@khoavu882/doflow 2.0.0-beta.4 → 2.0.0

package/core/registry/harnesses.json

@@ -221,6 +221,202 @@
           ],
           "verification": "Complete a subagent, then send it a follow-up through SendMessage and confirm it keeps its history.",
           "verifiedOn": "2026-10-12"
+        },
+        "nest": {
+          "status": "supported",
+          "evidence": [
+            "https://code.claude.com/docs/en/sub-agents → \"By default, a subagent can spawn subagents of its own, up to three layers below the main conversation.\""
+          ],
+          "verification": "Start a subagent that starts a subagent and confirm the inner one runs (three layers below the main conversation by default).",
+          "verifiedOn": "2026-10-23"
+        }
+      },
+      "agentLimits": {
+        "readOnly": {
+          "status": "native",
+          "apply": {
+            "disallowedTools": "Edit, Write, NotebookEdit"
+          },
+          "evidence": [
+            "https://code.claude.com/docs/en/sub-agents"
+          ],
+          "checked": "docs",
+          "verifiedOn": "2026-10-23"
+        },
+        "toolScope": {
+          "status": "native",
+          "field": "tools",
+          "form": "comma",
+          "map": {
+            "read": [
+              "Read",
+              "Grep",
+              "Glob",
+              "Skill",
+              "TodoWrite",
+              "TaskCreate",
+              "TaskGet",
+              "TaskList",
+              "TaskUpdate"
+            ],
+            "edit": [
+              "Edit",
+              "Write",
+              "NotebookEdit"
+            ],
+            "shell": [
+              "Bash"
+            ],
+            "web": [
+              "WebFetch",
+              "WebSearch"
+            ],
+            "agents": [
+              "Agent"
+            ]
+          },
+          "mcpSelector": "mcp__{server}__*",
+          "evidence": [
+            "https://code.claude.com/docs/en/sub-agents",
+            "https://code.claude.com/docs/en/tools-reference"
+          ],
+          "checked": "docs",
+          "verifiedOn": "2026-10-27"
+        }
+      },
+      "worker": {
+        "profile": null,
+        "billing": "unknown",
+        "cli": {
+          "status": "supported",
+          "evidence": [
+            "bench/inventory/coverage.json → claude --version → 2.1.287 (Claude Code)"
+          ],
+          "verification": "Run `claude --version` and compare the output with bench/inventory/coverage.json.",
+          "verifiedOn": "2026-10-12",
+          "binary": "claude",
+          "versionArgv": [
+            "--version"
+          ]
+        },
+        "oneShot": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read claude's headless CLI documentation and `claude --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no recorded evidence for claude: no free check has captured its one-shot headless flag or how it reads a prompt"
+        },
+        "structuredOutput": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read claude's headless CLI documentation and `claude --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no captured claude transcript: its event schema has no parser, and a parser waits for a transcript from its own probe"
+        },
+        "readOnly": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read claude's headless CLI documentation and `claude --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no in-repository evidence names this for claude; nothing is inferred from another harness or a model name"
+        },
+        "spawnDenial": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read claude's headless CLI documentation and `claude --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no recorded evidence for claude: no free check shows a flag that disables subagent spawning"
+        },
+        "runnableProbe": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read claude's headless CLI documentation and `claude --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no in-repository evidence names this for claude; nothing is inferred from another harness or a model name"
+        },
+        "hooksProbe": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read claude's headless CLI documentation and `claude --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no in-repository evidence names this for claude; nothing is inferred from another harness or a model name"
+        },
+        "guidanceProbe": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read claude's headless CLI documentation and `claude --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no in-repository evidence names this for claude; nothing is inferred from another harness or a model name"
+        },
+        "loginProbe": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read claude's headless CLI documentation and `claude --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no in-repository evidence names this for claude; nothing is inferred from another harness or a model name"
+        },
+        "persistentSession": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read claude's headless CLI documentation and `claude --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no in-repository evidence names this for claude; nothing is inferred from another harness or a model name"
+        },
+        "resume": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read claude's headless CLI documentation and `claude --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no in-repository evidence names this for claude; nothing is inferred from another harness or a model name"
+        },
+        "steering": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read claude's headless CLI documentation and `claude --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no in-repository evidence names this for claude; nothing is inferred from another harness or a model name"
+        },
+        "isolatedEdit": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read claude's headless CLI documentation and `claude --help`; record the flag that confines edits to the working directory and its source",
+          "verifiedOn": "2026-10-16",
+          "reason": "no recorded evidence for claude: no free check shows a flag that confines edits to the working directory"
+        },
+        "model": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read claude's headless CLI documentation and `claude --help`; record the flag that selects the model and its source",
+          "verifiedOn": "2026-10-24",
+          "reason": "no recorded evidence for claude: no free check shows a flag that selects the model"
+        },
+        "modelChecks": []
+      },
+      "contextProfile": {
+        "capacityTokens": {
+          "value": 200000,
+          "source": "code.claude.com/docs/en/overview",
+          "verifiedOn": "2026-10-20"
+        },
+        "reserveTokens": {
+          "value": 20000,
+          "source": "code.claude.com/docs/en/overview",
+          "verifiedOn": "2026-10-20"
+        },
+        "tokenTelemetry": {
+          "value": "none",
+          "source": "delivery-store.ts:10 (no harness reports token usage directly to external CLI)",
+          "verifiedOn": "2026-10-20"
+        },
+        "toolResultLimitBytes": {
+          "value": 524288,
+          "source": "code.claude.com/docs/en/hooks",
+          "verifiedOn": "2026-10-20"
+        },
+        "retention": {
+          "value": "supported",
+          "source": "code.claude.com/docs/en/hooks (transcript replayed on resume)",
+          "verifiedOn": "2026-10-20"
         }
       },
       "scopePrecedence": {
@@ -235,6 +431,26 @@
         "note": "The skills doc's \"Resolve skills that share a name\" table states a first-match-wins hierarchy for a same-named skill: \"Enterprise over personal, and personal over project\" -- with `deploy` in both `~/.claude/skills/` and the project's `.claude/skills/`, the personal one runs. Order lists DoFlow's two tracked scopes (user, project); the fuller vendor hierarchy also has an enterprise-managed tier consulted before user. The skills doc states a first-match-wins hierarchy, so the order lists the winner first: the user copy is used.",
         "determinedOn": "2026-09-27",
         "mode": "first-wins"
+      },
+      "primaryProbe": {
+        "model": "payload",
+        "events": [
+          "SessionStart"
+        ],
+        "status": "unverified",
+        "evidence": [],
+        "verifiedOn": null,
+        "reason": "Claude Code sends the model on SessionStart only, and sometimes omits it; no live capture recorded yet."
+      },
+      "nativeTelemetry": {
+        "signals": [
+          "spans",
+          "events"
+        ],
+        "contentDefaults": "metadata-only",
+        "inboundTraceparent": "unsupported",
+        "joinKey": "tool_use_id",
+        "verifiedOn": "2026-10-20"
       }
     },
     {
@@ -341,7 +557,7 @@
           "evidence": [
             "https://learn.chatgpt.com/docs/build-skills"
           ],
-          "verification": "Confirm Codex discovers the installed skill from .agents/skills (repo scope) or ~/.agents/skills (user scope); Codex never scans .codex/skills."
+          "verification": "Confirm Codex discovers the installed skill from .agents/skills (repo scope) or ~/.agents/skills (user scope); .codex/skills is not a documented Codex skills location."
         },
         "agents": {
           "status": "supported",
@@ -500,239 +716,228 @@
           "verifiedOn": "2026-10-12",
           "fallback": "manual",
           "reason": "https://learn.chatgpt.com/docs/agent-configuration/subagents was read on 2026-10-12 and does not state a resume operation; nothing is inferred from another harness or a model name."
-        }
-      },
-      "scopePrecedence": {
-        "status": "established",
-        "order": [
-          "user",
-          "project"
-        ],
-        "evidence": [
-          "https://learn.chatgpt.com/docs/agent-configuration/agents-md"
-        ],
-        "note": "AGENTS.md discovery is documented as: \"1. Global scope: In your Codex home directory ... Codex reads AGENTS.override.md if it exists. Otherwise, Codex reads AGENTS.md. 2. Project scope: Starting at the project root ...\", then \"Codex concatenates files from the root down ... Files closer to your current directory override earlier guidance because they appear later in the combined prompt.\" Codex concatenates and states that files closer to the working directory override earlier guidance because they appear later, so the LAST scope consulted takes effect: the project copy wins despite being consulted second.",
-        "determinedOn": "2026-09-27",
-        "mode": "last-wins"
-      }
-    },
-    {
-      "id": "gemini",
-      "displayName": "Gemini CLI",
-      "adapter": "gemini",
-      "scopes": [
-        "project",
-        "user"
-      ],
-      "nativeTargets": {
-        "instructions": "GEMINI.md",
-        "agents": ".gemini/agents",
-        "hooks": "settings.json"
-      },
-      "paths": {
-        "configDir": {
-          "project": {
-            "base": "root",
-            "segments": [
-              ".agents"
-            ]
-          },
-          "user": {
-            "base": "root",
-            "segments": [
-              ".gemini",
-              "config"
-            ]
-          }
         },
-        "instruction": {
-          "project": {
-            "base": "root",
-            "segments": [
-              "GEMINI.md"
-            ]
-          },
-          "user": {
-            "base": "root",
-            "segments": [
-              ".gemini",
-              "GEMINI.md"
-            ]
-          }
-        },
-        "settings": {
-          "base": "root",
-          "segments": [
-            ".gemini",
-            "settings.json"
-          ]
-        },
-        "hooksDirectory": {
-          "base": "root",
-          "segments": [
-            ".gemini",
-            "hooks"
-          ]
+        "nest": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Re-read https://learn.chatgpt.com/docs/agent-configuration/subagents for whether a subagent can start a subagent.",
+          "verifiedOn": "2026-10-23",
+          "fallback": "sequential",
+          "reason": "vendor docs silent: https://learn.chatgpt.com/docs/agent-configuration/subagents was read on 2026-10-23 and does not state whether a subagent can start a subagent; nothing is inferred from another harness or a model name."
         }
       },
-      "capabilities": {
-        "instructions": {
-          "status": "supported",
+      "agentLimits": {
+        "readOnly": {
+          "status": "unenforced",
+          "reason": "vendor docs say `sandbox_mode` in an agent file does not override the parent session; DoFlow keeps writing it (followup-tracked)",
           "evidence": [
-            "https://geminicli.com/docs/cli/gemini-md/"
+            "https://learn.chatgpt.com/docs/agent-configuration/subagents"
           ],
-          "verification": "Confirm GEMINI.md is loaded by Gemini CLI."
+          "verifiedOn": "2026-10-23"
         },
-        "skills": {
-          "status": "supported",
+        "toolScope": {
+          "status": "unenforced",
+          "reason": "an agent file can only switch features off (features.shell_tool); it has no read, edit, web or subagent allowlist, so DoFlow projects no scope",
           "evidence": [
-            "https://geminicli.com/docs/cli/skills/"
+            "https://learn.chatgpt.com/docs/agent-configuration/subagents"
           ],
-          "verification": "Confirm the installed skill is discoverable."
-        },
-        "agents": {
+          "verifiedOn": "2026-10-27"
+        }
+      },
+      "worker": {
+        "profile": null,
+        "billing": "unknown",
+        "cli": {
           "status": "supported",
           "evidence": [
-            "https://geminicli.com/docs/core/subagents"
+            "bench/inventory/coverage.json → codex --version → codex-cli 0.162.1"
           ],
-          "note": "Flat <name>.md files; frontmatter limited to Gemini's documented keys by the gemini-agents transform.",
-          "verification": "Confirm Gemini CLI lists the installed agents from .gemini/agents."
+          "verification": "Run `codex --version` and compare the output with bench/inventory/coverage.json.",
+          "verifiedOn": "2026-10-12",
+          "binary": "codex",
+          "versionArgv": [
+            "--version"
+          ]
         },
-        "scripts": {
+        "oneShot": {
           "status": "supported",
           "evidence": [
-            "https://geminicli.com/docs/reference/tools",
-            "https://geminicli.com/docs/cli/creating-skills"
+            "core/worker-evidence/codex/2026-10-18-cli-check.json",
+            "core/worker-evidence/codex/2026-10-18-live-run-read-only.json",
+            "core/worker-evidence/codex/2026-10-18-live-run-edit.json"
           ],
-          "verification": "Confirm run_shell_command executes an installed helper and that a bundled skill scripts/ directory is reachable."
