@khoavu882/doflow 2.0.0-beta.5 → 2.0.0

package/core/registry/storage.json

@@ -74,6 +74,67 @@
         "src/runtime/verification/contract-runner.js"
       ]
     },
+    {
+      "id": "verification-runs",
+      "root": "project-state",
+      "path": "verification/runs",
+      "entry": "record",
+      "match": "^[A-Za-z0-9][A-Za-z0-9._-]*\\.jsonl$",
+      "rule": "work",
+      "bound": {
+        "finishedDays": 30
+      },
+      "protect": null,
+      "moments": [
+        "verify",
+        "verb"
+      ],
+      "writers": [
+        "src/runtime/verification/engine.js"
+      ]
+    },
+    {
+      "id": "verification-v0",
+      "root": "project-state",
+      "path": "verification/v0",
+      "entry": "file",
+      "match": "^[A-Za-z0-9._-]+$",
+      "rule": "count-and-age",
+      "bound": {
+        "keepNewest": 40,
+        "maxAgeDays": 7
+      },
+      "protect": null,
+      "moments": [
+        "verify",
+        "verb"
+      ],
+      "writers": [
+        "src/runtime/verification/engine.js",
+        "src/runtime/verification/inflight.js"
+      ]
+    },
+    {
+      "id": "verification-reuse",
+      "root": "project-state",
+      "path": "verification/reuse",
+      "entry": "file",
+      "match": "^reuse-[0-9a-f]{16}\\.json$|^reuse-[0-9a-f]{16}\\.[0-9a-f]{32}\\.tmp$",
+      "rule": "count-and-age",
+      "bound": {
+        "keepNewest": 400,
+        "maxAgeDays": 2,
+        "either": true
+      },
+      "protect": null,
+      "moments": [
+        "verify",
+        "verb"
+      ],
+      "writers": [
+        "src/runtime/verification/reuse.js"
+      ]
+    },
     {
       "id": "task-evidence",
       "root": "project-state",
@@ -89,7 +150,8 @@
         "verb"
       ],
       "writers": [
-        "src/runtime/task-state.js"
+        "src/runtime/task-state.js",
+        "src/runtime/state-root.js"
       ]
     },
     {
@@ -107,7 +169,8 @@
         "verb"
       ],
       "writers": [
-        "src/runtime/task-state.js"
+        "src/runtime/task-state.js",
+        "src/runtime/state-root.js"
       ]
     },
     {
@@ -126,7 +189,8 @@
       ],
       "writers": [
         "src/runtime/readiness-record.js",
-        "src/runtime/task-state.js"
+        "src/runtime/task-state.js",
+        "src/runtime/state-root.js"
       ]
     },
     {
@@ -144,7 +208,8 @@
         "verb"
       ],
       "writers": [
-        "src/runtime/task-state.js"
+        "src/runtime/task-state.js",
+        "src/runtime/state-root.js"
       ]
     },
     {
@@ -162,7 +227,8 @@
         "verb"
       ],
       "writers": [
-        "src/runtime/outcome.js"
+        "src/runtime/outcome.js",
+        "src/runtime/state-root.js"
       ]
     },
     {
@@ -181,7 +247,8 @@
       ],
       "writers": [
         "src/runtime/task-state.js",
-        "src/runtime/retrieval-record.js"
+        "src/runtime/retrieval-record.js",
+        "src/runtime/state-root.js"
       ]
     },
     {
@@ -202,6 +269,137 @@
         "src/runtime/task-state.js"
       ]
     },
+    {
+      "id": "worker-runs",
+      "root": "project-state",
+      "path": "worker-runs",
+      "entry": "record",
+      "match": "^[A-Za-z0-9][A-Za-z0-9._-]*\\.json$",
+      "rule": "work",
+      "bound": {
+        "finishedDays": 30
+      },
+      "protect": null,
+      "moments": [
+        "verb"
+      ],
+      "writers": [
+        "src/runtime/task-state.js"
+      ]
+    },
+    {
+      "id": "worker-probes",
+      "root": "project-state",
+      "path": "worker-probes",
+      "entry": "file",
