@junghanacs/entwurf 0.37.0 → 0.37.1

package/scripts/lib/codex-fresh-live-protocol.ts

@@ -57,7 +57,12 @@ export function buildCodexInstruction(input: CodexInstructionInput): string {
 		"2. Stop and wait for the Pi callback delivered into this Codex thread. Accept only a callback whose body " +
 		"repeats the exact nonce from your LAUNCH receipt and whose sender envelope carries a garden id on its `session:` line.\n" +
 		`3. Only after that match, call public mcp__entwurf_bridge__entwurf_v2 once with target ${input.callerGid}, ` +
-		"intent fire-and-forget, wants_reply false, and message:\n" +
+		// [LIVE 2026-10-16, 0.37.1 r2] a Codex sibling sent PI_SESSION_ID=485 / PI_WINDOW_ID=1130 for
+		// `$485` / `@1130`: the sigils lived only inside the placeholder names below. The exact-argument
+		// check stays; the instruction now says the prefixes are part of the ids.
+		"intent fire-and-forget, wants_reply false, and message (copy PI_SESSION_ID and PI_WINDOW_ID byte for byte " +
+		"from the LAUNCH receipt's `window:` line: the session id keeps its leading `$` and the window id keeps its " +
+		"leading `@`; never drop either prefix):\n" +
 		`${input.finalToken}\nPI_LAUNCH_NONCE=<exact launch nonce>\nPI_CALLBACK_NONCE=<same exact nonce>\n` +
 		"PI_CALLBACK_FROM=<the garden id on the callback envelope's `session:` line — NOT the model name on its `from:` line>\nPI_SESSION_ID=<exact $session id from the LAUNCH receipt>\n" +
 		"PI_WINDOW_ID=<exact @window id from the LAUNCH receipt>\nDo not claim completion in prose."

package/scripts/lib/qualification-ledger.ts

@@ -302,8 +302,8 @@ const STATES: GroupState[] = ["MEASURED", "CARRIED", "INHERITED-UNVERIFIED", "UN
  * (qualification-oracle-core → composeRelease) passes none: its declared input list is each
  * collection's own `attempted[].sha256` (checkCollectionData) under the GitHub artifact
  * digest (admitArtifact), and an ancestor run it was not given leaves its groups UNRUN, a
- * release-mode blocker. It is not the release oracle: verify-exact-ci.sh stays the strict
- * exact-SHA full-body gate until #124 P3.
+ * release-mode blocker. It is not the release oracle: verify-exact-ci.sh reads the push
+ * run's four required jobs and no qualification body (#144).
  */
 export function composeLedger(
 	loaded: LoadedReceipt[],