-        },
-        "templates": {
-          "status": "supported",
-          "evidence": [
-            "https://geminicli.com/docs/cli/creating-skills",
-            "https://geminicli.com/docs/cli/skills-best-practices"
+          "verification": "Run `node bin/doflow.js worker --action evidence --harness codex --checks core/worker-evidence/codex/checks.json --out core/worker-evidence/codex/2026-10-18-cli-check.json` against the installed codex and read the matched help lines. Live run 2026-10-18 (codex-cli 0.163.0): runs w-067a85a5cc2d and w-821933d703be each exited 0 with the prompt on stdin under `--ephemeral -`, report status success, result offered.",
+          "verifiedOn": "2026-10-18",
+          "argv": [
+            "--ephemeral",
+            "-"
           ],
-          "verification": "Confirm the installed template tree is readable by the agent."
+          "promptVia": "stdin"
         },
-        "modes": {
-          "status": "different",
-          "evidence": [
-            "https://geminicli.com/docs/cli/gemini-md/"
-          ],
-          "verification": "Confirm mode guidance is available through instructions."
-        },
-        "settings": {
-          "status": "different",
-          "evidence": [
-            "https://geminicli.com/docs/cli/settings/"
-          ],
-          "verification": "Verify only adapter-supported native settings."
-        },
-        "hooks": {
+        "structuredOutput": {
           "status": "supported",
           "evidence": [
-            "https://geminicli.com/docs/hooks/"
+            "core/worker-evidence/codex/2026-10-18-cli-check.json",
+            "core/worker-evidence/codex/2026-10-18-live-run-read-only.json",
+            "core/worker-evidence/codex/2026-10-18-live-run-edit.json"
           ],
-          "verification": "Exercise one installed hook event.",
-          "events": {
-            "SessionStart": {
-              "status": "supported"
-            },
-            "SessionEnd": {
-              "status": "supported"
-            },
-            "BeforeTool": {
-              "status": "supported"
-            },
-            "AfterTool": {
-              "status": "supported"
-            },
-            "PreCompress": {
-              "status": "supported"
-            },
-            "UserPromptSubmit": {
-              "status": "unavailable",
-              "note": "No Gemini equivalent; the nearest native hook is BeforeAgent, which fires once before planning and can block the turn or inject context — not a per-prompt pre-submission gate. DoFlow's once-per-session `/do` suggestion is not hook-delivered here and reaches this harness through skill descriptions only."
-            },
-            "Stop": {
-              "status": "unavailable",
-              "note": "No exact match; AfterAgent fires at agent-loop end and can halt or retry the turn, which is coarser than Claude's Stop."
-            },
-            "SubagentStart": {
-              "status": "unavailable",
-              "note": "BeforeAgent/AfterAgent bracket the whole agent loop; they are not subagent lifecycle events."
-            },
-            "SubagentStop": {
-              "status": "unavailable",
-              "note": "BeforeAgent/AfterAgent bracket the whole agent loop; they are not subagent lifecycle events."
-            },
-            "PostToolUseFailure": {
-              "status": "unavailable",
-              "note": "AfterTool fires regardless of outcome; failure cannot be isolated."
-            },
-            "PermissionDenied": {
-              "status": "unavailable",
-              "note": "Gemini exposes no permission-decision event."
-            }
+          "verification": "Run `node bin/doflow.js worker --action evidence --harness codex --checks core/worker-evidence/codex/checks.json --out core/worker-evidence/codex/2026-10-18-cli-check.json` against the installed codex and read the matched help lines. Live run 2026-10-18 (codex-cli 0.163.0): both runs launched with `--json -o <last-message-file>`, their stdout parsed by codex-exec-json-v1, report status success, result offered.",
+          "verifiedOn": "2026-10-18",
+          "argv": [
+            "--json",
+            "-o",
+            "{lastMessageFile}"
+          ],
+          "parser": "codex-exec-json-v1",
+          "quotaSignals": {
+            "signals": [
+              "rate limit",
+              "usage limit",
+              "quota exceeded",
+              "too many requests",
+              "resource_exhausted"
+            ],
+            "basis": "unverified",
+            "evidence": []
           }
         },
-        "mcp": {
-          "status": "different",
+        "readOnly": {
+          "status": "supported",
           "evidence": [
-            "https://geminicli.com/docs/tools/mcp-server/"
+            "core/worker-evidence/codex/2026-10-18-cli-check.json",
+            "core/worker-evidence/codex/2026-10-18-live-run-read-only.json"
           ],
-          "verification": "Verify only adapter-supported MCP registration."
+          "verification": "Run `node bin/doflow.js worker --action evidence --harness codex --checks core/worker-evidence/codex/checks.json --out core/worker-evidence/codex/2026-10-18-cli-check.json` against the installed codex and read the matched help lines. Live run 2026-10-18 (codex-cli 0.163.0): run w-067a85a5cc2d under `exec -s read-only` ended with report status success, result offered, a clean worktree and unchanged HEAD and refs.",
+          "verifiedOn": "2026-10-18",
+          "argv": [
+            "exec",
+            "-s",
+            "read-only"
+          ]
         },
-        "plugin": {
-          "status": "different",
-          "evidence": [
-            "https://geminicli.com/docs/extensions/"
-          ],
-          "note": "Extensions (gemini-extension.json) now package skills, hooks, sub-agents, and MCP; security.blockGitExtensions/allowedExtensions can gate Git-sourced installs. Context: Google sunset Gemini CLI for consumer tiers on 2026-06-18 — enterprise/paid-API use only; Antigravity CLI (GA 2026-05-19, antigravity.google/docs/gcli-migration) is the successor surface carrying skills/hooks/subagents/plugins.",
-          "verification": "Verify extensions through the native host workflow."
-        }
-      },
-      "orchestration": {
-        "spawn": {
+        "spawnDenial": {
           "status": "supported",
           "evidence": [
-            "https://geminicli.com/docs/core/subagents → \"When the main agent calls the tool, it delegates the task to the subagent.\"",
-            "https://geminicli.com/docs/core/subagents → \"You can explicitly direct a task to a specific subagent by using the @ symbol followed by the subagent's name at the beginning of your prompt.\""
+            "core/worker-evidence/codex/2026-10-18-cli-check.json",
+            "core/worker-evidence/codex/2026-10-18-live-run-read-only.json",
+            "core/worker-evidence/codex/2026-10-18-live-run-edit.json"
           ],
-          "verification": "Prompt with @<subagent> and confirm the subagent runs.",
-          "verifiedOn": "2026-10-12"
+          "verification": "Run `node bin/doflow.js worker --action evidence --harness codex --checks core/worker-evidence/codex/checks.json --out core/worker-evidence/codex/2026-10-18-cli-check.json` against the installed codex and read the matched help lines. Live run 2026-10-18 (codex-cli 0.163.0): both runs launched with `--disable multi_agent --disable multi_agent_v2`, report status success, deniedCount 0 (no spawn was attempted, so a denial was not exercised).",
+          "verifiedOn": "2026-10-18",
+          "argv": [
+            "--disable",
+            "multi_agent",
+            "--disable",
+            "multi_agent_v2"
+          ]
         },
-        "wait": {
+        "runnableProbe": {
           "status": "supported",
           "evidence": [
-            "https://geminicli.com/docs/core/subagents → \"Once the subagent completes its task, it reports back to the main agent with its findings.\""
+            "core/worker-evidence/codex/2026-10-18-cli-check.json"
           ],
-          "verification": "Delegate a task and confirm the main agent continues from the subagent report.",
-          "verifiedOn": "2026-10-12"
+          "verification": "Run `node bin/doflow.js worker --action evidence --harness codex --checks core/worker-evidence/codex/checks.json --out core/worker-evidence/codex/2026-10-18-cli-check.json` against the installed codex and read the matched help lines",
+          "verifiedOn": "2026-10-18",
+          "argv": [
+            "exec",
+            "--help"
+          ]
         },
-        "status": {
+        "hooksProbe": {
           "status": "unknown",
           "evidence": [],
-          "verification": "Re-read https://geminicli.com/docs/core/subagents and the Gemini CLI changelog for a status operation.",
-          "verifiedOn": "2026-10-12",
-          "fallback": "sequential",
-          "reason": "https://geminicli.com/docs/core/subagents was read on 2026-10-12 and does not state a status operation; nothing is inferred from another harness or a model name."
+          "verification": "Read codex's headless CLI documentation and `codex --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no in-repository evidence names this for codex; nothing is inferred from another harness or a model name"
         },
-        "cancel": {
+        "guidanceProbe": {
           "status": "unknown",
           "evidence": [],
-          "verification": "Re-read https://geminicli.com/docs/core/subagents for a stop operation.",
-          "verifiedOn": "2026-10-12",
-          "fallback": "sequential",
-          "reason": "https://geminicli.com/docs/core/subagents was read on 2026-10-12 and does not state a cancel operation; nothing is inferred from another harness or a model name."
+          "verification": "Read codex's headless CLI documentation and `codex --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no in-repository evidence names this for codex; nothing is inferred from another harness or a model name"
+        },
+        "loginProbe": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read codex's headless CLI documentation and `codex --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no in-repository evidence names this for codex; nothing is inferred from another harness or a model name"
+        },
+        "persistentSession": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read codex's headless CLI documentation and `codex --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no in-repository evidence names this for codex; nothing is inferred from another harness or a model name"
         },
         "resume": {
           "status": "unknown",
           "evidence": [],
-          "verification": "Re-read https://geminicli.com/docs/core/subagents for a resume operation.",
-          "verifiedOn": "2026-10-12",
-          "fallback": "manual",
-          "reason": "https://geminicli.com/docs/core/subagents was read on 2026-10-12 and does not state a resume operation; nothing is inferred from another harness or a model name."