+      "match": "^[a-z][a-z0-9-]*\\.json$",
+      "rule": "count-and-age",
+      "bound": {
+        "keepNewest": 16,
+        "maxAgeDays": 30
+      },
+      "protect": null,
+      "moments": [
+        "verb"
+      ],
+      "writers": [
+        "src/runtime/task-state.js"
+      ]
+    },
+    {
+      "id": "worker-output",
+      "root": "project-state",
+      "path": "worker-output",
+      "entry": "file",
+      "match": "^w-[0-9a-f]{12}\\.(out|err|last)\\.log$",
+      "rule": "count-and-age",
+      "bound": {
+        "keepNewest": 200,
+        "maxAgeDays": 30
+      },
+      "protect": null,
+      "moments": [
+        "verb"
+      ],
+      "writers": [
+        "src/runtime/worker/supervisor.js"
+      ]
+    },
+    {
+      "id": "dispatch",
+      "root": "project-state",
+      "path": "dispatch",
+      "entry": "record",
+      "match": "^[A-Za-z0-9][A-Za-z0-9._-]*\\.json$",
+      "rule": "work",
+      "bound": {
+        "finishedDays": 30
+      },
+      "protect": null,
+      "moments": [
+        "verb"
+      ],
+      "writers": [
+        "src/runtime/task-state.js"
+      ]
+    },
+    {
+      "id": "roadmap",
+      "root": "project-state",
+      "path": "roadmap",
+      "entry": "record",
+      "match": "^[A-Za-z0-9][A-Za-z0-9._-]*\\.json$",
+      "rule": "work",
+      "bound": {
+        "finishedDays": 30
+      },
+      "protect": null,
+      "moments": [],
+      "writers": [
+        "src/runtime/roadmap/merge.js",
+        "src/runtime/roadmap/loop.js"
+      ]
+    },
+    {
+      "id": "dispatch-envelopes",
+      "root": "project-state",
+      "path": "dispatch-envelopes",
+      "entry": "file",
+      "match": "^d-[0-9a-f]{12}(?:\\.c[1-4])?\\.[a-z][a-z-]{0,31}\\.(?:json|txt)$",
+      "rule": "count-and-age",
+      "bound": {
+        "keepNewest": 400,
+        "maxAgeDays": 30
+      },
+      "protect": null,
+      "moments": [
+        "verb"
+      ],
+      "writers": [
+        "src/runtime/dispatch/envelope.js",
+        "src/runtime/dispatch/grants.js"
+      ]
+    },
+    {
+      "id": "dispatch-worktrees",
+      "root": "project-state",
+      "path": "dispatch-worktrees",
+      "entry": "dir",
+      "match": "^[pd]-[0-9a-f]{12}(?:\\.c[1-4])?$",
+      "rule": "existing",
+      "bound": {
+        "text": "attempt worktrees removed by dispatch cleanup; the integration worktree stays for the user to merge"
+      },
+      "protect": null,
+      "moments": [],
+      "writers": [
+        "src/runtime/worktree.js"
+      ],
+      "source": {
+        "file": "src/runtime/dispatch/integrate.js",
+        "pattern": "removeVerified"
+      }
+    },
     {
       "id": "task-orchestration",
       "root": "project-state",
@@ -218,7 +416,8 @@
       ],
       "writers": [
         "src/runtime/task-state.js",
-        "src/runtime/workflow-orchestrator.js"
+        "src/runtime/workflow-orchestrator.js",
+        "src/runtime/state-root.js"
       ]
     },
     {
@@ -240,6 +439,26 @@
         "src/runtime/trace/ledger.js"
       ]
     },
+    {
+      "id": "runs-telemetry",
+      "root": "project-state",
+      "path": "runs/telemetry",
+      "entry": "file",
+      "match": "^[0-9]{4}-[0-9]{2}-[0-9]{2}\\.jsonl$",
+      "rule": "date-partition",
+      "bound": {
+        "maxAgeDays": 180
+      },
+      "protect": null,
+      "moments": [
+        "verb"
+      ],
+      "writers": [
+        "core/harnesses/shared/hooks/bridge/bridge.sh",
+        "core/harnesses/claude/hooks/post-shell-observe.sh",
+        "src/runtime/trace/telemetry.js"