package/scripts/mutants/pi-durable.json

@@ -400,7 +400,7 @@
 			"subject": "pi/pi-durable/carrier-relocation.mjs",
 			"find": ["return `./${name}`;"],
 			"replace": ["return spec;"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-CARRIER-RELOCATION-TWO-RULES]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
@@ -412,7 +412,7 @@
 			"subject": "pi/pi-durable/carrier-relocation.mjs",
 			"find": ["if (begun !== statements) {"],
 			"replace": ["if (false) {"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-CARRIER-RELOCATION-REFUSES]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
@@ -424,7 +424,7 @@
 			"subject": "pi/pi-durable/carrier-relocation.mjs",
 			"find": ["return pathToFileURL(file).href;"],
 			"replace": ["return pathToFileURL(path.join(dist(), \"..\", target)).href;"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-CARRIER-RESOLVE-DECLARED]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
@@ -436,7 +436,7 @@
 			"subject": "pi/pi-durable/carrier-relocation.mjs",
 			"find": ["if (!files.includes(parent)) {"],
 			"replace": ["if (parent === \"\") {"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-CARRIER-RESOLVE-REFUSES]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
@@ -448,7 +448,7 @@
 			"subject": "pi/pi-durable/carrier-relocation.mjs",
 			"find": ["if (name !== CODING_AGENT) {"],
 			"replace": ["if (false) {"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-CARRIER-HOST-ROOT]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
@@ -460,7 +460,7 @@
 			"subject": "pi/pi-durable/overlay/upstream-pin.json",
 			"find": ["\"sha256\": \"725757156580ad2a2d170c790440763371bb8035052a0c6caae6af5159d4718f\""],
 			"replace": ["\"sha256\": \"0000000000000000000000000000000000000000000000000000000000000000\""],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-CARRIER-PIN-MATCHES]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
@@ -472,7 +472,7 @@
 			"subject": "pi/pi-durable/carrier-relocation.mjs",
 			"find": ["if (!names?.every(plain) || names.length === 0"],
 			"replace": ["if (!names || names.length === 0"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-CARRIER-PIN-MALFORMED]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
@@ -484,7 +484,7 @@
 			"subject": "scripts/emit-pi-durable-carrier.ts",
 			"find": ["return [\"--no-replace-objects\", \"-C\", source, ...args];"],
 			"replace": ["return [\"-C\", source, ...args];"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-CARRIER-EMIT-NO-REPLACE]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
@@ -703,7 +703,7 @@
 			"subject": "pi/pi-durable/bootstrap.mjs",
 			"find": ["\tconst { nativeModules = [], resume = false, ...args } = parseArgs(argv);"],
 			"replace": ["\tconst { nativeModules = [undefined], resume = false, ...args } = parseArgs(argv);"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-native-module"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-MODULE-ABSENT-UNCHANGED]",
 			"signatureSource": "pi-extensions/lib/pi-durable-native-module.test.ts",
@@ -718,7 +718,7 @@
 			"subject": "pi/pi-durable/bootstrap.mjs",
 			"find": ["\tif (!isAbsolute(value))"],
 			"replace": ["\tif (false)"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-native-module"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-MODULE-PATH-REFUSED]",
 			"signatureSource": "pi-extensions/lib/pi-durable-native-module.test.ts",
@@ -743,7 +743,7 @@
 				"\tconst tui = await loadTui();",
 				"\tconst extensions = await loadNativeModules(nativeModules);"
 			],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-native-module"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-MODULE-INIT-BEFORE-RUNTIME]",
 			"signatureSource": "pi-extensions/lib/pi-durable-native-module.test.ts",
@@ -763,7 +763,7 @@
 				"\t\tthrow Object.assign(",
 				"\t\t\trefuse(\"native-module-import-failed\","
 			],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-native-module"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-MODULE-IMPORT-FAILED]",
 			"signatureSource": "pi-extensions/lib/pi-durable-native-module.test.ts",
@@ -778,7 +778,7 @@
 			"subject": "pi/pi-durable/bootstrap.mjs",
 			"find": ["\tconst changed = identityChanges(before, identitySnapshot());"],
 			"replace": ["\tconst changed = identityChanges(identitySnapshot(), identitySnapshot());"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-native-module"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-MODULE-IDENTITY-GUARD]",
 			"signatureSource": "pi-extensions/lib/pi-durable-native-module.test.ts",
@@ -793,7 +793,7 @@
 			"subject": "pi/pi-durable/bootstrap.mjs",
 			"find": ["\t\t...(session === undefined ? {} : { session }),\n\t\tcwd,\n\t\textensions,\n\t\tbridgeEntry,"],
 			"replace": ["\t\t...(session === undefined ? {} : { session }),\n\t\textensions,\n\t\tbridgeEntry,"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-native-module"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-MODULE-CWD-PINNED]",
 			"signatureSource": "pi-extensions/lib/pi-durable-native-module.test.ts",
@@ -808,7 +808,7 @@
 			"subject": "pi/pi-durable/bootstrap.mjs",