+          "verification": "Read codex's headless CLI documentation and `codex --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no in-repository evidence names this for codex; nothing is inferred from another harness or a model name"
+        },
+        "steering": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read codex's headless CLI documentation and `codex --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no in-repository evidence names this for codex; nothing is inferred from another harness or a model name"
+        },
+        "isolatedEdit": {
+          "status": "supported",
+          "evidence": [
+            "core/worker-evidence/codex/2026-10-18-cli-check.json",
+            "core/worker-evidence/codex/2026-10-18-live-run-edit.json"
+          ],
+          "verification": "Run `node bin/doflow.js worker --action evidence --harness codex --checks core/worker-evidence/codex/checks.json --out core/worker-evidence/codex/2026-10-18-cli-check.json` against the installed codex and read the matched help lines. Live run 2026-10-18 (codex-cli 0.163.0): run w-821933d703be under `exec -s workspace-write` in an isolated attempt ended with report status success, result offered, isolation status clean and unchanged caller and attempt refs.",
+          "verifiedOn": "2026-10-18",
+          "argv": [
+            "exec",
+            "-s",
+            "workspace-write"
+          ]
+        },
+        "model": {
+          "status": "supported",
+          "evidence": [
+            "core/worker-evidence/codex/2026-10-24-cli-check.json"
+          ],
+          "verification": "Run `codex exec --help` and read the `-m, --model <MODEL>` line; record it with `node bin/doflow.js worker --action evidence --harness codex --checks core/worker-evidence/codex/checks.json --out <new cli-check path>` (check exec-model)",
+          "verifiedOn": "2026-10-24",
+          "argv": [
+            "-m",
+            "{model}"
+          ]
+        },
+        "modelChecks": []
+      },
+      "contextProfile": {
+        "capacityTokens": {
+          "value": 200000,
+          "source": "developers.openai.com/api/docs/guides/prompt-caching",
+          "verifiedOn": "2026-10-20"
+        },
+        "reserveTokens": {
+          "value": 20000,
+          "source": "model_auto_compact_token_limit config reference",
+          "verifiedOn": "2026-10-20"
+        },
+        "tokenTelemetry": {
+          "value": "none",
+          "source": "delivery-store.ts:10",
+          "verifiedOn": "2026-10-20"
+        },
+        "toolResultLimitBytes": {
+          "value": 1048576,
+          "source": "codex-cli 0.163.0 exec stdout buffer limit",
+          "verifiedOn": "2026-10-20"
+        },
+        "retention": {
+          "value": "unsupported",
+          "source": "session transcript inspection (git context developer-role message ephemeral)",
+          "verifiedOn": "2026-10-20"
         }
       },
       "scopePrecedence": {
@@ -742,11 +947,32 @@
           "project"
         ],
         "evidence": [
-          "https://geminicli.com/docs/cli/gemini-md/"
+          "https://learn.chatgpt.com/docs/agent-configuration/agents-md"
         ],
-        "note": "The CLI loads context files in the following order: (1) global context file at ~/.gemini/GEMINI.md, (2) environment/workspace context files (project directory and its parents), (3) just-in-time files read on demand from directories a tool touches. The page states this loading order but explicitly does not state a conflict-resolution rule -- contents are concatenated and sent to the model together. Order here reflects DoFlow's two tracked scopes; the documented third, finer-grained JIT tier is omitted. The load order is documented but the page explicitly states no conflict-resolution rule and describes contents being concatenated and sent together, so no copy can be said to win. Order established, winner not.",
+        "note": "AGENTS.md discovery is documented as: \"1. Global scope: In your Codex home directory ... Codex reads AGENTS.override.md if it exists. Otherwise, Codex reads AGENTS.md. 2. Project scope: Starting at the project root ...\", then \"Codex concatenates files from the root down ... Files closer to your current directory override earlier guidance because they appear later in the combined prompt.\" Codex concatenates and states that files closer to the working directory override earlier guidance because they appear later, so the LAST scope consulted takes effect: the project copy wins despite being consulted second.",
         "determinedOn": "2026-09-27",
-        "mode": "unestablished"
+        "mode": "last-wins"
+      },
+      "primaryProbe": {
+        "model": "payload",
+        "events": [
+          "PreToolUse",
+          "SessionStart",
+          "Stop"
+        ],
+        "status": "unverified",
+        "evidence": [],
+        "verifiedOn": null,
+        "reason": "Codex hook payloads carry the session model (codex-rs/hooks schema); no live capture recorded yet."
+      },
+      "nativeTelemetry": {
+        "signals": [
+          "events"
+        ],
+        "contentDefaults": "metadata-only",
+        "inboundTraceparent": "unsupported",
+        "joinKey": "session_id",
+        "verifiedOn": "2026-10-20"
       }
     },
     {
@@ -862,7 +1088,7 @@
           "evidence": [
             "https://opencode.ai/docs/agents"
           ],
-          "note": "OpenCode supports native agent definitions as Markdown files with frontmatter (description, mode primary|subagent, model, temperature, permission, hidden) discovered at .opencode/agents/ (project) and ~/.config/opencode/agents/ (global); agents are also definable in opencode.json's agent key. DoFlow still projects specialist guidance through instructions; direct projection into these directories is planned and will reuse copy-tree's layout rename.",
+          "note": "OpenCode supports native agent definitions as Markdown files with frontmatter (description, mode primary|subagent|all, model, temperature, permission, hidden) discovered at .opencode/agents/ (project) and ~/.config/opencode/agents/ (global); agents are also definable in opencode.json's agent key. DoFlow projects each shared agent spec into those directories through the opencode-agents renderer: description, mode subagent, and a permission block (edit and bash set to deny, the keys opencode.ai/docs/permissions documents) for read-only agents; model is omitted because OpenCode has no 'inherit' value, so a subagent uses the model of the primary agent that invoked it.",
           "verification": "Confirm a native agent under .opencode/agents/ or ~/.config/opencode/agents/ is selectable (Tab cycles primary agents; @ mentions invoke subagents)."
         },
         "scripts": {
@@ -1013,6 +1239,201 @@
           "verifiedOn": "2026-10-12",
           "fallback": "manual",
           "reason": "https://opencode.ai/docs/agents was read on 2026-10-12 and does not state a resume operation; nothing is inferred from another harness or a model name."
+        },
+        "nest": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Re-read https://opencode.ai/docs/agents for whether a subagent can start a subagent.",
+          "verifiedOn": "2026-10-23",
+          "fallback": "sequential",
+          "reason": "vendor docs silent: https://opencode.ai/docs/agents was read on 2026-10-23 and does not state whether a subagent can start a subagent; nothing is inferred from another harness or a model name."
+        }
+      },
+      "agentLimits": {
+        "readOnly": {
+          "status": "native",
+          "apply": {
+            "permission": {
+              "edit": "deny",
+              "bash": "deny"
+            }
+          },
+          "evidence": [
+            "https://opencode.ai/docs/agents",
+            "https://opencode.ai/docs/permissions"
+          ],
+          "checked": "docs",
+          "verifiedOn": "2026-10-23"
+        },
+        "toolScope": {
+          "status": "native",
+          "field": "permission",
+          "form": "closed",
+          "map": {
+            "read": [
+              "read",
+              "glob",
+              "grep",
+              "lsp",
+              "skill",
+              "todowrite"
+            ],
+            "edit": [
+              "edit"
+            ],
+            "shell": [
+              "bash"
+            ],
+            "web": [
+              "webfetch",
+              "websearch"
+            ],
+            "agents": [
+              "task"
+            ]
+          },
+          "mcpSelector": "{server}_*",
+          "evidence": [
+            "https://opencode.ai/docs/permissions",
+            "https://opencode.ai/docs/mcp-servers/"
+          ],
+          "checked": "docs",
+          "verifiedOn": "2026-10-27"
+        }
+      },
+      "worker": {
+        "profile": null,
+        "billing": "unknown",
+        "cli": {
+          "status": "supported",
+          "evidence": [
+            "bench/inventory/coverage.json → opencode --version → 1.18.30"
+          ],
+          "verification": "Run `opencode --version` and compare the output with bench/inventory/coverage.json.",
+          "verifiedOn": "2026-10-12",
+          "binary": "opencode",
+          "versionArgv": [
+            "--version"
+          ]
+        },
+        "oneShot": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read opencode's headless CLI documentation and `opencode --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no recorded evidence for opencode: no free check has captured its one-shot headless flag or how it reads a prompt"
+        },
+        "structuredOutput": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read opencode's headless CLI documentation and `opencode --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no captured opencode transcript: its event schema has no parser, and a parser waits for a transcript from its own probe"
+        },
+        "readOnly": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read opencode's headless CLI documentation and `opencode --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no in-repository evidence names this for opencode; nothing is inferred from another harness or a model name"
+        },
+        "spawnDenial": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read opencode's headless CLI documentation and `opencode --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no recorded evidence for opencode: no free check shows a flag that disables subagent spawning"
+        },
+        "runnableProbe": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read opencode's headless CLI documentation and `opencode --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no in-repository evidence names this for opencode; nothing is inferred from another harness or a model name"
+        },
+        "hooksProbe": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read opencode's headless CLI documentation and `opencode --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no in-repository evidence names this for opencode; nothing is inferred from another harness or a model name"
+        },
+        "guidanceProbe": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read opencode's headless CLI documentation and `opencode --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no in-repository evidence names this for opencode; nothing is inferred from another harness or a model name"
+        },
+        "loginProbe": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read opencode's headless CLI documentation and `opencode --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no in-repository evidence names this for opencode; nothing is inferred from another harness or a model name"
+        },
+        "persistentSession": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read opencode's headless CLI documentation and `opencode --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no in-repository evidence names this for opencode; nothing is inferred from another harness or a model name"
+        },
+        "resume": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read opencode's headless CLI documentation and `opencode --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no in-repository evidence names this for opencode; nothing is inferred from another harness or a model name"
+        },
+        "steering": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read opencode's headless CLI documentation and `opencode --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no in-repository evidence names this for opencode; nothing is inferred from another harness or a model name"
+        },
+        "isolatedEdit": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read opencode's headless CLI documentation and `opencode --help`; record the flag that confines edits to the working directory and its source",
+          "verifiedOn": "2026-10-16",
+          "reason": "no recorded evidence for opencode: no free check shows a flag that confines edits to the working directory"
+        },
+        "model": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read opencode's headless CLI documentation and `opencode --help`; record the flag that selects the model and its source",
+          "verifiedOn": "2026-10-24",
+          "reason": "no recorded evidence for opencode: no free check shows a flag that selects the model"
+        },
+        "modelChecks": []
+      },
+      "contextProfile": {
+        "capacityTokens": {
+          "value": 128000,
+          "source": "opencode documentation default context window",
+          "verifiedOn": "2026-10-20"
+        },
+        "reserveTokens": {
+          "value": 10000,
+          "source": "opencode documentation default context reserve",
+          "verifiedOn": "2026-10-20"
+        },
+        "tokenTelemetry": {
+          "value": "none",
+          "source": "delivery-store.ts:10",
+          "verifiedOn": "2026-10-20"
+        },
+        "toolResultLimitBytes": {
+          "value": 262144,
+          "source": "opencode cli stdout limits",
+          "verifiedOn": "2026-10-20"
+        },
+        "retention": {
+          "value": "unsupported",
+          "source": "core/registry/harnesses.json:1311-1317 (no hook projection)",
+          "verifiedOn": "2026-10-20"
         }
       },
       "scopePrecedence": {
@@ -1027,6 +1448,21 @@
         "note": "\"When opencode starts, it looks for rule files in this order: 1. Local files by traversing up from the current directory (AGENTS.md, CLAUDE.md) 2. Global file at ~/.config/opencode/AGENTS.md\", and \"The first matching file wins in each category.\" A community issue (anomalyco/opencode#9282, filed 2026-01-18) argues project and global files are actually combined rather than one overriding the other; this block records only the documented consultation order above, not that unresolved merge-vs-override dispute. The rules doc states the first matching file wins, so the order lists the winner first: the project copy is used.",
         "determinedOn": "2026-09-27",
         "mode": "first-wins"
+      },
+      "primaryProbe": {
+        "model": "none",
+        "events": [],
+        "status": "unverified",
+        "evidence": [],
+        "verifiedOn": null,
+        "reason": "The hook payload carries no model; the declaration is the only source (declared-only)."
+      },
+      "nativeTelemetry": {
+        "signals": [],
+        "contentDefaults": "metadata-only",
+        "inboundTraceparent": "unsupported",
+        "joinKey": "run_id",
+        "verifiedOn": "2026-10-20"
       }
     },
     {
@@ -1039,7 +1475,6 @@
       ],
       "nativeTargets": {
         "instructions": "AGENTS.md",
-        "settings": ".pi/settings.json",
         "mcp": ".pi/mcp.json"
       },
       "paths": {
@@ -1058,23 +1493,6 @@
             ]
           }
         },
-        "settings": {
-          "project": {
-            "base": "root",
-            "segments": [
-              ".pi",
-              "settings.json"
-            ]
-          },
-          "user": {
-            "base": "root",
-            "segments": [
-              ".pi",
-              "agent",
-              "settings.json"
-            ]
-          }
-        },
         "instruction": {
           "project": {
             "base": "root",
@@ -1155,51 +1573,53 @@
           "verification": "Confirm mode guidance is available through instructions."
         },
         "settings": {
-          "status": "supported",
+          "status": "unavailable",
           "evidence": [
             "https://pi.dev/docs/latest/settings"
           ],
-          "verification": "Confirm ~/.pi/agent/settings.json (or .pi/settings.json) retains user keys and only DoFlow-owned entries change."
+          "verification": "Report the capability gap; DoFlow does not write Pi's settings file.",
+          "note": "Pi documents .pi/settings.json (and ~/.pi/agent/settings.json), but DoFlow writes no key in either: the adapter leaves them untouched and materialises the skills tree instead of registering it."