+      ]
+    },
     {
       "id": "runs-user",
       "root": "user-state",
@@ -295,6 +514,25 @@
         "src/runtime/advice/record.js"
       ]
     },
+    {
+      "id": "slots-user",
+      "root": "user-state",
+      "path": "slots",
+      "entry": "record",
+      "match": "^[a-z0-9][a-z0-9-]{0,63}\\.json$",
+      "rule": "count-and-age",
+      "bound": {
+        "keepNewest": 64,
+        "maxAgeDays": 30
+      },
+      "protect": null,
+      "moments": [
+        "verb"
+      ],
+      "writers": [
+        "src/runtime/slots.js"
+      ]
+    },
     {
       "id": "recovery-user",
       "root": "user-state",
@@ -393,14 +631,15 @@
         "core/harnesses/claude/hooks/skill-config-audit.sh",
         "core/harnesses/codex/hooks/lib.sh",
         "core/harnesses/codex/hooks/post-edit-lint.impl.sh",
-        "core/harnesses/gemini/hooks/lib.sh",
-        "core/harnesses/gemini/hooks/post-edit-lint.sh",
         "core/harnesses/kiro/hooks/lib.sh",
+        "core/harnesses/shared/hooks/policies/emission.sh",
+        "core/harnesses/shared/hooks/policies/identity.sh",
         "core/harnesses/shared/hooks/policies/lib.sh",
         "core/harnesses/shared/hooks/policies/session-context.sh",
         "core/harnesses/shared/hooks/policies/stop-check.sh",
         "core/harnesses/shared/hooks/policies/subagent-audit.sh",
-        "core/harnesses/shared/hooks/policies/user-prompt-submit.sh"
+        "src/runtime/context/arbitrate.js",
+        "src/runtime/context/identity.js"
       ]
     },
     {
@@ -424,12 +663,90 @@
         "core/harnesses/claude/hooks/session-end.sh",
         "core/harnesses/codex/hooks/lib.sh",
         "core/harnesses/codex/hooks/session-end.impl.sh",
-        "core/harnesses/gemini/hooks/lib.sh",
-        "core/harnesses/gemini/hooks/session-end.impl.sh",
         "core/harnesses/kiro/hooks/lib.sh",
         "core/harnesses/shared/hooks/policies/lib.sh",
         "core/harnesses/shared/hooks/policies/session-context.sh",
-        "core/harnesses/shared/hooks/policies/user-prompt-submit.sh"
+        "src/runtime/context/arbitrate.js"
+      ]
+    },
+    {
+      "id": "summary-scopes",
+      "root": "config-home",
+      "path": "session-env/summaries",
+      "entry": "dir",
+      "match": "^[0-9a-f]{16}$",
+      "rule": "age",
+      "bound": {
+        "maxAgeDays": 90
+      },
+      "protect": null,
+      "moments": [
+        "session",
+        "verb"
+      ],
+      "writers": [
+        "core/harnesses/shared/hooks/policies/summary-store.sh",
+        "src/runtime/context/summary-store.js"
+      ]
+    },
+    {
+      "id": "summary-grants",
+      "root": "config-home",
+      "path": "session-env/grants",
+      "entry": "dir",
+      "match": "^[A-Za-z0-9][A-Za-z0-9_-]{0,55}$",
+      "rule": "age",
+      "bound": {
+        "maxAgeDays": 90
+      },
+      "protect": null,
+      "moments": [
+        "session",
+        "verb"
+      ],
+      "writers": [
+        "core/harnesses/shared/hooks/policies/summary-store.sh",
+        "src/runtime/context/summary-store.js"
+      ]
+    },
+    {
+      "id": "model-observations",
+      "root": "config-home",
+      "path": "session-env/primary",
+      "entry": "dir",
+      "match": "^[0-9a-f]{16}$",
+      "rule": "age",
+      "bound": {
+        "maxAgeDays": 7
+      },
+      "protect": null,
+      "moments": [
+        "session",
+        "verb"
+      ],
+      "writers": [
+        "core/harnesses/shared/hooks/bridge/observe-model.sh"
+      ]
+    },
+    {