 			"find": ["\tif (RESERVED_EXTENSION_NAMES.includes(extension.name)) {"],
 			"replace": ["\tif (false) {"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-native-module"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-MODULE-EXPORT-NAME]",
 			"signatureSource": "pi-extensions/lib/pi-durable-native-module.test.ts",
@@ -823,7 +823,7 @@
 			"subject": "pi/pi-durable/bootstrap.mjs",
 			"find": ["\t\t\textensions: [contact.extension, ...extensions],"],
 			"replace": ["\t\t\textensions: [...extensions, contact.extension],"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-native-module"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-MODULE-EXTENSION-ORDER]",
 			"signatureSource": "pi-extensions/lib/pi-durable-native-module.test.ts",
@@ -838,7 +838,7 @@
 			"subject": "pi/pi-durable/src/experimental/durable/tui.ts",
 			"find": ["\t\tconst forms = [...detailed, tasks, `⏳ ${n}`, `⏳${n}`, `*${n}`, \"*+\", \"*\"];"],
 			"replace": ["\t\tconst forms = [...detailed, tasks, `⏳ ${n}`, `⏳${n}`, `*${n}`, \"*\"];"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-CARRIER-EMIT-SOURCE-EQUAL]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
@@ -850,7 +850,7 @@
 			"subject": "scripts/emit-pi-durable-carrier.ts",
 			"find": ["\tif (pinned !== running) {"],
 			"replace": ["\tif (false) {"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-CARRIER-EMIT-NODE-EXACT]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
@@ -862,7 +862,7 @@
 			"subject": "pi/pi-durable/tsconfig.json",
 			"find": ["\t\"exclude\": []"],
 			"replace": ["\t\"files\": []"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-SOURCE-FENCE-RESOLVES]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
@@ -876,7 +876,7 @@
 			"replace": [
 				"\t\t\ttoggleTasks: () => command(async () => update({ tasksPanel: !state.tasksPanel, tasks: state.tasksPanel ? undefined : state.tasks })),"
 			],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-FOOTER-GRAPH-LIFETIME]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
@@ -891,7 +891,7 @@
 			"subject": "pi/pi-durable/carrier/tui.js",
 			"find": ["\t\tconst nodes = Object.values(graph?.tasks ?? {}).filter((node) => node.background);"],
 			"replace": ["\t\tconst nodes = Object.values(graph?.tasks ?? {});"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-FOOTER-BADGE-COUNT]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
@@ -906,7 +906,7 @@
 			"subject": "pi/pi-durable/carrier/tui.js",
 			"find": ["\t\tconst forms = [...detailed, tasks, `⏳ ${n}`, `⏳${n}`, `*${n}`, \"*+\", \"*\"];"],
 			"replace": ["\t\tconst forms = [...detailed, tasks, `⏳ ${n}`, `⏳${n}`, \"*\"];"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-FOOTER-BADGE-WIDTH]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
@@ -921,7 +921,7 @@
 			"subject": "pi/pi-durable/carrier/tui.js",
 			"find": ["\t\t\tcomponent: new VStack([{ component: badge, shrink: 0 }, ...dock]),"],
 			"replace": ["\t\t\tcomponent: new VStack([...dock, { component: badge, shrink: 0 }]),"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-FOOTER-BADGE-PROTECTED]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
@@ -936,7 +936,7 @@
 			"subject": "pi/pi-durable/carrier/tui.js",
 			"find": ["\t\t\tvisible: (viewport) => badge.count === 0 || viewport.height > 1,"],
 			"replace": ["\t\t\tvisible: (viewport) => viewport.height > 1,"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-FOOTER-ZERO-UPSTREAM]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
@@ -951,7 +951,7 @@
 			"subject": "pi/pi-durable/bootstrap.mjs",
 			"find": ["const MODULE_ENTRY = /^[^.].*\\.extension\\.mjs$/;"],
 			"replace": ["const MODULE_ENTRY = /\\.extension\\.mjs$/;"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-native-module"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-MODULE-DIR-TOPLEVEL-FILTER]",
 			"signatureSource": "pi-extensions/lib/pi-durable-native-module.test.ts",
@@ -966,7 +966,7 @@
 			"subject": "pi/pi-durable/bootstrap.mjs",
 			"find": ["\t\t.sort((a, b) => Buffer.compare(Buffer.from(a), Buffer.from(b)));"],
 			"replace": ["\t\t.sort((a, b) => a.localeCompare(b));"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-native-module"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-MODULE-DIR-ORDER-BYTEWISE]",
 			"signatureSource": "pi-extensions/lib/pi-durable-native-module.test.ts",
@@ -981,7 +981,7 @@
 			"subject": "pi/pi-durable/bootstrap.mjs",
 			"find": ["\tif (names.length === 0) {"],
 			"replace": ["\tif (false) {"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-native-module"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-MODULE-DIR-REFUSED]",
 			"signatureSource": "pi-extensions/lib/pi-durable-native-module.test.ts",
@@ -996,7 +996,7 @@
 			"subject": "pi/pi-durable/bootstrap.mjs",
 			"find": ["\tif (moduleArg !== undefined && dirArg !== undefined) {"],
 			"replace": ["\tif (false) {"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-native-module"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-MODULE-DIR-EXCLUSIVE]",
 			"signatureSource": "pi-extensions/lib/pi-durable-native-module.test.ts",
@@ -1011,7 +1011,7 @@