         },
         "hooks": {
           "status": "different",
           "evidence": [
-            "https://pi.dev/docs/latest/extensions"
+            "https://pi.dev/docs/latest/extensions",
+            "https://raw.githubusercontent.com/earendil-works/pi/main/packages/coding-agent/CHANGELOG.md"
           ],
-          "note": "Pi lifecycle hooks are TypeScript extension modules registered through pi.on(), executing arbitrary code with full permissions — a different trust model from the shell hooks DoFlow ships, so no hook projection is attempted.",
-          "verification": "Report that DoFlow installs no Pi extension and its shell hooks do not apply here.",
+          "note": "DoFlow installs a ledger-owned extension at user scope or project scope that registers tool_call through pi.on() and invokes the shared lifecycle bridge. Project scope requires project trust.",
+          "verification": "Verify the installed extension fingerprint, resolved shared bridge path, bash/jq prerequisites, and the project-trust prerequisite for project scope.",
           "events": {
             "SessionStart": {
               "status": "different",
-              "note": "DoFlow projects shell hooks; Pi requires a code module, so no hook is installed. Native equivalent: session_start, which carries reason:\"reload\" on /reload."
+              "note": "DoFlow does not project a hook for this event; its separate code extension guards tool_call. Native equivalent: session_start, which carries reason:\"reload\" on /reload."
             },
             "SessionEnd": {
               "status": "different",
-              "note": "DoFlow projects shell hooks; Pi requires a code module, so no hook is installed. Native equivalent: session_shutdown."
+              "note": "DoFlow does not project a hook for this event; its separate code extension guards tool_call. Native equivalent: session_shutdown."
             },
             "UserPromptSubmit": {
               "status": "different",
-              "note": "DoFlow projects shell hooks; Pi requires a code module, so no hook is installed. Native equivalent: input, which fires before skill expansion. DoFlow's once-per-session `/do` suggestion is not hook-delivered here and reaches this harness through skill descriptions only."
+              "note": "DoFlow does not project a prompt hook; its separate code extension guards tool_call. Native equivalent: input, which fires before skill expansion. DoFlow's once-per-session `/do` suggestion reaches this harness through skill descriptions only."
             },
             "PreCompact": {
               "status": "different",
-              "note": "DoFlow projects shell hooks; Pi requires a code module, so no hook is installed. Native equivalent: session_before_compact, which may cancel or supply a summary."
+              "note": "DoFlow does not project a hook for this event; its separate code extension guards tool_call. Native equivalent: session_before_compact, which may cancel or supply a summary."
             },
             "PostCompact": {
               "status": "different",
-              "note": "DoFlow projects shell hooks; Pi requires a code module, so no hook is installed. Native equivalent: compaction_end."
+              "note": "DoFlow does not project a hook for this event; its separate code extension guards tool_call. Native equivalent: session_compact (extension event; compaction_end is an RPC event)."
             },
             "PreToolUse": {
               "status": "different",
-              "note": "DoFlow projects shell hooks; Pi requires a code module, so no hook is installed. Native equivalent: tool_execution_start, exposed through session.subscribe rather than pi.on."
+              "note": "DoFlow's user- or project-scope extension evaluates tool_call before execution; tool_execution_start is observation-only."
             },
             "PostToolUse": {
               "status": "different",
-              "note": "DoFlow projects shell hooks; Pi requires a code module, so no hook is installed. Native equivalent: tool_execution_end, exposed through session.subscribe rather than pi.on."
+              "note": "DoFlow does not register Pi tool_execution_end."
             },
             "Stop": {
               "status": "different",
-              "note": "DoFlow projects shell hooks; Pi requires a code module, so no hook is installed. Native equivalent: agent_end."
+              "note": "DoFlow does not project a hook for this event; its separate code extension guards tool_call. Native equivalent: agent_end."
             },
             "SubagentStart": {
               "status": "unavailable",
@@ -1228,9 +1648,9 @@
           "evidence": [
             "https://pi.dev/docs/latest/mcp",
             "https://github.com/earendil-works/pi/blob/main/packages/coding-agent/docs/mcp.md",
-            "https://github.com/earendil-works/pi/blob/main/packages/coding-agent/CHANGELOG.md"
+            "https://raw.githubusercontent.com/earendil-works/pi/main/packages/coding-agent/CHANGELOG.md"
           ],
-          "note": "Pi's built-in MCP (Pi 0.99.0 or later) reads stdio and HTTP servers from the mcpServers map of .pi/mcp.json (project, read only after the project is trusted) and ~/.pi/agent/mcp.json (user, or $PI_CODING_AGENT_DIR/mcp.json); a project entry replaces a user entry with the same name, and from Pi 1.0.1 a project entry without command or url overrides only enabled, exposure and toolExposure of that user entry. DoFlow writes stdio entries only. An installed extension that registers /mcp, such as pi-mcp-adapter, replaces the built-in and Pi then does not read mcp.json.",
+          "note": "Pi's built-in MCP (Pi 0.99.0 or later) reads stdio and HTTP servers from the mcpServers map of .pi/mcp.json (project, read only after the project is trusted) and ~/.pi/agent/mcp.json (user, or $PI_CODING_AGENT_DIR/mcp.json); a project entry replaces a user entry with the same name, and from Pi 1.0.1 a project entry without command, url or type overrides only enabled, exposure and toolExposure of that user entry. DoFlow writes stdio entries only. An installed extension that registers /mcp, such as pi-mcp-adapter, replaces the built-in and Pi then does not read mcp.json.",
           "verification": "Confirm the selected MCP servers appear in .pi/mcp.json (project, after trusting the project) or ~/.pi/agent/mcp.json (global) and connect via /mcp in Pi 0.99.0 or later with no extension registering /mcp."
         },
         "plugin": {
@@ -1283,6 +1703,166 @@
           "verifiedOn": "2026-10-12",
           "fallback": "manual",
           "reason": "https://github.com/earendil-works/pi/blob/main/packages/coding-agent/README.md states no resume operation; https://pi.dev/docs/latest/extensions states no subagent operation. Nothing is inferred."
+        },
+        "nest": {
+          "status": "unsupported",
+          "evidence": [
+            "https://github.com/earendil-works/pi/blob/main/packages/coding-agent/README.md → \"Pi ships with powerful defaults but skips features like sub-agents and plan mode.\""
+          ],
+          "verification": "Re-read https://github.com/earendil-works/pi/blob/main/packages/coding-agent/README.md for a core subagent feature.",
+          "verifiedOn": "2026-10-23",
+          "fallback": "sequential"
+        }
+      },
+      "agentLimits": {
+        "readOnly": {
+          "status": "unenforced",
+          "reason": "no agent surface",
+          "evidence": [
+            "https://pi.dev/docs/latest/extensions"
+          ],
+          "verifiedOn": "2026-10-23"
+        },
+        "toolScope": {
+          "status": "unenforced",
+          "reason": "no agent surface",
+          "evidence": [],
+          "verifiedOn": "2026-10-27"
+        }
+      },
+      "worker": {
+        "profile": null,
+        "billing": "unknown",
+        "cli": {
+          "status": "supported",
+          "evidence": [
+            "bench/inventory/coverage.json → pi --version → 1.1.0"
+          ],
+          "verification": "Run `pi --version` and compare the output with bench/inventory/coverage.json.",
+          "verifiedOn": "2026-10-12",
+          "binary": "pi",
+          "versionArgv": [
+            "--version"
+          ]
+        },
+        "oneShot": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read pi's headless CLI documentation and `pi --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no recorded evidence for pi: no free check has captured its one-shot headless flag or how it reads a prompt"
+        },
+        "structuredOutput": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read pi's headless CLI documentation and `pi --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no captured pi transcript: its event schema has no parser, and a parser waits for a transcript from its own probe"
+        },
+        "readOnly": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read pi's headless CLI documentation and `pi --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no in-repository evidence names this for pi; nothing is inferred from another harness or a model name"
+        },
+        "spawnDenial": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read pi's headless CLI documentation and `pi --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no recorded evidence for pi: no free check shows a flag that disables subagent spawning"
+        },
+        "runnableProbe": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read pi's headless CLI documentation and `pi --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no in-repository evidence names this for pi; nothing is inferred from another harness or a model name"
+        },
+        "hooksProbe": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read pi's headless CLI documentation and `pi --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no in-repository evidence names this for pi; nothing is inferred from another harness or a model name"
+        },
+        "guidanceProbe": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read pi's headless CLI documentation and `pi --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no in-repository evidence names this for pi; nothing is inferred from another harness or a model name"
+        },
+        "loginProbe": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read pi's headless CLI documentation and `pi --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no in-repository evidence names this for pi; nothing is inferred from another harness or a model name"
+        },
+        "persistentSession": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read pi's headless CLI documentation and `pi --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no in-repository evidence names this for pi; nothing is inferred from another harness or a model name"
+        },
+        "resume": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read pi's headless CLI documentation and `pi --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no in-repository evidence names this for pi; nothing is inferred from another harness or a model name"
+        },
+        "steering": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read pi's headless CLI documentation and `pi --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no in-repository evidence names this for pi; nothing is inferred from another harness or a model name"
+        },
+        "isolatedEdit": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read pi's headless CLI documentation and `pi --help`; record the flag that confines edits to the working directory and its source",
+          "verifiedOn": "2026-10-16",
+          "reason": "no recorded evidence for pi: no free check shows a flag that confines edits to the working directory"
+        },
+        "model": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read pi's headless CLI documentation and `pi --help`; record the flag that selects the model and its source",
+          "verifiedOn": "2026-10-24",
+          "reason": "no recorded evidence for pi: no free check shows a flag that selects the model"
+        },
+        "modelChecks": []
+      },
+      "contextProfile": {
+        "capacityTokens": {
+          "value": 128000,
+          "source": "pi-mono coding-agent documentation",
+          "verifiedOn": "2026-10-20"
+        },
+        "reserveTokens": {
+          "value": 10000,
+          "source": "pi-mono coding-agent documentation",
+          "verifiedOn": "2026-10-20"
+        },
+        "tokenTelemetry": {
+          "value": "none",
+          "source": "delivery-store.ts:10",
+          "verifiedOn": "2026-10-20"
+        },
+        "toolResultLimitBytes": {
+          "value": 262144,
+          "source": "pi extension runner stdout limits",
+          "verifiedOn": "2026-10-20"
+        },
+        "retention": {
+          "value": "unsupported",
+          "source": "pi/extensions/doflow-guard.js:128-158 (no sendMessage/context event used)",
+          "verifiedOn": "2026-10-20"
         }
       },
       "scopePrecedence": {
@@ -1293,6 +1873,23 @@
         "note": "The question was asked and the documentation is silent: the skills doc names both `.agents/skills/` (project, discovered walking up from the working directory) and `~/.agents/skills/` (user, under ~/.pi/agent) and states only that \"name collisions keep the first discovered skill and produce a warning\" -- it never states which location is discovered first, and no other primary Pi doc found in this pass states one either. Resolution mode is likewise unestablished: with no order documented there is nothing for a mode to qualify.",
         "determinedOn": "2026-09-27",
         "mode": "unestablished"
+      },
+      "primaryProbe": {
+        "model": "payload",
+        "events": [
+          "tool_call"
+        ],
+        "status": "unverified",
+        "evidence": [],
+        "verifiedOn": null,
+        "reason": "The DoFlow pi extension forwards ctx.model.id (task B.3); no live capture recorded yet."
+      },
+      "nativeTelemetry": {
+        "signals": [],
+        "contentDefaults": "metadata-only",
+        "inboundTraceparent": "unsupported",
+        "joinKey": "session_id",
+        "verifiedOn": "2026-10-20"
       }
     },
     {
@@ -1306,7 +1903,8 @@
       "nativeTargets": {
         "instructions": ".github/copilot-instructions.md",
         "agents": ".github/agents",
-        "mcp": ".mcp.json"
+        "mcp": ".mcp.json",
+        "hooks": ".github/hooks"
       },
       "paths": {
         "skillsConfigDir": {
@@ -1370,23 +1968,37 @@
           "project": {
             "base": "root",
             "segments": [
-              ".github",
-              "copilot-instructions.md"
+              ".github",
+              "copilot-instructions.md"
+            ]
+          }
+        },
+        "mcp": {
+          "project": {
+            "base": "root",
+            "segments": [
+              ".mcp.json"
+            ]
+          },
+          "user": {
+            "base": "root",
+            "segments": [
+              ".copilot",
+              "mcp-config.json"
             ]
           }
         },
-        "mcp": {
+        "hooksConfigDir": {
           "project": {
             "base": "root",
             "segments": [
-              ".mcp.json"
+              ".github"
             ]
           },
           "user": {
             "base": "root",
             "segments": [
-              ".copilot",
-              "mcp-config.json"
+              ".copilot"
             ]
           }
         }
@@ -1396,6 +2008,7 @@
           "status": "supported",
           "evidence": [
             "https://docs.github.com/en/copilot/how-tos/copilot-cli/customize-copilot",
+            "https://docs.github.com/en/copilot/how-tos/copilot-cli/customize-copilot/add-mcp-servers",
             "https://docs.github.com/en/copilot/how-tos/copilot-cli/customize-copilot/add-custom-instructions"
           ],
           "verification": "Confirm .github/copilot-instructions.md is loaded by Copilot CLI. A user-level ~/.copilot/copilot-instructions.md (or $COPILOT_HOME/copilot-instructions.md) also exists upstream; DoFlow writes nothing there."