+      "id": "worker-model-observations",
+      "root": "config-home",
+      "path": "session-env/worker-model",
+      "entry": "file",
+      "match": "^L\\.[A-Za-z0-9][A-Za-z0-9_-]{0,55}\\.[A-Za-z0-9][A-Za-z0-9_-]{0,55}\\.[1-9][0-9]{0,3}\\.json$",
+      "rule": "count-and-age",
+      "bound": {
+        "keepNewest": 1000,
+        "maxAgeDays": 7,
+        "either": true
+      },
+      "protect": "unfinished-run",
+      "moments": [
+        "session",
+        "verb"
+      ],
+      "writers": [
+        "core/harnesses/shared/hooks/bridge/observe-model.sh"
       ]
     },
     {
@@ -513,8 +830,6 @@
         "core/harnesses/claude/hooks/session-end.sh",
         "core/harnesses/codex/hooks/lib.sh",
         "core/harnesses/codex/hooks/session-end.impl.sh",
-        "core/harnesses/gemini/hooks/lib.sh",
-        "core/harnesses/gemini/hooks/session-end.impl.sh",
         "core/harnesses/kiro/hooks/lib.sh",
         "core/harnesses/shared/hooks/policies/lib.sh",
         "core/harnesses/shared/hooks/policies/session-context.sh"
@@ -542,7 +857,6 @@
         "core/harnesses/shared/hooks/stream-hook-runner.js",
         "core/shared/scripts/doflow/bin/doflow-run",
         "src/runtime/failure/capture.js",
-        "src/runtime/failure/cli.js",
         "src/runtime/failure/store.js"
       ],
       "source": {
@@ -550,6 +864,47 @@
         "pattern": "KEEP_ROTATED = {value}"
       }
     },
+    {
+      "id": "autopilot-switch",
+      "root": "config-home",
+      "path": "autopilot",
+      "entry": "file",
+      "match": "^off$",
+      "rule": "existing",
+      "bound": {
+        "text": "one sentinel file; only a person removes it"
+      },
+      "protect": null,
+      "moments": [],
+      "writers": [
+        "src/runtime/settings/autopilot.js"
+      ],
+      "source": {
+        "file": "src/runtime/settings/autopilot.js",
+        "pattern": "path.join(home, 'autopilot', 'off')"
+      }
+    },
+    {
+      "id": "roadmap-audit",
+      "root": "project-state",
+      "path": "roadmap/audit.jsonl",
+      "entry": "file",
+      "match": "^audit\\.jsonl$",
+      "rule": "existing",
+      "bound": {
+        "value": 10000,
+        "text": "keep the last 10000 gate, merge, render and cleanup entries"
+      },
+      "protect": null,
+      "moments": [],
+      "writers": [
+        "src/runtime/roadmap/loop.js"
+      ],
+      "source": {
+        "file": "src/runtime/roadmap/loop.js",
+        "pattern": "AUDIT_LIMIT = {value}"
+      }
+    },
     {
       "id": "install-ledger-user-state",
       "root": "user-state",
@@ -619,7 +974,7 @@
       "rule": "existing",
       "bound": {
         "value": 10000,
-        "text": "removed on release; stale locks are broken"
+        "text": "removed on release; a stale lock is reclaimed in place"
       },
       "protect": null,
       "moments": [],
@@ -745,15 +1100,15 @@
       "root": "project-doflow",
       "path": "",
       "entry": "file",
-      "match": "^(?:prompt-nudge|prune|decision-model\\.json)$",
+      "match": "^(?:prompt-nudge|prune|decision-model\\.json|settings\\.json|settings\\.local\\.json)$",
       "rule": "existing",
       "bound": {
-        "text": "one line each, user-authored; decision-model.json is one JSON object, written by hand or by advise --action configure"
+        "text": "prompt-nudge and prune are one line each; decision-model.json, settings.json and settings.local.json are JSON objects; settings.json files are written atomically by settings writers"
       },
       "protect": null,
       "moments": [],
