@khoavu882/doflow 2.0.0 → 2.0.2

package/core/registry/lifecycle.json

@@ -43,20 +43,20 @@
       }
     },
     {
-      "id": "pre-bash-guard",
-      "intent": "block-destructive-commands",
+      "id": "session-context",
+      "intent": "capture-session-context",
       "tier": "enhanced",
       "requires": [
         "hooks"
       ],
       "mappings": {
         "claude": {
-          "event": "PreToolUse",
+          "event": "SessionStart",
           "status": "supported"
         },
         "codex": {
-          "event": "PreToolUse",
-          "status": "different",
+          "event": "SessionStart",
+          "status": "supported",
           "prerequisites": [
             "hook-review"
           ]
@@ -66,15 +66,15 @@
           "fallback": "guidance"
         },
         "pi": {
-          "event": "tool_call",
-          "status": "different"
+          "status": "unavailable",
+          "fallback": "guidance"
         },
         "copilot": {
-          "event": "PreToolUse",
+          "event": "SessionStart",
           "status": "supported"
         },
         "kiro": {
-          "event": "PreToolUse",
+          "event": "SessionStart",
           "status": "supported"
         },
         "antigravity": {
@@ -84,19 +84,19 @@
       }
     },
     {
-      "id": "session-context",
-      "intent": "capture-session-context",
+      "id": "session-end",
+      "intent": "remove-session-model-observation",
       "tier": "enhanced",
       "requires": [
         "hooks"
       ],
       "mappings": {
         "claude": {
-          "event": "SessionStart",
+          "event": "SessionEnd",
           "status": "supported"
         },
         "codex": {
-          "event": "SessionStart",
+          "event": "SessionEnd",
           "status": "supported",
           "prerequisites": [
             "hook-review"
@@ -111,12 +111,12 @@
           "fallback": "guidance"
         },
         "copilot": {
-          "event": "SessionStart",
-          "status": "supported"
+          "status": "unavailable",
+          "fallback": "guidance"
         },
         "kiro": {
-          "event": "SessionStart",
-          "status": "supported"
+          "status": "unavailable",
+          "fallback": "guidance"
         },
         "antigravity": {
           "status": "unavailable",
@@ -210,7 +210,7 @@
   ],
   "coverage": {
     "schemaVersion": 1,
-    "revision": 3,
+    "revision": 4,
     "refresh": {
       "trigger": "a harness bridge, template or installed harness version changes",
       "owner": "the feature that changes it"
@@ -236,11 +236,11 @@
         "timing": "pre-tool",
         "profile": "any",
         "wired": true,
-        "configSource": "core/harnesses/claude/settings/settings.json:89",
+        "configSource": "core/harnesses/claude/settings/settings.json:97",
         "harnessVersion": {
           "tested": "2.1.287 (Claude Code)"
         },
-        "class": "blocking",
+        "class": "advisory",
         "verification": "verified",
         "prerequisites": [],
         "covers": [],
@@ -272,7 +272,7 @@
         "harnessVersion": {
           "tested": "codex-cli 0.162.1"
         },
-        "class": "blocking",
+        "class": "advisory",
         "verification": "verified",
         "prerequisites": [
           "hook-review"
@@ -329,12 +329,12 @@
         "timing": "pre-tool",
         "profile": "cli-extension",
         "wired": true,
-        "configSource": "core/harnesses/pi/extensions/doflow-guard.js:129",
+        "configSource": "core/harnesses/pi/extensions/doflow-guard.js:128",
         "harnessVersion": {
           "tested": "1.1.0"
         },
-        "class": "blocking",
-        "verification": "verified",
+        "class": "advisory",
+        "verification": "unverified",
         "prerequisites": [],
         "covers": [],
         "doesNotCover": [
@@ -362,7 +362,7 @@
           },
           {
             "kind": "live",
-            "locator": "test/fixtures/hooks/pi/live/probe-2026-10-14.jsonl",
+            "locator": "historical blocking evidence: test/fixtures/hooks/pi/live/probe-2026-10-14.jsonl",
             "date": "2026-10-14"
           }
         ]
@@ -403,7 +403,7 @@
         "timing": "pre-tool",
         "profile": "user-headless",
         "wired": true,
-        "configSource": "core/harnesses/pi/extensions/doflow-guard.js:129",