@@ -1413,7 +2026,7 @@
             "https://docs.github.com/en/copilot/how-tos/copilot-cli/customize-copilot/create-custom-agents-for-cli",
             "https://docs.github.com/en/copilot/reference/custom-agents-configuration"
           ],
-          "note": "The on-disk agent file format is `.agent.md` with YAML frontmatter, confirmed against the custom-agents-configuration reference: a required `description`, optional `name`, `tools`, `model`, `disable-model-invocation`, `user-invocable`, `mcp-servers`, and `metadata` fields, with the Markdown body below the frontmatter as the agent's instructions. The adapter renames each core/shared/agent-specs/<name>.md file to <name>.agent.md via copy-tree's layout mechanism on the way out; unrecognized frontmatter keys pass through untouched, the same posture Claude/Codex/Gemini's agent projections already take.",
+          "note": "The on-disk agent file format is `.agent.md` with YAML frontmatter, confirmed against the custom-agents-configuration reference: a required `description`, optional `name`, `tools`, `model`, `target` (`vscode` or `github-copilot`), `disable-model-invocation`, `user-invocable`, `mcp-servers`, `metadata` and `include-custom-instructions` (follow repository custom instructions when run as a subagent) fields; `infer` is retired in favour of `disable-model-invocation` and `user-invocable`, with the Markdown body below the frontmatter as the agent's instructions. The adapter renames each core/shared/agent-specs/<name>.md file to <name>.agent.md via copy-tree's layout mechanism on the way out; unrecognized frontmatter keys pass through untouched, the same posture Claude/Codex's agent projections already take.",
           "verification": "Confirm an installed custom agent under ~/.copilot/agents or .github/agents is discoverable and selectable by Copilot CLI."
         },
         "scripts": {
@@ -1439,61 +2052,61 @@
           "verification": "Confirm mode guidance is available through instructions."
         },
         "settings": {
-          "status": "supported",
+          "status": "unavailable",
           "evidence": [
             "https://docs.github.com/en/copilot/reference/copilot-cli-reference/cli-config-dir-reference"
           ],
-          "note": "Copilot CLI documents a full settings stack (2026): ~/.copilot/settings.json (user), .github/copilot/settings.json (repo, committed) and .github/copilot/settings.local.json (personal), merged in that order. Documented keys include hooks, disableAllHooks, disabledMcpServers, enabledMcpServers, disabledSkills, skillDirectories, subagents.agents and enabledPlugins. DoFlow merges named keys it owns and never replaces the file, the same posture as its opencode.json merge.",
-          "verification": "Confirm .github/copilot/settings.json retains user keys and only DoFlow-owned keys change; run /settings inside Copilot CLI to confirm the file loaded."
+          "note": "Copilot CLI documents a settings stack (~/.copilot/settings.json, .github/copilot/settings.json, .github/copilot/settings.local.json), but DoFlow writes none of those files.",
+          "verification": "Report the capability gap; DoFlow does not write Copilot CLI's settings files."
         },
         "hooks": {
-          "status": "different",
+          "status": "supported",
           "evidence": [
             "https://docs.github.com/en/copilot/how-tos/copilot-cli/customize-copilot/use-hooks",
             "https://docs.github.com/en/copilot/reference/hooks-reference"
           ],
-          "note": "Copilot CLI documented a full hook surface (2026): .github/hooks/*.json (repo) and ~/.copilot/hooks/ (user), shape {\"version\":1,\"hooks\":{\"<camelCase event>\":[entries]}}, command entries fail-closed on non-zero exit, preToolUse decides via stdout JSON {permissionDecision}. DoFlow wires NONE of it yet, deliberately: its shipped scripts are Claude-payload-coupled (tool names Edit|Write|MultiEdit, .session_id/.transcript_path stdin fields, CLAUDE_CONFIG_DIR/CLAUDE_PROJECT_DIR envs). Projecting them onto Copilot's unverified payload schemas would install hooks that silently misfire — recorded here instead of imitated.",
-          "verification": "Report that no Copilot hook is installed; revisit once payload schemas are verified in a live session.",
+          "note": "Surface chosen 2026-10-27 from a live capture (Copilot CLI 1.0.103, `copilot -p`, agent-docs/maintain/issue-21): camelCase events in .github/hooks/*.json (repo) and $COPILOT_HOME or ~/.copilot/hooks/ (user), shape {version:1,hooks:{<event>:[{type:command,bash,cwd,timeoutSec}]}}. camelCase fired sessionStart, sessionEnd, userPromptSubmitted, userPromptTransformed, preToolUse, postToolUse, permissionRequest, agentStop, subagentStart and subagentStop; the PascalCase aliases fired only PreToolUse, PostToolUse, SessionStart, SessionEnd, SubagentStart and SubagentStop (no UserPromptSubmit, Stop or permission event), so camelCase is the only surface that reaches agentStop. DoFlow writes .github/hooks/doflow.json plus doflow-*.sh front doors (project: <root>/.github/hooks; user: $COPILOT_HOME/hooks when COPILOT_HOME is set, else ~/.copilot/hooks) that normalise the camelCase payload to the canonical Claude-style payload (toolName bash/edit/create/apply_patch -> Bash/Edit/Write/apply_patch, toolArgs -> tool_input, sessionId/transcriptPath/agentId -> snake_case) and run the shared lifecycle bridge in ../.doflow/shared/hooks. Wired: sessionStart (session-context), preToolUse (pre-implementation-gate, pre-bash-guard, mcp-tool-guard), agentStop (stop-check; a subagent's own agentStop, which carries agentId, is skipped), subagentStart and subagentStop (subagent-audit). A guarded preToolUse policy that errors or cannot decide (jq or the policy script missing, an edit tool whose target path is not decodable) is denied under every fault profile, Copilot only. A preToolUse deny is the flat JSON {permissionDecision:\"deny\",permissionDecisionReason} on stdout with exit 0; the capture shows Copilot blocked `echo hi` with that output. Where the docs and the capture disagree the capture wins: the docs type camelCase toolArgs `unknown` (and describe tool_input as parsed from a JSON string); the capture shows toolArgs as a JSON object for bash, skill and task and as a raw string (the freeform patch) for apply_patch, and the normaliser accepts an object, a JSON string and a raw string. Copilot also sets CLAUDE_PROJECT_DIR and reads .claude/settings.json, so a project holding both a Claude and a Copilot DoFlow install runs the Claude-wired hooks on Copilot too. The guards are idempotent, but subagent-audit appends unconditionally, so one subagent completion writes two stop records (the capture holds both P:SubagentStop and subagentStop); the dedupe is not done here. Not live-verified: the agentStop block shape {decision:\"block\",reason} (documented, not exercised), MCP tool names on preToolUse, and the arguments of Copilot's `edit` and `create` tools (only apply_patch was captured; path, file_path, filePath, filename and target_file are decoded as the target, anything else is denied). The bash entry only runs under a POSIX shell; no powershell entry is written.",
+          "verification": "Run `copilot -p` in a project with `doflow install -t copilot`, confirm .github/hooks/doflow.json is loaded (hooks fire on a shell command), and that a force-push shell command is denied by pre-bash-guard. Docs read and capture taken 2026-10-27.",
           "events": {
             "SessionStart": {
-              "status": "different",
-              "note": "Native sessionStart exists; DoFlow's script reads Claude's .session_id/.cwd stdin fields."
+              "status": "supported",
+              "note": "Native sessionStart -> session-context. Copilot accepts an additionalContext output; DoFlow's policy writes state only and prints nothing."
             },
             "SessionEnd": {
               "status": "different",
-              "note": "Native sessionEnd exists; same payload-schema caveat."
+              "note": "Native sessionEnd exists (captured); no DoFlow policy is wired to it."
             },
             "PreToolUse": {
-              "status": "different",
-              "note": "Blocking contract matches ({permissionDecision} on stdout) but tool names differ from Claude's Edit|Write|MultiEdit and the gate reads CLAUDE_* envs."
+              "status": "supported",
+              "note": "Native preToolUse -> pre-implementation-gate, pre-bash-guard and mcp-tool-guard. Command hooks are fail-closed on a non-zero exit; a deny is the flat {permissionDecision,permissionDecisionReason} JSON (live-verified). Timeouts fail open."
             },
             "PostToolUse": {
               "status": "different",
-              "note": "Native postToolUse can rewrite results/inject context; not projected."
+              "note": "Native postToolUse exists (captured); not projected."
             },
             "PostToolUseFailure": {
               "status": "different",
-              "note": "Native postToolUseFailure exists — a failure-only event Claude lacks a direct name for."
+              "note": "Native postToolUseFailure exists; not projected."
             },
             "Stop": {
-              "status": "different",
-              "note": "Native agentStop forces continuation via stdout {decision:'block'} (8-block runaway cap), unlike Claude's exit-2 semantics; stop-check relies on .transcript_path."
+              "status": "supported",
+              "note": "Native agentStop -> stop-check, rendered as stdout {decision:\"block\",reason} (documented; capped by Copilot at 8 consecutive blocks; the payload carries stop_hook_active, which stop-check honours). Not live-exercised."
             },
             "UserPromptSubmit": {
               "status": "different",
-              "note": "Natives are userPromptSubmitted and userPromptTransformed; pre-submission gating semantics unverified. DoFlow's once-per-session `/do` suggestion is not hook-delivered here and reaches this harness through skill descriptions only."
+              "note": "Native userPromptSubmitted (captured) cannot return context from a command hook (the docs say command output is dropped), so DoFlow wires no hook; its once-per-session `/do` suggestion reaches this harness through skill descriptions only."
             },
             "PreCompact": {
               "status": "different",
-              "note": "Native preCompact exists."
+              "note": "Native preCompact exists; not projected."
             },
             "SubagentStart": {
-              "status": "different",
-              "note": "Native subagentStart/subagentStop exist."
+              "status": "supported",
+              "note": "Native subagentStart -> subagent-audit (captured; payload carries agentId, agentType, parentAgentId)."
             },
             "SubagentStop": {
-              "status": "different",
-              "note": "Native subagentStart/subagentStop exist."
+              "status": "supported",
+              "note": "Native subagentStop -> subagent-audit (captured; the payload carries the subagent's response)."
             },
             "PermissionDenied": {
               "status": "unavailable",
@@ -1558,6 +2171,198 @@
           "verifiedOn": "2026-10-12",
           "fallback": "manual",
           "reason": "https://docs.github.com/en/copilot/reference/copilot-cli-reference/cli-command-reference offers steering of a running subagent from its session view but states no resume of a finished subagent; nothing is inferred."
+        },
+        "nest": {
+          "status": "supported",
+          "evidence": [
+            "https://docs.github.com/en/copilot/reference/copilot-cli-reference/cli-command-reference → \"Subagents that spawn their own nested subagents appear as an indented tree\" in /tasks."