       "writers": [
-        "src/runtime/advice/config.js"
+        "src/runtime/settings/write.js"
       ],
       "source": {
         "file": "core/harnesses/shared/hooks/policies/lib.sh",
@@ -765,21 +1120,61 @@
       "root": "config-home",
       "path": "",
       "entry": "file",
-      "match": "^(?:prompt-nudge|prune|decision-model\\.json)$",
+      "match": "^(?:prompt-nudge|prune|decision-model\\.json|settings\\.json)$",
       "rule": "existing",
       "bound": {
-        "text": "one line each, user-authored; decision-model.json is one JSON object, written by hand or by advise --action configure"
+        "text": "prompt-nudge and prune are one line each; decision-model.json and settings.json are JSON objects; settings.json is written atomically by settings writers"
       },
       "protect": null,
       "moments": [],
       "writers": [
-        "src/runtime/advice/config.js"
+        "src/runtime/settings/write.js"
       ],
       "source": {
         "file": "core/harnesses/shared/hooks/policies/lib.sh",
         "pattern": "prompt-nudge"
       }
     },
+    {
+      "id": "settings-writer-project-doflow",
+      "root": "project-doflow",
+      "path": "",
+      "entry": "file",
+      "match": "^settings(?:\\.local)?\\.json\\.(?:lock|config\\.bak)$",
+      "rule": "existing",
+      "bound": {
+        "text": "a settings writer holds the file's .lock for one read-merge-rename and removes it; a lock is never removed automatically: a held lock of any age refuses the write, and a person removes the lock file when no writer is running; config set and unset keep the bytes they replace in one .config.bak beside the file, replaced on each write"
+      },
+      "protect": null,
+      "moments": [],
+      "writers": [
+        "src/runtime/settings/write.js"
+      ],
+      "source": {
+        "file": "src/runtime/settings/write.js",
+        "pattern": "config.bak"
+      }
+    },
+    {
+      "id": "settings-writer-config-home",
+      "root": "config-home",
+      "path": "",
+      "entry": "file",
+      "match": "^settings\\.json\\.(?:lock|config\\.bak)$",
+      "rule": "existing",
+      "bound": {
+        "text": "a settings writer holds the file's .lock for one read-merge-rename and removes it; a lock is never removed automatically: a held lock of any age refuses the write, and a person removes the lock file when no writer is running; config set and unset keep the bytes they replace in one .config.bak beside the file, replaced on each write"
+      },
+      "protect": null,
+      "moments": [],
+      "writers": [
+        "src/runtime/settings/write.js"
+      ],
+      "source": {
+        "file": "src/runtime/settings/write.js",
+        "pattern": "config.bak"
+      }
+    },
     {
       "id": "state-ignore-project-state",
       "root": "project-state",
@@ -977,6 +1372,235 @@
       "writers": [
         "src/state/run-lock.js"
       ]
+    },
+    {
+      "id": "code-semantic-project",
+      "root": "project-doflow",
+      "path": "index/code",
+      "entry": "dir",
+      "match": "^semble$",
+      "rule": "existing",
+      "bound": {
+        "text": "Explicit bounded local semantic lifecycle; corpus/model manifests, ordinary mirror copies, provider cache, operation lock, in-progress marker and staging; query temporary stats/ sink capped at 64 KiB and library/ (provider grammar and library cache) capped at 128 MiB (libraryBytes), both removed in finally or on the next explicit operation; sourceReadBytes is an over-count of provider reads under Semble 0.7.0."