+        "configSource": "core/harnesses/pi/extensions/doflow-guard.js:128",
         "harnessVersion": {
           "tested": "1.1.0"
         },
@@ -443,7 +443,7 @@
         "timing": "pre-tool",
         "profile": "project-headless",
         "wired": true,
-        "configSource": "core/harnesses/pi/extensions/doflow-guard.js:129",
+        "configSource": "core/harnesses/pi/extensions/doflow-guard.js:128",
         "harnessVersion": {
           "tested": "1.1.0"
         },
@@ -519,187 +519,6 @@
           }
         ]
       },
-      {
-        "policy": "pre-bash-guard",
-        "harness": "pi",
-        "event": "tool_call",
-        "timing": "pre-tool",
-        "profile": "cli-extension",
-        "wired": true,
-        "configSource": "core/harnesses/pi/extensions/doflow-guard.js:129",
-        "harnessVersion": {
-          "tested": "1.1.0"
-        },
-        "class": "unknown",
-        "verification": "unverified",
-        "prerequisites": [],
-        "covers": [],
-        "doesNotCover": [],
-        "caveats": [
-          "Pi extension has not been exercised in a live session; a later tool_call handler may mutate input after DoFlow allows it"
-        ],
-        "provenance": [
-          {
-            "kind": "types",
-            "locator": "@earendil-works/pi-coding-agent@1.1.0 dist/core/extensions/types.d.ts:907-958",
-            "date": "2026-10-14"
-          },
-          {
-            "kind": "doc",
-            "locator": "@earendil-works/pi-coding-agent@1.1.0 docs/extensions.md:169",
-            "date": "2026-10-14"
-          },
-          {
-            "kind": "fixture",
-            "locator": "test/fixtures/hooks/pi/tool_call/bash-deny.json",
-            "date": "2026-10-14"
-          }
-        ]
-      },
-      {
-        "policy": "pre-bash-guard",
-        "harness": "pi",
-        "event": "tool_execution_start",
-        "timing": "post-tool",
-        "profile": "cli-extension",
-        "wired": false,
-        "configSource": null,
-        "harnessVersion": {
-          "tested": "1.1.0"
-        },
-        "class": "observation",
-        "verification": "unverified",
-        "prerequisites": [],
-        "covers": [],
-        "doesNotCover": [],
-        "caveats": [
-          "Pi user- and project-scope extensions have not been exercised in a live session; a later tool_call handler may mutate input after DoFlow allows it"
-        ],
-        "provenance": [
-          {
-            "kind": "doc",
-            "locator": "https://pi.dev/docs/latest/extensions",
-            "date": "2026-10-14"
-          }
-        ]
-      },
-      {
-        "policy": "pre-bash-guard",
-        "harness": "pi",
-        "event": "tool_call",
-        "timing": "pre-tool",
-        "profile": "user-headless",
-        "wired": true,
-        "configSource": "core/harnesses/pi/extensions/doflow-guard.js:129",
-        "harnessVersion": {
-          "tested": "1.1.0"
-        },
-        "class": "unknown",
-        "verification": "unverified",
-        "prerequisites": [],
-        "covers": [],
-        "doesNotCover": [],
-        "caveats": [
-          "Pi extension has not been exercised in a live session; a later tool_call handler may mutate input after DoFlow allows it",
-          "live probe pending"
-        ],
-        "provenance": [
-          {
-            "kind": "types",
-            "locator": "@earendil-works/pi-coding-agent@1.1.0 dist/core/extensions/types.d.ts:907-958",
-            "date": "2026-10-14"
-          },
-          {
-            "kind": "doc",
-            "locator": "@earendil-works/pi-coding-agent@1.1.0 docs/extensions.md:169",
-            "date": "2026-10-14"
-          },
-          {
-            "kind": "fixture",
-            "locator": "test/fixtures/hooks/pi/tool_call/bash-deny.json",
-            "date": "2026-10-14"
-          }
-        ]
-      },
-      {
-        "policy": "pre-bash-guard",
-        "harness": "pi",
-        "event": "tool_call",
-        "timing": "pre-tool",
-        "profile": "project-headless",
-        "wired": true,
-        "configSource": "core/harnesses/pi/extensions/doflow-guard.js:129",
-        "harnessVersion": {
-          "tested": "1.1.0"
-        },
-        "class": "unknown",
-        "verification": "unverified",
-        "prerequisites": [
-          "project-trust"
-        ],
-        "covers": [],
-        "doesNotCover": [],
-        "caveats": [
