local subject
+	while IFS= read -r subject; do
+		[ "$file" = "$subject" ] && { echo "manifest-subject"; return 0; }
+	done <<< "$MANIFEST_PATHS"
+	case "$file" in
+		scripts/mutants/*) echo "glob:scripts/mutants/**"; return 0 ;;
+		scripts/check-*) echo "glob:scripts/check-*"; return 0 ;;
+		scripts/lib/*) echo "glob:scripts/lib/**"; return 0 ;;
+		# The replay fixture is the independent oracle input cell 8e reads. Once a
+		# claim rests on it, changing it changes what the body is qualified against.
+		scripts/fixtures/*) echo "glob:scripts/fixtures/**"; return 0 ;;
+		.github/workflows/*) echo "glob:.github/workflows/**"; return 0 ;;
+		run.sh) echo "exact:run.sh"; return 0 ;;
+		package.json) echo "exact:package.json"; return 0 ;;
+		# The decider itself: change the filter and the body runs, so a filter
+		# that stopped covering something cannot hide behind its own change.
+		scripts/ci-qualify-decide.sh) echo "exact:scripts/ci-qualify-decide.sh"; return 0 ;;
+	esac
+	return 1
+}
+
+decide_from_files() {
+	local files="$1"
+	local count=0
+	local hits=0
+	local file rule
+	while IFS= read -r file; do
+		[ -n "$file" ] || continue
+		count=$((count + 1))
+		if rule="$(matches_qualification_surface "$file")"; then
+			hits=$((hits + 1))
+			[ "$hits" -le 5 ] && echo "ci-qualify-decide: hit $file ($rule)" >&2
+		fi
+	done <<< "$files"
+	if [ "$hits" -gt 0 ]; then
+		echo "ci-qualify-decide: $hits of $count changed files touch the qualification surface -> run_body=true" >&2
+		echo "run_body=true"
+	else
+		echo "ci-qualify-decide: no qualification-surface path among $count changed files -> run_body=false" >&2
+		echo "run_body=false"
+	fi
+}
+
+MANIFEST_PATHS="$(collect_paths_from_manifests)"
+[ -n "$MANIFEST_PATHS" ] || { echo "ABORT: no mutant manifests read from $REPO_DIR/scripts/mutants" >&2; exit 1; }
+
+if [ "${1:-}" = "--files-from" ]; then
+	SRC="${2:-}"
+	[ -n "$SRC" ] || { echo "ABORT: --files-from needs a path or -" >&2; exit 1; }
+	if [ "$SRC" = "-" ]; then FILES="$(cat)"; else FILES="$(cat "$SRC")"; fi
+	decide_from_files "$FILES"
+	exit 0
+fi
+
+BEFORE="${1:-}"
+HEAD_SHA="${2:-}"
+EVENT="${CI_EVENT_NAME:-push}"
+FORCED="${CI_FORCED:-false}"
+
+# 3. A human or the schedule asked for this run; there is no push range to read.
+#    `qualify` is what makes the dispatch an explicit request for the BODY. A
+#    dispatch WITHOUT it is a floor-only rerun, so it must not silently satisfy
+#    the release oracle's fourth axis -- the input would be dead configuration if
+#    every dispatch ran the body regardless of its value.
+case "$EVENT" in
+	workflow_dispatch)
+		[ "${CI_QUALIFY:-false}" = "true" ] && fail_open 3 "event=workflow_dispatch with qualify=true asked for the body"
+		echo "ci-qualify-decide: dispatch without qualify=true is a floor-only rerun; the release oracle will still refuse this SHA until the body runs -> run_body=false" >&2
+		echo "run_body=false"
+		exit 0
+		;;
+	schedule) fail_open 3 "event=schedule runs the body unconditionally (drift ceiling)" ;;
+	# 5. A pull_request event carries no `before`, and GitHub compares it
+	#    three-dot. Narrowing PRs would need a second comparison rule for an
+	#    event this repo barely uses, so PRs always run the body.