+          ],
+          "verification": "Start a subagent that starts a subagent and confirm /tasks shows the nested tree; the depth limit is not stated.",
+          "verifiedOn": "2026-10-23"
+        }
+      },
+      "agentLimits": {
+        "readOnly": {
+          "status": "native",
+          "apply": {
+            "tools": [
+              "read",
+              "search",
+              "execute",
+              "web",
+              "todo"
+            ]
+          },
+          "evidence": [
+            "https://docs.github.com/en/copilot/reference/custom-agents-configuration"
+          ],
+          "checked": "docs",
+          "verifiedOn": "2026-10-23"
+        },
+        "toolScope": {
+          "status": "native",
+          "field": "tools",
+          "form": "list",
+          "map": {
+            "read": [
+              "read",
+              "search",
+              "todo"
+            ],
+            "edit": [
+              "edit"
+            ],
+            "shell": [
+              "execute"
+            ],
+            "web": [
+              "web"
+            ],
+            "agents": [
+              "agent"
+            ]
+          },
+          "mcpSelector": "{server}/*",
+          "evidence": [
+            "https://docs.github.com/en/copilot/reference/custom-agents-configuration"
+          ],
+          "checked": "docs",
+          "verifiedOn": "2026-10-27"
+        }
+      },
+      "worker": {
+        "profile": null,
+        "billing": "unknown",
+        "cli": {
+          "status": "supported",
+          "evidence": [
+            "bench/inventory/coverage.json → copilot --version → GitHub Copilot CLI 1.0.78."
+          ],
+          "verification": "Run `copilot --version` and compare the output with bench/inventory/coverage.json.",
+          "verifiedOn": "2026-10-12",
+          "binary": "copilot",
+          "versionArgv": [
+            "--version"
+          ]
+        },
+        "oneShot": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read copilot's headless CLI documentation and `copilot --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no recorded evidence for copilot: no free check has captured its one-shot headless flag or how it reads a prompt"
+        },
+        "structuredOutput": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read copilot's headless CLI documentation and `copilot --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no captured copilot transcript: its event schema has no parser, and a parser waits for a transcript from its own probe"
+        },
+        "readOnly": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read copilot's headless CLI documentation and `copilot --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no in-repository evidence names this for copilot; nothing is inferred from another harness or a model name"
+        },
+        "spawnDenial": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read copilot's headless CLI documentation and `copilot --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no recorded evidence for copilot: no free check shows a flag that disables subagent spawning"
+        },
+        "runnableProbe": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read copilot's headless CLI documentation and `copilot --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no in-repository evidence names this for copilot; nothing is inferred from another harness or a model name"
+        },
+        "hooksProbe": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read copilot's headless CLI documentation and `copilot --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no in-repository evidence names this for copilot; nothing is inferred from another harness or a model name"
+        },
+        "guidanceProbe": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read copilot's headless CLI documentation and `copilot --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no in-repository evidence names this for copilot; nothing is inferred from another harness or a model name"
+        },
+        "loginProbe": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read copilot's headless CLI documentation and `copilot --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no in-repository evidence names this for copilot; nothing is inferred from another harness or a model name"
+        },
+        "persistentSession": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read copilot's headless CLI documentation and `copilot --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no in-repository evidence names this for copilot; nothing is inferred from another harness or a model name"
+        },
+        "resume": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read copilot's headless CLI documentation and `copilot --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no in-repository evidence names this for copilot; nothing is inferred from another harness or a model name"
+        },
+        "steering": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read copilot's headless CLI documentation and `copilot --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no in-repository evidence names this for copilot; nothing is inferred from another harness or a model name"
+        },
+        "isolatedEdit": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read copilot's headless CLI documentation and `copilot --help`; record the flag that confines edits to the working directory and its source",
+          "verifiedOn": "2026-10-16",
+          "reason": "no recorded evidence for copilot: no free check shows a flag that confines edits to the working directory"
+        },
+        "model": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read copilot's headless CLI documentation and `copilot --help`; record the flag that selects the model and its source",
+          "verifiedOn": "2026-10-24",
+          "reason": "no recorded evidence for copilot: no free check shows a flag that selects the model"
+        },
+        "modelChecks": []
+      },
+      "contextProfile": {
+        "capacityTokens": {
+          "value": 128000,
+          "source": "github copilot cli specifications",
+          "verifiedOn": "2026-10-20"
+        },
+        "reserveTokens": {
+          "value": 10000,
+          "source": "github copilot cli specifications",
+          "verifiedOn": "2026-10-20"
+        },
+        "tokenTelemetry": {
+          "value": "none",
+          "source": "delivery-store.ts:10",
+          "verifiedOn": "2026-10-20"
+        },
+        "toolResultLimitBytes": {
+          "value": 262144,
+          "source": "copilot cli execution runner limits",
+          "verifiedOn": "2026-10-20"
+        },
+        "retention": {
+          "value": "unsupported",
+          "source": "core/registry/harnesses.json:2115 (unwired hooks)",
+          "verifiedOn": "2026-10-20"
         }
       },
       "scopePrecedence": {
@@ -1572,6 +2377,21 @@
         "note": "Confirmed for custom agents only: \"If you have custom agents with the same name in both locations, the one in your home directory will be used, rather than the one in the repository\" (user overrides project). The parallel add-skills page states no such rule for skills, and no page found states one for .github/copilot-instructions.md -- this order is not shown to generalize beyond custom agents, and the general customize-copilot overview page names no precedence word at all. The source states an outcome rather than a consultation order: the home-directory copy is used rather than the repository one. Encoded as the recorded consultation order with a last-wins mode, which yields the documented winner, the user copy. Confirmed for custom agents only.",
         "determinedOn": "2026-09-27",
         "mode": "last-wins"
+      },
+      "primaryProbe": {
+        "model": "none",
+        "events": [],
+        "status": "unverified",
+        "evidence": [],
+        "verifiedOn": null,
+        "reason": "The hook payload carries no model; the declaration is the only source (declared-only)."
+      },
+      "nativeTelemetry": {
+        "signals": [],
+        "contentDefaults": "metadata-only",
+        "inboundTraceparent": "unsupported",
+        "joinKey": "run_id",
+        "verifiedOn": "2026-10-20"
       }
     },
     {
@@ -1654,7 +2474,7 @@
           "evidence": [
             "https://kiro.dev/docs/custom-agents/configuration-reference/"
           ],
-          "note": "kiro-cli discovers custom agents as .kiro/agents/<name>.json; kiro-cli 2.27.1 `kiro-cli agent list` did not list .md agents. DoFlow renders each shared agent spec to JSON (name, description, prompt, tools, hooks) through the kiro-agents transform and installs a static doflow agent beside them. A pre-existing DoFlow-owned <name>.md is removed on update. DoFlow never changes the user's default agent; run `kiro-cli chat --agent doflow` or opt in with `kiro-cli agent set-default doflow`.",
+          "note": "DoFlow writes custom agents as .kiro/agents/<name>.json. Kiro's configuration reference (read 2026-10-23) also documents Markdown agents; DoFlow does not write them, and `kiro-cli agent list` 2.27.1 did not list .md agents when last tested (not re-tested since). DoFlow renders each shared agent spec to JSON (name, description, prompt, tools, hooks) through the kiro-agents transform and installs a static doflow agent beside them. The read-only `tools` list uses the category tags read, shell and web, which are the Kiro CLI V3 vocabulary (kiro.dev/docs/cli/v3/agent-config/); CLI 2.x named tools such as fs_read and execute_bash, but Kiro's migration table lists read and shell as names a 2.x CLI also accepts, so only web is a V3-only tag and on a 2.x CLI that list may be only partly recognised (web), not wholly unrecognised (INFERENCE from the two documentation pages, not run live). A pre-existing DoFlow-owned <name>.md is removed on update. DoFlow never changes the user's default agent; run `kiro-cli chat --agent doflow` or opt in with `kiro-cli agent set-default doflow`.",
           "verification": "Confirm an installed custom agent under .kiro/agents is discoverable by Kiro."
         },
         "scripts": {
@@ -1694,14 +2514,25 @@
           "evidence": [
             "https://kiro.dev/docs/hooks/",
             "https://kiro.dev/docs/hooks/actions/",
+            "https://kiro.dev/docs/hooks/types/",
             "https://kiro.dev/docs/permissions/"
           ],
-          "note": "kiro-cli reads hooks from an agent config's `hooks` array (agentSpawn, userPromptSubmit, preToolUse, postToolUse, stop). A preToolUse hook that exits 2 blocks the tool call; any other non-zero exit warns and allows; stop is not blockable on 2.x. DoFlow writes three preToolUse hooks (pre-implementation-gate on `write`, pre-bash-guard on `shell`, mcp-tool-guard on `*`) into every rendered agent, plus agentSpawn (session context) and stop (stop-check) on the doflow agent only. The Kiro front doors translate Kiro tool names, KIRO_SESSION_ID and assistant_response to the canonical payload before running the shared policies. `.kiro/hooks/doflow.json` (flat `{version, hooks: [...]}`, PascalCase triggers) is read by the Kiro IDE and by CLI V3 (for every agent); CLI 2.x does not read it. Kiro CLI V3 also loads standalone `.kiro/hooks/*.json` (workspace) and `~/.kiro/hooks/*.json` (global) for every agent, alongside agent-profile hooks, so doflow.json runs for all agents there, and with `--agent doflow` on V3 the preToolUse checks run twice (accepted, idempotent). V3 payloads carry `session_id`, and V3 built-in tool IDs include `read_file`, `execute_bash`, `execute_pwsh`, `fs_write`, `fs_append`, `str_replace` and `delete_file`; the front doors map the write family to Write and `execute_pwsh` to Bash, and V3 MCP IDs (`mcp_<server>_<tool>`) reach mcp-tool-guard unchanged. doflow.json scopes the MCP guard with the V3 `@mcp` selector. V3 Stop: exit 0 finishes, exit 0 with stdout JSON `{\"decision\":\"block\",\"reason\":\"...\"}` starts another turn, exit 1 also starts another turn, and exit 2 does not block; the stop front door therefore turns the policy's deny into that JSON block when the payload has a session_id and keeps exit 2 with stderr for 2.x, where any non-zero exit only warns. It is not in Kiro v3's untrusted-workspace exclusion list; an untrusted workspace asks before every shell command, and whether that covers hook commands is undocumented. Observed on CLI V3 (kiro-cli 2.27.1 --v3, 2026-10-11): PreToolUse payloads carry session_id, tool_name execute_bash with tool_input.command, fs_write and str_replace with tool_input.path; the Stop payload carries only session_id, hook_event_name and cwd, with no response text or transcript path, so stop-check's unfinished-work scan has nothing to read on V3 and allows the stop.",
-          "verification": "Confirm kiro-cli reads hooks from the agent config JSON `hooks` (installed .kiro/agents/doflow.json and the specialist agents) with the expected trigger names, and that a preToolUse hook blocks only on exit 2 (any other non-zero exit warns and allows). .kiro/hooks/doflow.json is the Kiro IDE surface.",
+          "note": "kiro-cli reads hooks from an agent config's `hooks` array (agentSpawn, userPromptSubmit, preToolUse, postToolUse, stop). In a CLI 2.x agent config a preToolUse hook that exits 2 blocks the tool call and any other non-zero exit warns and allows; kiro.dev/docs/hooks/actions/ says that for its hooks any non-zero exit blocks Pre Tool Use. DoFlow note: CLI 2.x agent-config exit semantics not re-fetched (2026-10-24). Stop is not blockable on 2.x. DoFlow writes three preToolUse hooks (pre-implementation-gate on `write`, pre-bash-guard on `shell`, mcp-tool-guard on `*`) into every rendered agent, plus agentSpawn (session context) and stop (stop-check) on the doflow agent only. The Kiro front doors translate Kiro tool names, KIRO_SESSION_ID and assistant_response to the canonical payload before running the shared policies. `.kiro/hooks/doflow.json` (flat `{version, hooks: [...]}`, PascalCase triggers) is read by the Kiro IDE and by CLI V3 (for every agent); CLI 2.x does not read it. Kiro CLI V3 also loads standalone `.kiro/hooks/*.json` (workspace) and `~/.kiro/hooks/*.json` (global) for every agent, alongside agent-profile hooks, so doflow.json runs for all agents there, and with `--agent doflow` on V3 the preToolUse checks run twice (accepted, idempotent). V3 payloads carry `session_id`, and V3 built-in tool IDs include `read_file`, `execute_bash`, `execute_pwsh`, `fs_write`, `fs_append`, `str_replace` and `delete_file`; the front doors map the write family to Write and `execute_pwsh` to Bash, and V3 MCP IDs (`mcp_<server>_<tool>`) reach mcp-tool-guard unchanged. doflow.json scopes the MCP guard with the V3 `@mcp` selector. V3 Stop: exit 0 finishes, exit 0 with stdout JSON `{\"decision\":\"block\",\"reason\":\"...\"}` starts another turn, exit 1 also starts another turn, and exit 2 does not block; the stop front door therefore turns the policy's deny into that JSON block when the payload has a session_id and keeps exit 2 with stderr for 2.x, where any non-zero exit only warns. It is not in Kiro v3's untrusted-workspace exclusion list; an untrusted workspace asks before every shell command, and whether that covers hook commands is undocumented. Observed on CLI V3 (kiro-cli 2.27.1 --v3, 2026-10-11): PreToolUse payloads carry session_id, tool_name execute_bash with tool_input.command, fs_write and str_replace with tool_input.path; the Stop payload carries only session_id, hook_event_name and cwd, with no response text or transcript path, so stop-check's unfinished-work scan has nothing to read on V3 and allows the stop.",
+          "verification": "Confirm kiro-cli reads hooks from the agent config JSON `hooks` (installed .kiro/agents/doflow.json and the specialist agents) with the expected trigger names, and that, in an agent config on CLI 2.x, a preToolUse hook blocks only on exit 2 (any other non-zero exit warns and allows). .kiro/hooks/doflow.json is the Kiro IDE and CLI V3 surface, where any non-zero exit blocks Pre Tool Use.",
           "events": {
             "UserPromptSubmit": {
               "status": "different",
-              "note": "Kiro documents a native UserPromptSubmit trigger that is blockable via a non-zero exit code and exposes the prompt as the USER_PROMPT environment variable; DoFlow wires no hook to it. DoFlow's once-per-session `/do` suggestion is not hook-delivered here and reaches this harness through skill descriptions only."