 			"subject": "pi/pi-durable/bootstrap.mjs",
 			"find": ["\t\t\tif (owners.has(name)) {"],
 			"replace": ["\t\t\tif (false) {"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-native-module"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-MODULE-DIR-NAME-DUPLICATE]",
 			"signatureSource": "pi-extensions/lib/pi-durable-native-module.test.ts",
@@ -1026,7 +1026,7 @@
 			"subject": "package.json",
 			"find": ["\t\t\"pi/pi-durable/carrier/\",\n"],
 			"replace": ["\t\t\"pi/pi-durable/carrier/\",\n\t\t\"pi/pi-durable/src/\",\n"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-SOURCE-NOT-SHIPPED]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
@@ -1060,7 +1060,7 @@
 			"subject": "pi/pi-durable/carrier/subagent.js",
 			"find": ["\t\t\t\t\toutput: [{ type: \"text\", text }],"],
 			"replace": ["\t\t\t\t\tcontent: [{ type: \"text\", text }],"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-SUBAGENT-OUTPUT-MODEL-VISIBLE]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
@@ -1084,7 +1084,7 @@
 			"subject": "pi/pi-durable/carrier/runtime.js",
 			"find": ["\t\t\tupdate({ failure: {} });"],
 			"replace": ["\t\t\t// the failure is not recorded"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-FATAL-SESSION-VIEW]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
@@ -1096,7 +1096,7 @@
 			"subject": "pi/pi-durable/carrier/tui.js",
 			"find": ["\tif (view.failure !== undefined) {"],
 			"replace": ["\tif (view.failure === null) {"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-FATAL-SESSION-SHOWN]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
@@ -1108,7 +1108,7 @@
 			"subject": "pi/pi-durable/carrier/runtime.js",
 			"find": ["\t\t\t\t\tif (state.failure !== undefined) {"],
 			"replace": ["\t\t\t\t\tif (state.failure === null) {"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-FATAL-SUBMIT-REFUSED]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
@@ -1120,7 +1120,7 @@
 			"subject": "pi-extensions/meta-bridge-pi-durable.ts",
 			"find": ["const problems = retire(\"session-failed\", \"the durable session failed and closed itself\");"],
 			"replace": ["const problems: string[] = [];"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-RECEIVER-RETIRE-ON-FATAL]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
@@ -1134,7 +1134,7 @@
 				"\t\t\t\t\t// First: the Session runs its close listeners inside its own close call.\n\t\t\t\t\tunsubscribeClose();"
 			],
 			"replace": ["\t\t\t\t\t// First: the Session runs its close listeners inside its own close call."],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-SELF-CLOSE-NOT-FAILURE]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
@@ -1146,7 +1146,7 @@
 			"subject": "pi/pi-durable/carrier/tui.js",
 			"find": ["\tif (compaction !== undefined) {\n\t\tlines.push"],
 			"replace": ["\tif (compaction === null) {\n\t\tlines.push"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-COMPACTION-FAILURE-SHOWN]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
@@ -1158,7 +1158,7 @@
 			"subject": "pi/pi-durable/carrier/harness-setup.js",
 			"find": ["\t\t\t\ttransport: settingsManager.getTransport(),"],
 			"replace": ["\t\t\t\t// transport is not forwarded"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-STREAM-TRANSPORT-WIRE]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
@@ -1170,7 +1170,7 @@
 			"subject": "pi/pi-durable/carrier/harness-setup.js",
 			"find": ["\t\t\t\ttransport: settingsManager.getTransport(),"],
 			"replace": ["\t\t\t\ttransport: \"auto\","],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-STREAM-TRANSPORT-FORWARDED]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
@@ -1182,7 +1182,7 @@
 			"subject": "pi/pi-durable/carrier/harness-setup.js",
 			"find": ["\t\t\treturn { ...settingsManager.getCompactionSettings(), backgroundTokens: 0 };"],
 			"replace": ["\t\t\treturn settingsManager.getCompactionSettings();"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-COMPACTION-WAITS]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
@@ -1194,7 +1194,7 @@
 			"subject": "pi/pi-durable/carrier/prompt.js",
 			"find": ["\t\t\t\t\tskillPaths: scopedSkillPaths(settings, agentDir, fallbackCwd),"],
 			"replace": ["\t\t\t\t\tskillPaths: settings.getSkillPaths(),"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-PROMPT-SKILL-SCOPE-BASE]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
@@ -1206,7 +1206,7 @@
 			"subject": "pi/pi-durable/carrier/runtime.js",
 			"find": ["\t\toptions.continueSession ?? false,\n\t\toptions.session,\n\t);"],
 			"replace": ["\t\toptions.continueSession ?? false,\n\t);"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-RESUME-OPENS-CHOSEN]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
@@ -1218,7 +1218,7 @@
 			"subject": "pi/pi-durable/bootstrap.mjs",
 			"find": ["\t\t\tprocess.stderr.write(\"[pi-durable] resume-cancelled: nothing was opened\\n\");\n\t\t\treturn;"],
 			"replace": ["\t\t\targs.continueSession = true;"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-RESUME-CANCEL-OPENS-NOTHING]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",