+	pull_request) fail_open 5 "event=pull_request has no two-dot push range" ;;
+esac
+
+[ -n "$BEFORE" ] && [ -n "$HEAD_SHA" ] || { echo "ABORT: usage: $0 <before-sha> <head-sha>" >&2; exit 1; }
+
+# 1. A new branch's first push: GitHub sends all-zeros, and its own documented
+#    base ("the parent of the ancestor of the deepest commit pushed") is not
+#    what a two-dot diff from zeros would give.
+case "$BEFORE" in
+	*[!0]*) ;;
+	*) fail_open 1 "before=$BEFORE is the all-zero SHA (new branch)" ;;
+esac
+
+# 2. Force push. What `before` even means here is UNDOCUMENTED (#99 stage-2,
+#    "measured not"): if it is the old head, the two-dot diff runs backwards and
+#    the verdict can invert. Never guess -- run the body.
+[ "$FORCED" = "true" ] && fail_open 2 "the push was forced; its two-dot base is undocumented"
+
+# 4. The range is unreadable on this checkout -- a shallow clone, or an object
+#    the remote no longer has (which is also how a force push's old base
+#    disappears, so 2 and 4 can both be true and each still names itself).
+git -C "$REPO_DIR" cat-file -e "$BEFORE^{commit}" 2>/dev/null || fail_open 4 "before=$BEFORE is not a commit object in this checkout"
+git -C "$REPO_DIR" cat-file -e "$HEAD_SHA^{commit}" 2>/dev/null || fail_open 4 "head=$HEAD_SHA is not a commit object in this checkout"
+
+CHANGED="$(git -C "$REPO_DIR" diff --name-only "$BEFORE".."$HEAD_SHA" 2>/dev/null)" || fail_open 4 "git diff $BEFORE..$HEAD_SHA failed"
+
+decide_from_files "$CHANGED"

package/scripts/fixtures/qualify-replay.json

@@ -0,0 +1,149 @@
+{
+	"note": "Every qualification RED this repo's CI has ever produced (#99 stage-2 SS1), with the file list of the two-dot push range GitHub actually compared. `before` is the head of the previous ci.yml run on the same branch. `files` was measured from this clone's history on 2026-09-06 and is committed BECAUSE history is not readable everywhere the gate runs: check-gate-qualification executes gates inside a snapshot with its own fresh git baseline, where these commits do not exist. `tipOnlyFiles` is the same push read the wrong way -- the tip commit alone -- which is how four of these five once looked like docs-only pushes; it is kept as the record of the misreading, not as an input.",
+	"runs": [
+		{
+			"runId": "32421631735",
+			"branch": "issue-82-copilot-citizen",
+			"before": "1da40c9994d5",
+			"head": "dff731d415d5",
+			"diedAt": "manifest validation (head)",
+			"files": [
+				"DELIVERY.md",
+				"NEXT--issue-82-copilot-citizen.md",
+				"ROADMAP.md",
+				"mcp/entwurf-bridge/tsconfig.build.json",
+				"package.json",
+				"pi-extensions/lib/meta-session.ts",
+				"pi-extensions/meta-bridge-hook-copilot.ts",
+				"pi/entwurf-capabilities.json",
+				"pi/meta-bridge-copilot/.claude-plugin/marketplace.json",
+				"pi/meta-bridge-copilot/entwurf-meta-receive-copilot/.claude-plugin/plugin.json",
+				"pi/meta-bridge-copilot/entwurf-meta-receive-copilot/hooks/hooks.json",
+				"pi/meta-bridge-copilot/entwurf-meta-receive-copilot/scripts/copilot-hook-launch.sh",
+				"run.sh",
+				"scripts/check-copilot-birth-hook.ts",
+				"scripts/check-entwurf-capabilities.ts",
+				"scripts/check-gate-qualification.ts",
+				"scripts/check-meta-doctor-oracle.sh",
+				"scripts/check-meta-manifest-schema.py",
+				"scripts/copilot-bridge-doctor.sh",
+				"scripts/copilot-bridge-install.sh",
+				"scripts/meta-bridge-hook-log.sh",
+				"scripts/mutants/copilot-birth.json",
+				"scripts/tsconfig.json",
+				"tsconfig.json"
+			],
+			"tipOnlyFiles": ["NEXT--issue-82-copilot-citizen.md"]