+      },
+      "protect": null,
+      "moments": [],
+      "writers": [
+        "src/runtime/knowledge/semble-provider.js",
+        "src/runtime/knowledge/semble-lifecycle.js"
+      ],
+      "source": {
+        "file": "src/runtime/knowledge/semble-provider.js",
+        "pattern": "semanticStatePaths"
+      }
+    },
+    {
+      "id": "packages-store",
+      "root": "user-doflow",
+      "path": "packages/store",
+      "entry": "dir",
+      "match": "^[a-z][a-z0-9-]*$",
+      "rule": "existing",
+      "bound": {
+        "text": "one directory per package id, kept until the package is removed"
+      },
+      "protect": null,
+      "moments": [],
+      "writers": [
+        "src/runtime/packages/store.js"
+      ],
+      "source": {
+        "file": "src/runtime/packages/store.js",
+        "pattern": ".installed-from.json"
+      }
+    },
+    {
+      "id": "packages-plans",
+      "root": "user-doflow",
+      "path": "packages/plans",
+      "entry": "file",
+      "match": "^[0-9a-f]{16}\\.json$",
+      "rule": "count-and-age",
+      "bound": {
+        "keepNewest": 256,
+        "maxAgeDays": 1,
+        "either": true
+      },
+      "protect": null,
+      "moments": [],
+      "writers": [
+        "src/runtime/packages/store.js"
+      ]
+    },
+    {
+      "id": "packages-staging",
+      "root": "user-doflow",
+      "path": "packages/store",
+      "entry": "dir",
+      "match": "^\\.staging-[0-9a-f]{16}$",
+      "rule": "age",
+      "bound": {
+        "maxAgeDays": 1
+      },
+      "protect": null,
+      "moments": [],
+      "writers": [
+        "src/runtime/packages/store.js"
+      ]
+    },
+    {
+      "id": "packages-fetched",
+      "root": "user-doflow",
+      "path": "packages/fetched",
+      "entry": "dir",
+      "match": "^[0-9a-f]{16}$",
+      "rule": "count-and-age",
+      "bound": {
+        "keepNewest": 256,
+        "maxAgeDays": 1,
+        "either": true
+      },
+      "protect": null,
+      "moments": [],
+      "writers": [
+        "src/runtime/packages/store.js"
+      ]
+    },
+    {
+      "id": "packages-fetch-staging",
+      "root": "user-doflow",
+      "path": "packages/fetched",
+      "entry": "dir",
+      "match": "^\\.staging-[0-9a-f]{16}$",
+      "rule": "age",
+      "bound": {
+        "maxAgeDays": 1
+      },
+      "protect": null,
+      "moments": [],
+      "writers": [
+        "src/runtime/packages/store.js"
+      ]
+    },
+    {
+      "id": "packages-state",
+      "root": "user-doflow",
+      "path": "packages/state.json",
+      "entry": "file",
+      "match": "^state\\.json$",
+      "rule": "existing",
+      "bound": {
+        "text": "narrowing facts only, rewritten atomically with mode 0600 and kept"
+      },
+      "protect": null,
+      "moments": [],
+      "writers": [
+        "src/state/index.js"
+      ],
+      "source": {
+        "file": "src/runtime/packages/state.js",
+        "pattern": "state.json"
+      }
+    },
+    {
+      "id": "authored-packages-project-doflow",
+      "root": "project-doflow",
+      "path": "package",
+      "entry": "dir",
+      "match": "^[a-z][a-z0-9-]{0,14}[a-z0-9]$",
+      "rule": "existing",
+      "bound": {
+        "text": "the person's authored package source: DoFlow never prunes, moves or removes it"
+      },
+      "protect": null,
+      "moments": [],
+      "writers": [
+        "src/runtime/packages/scaffold.js"
+      ],
+      "source": {
+        "file": "src/runtime/packages/scaffold.js",
+        "pattern": "'package'"
+      }
+    },
+    {
+      "id": "authored-packages-staging-project-doflow",
+      "root": "project-doflow",
+      "path": "package",
+      "entry": "dir",
+      "match": "^\\.staging-[a-z0-9-]+-[0-9a-f]{8}$",
+      "rule": "existing",
+      "bound": {
+        "text": "removed by the scaffold itself after 24 hours"
+      },
+      "protect": null,
+      "moments": [],
+      "writers": [
+        "src/runtime/packages/scaffold.js"
+      ],
+      "source": {
+        "file": "src/runtime/packages/scaffold.js",
+        "pattern": ".staging-"
+      }
+    },
+    {
+      "id": "feature-pointer",
+      "root": "project-state",
+      "path": "feature",
+      "entry": "file",
+      "match": "^[0-9a-f]{16}\\.json(?:\\.[0-9]+\\.tmp)?$",
+      "rule": "existing",
+      "bound": {
+        "text": "one file per checkout naming its feature, rewritten in place by the runtime and removed when the feature finishes"