package/scripts/mutants/release-gate.json

@@ -126,73 +126,39 @@
 			"signatureSource": "scripts/check-release-gate-outcomes.ts"
 		},
 		{
-			"claim": "RELEASE-SHA-QUALIFIED-IN-CI",
-			"title": "the exact-SHA CI oracle stops requiring the qualification BODY step, so a release SHA whose body never executed is certified by three green job names",
+			"claim": "RELEASE-WITNESS-IS-PUSH-RUN",
+			"title": "the exact-SHA CI oracle stops asking GitHub for push runs only, so a running or red qualification dispatch at the same SHA can become the run judged",
 			"subject": ".claude/skills/entwurf-release/scripts/verify-exact-ci.sh",
-			"find": ["if qual != \"success\":"],
-			"replace": ["if False:"],
+			"find": ["    --commit \"$SHA\" \\", "    --event push \\"],
+			"replace": ["    --commit \"$SHA\" \\"],
 			"gate": ["bash", "run.sh", "check-release-gate-outcomes"],
 			"timeoutSeconds": 180,
-			"signature": "[QK:RELEASE-SHA-QUALIFIED-IN-CI]",
+			"signature": "[QK:RELEASE-WITNESS-IS-PUSH-RUN]",
 			"signatureSource": "scripts/check-release-gate-outcomes.ts"
 		},
 		{
-			"claim": "QUALIFY-FILTER-COVERS-SUBJECTS",
-			"title": "the CI qualification filter stops collecting signatureSource paths, so a change to a gate that owns a claim's signature no longer re-proves it in CI",
-			"subject": "scripts/ci-qualify-decide.sh",
-			"find": ["\t\tsignature_source = mutant.get(\"signatureSource\")"],
-			"replace": ["\t\tsignature_source = None"],
+			"claim": "RELEASE-ORACLE-REFUSES-NON-SUCCESS-JOB",
+			"title": "the exact-SHA CI oracle refuses a required job only when it failed, so an absent, skipped, cancelled or unconcluded job certifies the release SHA",
+			"subject": ".claude/skills/entwurf-release/scripts/verify-exact-ci.sh",
+			"find": ["if conclusion != \"success\":"],
+			"replace": ["if conclusion == \"failure\":"],
 			"gate": ["bash", "run.sh", "check-release-gate-outcomes"],
 			"timeoutSeconds": 180,
-			"signature": "[QK:QUALIFY-FILTER-COVERS-SUBJECTS]",
+			"signature": "[QK:RELEASE-ORACLE-REFUSES-NON-SUCCESS-JOB]",
 			"signatureSource": "scripts/check-release-gate-outcomes.ts"
 		},
 		{
-			"claim": "QUALIFY-FILTER-READS-PUSH-RANGE",
-			"title": "the filter reads the tip commit instead of the two-dot push range - the exact misreading that once concluded four of the five historical qualification reds would have been skipped",
-			"subject": "scripts/ci-qualify-decide.sh",
-			"find": [
-				"CHANGED=\"$(git -C \"$REPO_DIR\" diff --no-renames --no-ext-diff --no-textconv --name-only \"$BEFORE\"..\"$HEAD_SHA\" 2>/dev/null)\""
-			],
+			"claim": "RELEASE-ORACLE-CLAIMS-NO-BODY",
+			"title": "the exact-SHA CI oracle prints a qualification BODY success line again, so a release PASS reads as kill-power evidence the release never measured",
+			"subject": ".claude/skills/entwurf-release/scripts/verify-exact-ci.sh",
+			"find": ["print(\"exact-ci: qualification BODY is not a release axis (#144)\")"],