+		},
+		{
+			"runId": "32450955048",
+			"branch": "issue-82-copilot-citizen",
+			"before": "0aed67df2f22",
+			"head": "88d0641b001e",
+			"diedAt": "lane inventory (head)",
+			"files": [
+				"AGENTS.md",
+				"NEXT--issue-82-copilot-citizen.md",
+				"VERIFY.md",
+				"docs/adding-a-harness.md",
+				"docs/external-mcp-host.md",
+				"package.json",
+				"pi-extensions/lib/meta-sender-identity.ts",
+				"pi-extensions/lib/meta-session.ts",
+				"pi-extensions/meta-bridge-hook-copilot.ts",
+				"pi/meta-bridge-copilot/entwurf-meta-receive-copilot/.claude-plugin/plugin.json",
+				"pi/meta-bridge-copilot/entwurf-meta-receive-copilot/scripts/copilot-hook-launch.sh",
+				"run.sh",
+				"scripts/check-copilot-birth-hook.ts",
+				"scripts/check-meta-session.ts",
+				"scripts/copilot-bridge-doctor.sh",
+				"scripts/copilot-mcp-bridge.sh",
+				"scripts/copilot-mcp-config.py",
+				"scripts/copilot-statusline-bridge.sh",
+				"scripts/copilot-statusline-config.py",
+				"scripts/mutants/copilot-birth.json",
+				"scripts/smoke-copilot-mcp-state.sh",
+				"scripts/smoke-copilot-statusline-state.sh"
+			],
+			"tipOnlyFiles": [
+				"AGENTS.md",
+				"NEXT--issue-82-copilot-citizen.md",
+				"docs/adding-a-harness.md",
+				"docs/external-mcp-host.md",
+				"pi-extensions/lib/meta-sender-identity.ts",
+				"pi-extensions/meta-bridge-hook-copilot.ts",
+				"pi/meta-bridge-copilot/entwurf-meta-receive-copilot/.claude-plugin/plugin.json",
+				"pi/meta-bridge-copilot/entwurf-meta-receive-copilot/scripts/copilot-hook-launch.sh",
+				"run.sh",
+				"scripts/check-copilot-birth-hook.ts",
+				"scripts/copilot-bridge-doctor.sh",
+				"scripts/mutants/copilot-birth.json"
+			]
+		},
+		{
+			"runId": "33154263432",
+			"branch": "issue-87-omp-vendor-measurement",
+			"before": "7c414f55bd69",
+			"head": "9b70a4938fd0",
+			"diedAt": "lane inventory (head)",
+			"files": [
+				"NEXT.md",
+				"mcp/entwurf-bridge/src/index.ts",
+				"package.json",
+				"pi-extensions/lib/entwurf-self-address.ts",
+				"run.sh",
+				"scripts/check-entwurf-self-address.ts",
+				"scripts/mutants/self-address.json",
+				"scripts/omp-mcp-bridge.sh",
+				"scripts/omp-tool-surface.py",
+				"scripts/smoke-omp-mcp-state.sh"
+			],
+			"tipOnlyFiles": ["NEXT.md"]
+		},
+		{
+			"runId": "30991752256",
+			"branch": "mux-placement",
+			"before": "e5689808c9ba",
+			"head": "e05af7294724",
+			"diedAt": "CONTROL pre-red",
+			"files": [
+				"AGENTS.md",
+				"NEXT--mux-placement.md",
+				"README.md",
+				"ROADMAP.md",
+				"VERIFY.md",
+				"docs/mux-launch-rail.md",
+				"mcp/entwurf-bridge/src/index.ts",
+				"package.json",
+				"pi-extensions/entwurf-control.ts",
+				"pi-extensions/lib/entwurf-v2-contract.ts",
+				"pi-extensions/lib/mux-fresh-call.ts",
+				"pi-extensions/lib/mux-launch.ts",
+				"pi-extensions/lib/mux-placement.ts",
+				"run.sh",
+				"scripts/check-gate-qualification.ts",
+				"scripts/check-mux-fresh-call.ts",
+				"scripts/check-mux-launch.ts",
+				"scripts/check-release-gate-outcomes.ts",
+				"scripts/mutants/mux-fresh-call.json",
+				"scripts/smoke-mux-fresh-call-live.ts",
+				"tsconfig.json"
+			],
+			"tipOnlyFiles": ["NEXT--mux-placement.md"]
+		},
+		{
+			"runId": "31062287903",
+			"branch": "mux-placement",
+			"before": "e05af7294724",
+			"head": "79edfe7738a4",
+			"diedAt": "CONTROL pre-red",
+			"files": [
+				"demo/demo-baseline.sh",
+				"demo/demo.sh",
+				"scripts/lib/mutation-qualify.ts",
+				"scripts/new-session-id.ts"
+			],