+      },
+      "protect": null,
+      "moments": [],
+      "writers": [
+        "src/runtime/feature-pointer.js"
+      ],
+      "source": {
+        "file": "src/runtime/feature-pointer.js",
+        "pattern": "'.doflow', 'state', 'feature'"
+      }
+    },
+    {
+      "id": "project-models-catalogue",
+      "root": "project-state",
+      "path": "models/catalogue.json",
+      "entry": "file",
+      "match": "^catalogue\\.json$",
+      "rule": "existing",
+      "bound": {
+        "text": "one file, overwritten"
+      },
+      "protect": null,
+      "moments": [],
+      "writers": [
+        "src/runtime/models/catalogue.js"
+      ],
+      "source": {
+        "file": "src/runtime/models/catalogue.js",
+        "pattern": "catalogue.json"
+      }
+    },
+    {
+      "id": "user-models-catalogue",
+      "root": "config-home",
+      "path": "state/models-observed.json",
+      "entry": "file",
+      "match": "^models-observed\\.json$",
+      "rule": "existing",
+      "bound": {
+        "text": "one file, overwritten"
+      },
+      "protect": null,
+      "moments": [],
+      "writers": [
+        "src/runtime/models/catalogue.js"
+      ],
+      "source": {
+        "file": "src/runtime/models/catalogue.js",
+        "pattern": "models-observed.json"
+      }
     }
   ],
   "externalWriters": [
@@ -1028,14 +1652,6 @@
       "file": "src/adapters/copilot/index.js",
       "reason": "harness configuration/projection owned by the install ledger"
     },
-    {
-      "file": "src/adapters/gemini/hooks.js",
-      "reason": "harness configuration/projection owned by the install ledger"
-    },
-    {
-      "file": "src/adapters/gemini/index.js",
-      "reason": "harness configuration/projection owned by the install ledger"
-    },
     {
       "file": "src/adapters/mcp-entries.js",
       "reason": "harness configuration/projection owned by the install ledger"
@@ -1056,6 +1672,10 @@
       "file": "src/helper/marker-merge.js",
       "reason": "harness instruction file managed block (CLAUDE.md, AGENTS.md, GEMINI.md), owned by the install ledger"
     },
+    {
+      "file": "src/runtime/brief-rules.js",
+      "reason": "maintainer generator (--write): rewrites the mustCarry key of core/registry/rules.json in the repo (no DoFlow root)"
+    },
     {
       "file": "src/release/sync-plugin-versions.js",
       "reason": "maintainer release tool: rewrites the repo plugin manifests (no DoFlow root)"
@@ -1064,6 +1684,18 @@
       "file": "src/release/build-package.js",
       "reason": "maintainer release tool: writes the staged npm package directory (no DoFlow root)"
     },
+    {
+      "file": "src/release/rehearse.js",
+      "reason": "maintainer release tool: writes a scratch directory under os.tmpdir() (no DoFlow root)"
+    },
+    {
+      "file": "src/release/docs-blocks.js",
+      "reason": "maintainer generator: --write rewrites the repo docs generated-block spans and docs/llms.txt; help capture uses a scratch HOME under os.tmpdir() (no DoFlow root)"
+    },
+    {
+      "file": "src/runtime/context/emission-rules.js",
+      "reason": "maintainer generator: --write rewrites the repo emission table core/harnesses/shared/hooks/policies/emission-rules.sh (no DoFlow root)"
+    },
     {
       "file": "src/runtime/decision-register.js",
       "reason": "agent-docs deliverable (decisions register of a feature)"
@@ -1076,9 +1708,25 @@
       "file": "src/runtime/lifecycle/intent-writer.js",
       "reason": "agent-docs deliverable (agent-docs/intent/*.md)"
     },
+    {
+      "file": "src/runtime/roadmap/rows.js",
+      "reason": "agent-docs deliverable (roadmap/ROADMAP.md, derived table written only when its bytes change)"
+    },
+    {
+      "file": "src/runtime/roadmap/seed.js",
+      "reason": "agent-docs deliverable (roadmap/rows.json written by temp+rename under the loop lease, person-only apply and amend)"
+    },
     {
       "file": "src/runtime/scaffold/generate.js",
       "reason": "agent-docs deliverable (scaffold files and manifest)"
+    },
+    {
+      "file": "src/runtime/worker/evidence.js",
+      "reason": "worker evidence record written to the caller-named --out path under core/worker-evidence/, not a DoFlow store"
+    },
+    {
+      "file": "src/runtime/profiles/rollback.js",
+      "reason": "writes ephemeral rollback sentinel .doflow/state/rollback.json and circuit-breaker.json"
     }
   ]
 }