 			"replace": [
-				"CHANGED=\"$(git -C \"$REPO_DIR\" diff --no-renames --no-ext-diff --no-textconv --name-only \"$HEAD_SHA~1\"..\"$HEAD_SHA\" 2>/dev/null)\""
+				"print(\"exact-ci: qualification BODY is not a release axis (#144)\")",
+				"print(\"exact-ci: step check/Run ./run.sh check-gate-qualification=success\")"
 			],
 			"gate": ["bash", "run.sh", "check-release-gate-outcomes"],
 			"timeoutSeconds": 180,
-			"signature": "[QK:QUALIFY-FILTER-READS-PUSH-RANGE]",
-			"signatureSource": "scripts/check-release-gate-outcomes.ts"
-		},
-		{
-			"claim": "QUALIFY-FILTER-REPLAYS-PAST-CATCHES",
-			"title": "the matcher stops after the first changed path, so a push whose first file is outside the qualification surface decides false no matter what rides behind it - invisible to every single-file check, fatal to all five historical ranges",
-			"subject": "scripts/ci-qualify-decide.sh",
-			"find": ["\tdone <<< \"$files\""],
-			"replace": ["\tdone <<< \"${files%%$'\\n'*}\""],
-			"gate": ["bash", "run.sh", "check-release-gate-outcomes"],
-			"timeoutSeconds": 180,
-			"signature": "[QK:QUALIFY-FILTER-REPLAYS-PAST-CATCHES]",
-			"signatureSource": "scripts/check-release-gate-outcomes.ts"
-		},
-		{
-			"claim": "QUALIFY-FILTER-SUBJECT-HUNKS",
-			"title": "data-subject hunk refinement collapses back to file identity, so a version-only pin repeats the unchanged mutant body",
-			"subject": "scripts/ci-qualify-decide.sh",
-			"find": ["\t\t\t\tif subject_find_untouched \"$file\"; then"],
-			"replace": ["\t\t\t\tif false; then"],
-			"gate": ["bash", "run.sh", "check-release-gate-outcomes"],
-			"timeoutSeconds": 180,
-			"signature": "[QK:QUALIFY-FILTER-SUBJECT-HUNKS]",
-			"signatureSource": "scripts/check-release-gate-outcomes.ts"
-		},
-		{
-			"claim": "QUALIFY-FILTER-TOML-ONLY-REFINEMENT",
-			"title": "Markdown/JSON data re-enter hunk refinement, so an out-of-find presence restatement or later duplicate JSON key skips a body whose mutant now survives",
-			"subject": "scripts/ci-qualify-decide.sh",
-			"find": ["\t\t\t\t\t*.toml) ;;"],
-			"replace": ["\t\t\t\t\t*.toml|*.json|*.md) ;;"],
-			"gate": ["bash", "run.sh", "check-release-gate-outcomes"],
-			"timeoutSeconds": 180,
-			"signature": "[QK:QUALIFY-FILTER-TOML-ONLY-REFINEMENT]",
+			"signature": "[QK:RELEASE-ORACLE-CLAIMS-NO-BODY]",
 			"signatureSource": "scripts/check-release-gate-outcomes.ts"
 		},
 		{

package/scripts/smoke-mux-lifecycle-live.ts

@@ -108,7 +108,7 @@ const BRIDGE_LAUNCHER = path.join(REPO, "mcp", "entwurf-bridge", "start.sh");
 
 /** The two pi shapes. They differ in exactly one thing that matters here — whether the record
  * carries `provider=entwurf`, which is what makes the resume argv re-inject the bridge (#29). */
-const PI_NATIVE_MODEL = "openai-codex/gpt-6-luna";
+const PI_NATIVE_MODEL = "openai-codex/gpt-6.1-sol:low";
 const PI_ACP_MODEL = "entwurf/claude-sonnet-5-5";
 const CLAUDE_MODEL = "claude-sonnet-5";