+			"tipOnlyFiles": ["demo/demo-baseline.sh", "demo/demo.sh", "scripts/new-session-id.ts"]
+		}
+	]
+}

package/scripts/mutants/fresh-cut.json

@@ -12,6 +12,32 @@
 			"timeoutSeconds": 180,
 			"signature": "[QK:FRESH-CUT-COLLISION-NO-MOVE]",
 			"signatureSource": "scripts/check-fresh-cut-gate.sh"
+		},
+		{
+			"claim": "FRESHCUT-SYNCAUTH-TRIPWIRE-FIRES",
+			"title": "the retired-credential tripwire goes blind again. This replants the ACTUAL defect rather than a stand-in: under pipefail a `-q` grep exits at the first match and SIGPIPEs the awk still writing ~200KB of a 433KB run.sh, so the pipeline reports 141 and the `if` takes the CLEAN branch — the cell reported no sync_auth surface EXACTLY when one existed. It was deterministic here (100/100 measured) because the producer dwarfs the pipe buffer, which is why the self-test plants its surface near the TOP of the real run.sh: a small synthetic fixture would pass under this mutant and prove nothing",
+			"subject": "scripts/check-fresh-cut-gate.sh",
+			"find": ["  awk '!/^[[:space:]]*#/' \"$1\" | grep -c 'sync_auth' || true"],
+			"replace": ["  awk '!/^[[:space:]]*#/' \"$1\" | grep -q 'sync_auth' && echo 1 || echo 0"],
+			"gate": ["bash", "run.sh", "check-fresh-cut-gate"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:FRESHCUT-SYNCAUTH-TRIPWIRE-FIRES]",
+			"signatureSource": "scripts/check-fresh-cut-gate.sh"
+		},
+		{
+			"claim": "FRESHCUT-PREFLIGHT-CUT-DETECTED",
+			"title": "the cell forbidding an install from cutting a generation by itself stops SEEING the call it forbids — the context window silently narrows to the matched line, so a fresh-cut invocation one line into preflight_v3_store() reads as absent and D7 stays green. A forbidding cell that is green on a clean tree cannot tell blindness from compliance, which is what the self-test exists to separate",
+			"subject": "scripts/check-fresh-cut-gate.sh",
+			"find": [
+				"  grep -n 'preflight_v3_store()' -A 40 \"$1\" | grep -cE 'run_ts scripts/meta-bridge-fresh-cut\\.ts' || true"
+			],
+			"replace": [
+				"  grep -n 'preflight_v3_store()' -A 0 \"$1\" | grep -cE 'run_ts scripts/meta-bridge-fresh-cut\\.ts' || true"
+			],
+			"gate": ["bash", "run.sh", "check-fresh-cut-gate"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:FRESHCUT-PREFLIGHT-CUT-DETECTED]",
+			"signatureSource": "scripts/check-fresh-cut-gate.sh"
 		}
 	]
 }

package/scripts/mutants/mux-boundary.json

@@ -191,6 +191,30 @@
 			"timeoutSeconds": 60,
 			"signature": "[QK:MUX-LAUNCH-CORE-IMPORT-FREE]",
 			"signatureSource": "scripts/check-mux-launch.ts"
+		},
+		{
+			"claim": "MUX-CLOSE-SERVER-BOUND",
+			"title": "the close-side predicate accepts a foreign SERVER — a restarted server hands out the same `@id`, and a close would kill whatever window now wears it",
+			"subject": "pi-extensions/lib/mux-placement.ts",
+			"find": ["\treturn origin.serverPid === now.serverPid;\n}"],
+			"replace": ["\treturn true;\n}"],
+			"gate": ["bash", "run.sh", "check-mux-placement"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:MUX-CLOSE-SERVER-BOUND]",
+			"signatureSource": "scripts/check-mux-placement.ts"
+		},
+		{
+			"claim": "RESOLVE-TMUX-SESSION-IMPORT-FREE",
+			"title": "the session-lookup leaf reaches into the placement leaf for runTmux — the one decision leaf that must not be able to run tmux acquires exactly that power, and the injected-runner seam its whole safety argument rests on stops being the only way in",
+			"subject": "pi-extensions/lib/resolve-tmux-session.ts",