+              "note": "Kiro documents a native UserPromptSubmit trigger that is blockable in the IDE only (CLI Prompt Submit hooks cannot block) and exposes the prompt as the USER_PROMPT environment variable; DoFlow wires no hook to it. DoFlow's once-per-session `/do` suggestion is not hook-delivered here and reaches this harness through skill descriptions only."
+            },
+            "SessionStart": {
+              "status": "supported"
+            },
+            "PreToolUse": {
+              "status": "supported"
+            },
+            "Stop": {
+              "status": "supported",
+              "note": "DoFlow projects Stop in .kiro/hooks/doflow.json and agent config hooks.stop. On CLI V3 / IDE, exit 0 finishes, stdout JSON {\"decision\":\"block\",\"reason\":\"...\"} or exit 1 starts another turn, while 2.x treats non-zero exit as a warning. Payload carries session_id, hook_event_name, and cwd."
             }
           }
         },
@@ -1761,6 +2592,196 @@
           "verifiedOn": "2026-10-12",
           "fallback": "manual",
           "reason": "https://kiro.dev/docs/custom-agents/subagents/ was read on 2026-10-12 and does not state a resume operation; nothing is inferred from another harness or a model name."
+        },
+        "nest": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Re-read https://kiro.dev/docs/custom-agents/subagents/ for whether a subagent can start a subagent.",
+          "verifiedOn": "2026-10-23",
+          "fallback": "sequential",
+          "reason": "vendor docs silent: https://kiro.dev/docs/custom-agents/subagents/ was read on 2026-10-23 and does not state whether a subagent can start a subagent; nothing is inferred from another harness or a model name."
+        }
+      },
+      "agentLimits": {
+        "readOnly": {
+          "status": "native",
+          "apply": {
+            "tools": [
+              "read",
+              "shell",
+              "web"
+            ]
+          },
+          "evidence": [
+            "https://kiro.dev/docs/custom-agents/configuration-reference/",
+            "https://kiro.dev/docs/cli/v3/agent-config/"
+          ],
+          "checked": "docs",
+          "verifiedOn": "2026-10-23"
+        },
+        "toolScope": {
+          "status": "native",
+          "field": "tools",
+          "form": "list",
+          "map": {
+            "read": [
+              "read"
+            ],
+            "edit": [
+              "write"
+            ],
+            "shell": [
+              "shell"
+            ],
+            "web": [
+              "web"
+            ],
+            "agents": [
+              "subagent"
+            ]
+          },
+          "mcpSelector": "@{server}",
+          "evidence": [
+            "https://kiro.dev/docs/cli/v3/agent-config/",
+            "https://kiro.dev/docs/custom-agents/configuration-reference/"
+          ],
+          "checked": "docs",
+          "verifiedOn": "2026-10-27"
+        }
+      },
+      "worker": {
+        "profile": null,
+        "billing": "unknown",
+        "cli": {
+          "status": "supported",
+          "evidence": [
+            "bench/inventory/coverage.json → kiro-cli --version → kiro-cli 2.29.1"
+          ],
+          "verification": "Run `kiro-cli --version` and compare the output with bench/inventory/coverage.json.",
+          "verifiedOn": "2026-10-12",
+          "binary": "kiro-cli",
+          "versionArgv": [
+            "--version"
+          ]
+        },
+        "oneShot": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read kiro's headless CLI documentation and `kiro-cli --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no recorded evidence for kiro-cli: no free check has captured its one-shot headless flag or how it reads a prompt"
+        },
+        "structuredOutput": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read kiro's headless CLI documentation and `kiro-cli --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no captured kiro-cli transcript: its event schema has no parser, and a parser waits for a transcript from its own probe"
+        },
+        "readOnly": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read kiro's headless CLI documentation and `kiro-cli --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no in-repository evidence names this for kiro; nothing is inferred from another harness or a model name"
+        },
+        "spawnDenial": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read kiro's headless CLI documentation and `kiro-cli --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no recorded evidence for kiro-cli: no free check shows a flag that disables subagent spawning"
+        },
+        "runnableProbe": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read kiro's headless CLI documentation and `kiro-cli --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no in-repository evidence names this for kiro; nothing is inferred from another harness or a model name"
+        },
+        "hooksProbe": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read kiro's headless CLI documentation and `kiro-cli --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no in-repository evidence names this for kiro; nothing is inferred from another harness or a model name"
+        },
+        "guidanceProbe": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read kiro's headless CLI documentation and `kiro-cli --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no in-repository evidence names this for kiro; nothing is inferred from another harness or a model name"
+        },
+        "loginProbe": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read kiro's headless CLI documentation and `kiro-cli --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no in-repository evidence names this for kiro; nothing is inferred from another harness or a model name"
+        },
+        "persistentSession": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read kiro's headless CLI documentation and `kiro-cli --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no in-repository evidence names this for kiro; nothing is inferred from another harness or a model name"
+        },
+        "resume": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read kiro's headless CLI documentation and `kiro-cli --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no in-repository evidence names this for kiro; nothing is inferred from another harness or a model name"
+        },
+        "steering": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read kiro's headless CLI documentation and `kiro-cli --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no in-repository evidence names this for kiro; nothing is inferred from another harness or a model name"
+        },
+        "isolatedEdit": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read kiro's headless CLI documentation and `kiro-cli --help`; record the flag that confines edits to the working directory and its source",
+          "verifiedOn": "2026-10-16",
+          "reason": "no recorded evidence for kiro-cli: no free check shows a flag that confines edits to the working directory"
+        },
+        "model": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read kiro's headless CLI documentation and `kiro-cli --help`; record the flag that selects the model and its source",
+          "verifiedOn": "2026-10-24",
+          "reason": "no recorded evidence for kiro-cli: no free check shows a flag that selects the model"
+        },
+        "modelChecks": []
+      },
+      "contextProfile": {
+        "capacityTokens": {
+          "value": 128000,
+          "source": "kiro agent documentation",
+          "verifiedOn": "2026-10-20"
+        },
+        "reserveTokens": {
+          "value": 10000,
+          "source": "kiro agent documentation",
+          "verifiedOn": "2026-10-20"
+        },
+        "tokenTelemetry": {
+          "value": "none",
+          "source": "delivery-store.ts:10",
+          "verifiedOn": "2026-10-20"
+        },
+        "toolResultLimitBytes": {
+          "value": 262144,
+          "source": "kiro agent cli limits",
+          "verifiedOn": "2026-10-20"
+        },
+        "retention": {
+          "value": "unsupported",
+          "source": "core/registry/harnesses.json (SessionStart side-effects only)",
+          "verifiedOn": "2026-10-20"
         }
       },
       "scopePrecedence": {
@@ -1776,6 +2797,21 @@
         "note": "Skills doc: \"Scanned from .kiro/skills/ (workspace) and ~/.kiro/skills/ (global); workspace wins on a same-name conflict.\" Steering doc likewise requires workspace files to win on conflict. Order lists workspace (project) before global (user), matching the scan order the skills doc states them in. The skills doc states the workspace copy wins on a same-name conflict, so the order lists the winner first: the project copy is used.",
         "determinedOn": "2026-09-27",
         "mode": "first-wins"
+      },
+      "primaryProbe": {
+        "model": "none",
+        "events": [],
+        "status": "unverified",
+        "evidence": [],
+        "verifiedOn": null,
+        "reason": "The hook payload carries no model; the declaration is the only source (declared-only)."
+      },
+      "nativeTelemetry": {
+        "signals": [],
+        "contentDefaults": "metadata-only",
+        "inboundTraceparent": "unsupported",
+        "joinKey": "session_id",
+        "verifiedOn": "2026-10-20"
       }
     },
     {
@@ -1814,6 +2850,13 @@
             "segments": [
               "AGENTS.md"
             ]
+          },
+          "user": {
+            "base": "root",
+            "segments": [
+              ".gemini",
+              "GEMINI.md"
+            ]
           }
         },
         "mcpFile": {
@@ -1908,16 +2951,17 @@
         "skills": {
           "status": "supported",
           "evidence": [
-            "https://antigravity.google/docs/cli/plugins",
-            "https://antigravity.google/docs/skills"
+            "https://antigravity.google/docs/plugins?tab=cli",
+            "https://antigravity.google/docs/skills",
+            "https://antigravity.google/docs/cli/gcli-migration"
           ],
-          "note": "Antigravity discovers folder-form skills under .agents/skills (project) and ~/.gemini/config/skills (global).",
+          "note": "Antigravity discovers folder-form skills under .agents/skills (project) and ~/.gemini/config/skills (global, App/IDE and verified on local agy CLI installation; ~/.gemini/antigravity-cli/ is the internal state/runtime root without a skills directory).",
           "verification": "Confirm the skill is discoverable by agy from .agents/skills."
         },
         "agents": {
           "status": "supported",
           "evidence": [
-            "https://antigravity.google/docs/cli/subagents"
+            "https://antigravity.google/docs/subagents?tab=cli"
           ],
           "note": "Shared agent-spec frontmatter (name, description) is a compatible subset of Antigravity's subagent schema; body becomes the system prompt.",
           "verification": "Confirm invoke_subagent reaches the installed agent definition."
@@ -1925,7 +2969,7 @@
         "scripts": {
           "status": "supported",
           "evidence": [
-            "https://antigravity.google/docs/cli/plugins",
+            "https://antigravity.google/docs/plugins?tab=cli",
             "https://antigravity.google/docs/skills"
           ],
           "note": "Bundled skill scripts travel inside skills/<name>/scripts/. DoFlow projects its runtime seam under .doflow and locator in the configDir bin/ (project and global scopes).",
@@ -1934,21 +2978,21 @@
         "templates": {
           "status": "different",
           "evidence": [
-            "https://antigravity.google/docs/cli/plugins"
+            "https://antigravity.google/docs/plugins?tab=cli"
           ],
           "verification": "Report that template access arrives through skill bundles, not a projected tree."
         },
         "modes": {
           "status": "different",
           "evidence": [
-            "https://antigravity.google/docs/rules-workflows"
+            "https://antigravity.google/docs/rules"
           ],
           "verification": "Report that mode guidance rides the instructions pointer; .agents/rules projection is future work."
         },
         "settings": {
           "status": "unavailable",
           "evidence": [
-            "https://antigravity.google/docs/cli/settings"
+            "https://antigravity.google/docs/settings?tab=cli"
           ],
           "note": "Settings live only at user scope (~/.gemini/antigravity-cli/settings.json); no project settings tier exists.",
           "verification": "Report the capability gap; never write that file."