+			"find": ["export type TmuxSessionRejectReason = \"tmux-session-name-invalid\" | \"tmux-session-missing\";"],
+			"replace": [
+				"import { runTmux } from \"./mux-placement.ts\";\nvoid runTmux;\nexport type TmuxSessionRejectReason = \"tmux-session-name-invalid\" | \"tmux-session-missing\";"
+			],
+			"gate": ["bash", "run.sh", "check-mux-launch"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:RESOLVE-TMUX-SESSION-IMPORT-FREE]",
+			"signatureSource": "scripts/check-mux-launch.ts"
 		}
 	]
 }

package/scripts/mutants/mux-fresh-call.json

@@ -438,6 +438,87 @@
 			"timeoutSeconds": 180,
 			"signature": "[QK:FRESHCALL-BACKEND-SET-SURFACE-PARITY-PI]",
 			"signatureSource": "test/fresh-call-surfaces.contract.test.ts"
+		},
+		{
+			"claim": "TMUXSESSION-LOOKUP-ENGINE",
+			"title": "the seat lookup goes back to the `-f` filter engine, which was measured to match EVERY session when the name contains a '}' — a fresh sibling then opens in whichever session tmux listed first",
+			"subject": "pi-extensions/lib/resolve-tmux-session.ts",
+			"find": ["\treturn [\"list-windows\", \"-t\", `=${name}`, \"-F\", \"#{session_id}\"];"],
+			"replace": ["\treturn [\"list-sessions\", \"-f\", `#{==:#{session_name},${name}}`, \"-F\", \"#{session_id}\"];"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:TMUXSESSION-LOOKUP-ENGINE]",
+			"signatureSource": "test/mux-fresh-call.test.ts"
+		},
+		{
+			"claim": "TMUXSESSION-NAME-GRAMMAR",
+			"title": "the seat name grammar is widened to 'anything non-empty' — tmux then stores a DIFFERENT name than the one requested (or splits it on '.'/':') and the seat can never be found, reported as 'missing' instead of as a shape this rail does not address",
+			"subject": "pi-extensions/lib/resolve-tmux-session.ts",
+			"find": ["const SESSION_NAME = /^[A-Za-z0-9][A-Za-z0-9_-]*$/;"],
+			"replace": ["const SESSION_NAME = /^.+$/;"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:TMUXSESSION-NAME-GRAMMAR]",
+			"signatureSource": "test/mux-fresh-call.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-PLACEMENT-MISSING-REJECTS",
+			"title": "an absent seat is read as success — tmux's exit code is ignored, so a missing session falls through to the caller's own session and the launch looks like the seat worked. Proof is in two halves: this mutant dies on the leaf's injected-runner assert plus the source-text ordering assert in the fast lane, and the behavioural oracle independent of that source is the real-tmux seat cell in check-mux-launch-tmux (refusal by name with a byte-identical list-windows -a before and after)",
+			"subject": "pi-extensions/lib/resolve-tmux-session.ts",
+			"find": ["\tif (result.status !== 0) return { ok: false, reason: \"tmux-session-missing\" };"],
+			"replace": [
+				"\tif (result.status !== 0 && result.stdout.length > 0) return { ok: false, reason: \"tmux-session-missing\" };"
+			],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:FRESHCALL-PLACEMENT-MISSING-REJECTS]",
+			"signatureSource": "test/mux-fresh-call.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-PLACEMENT-TARGET-ARGV",
+			"title": "the launch argv targets the caller's own session again — a seated fresh call silently opens beside the caller instead of in the operator's project session, and the receipt still looks right",
+			"subject": "pi-extensions/lib/mux-fresh-call.ts",
+			"find": ["\t\t`${targetSessionId}:{end}`,"],
+			"replace": ["\t\t`$0:{end}`,"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:FRESHCALL-PLACEMENT-TARGET-ARGV]",
+			"signatureSource": "test/mux-fresh-call.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-PLACEMENT-BACKEND-PARITY",
+			"title": "the project seat becomes a pi capability — the grammar refusal is gated on the backend, so claude-code, copilot and omp fall past the seat check into runtime resolution and answer with the wrong reason. Every seat assertion that existed when #105 landed was written against backend pi alone, so nothing would have noticed",
+			"subject": "pi-extensions/lib/mux-fresh-call.ts",
+			"find": ["\t\tif (badSeat) return { ok: false, reason: badSeat };"],
+			"replace": ["\t\tif (badSeat && params.backend === \"pi\") return { ok: false, reason: badSeat };"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:FRESHCALL-PLACEMENT-BACKEND-PARITY]",
+			"signatureSource": "test/mux-fresh-call.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-PLACEMENT-RECEIPT-TARGET",
+			"title": "the receipt copies the CALLER's session id again — the window is in the seat, the receipt names the caller's session, and every later close/lookup built on that receipt addresses the wrong session. Proof is in two halves: this mutant dies on the source-text assembly assert in the fast lane, and the behavioural oracle independent of that source is the real-tmux seat cell in check-mux-launch-tmux (receipt.sessionId === seatId !== callerId, read from the server's own inventory)",
+			"subject": "pi-extensions/lib/mux-fresh-call.ts",
+			"find": ["\t\t\tsessionId: targetSessionId,"],
+			"replace": ["\t\t\tsessionId: placement.sessionId,"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:FRESHCALL-PLACEMENT-RECEIPT-TARGET]",
+			"signatureSource": "test/mux-fresh-call.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-PLACEMENT-SURFACE-PARITY",
+			"title": "one surface drops the optional seat from its schema, so opening a sibling in the operator's project session works from pi and silently cannot exist from the MCP bridge",
+			"subject": "mcp/entwurf-bridge/src/index.ts",
+			"find": [
+				"\t\tplacement: z\n\t\t\t.object({\n\t\t\t\ttmuxSession: z\n\t\t\t\t\t.string()\n\t\t\t\t\t.describe(\n\t\t\t\t\t\t\"EXACT name of an EXISTING session on this agent's own tmux server. Nothing is created: an absent session is refused as tmux-session-missing, and a name outside [A-Za-z0-9][A-Za-z0-9_-]* as tmux-session-name-invalid.\",\n\t\t\t\t\t),\n\t\t\t})\n\t\t\t.optional()\n\t\t\t.describe(\n\t\t\t\t\"Optional project seat: open the sibling in ONE EXISTING tmux session of this agent's own server instead of the caller's session. Nothing is ever created — an absent session is a refusal, not a new session. Independent of cwd; neither is inferred from the other. The receipt echoes the REQUESTED name and reports the resolved target session id.\",\n\t\t\t),\n"
+			],
+			"replace": [""],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:FRESHCALL-PLACEMENT-SURFACE-PARITY]",
+			"signatureSource": "test/fresh-call-surfaces.contract.test.ts"
 		}
 	]
 }

package/scripts/mutants/omp-birth.json

@@ -158,16 +158,29 @@
 		},
 		{
 			"claim": "OMP-DOCTOR-CARRIER-TRIMS",
-			"title": "treating an empty or whitespace-only PI carrier as an inherited identity makes Bundle C's deliberate tmux `-e NAME=` scrub fail the deterministic floor whenever a visible fresh omp citizen is alive",
+			"title": "treating an empty or whitespace-only PI carrier as an inherited identity makes Bundle C's deliberate tmux `-e NAME=` scrub fail the deterministic floor whenever a visible fresh omp citizen is alive. Re-anchored when the carrier scan moved from an early-exiting `grep -q` to `grep -c` (the SIGPIPE/pipefail repair); the replanted defect is unchanged — only the line it attaches to moved",