@@ -1958,9 +3002,13 @@
           "evidence": [
             "https://antigravity.google/docs/hooks/"
           ],
-          "note": "Antigravity documents a full hook surface (2026): hooks.json in the customization directory (.agents/ workspace, ~/.gemini/config/ user), named groups per event, PreToolUse/PostToolUse/PreInvocation/PostInvocation/Stop, and an explicit stdin/stdout contract (PreToolUse returns {decision: allow|deny|ask|force_ask|...}, Stop returns {decision: continue}). Unlike Copilot's, this contract is complete enough to project against without a live-session capture. DoFlow wires its pre-implementation gate and its stop check as native-payload shims; events with no matching DoFlow policy stay unwired.",
+          "note": "Antigravity documents a full hook surface (2026): hooks.json in the customization directory (.agents/ workspace, ~/.gemini/config/ user), named groups per event, SessionStart/PreToolUse/PostToolUse/PreInvocation/PostInvocation/Stop, and an explicit stdin/stdout contract (PreToolUse returns {decision: allow|deny|ask|force_ask|...}, Stop returns {decision: continue}). Unlike Copilot's, this contract is complete enough to project against without a live-session capture. DoFlow wires its pre-implementation gate and its stop check as native-payload shims; events with no matching DoFlow policy stay unwired.",
           "verification": "Report that no Antigravity hook is installed.",
           "events": {
+            "SessionStart": {
+              "status": "different",
+              "note": "Documented (fires once, before the first model invocation); not projected, no current DoFlow policy maps to it."
+            },
             "PreToolUse": {
               "status": "supported",
               "note": "DoFlow projects its pre-implementation gate as a native shim: matcher write_to_file|replace_file_content|multi_replace_file_content, deny decision until the branch-coupled feature's three specifications exist."
@@ -1979,7 +3027,7 @@
             },
             "Stop": {
               "status": "supported",
-              "note": "DoFlow projects its stop check as a native shim: emits the documented {decision:'continue', reason} when the last assistant response in transcriptPath carries unfinished-work markers (the same gate Claude's stop-check enforces via exit 2). transcriptPath is optional and unverified — empty/garbage stdin, missing/unreadable/unrecognized transcripts all fail open, so a broken hook can never trap session end."
+              "note": "DoFlow projects its stop check as a native shim: emits the documented {decision:'continue', reason} when the last assistant response in transcriptPath carries unfinished-work markers (the same gate Claude's stop-check enforces via exit 2). transcriptPath is a documented required common field, but empty/garbage stdin, missing/unreadable/unrecognized transcripts all fail open, so a broken hook can never trap session end."
             },
             "UserPromptSubmit": {
               "status": "unavailable",
@@ -1990,7 +3038,7 @@
         "mcp": {
           "status": "supported",
           "evidence": [
-            "https://antigravity.google/docs/cli/mcp"
+            "https://antigravity.google/docs/mcp?tab=cli"
           ],
           "note": "mcpServers object in .agents/mcp_config.json (workspace) or ~/.gemini/config/mcp_config.json (user). Remote servers project url/httpUrl to serverUrl per current schema.",
           "verification": "Confirm selected MCP servers appear via /mcp in agy."
@@ -1998,9 +3046,9 @@
         "plugin": {
           "status": "different",
           "evidence": [
-            "https://antigravity.google/docs/cli/plugins"
+            "https://antigravity.google/docs/plugins?tab=cli"
           ],
-          "note": "Local-path plugin installs only; DoFlow publishes none.",
+          "note": "Marketplace and local-path directory plugin installs; DoFlow publishes none.",
           "verification": "Report that no plugin is installed."
         }
       },
@@ -2044,6 +3092,167 @@
           ],
           "verification": "Message an Idle subagent and confirm it returns to Running.",
           "verifiedOn": "2026-10-12"
+        },
+        "nest": {
+          "status": "supported",
+          "evidence": [
+            "https://antigravity.google/docs/subagents?tab=cli → maximum nesting depth of 10 levels under the primary agent."
+          ],
+          "verification": "Start a subagent that starts a subagent and confirm the inner one runs (documented depth 10).",
+          "verifiedOn": "2026-10-23"
+        }
+      },
+      "agentLimits": {
+        "readOnly": {
+          "status": "unenforced",
+          "reason": "tool names and the empty-default semantics of `tools` are undocumented (followup-tracked)",
+          "evidence": [
+            "https://antigravity.google/docs/subagents?tab=cli"
+          ],
+          "verifiedOn": "2026-10-23"
+        },
+        "toolScope": {
+          "status": "unenforced",
+          "reason": "the `tools` list takes tool ids the docs name only by example, and an unmapped id may hang the subagent",
+          "evidence": [
+            "https://antigravity.google/docs/subagents?tab=cli"
+          ],
+          "verifiedOn": "2026-10-27"
+        }
+      },
+      "worker": {
+        "profile": null,
+        "billing": "unknown",
+        "cli": {
+          "status": "supported",
+          "evidence": [
+            "bench/inventory/coverage.json → agy --version → 1.3.3"
+          ],
+          "verification": "Run `agy --version` and compare the output with bench/inventory/coverage.json.",
+          "verifiedOn": "2026-10-12",
+          "binary": "agy",
+          "versionArgv": [
+            "--version"
+          ]
+        },
+        "oneShot": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read antigravity's headless CLI documentation and `agy --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no recorded evidence for agy: no free check has captured its one-shot headless flag, and a probe must show non-empty output and a result event, not exit 0 alone"
+        },
+        "structuredOutput": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read antigravity's headless CLI documentation and `agy --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no captured agy transcript: the event schema is undocumented, and a probe must show non-empty output and a result event, not exit 0 alone"
+        },
+        "readOnly": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read antigravity's headless CLI documentation and `agy --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no in-repository evidence names this for antigravity; nothing is inferred from another harness or a model name"
+        },
+        "spawnDenial": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read antigravity's headless CLI documentation and `agy --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no recorded evidence for agy: no free check shows a flag that disables subagent spawning"
+        },
+        "runnableProbe": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read antigravity's headless CLI documentation and `agy --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no in-repository evidence names this for antigravity; nothing is inferred from another harness or a model name"
+        },
+        "hooksProbe": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read antigravity's headless CLI documentation and `agy --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no in-repository evidence names this for antigravity; nothing is inferred from another harness or a model name"
+        },
+        "guidanceProbe": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read antigravity's headless CLI documentation and `agy --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no in-repository evidence names this for antigravity; nothing is inferred from another harness or a model name"
+        },
+        "loginProbe": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read antigravity's headless CLI documentation and `agy --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no in-repository evidence names this for antigravity; nothing is inferred from another harness or a model name"
+        },
+        "persistentSession": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read antigravity's headless CLI documentation and `agy --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no in-repository evidence names this for antigravity; nothing is inferred from another harness or a model name"
+        },
+        "resume": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read antigravity's headless CLI documentation and `agy --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no in-repository evidence names this for antigravity; nothing is inferred from another harness or a model name"
+        },
+        "steering": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read antigravity's headless CLI documentation and `agy --help`; record the flag and its source",
+          "verifiedOn": "2026-10-15",
+          "reason": "no in-repository evidence names this for antigravity; nothing is inferred from another harness or a model name"
+        },
+        "isolatedEdit": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Read antigravity's headless CLI documentation and `agy --help`; record the flag that confines edits to the working directory and its source",
+          "verifiedOn": "2026-10-16",
+          "reason": "no recorded evidence for agy: no free check shows a flag that confines edits to the working directory"
+        },
+        "model": {
+          "status": "unknown",
+          "evidence": [],
+          "verification": "Run `agy --help` and read the `--model` line; record it with `node bin/doflow.js worker --action evidence --harness antigravity --checks core/worker-evidence/antigravity/checks.json --out <new cli-check path>` (check help-model)",
+          "verifiedOn": "2026-10-24",
+          "reason": "declared: agy --help lists --model on stderr, but the free check help-model reads stdout only and fails; supported only after a recorded cli-check passes"
+        },
+        "modelChecks": []
+      },
+      "contextProfile": {
+        "capacityTokens": {
+          "value": 1000000,
+          "source": "gemini-compatible proxy configuration",
+          "verifiedOn": "2026-10-20"
+        },
+        "reserveTokens": {
+          "value": 50000,
+          "source": "gemini-compatible proxy configuration",
+          "verifiedOn": "2026-10-20"
+        },
+        "tokenTelemetry": {
+          "value": "none",
+          "source": "delivery-store.ts:10",
+          "verifiedOn": "2026-10-20"
+        },
+        "toolResultLimitBytes": {
+          "value": 1048576,
+          "source": "antigravity hook runner buffer",
+          "verifiedOn": "2026-10-20"
+        },
+        "retention": {
+          "value": "unsupported",
+          "source": "shared/hooks/adapters/antigravity.js:55-61 (empty injectSteps)",
+          "verifiedOn": "2026-10-20"
         }
       },
       "scopePrecedence": {
@@ -2051,11 +3260,67 @@
         "evidence": [
           "https://antigravity.google/docs/skills/",
           "https://antigravity.google/docs/subagents",
-          "https://antigravity.google/docs/cli/mcp"
+          "https://antigravity.google/docs/mcp?tab=cli"
         ],
-        "note": "The question was asked across the three dual-scope asset types Antigravity documents (skills, subagents, MCP servers) and the documentation is silent on all three: each page names a workspace location and a global location but never states which wins on a same-name conflict. Separate from this: the skills capability above already records that DoFlow itself skips the global skills scope over an unresolved CLI-vs-desktop contradiction about that scope's own file format -- a dispute about the global location's shape, not about precedence between the two scopes. Resolution mode is likewise unestablished: with no order documented there is nothing for a mode to qualify.",
+        "note": "The question was asked across the three dual-scope asset types Antigravity documents (skills, subagents, MCP servers) and the documentation is silent on all three: each page names a workspace location and a global location but never states which wins on a same-name conflict. Resolution mode is likewise unestablished: with no order documented there is nothing for a mode to qualify.",
         "determinedOn": "2026-09-27",
         "mode": "unestablished"
+      },
+      "primaryProbe": {
+        "model": "payload",
+        "events": [
+          "PreToolUse",
+          "Stop"
+        ],
+        "status": "unverified",
+        "evidence": [],
+        "verifiedOn": null,
+        "reason": "Antigravity hook payloads carry modelName; no live capture recorded yet."
+      },
+      "nativeTelemetry": {
+        "signals": [],
+        "contentDefaults": "metadata-only",
+        "inboundTraceparent": "unsupported",
+        "joinKey": "session_id",
+        "verifiedOn": "2026-10-20"
+      }
+    }
+  ],
+  "retired": [
+    {
+      "id": "gemini",
+      "displayName": "Gemini CLI",
+      "replacement": "antigravity",
+      "retiredOn": "2026-10-26",
+      "reason": "Gemini CLI was replaced upstream by Antigravity CLI on 2026-06-18 and is not optimized for Gemini 4 Argon.",
+      "evidence": [
+        "user statement 2026-10-26 (row 127)"
+      ],
+      "removal": {
+        "hookCommands": {
+          "renderer": "gemini-hooks",
+          "key": "hooks",
+          "commands": [
+            "bash \"$GEMINI_PROJECT_DIR/.gemini/hooks/session-start.sh\"",
+            "bash \"$GEMINI_PROJECT_DIR/.gemini/hooks/session-end.sh\"",
+            "bash \"$GEMINI_PROJECT_DIR/.gemini/hooks/pre-bash-guard.sh\"",
+            "bash \"$GEMINI_PROJECT_DIR/.gemini/hooks/mcp-tool-guard.sh\"",
+            "bash \"$GEMINI_PROJECT_DIR/.gemini/hooks/pre-implement-gate.sh\"",
+            "bash \"$GEMINI_PROJECT_DIR/.gemini/hooks/post-edit-lint.sh\"",
+            "bash \"$GEMINI_PROJECT_DIR/.gemini/hooks/pre-compact.sh\""
+          ]
+        },
+        "markerSectionRenderers": [
+          "gemini-instructions"
+        ],
+        "handover": [
+          {
+            "renderer": "gemini-instructions",
+            "scope": "global",
+            "to": "antigravity",
+            "surface": "instruction"
+          }
+        ]
       }
     }
   ]