 			"subject": "scripts/omp-bridge-doctor.sh",
 			"find": [
-				"    if tr '\\0' '\\n' < \"$ENVIRON\" 2>/dev/null | grep -qE '^(PI_SESSION_ID|PI_AGENT_ID)=.*[^[:space:]]'; then"
+				"    HITS=\"$(tr '\\0' '\\n' < \"$ENVIRON\" 2>/dev/null | grep -cE '^(PI_SESSION_ID|PI_AGENT_ID)=.*[^[:space:]]' || true)\""
+			],
+			"replace": [
+				"    HITS=\"$(tr '\\0' '\\n' < \"$ENVIRON\" 2>/dev/null | grep -cE '^(PI_SESSION_ID|PI_AGENT_ID)=' || true)\""
 			],
-			"replace": ["    if tr '\\0' '\\n' < \"$ENVIRON\" 2>/dev/null | grep -qE '^(PI_SESSION_ID|PI_AGENT_ID)='; then"],
 			"gate": ["bash", "run.sh", "smoke-omp-bridge-state"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:OMP-DOCTOR-CARRIER-TRIMS]",
 			"signatureSource": "scripts/smoke-omp-bridge-state.sh"
+		},
+		{
+			"claim": "OMP-DOCTOR-CARRIER-NONBLANK-IS-RED",
+			"title": "the doctor stops flagging a live omp process that carries a NONBLANK inherited PI_SESSION_ID/PI_AGENT_ID, so a session whose MCP children would speak under the parent pi garden id reads as clean and the doctor prints PASS. The real defect was subtler than this replant, which is why the replant is written this way: `grep -q` exited at the first match, SIGPIPEd `tr` mid-environ, and pipefail turned a MATCH into a failed pipeline — a race on how far `tr` got, misreading ~15% of runs, so a `-q` replant would SURVIVE most of the time and prove nothing. This one makes the same false-clean deterministic",
+			"subject": "scripts/omp-bridge-doctor.sh",
+			"find": ["    if [ \"${HITS:-0}\" -gt 0 ]; then"],
+			"replace": ["    if [ \"${HITS:-0}\" -gt 99 ]; then"],
+			"gate": ["bash", "run.sh", "smoke-omp-bridge-state"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:OMP-DOCTOR-CARRIER-NONBLANK-IS-RED]",
+			"signatureSource": "scripts/smoke-omp-bridge-state.sh"
 		}
 	]
 }

package/scripts/mutants/release-gate.json

@@ -114,7 +114,7 @@
 		},
 		{
 			"claim": "CI-FULL-FLOOR-QUALIFIED",
-			"title": "the CI check job is downgraded from the full deterministic floor back to the ≤60s everyday core — the #70 tier rename regression, where qualification still runs once on every push but now certifies kill-power over a floor no candidate ships on, and the hermetic/package tiers reach machine time nowhere",
+			"title": "the CI check job is downgraded from the full deterministic floor back to the ≤60s everyday core — the #70 tier rename regression, where qualification still runs once on the pushes the filter sends it but now certifies kill-power over a floor no candidate ships on, and the hermetic/package tiers reach machine time nowhere",
 			"subject": ".github/workflows/ci.yml",
 			"find": ["      - run: pnpm run check:full"],
 			"replace": ["      - run: pnpm check"],
@@ -123,6 +123,50 @@
 			"signature": "[QK:CI-FULL-FLOOR-QUALIFIED]",
 			"signatureSource": "scripts/check-release-gate-outcomes.ts"
 		},
+		{
+			"claim": "RELEASE-SHA-QUALIFIED-IN-CI",
+			"title": "the exact-SHA CI oracle stops requiring the qualification BODY step, so a release SHA whose body never executed is certified by three green job names",
+			"subject": ".claude/skills/entwurf-release/scripts/verify-exact-ci.sh",
+			"find": ["if qual != \"success\":"],
+			"replace": ["if False:"],
+			"gate": ["bash", "run.sh", "check-release-gate-outcomes"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:RELEASE-SHA-QUALIFIED-IN-CI]",
+			"signatureSource": "scripts/check-release-gate-outcomes.ts"
+		},
+		{
+			"claim": "QUALIFY-FILTER-COVERS-SUBJECTS",
+			"title": "the CI qualification filter stops collecting signatureSource paths, so a change to a gate that owns a claim's signature no longer re-proves it in CI",
+			"subject": "scripts/ci-qualify-decide.sh",
+			"find": ["\t\tsignature_source = mutant.get(\"signatureSource\")"],
+			"replace": ["\t\tsignature_source = None"],
+			"gate": ["bash", "run.sh", "check-release-gate-outcomes"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:QUALIFY-FILTER-COVERS-SUBJECTS]",
+			"signatureSource": "scripts/check-release-gate-outcomes.ts"
+		},
+		{
+			"claim": "QUALIFY-FILTER-READS-PUSH-RANGE",
+			"title": "the filter reads the tip commit instead of the two-dot push range - the exact misreading that once concluded four of the five historical qualification reds would have been skipped",
+			"subject": "scripts/ci-qualify-decide.sh",
+			"find": ["CHANGED=\"$(git -C \"$REPO_DIR\" diff --name-only \"$BEFORE\"..\"$HEAD_SHA\" 2>/dev/null)\""],
+			"replace": ["CHANGED=\"$(git -C \"$REPO_DIR\" diff --name-only \"$HEAD_SHA~1\"..\"$HEAD_SHA\" 2>/dev/null)\""],
+			"gate": ["bash", "run.sh", "check-release-gate-outcomes"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:QUALIFY-FILTER-READS-PUSH-RANGE]",
+			"signatureSource": "scripts/check-release-gate-outcomes.ts"
+		},
+		{
+			"claim": "QUALIFY-FILTER-REPLAYS-PAST-CATCHES",
+			"title": "the matcher stops after the first changed path, so a push whose first file is outside the qualification surface decides false no matter what rides behind it - invisible to every single-file check, fatal to all five historical ranges",
+			"subject": "scripts/ci-qualify-decide.sh",
+			"find": ["\tdone <<< \"$files\""],
+			"replace": ["\tdone <<< \"${files%%$'\\n'*}\""],
+			"gate": ["bash", "run.sh", "check-release-gate-outcomes"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:QUALIFY-FILTER-REPLAYS-PAST-CATCHES]",
+			"signatureSource": "scripts/check-release-gate-outcomes.ts"
+		},
 		{
 			"claim": "MUX-LIFECYCLE-IS-RELEASE-MUST",
 			"title": "the integrated mux lifecycle stays listed but bypasses run_live_step, so a missing prerequisite returns SKIP into a branch that never classifies it and the cut reads green",

package/scripts/omp-bridge-doctor.sh

@@ -266,7 +266,17 @@ if [ -d /proc ]; then
     case "$pid" in *[!0-9]*) continue ;; esac
     ENVIRON="/proc/$pid/environ"
     [ -r "$ENVIRON" ] || continue
-    if tr '\0' '\n' < "$ENVIRON" 2>/dev/null | grep -qE '^(PI_SESSION_ID|PI_AGENT_ID)=.*[^[:space:]]'; then
+    # `grep -c`, never `grep -q`. This file runs under `set -o pipefail` (line 26), and a
+    # `-q` grep EXITS AT THE FIRST MATCH, closing the pipe while `tr` is still writing the
+    # rest of an ~12KB environ. `tr` dies of SIGPIPE (141), pipefail promotes that to the
+    # pipeline's status, and the `if` takes the CLEAN branch — so a genuinely contaminated
+    # process was reported as clean, and the doctor printed PASS. It is a RACE on how far
+    # `tr` got, which is why it read as flakiness: measured on this host, 6 misses in 40
+    # reads of one live fixture carrying PI_SESSION_ID=foreign-garden. `-c` consumes all of
+    # stdin, so there is no early close and nothing to race. The same lesson is already
+    # written at smoke-omp-mcp-state.sh:91 — it had not reached this reader.
+    HITS="$(tr '\0' '\n' < "$ENVIRON" 2>/dev/null | grep -cE '^(PI_SESSION_ID|PI_AGENT_ID)=.*[^[:space:]]' || true)"
+    if [ "${HITS:-0}" -gt 0 ]; then
       CONTAMINATED="$CONTAMINATED $pid"
     fi
   done