-          "Pi extension has not been exercised in a live session; a later tool_call handler may mutate input after DoFlow allows it",
-          "live probe pending",
-          "project-trust is required for the project-scope extension"
-        ],
-        "provenance": [
-          {
-            "kind": "types",
-            "locator": "@earendil-works/pi-coding-agent@1.1.0 dist/core/extensions/types.d.ts:907-958",
-            "date": "2026-10-14"
-          },
-          {
-            "kind": "doc",
-            "locator": "@earendil-works/pi-coding-agent@1.1.0 docs/extensions.md:169",
-            "date": "2026-10-14"
-          },
-          {
-            "kind": "fixture",
-            "locator": "test/fixtures/hooks/pi/tool_call/bash-deny.json",
-            "date": "2026-10-14"
-          }
-        ]
-      },
-      {
-        "policy": "pre-bash-guard",
-        "harness": "pi",
-        "event": "*",
-        "timing": "pre-tool",
-        "profile": "no-extensions",
-        "wired": false,
-        "configSource": null,
-        "harnessVersion": {
-          "tested": "1.1.0"
-        },
-        "class": "unsupported",
-        "verification": "unverified",
-        "prerequisites": [],
-        "covers": [],
-        "doesNotCover": [],
-        "caveats": [
-          "Pi user- and project-scope extensions have not been exercised in a live session; a later tool_call handler may mutate input after DoFlow allows it",
-          "Pi extension unavailable in this profile"
-        ],
-        "provenance": [
-          {
-            "kind": "types",
-            "locator": "@earendil-works/pi-coding-agent@1.1.0 dist/core/extensions/types.d.ts:907-958",
-            "date": "2026-10-14"
-          },
-          {
-            "kind": "doc",
-            "locator": "@earendil-works/pi-coding-agent@1.1.0 docs/extensions.md:169",
-            "date": "2026-10-14"
-          },
-          {
-            "kind": "fixture",
-            "locator": "test/fixtures/hooks/pi/tool_call/bash-deny.json",
-            "date": "2026-10-14"
-          }
-        ]
-      },
       {
         "policy": "session-context",
         "harness": "pi",
@@ -735,7 +554,7 @@
         "timing": "pre-tool",
         "profile": "cli-extension",
         "wired": true,
-        "configSource": "core/harnesses/pi/extensions/doflow-guard.js:129",
+        "configSource": "core/harnesses/pi/extensions/doflow-guard.js:128",
         "harnessVersion": {
           "tested": "1.1.0"
         },
@@ -799,7 +618,7 @@
         "timing": "pre-tool",
         "profile": "user-headless",
         "wired": true,
-        "configSource": "core/harnesses/pi/extensions/doflow-guard.js:129",
+        "configSource": "core/harnesses/pi/extensions/doflow-guard.js:128",
         "harnessVersion": {
           "tested": "1.1.0"
         },
@@ -837,7 +656,7 @@
         "timing": "pre-tool",
         "profile": "project-headless",
         "wired": true,
-        "configSource": "core/harnesses/pi/extensions/doflow-guard.js:129",
+        "configSource": "core/harnesses/pi/extensions/doflow-guard.js:128",
         "harnessVersion": {
           "tested": "1.1.0"
         },
@@ -948,7 +767,7 @@
         "harnessVersion": {
           "tested": "GitHub Copilot CLI 1.0.103"
         },
-        "class": "blocking",
+        "class": "advisory",
         "verification": "verified",
         "prerequisites": [],
         "covers": [],
@@ -993,7 +812,7 @@
         "harnessVersion": {
           "tested": "kiro-cli 2.29.1"
         },
-        "class": "blocking",
+        "class": "advisory",
         "verification": "verified",
         "prerequisites": [],
         "covers": [],
@@ -1025,7 +844,7 @@
         "harnessVersion": {
           "tested": "kiro-cli 2.29.1"
         },
-        "class": "blocking",
+        "class": "advisory",
         "verification": "verified",
         "prerequisites": [],
         "covers": [],
@@ -1057,7 +876,7 @@
         "harnessVersion": {
           "tested": "kiro-cli 2.29.1"
         },
-        "class": "blocking",
+        "class": "advisory",
         "verification": "verified",
         "prerequisites": [],
         "covers": [],
@@ -1089,7 +908,7 @@
         "harnessVersion": {
           "tested": "kiro-cli 2.29.1"
         },
-        "class": "blocking",
+        "class": "advisory",
         "verification": "verified",
         "prerequisites": [],
         "covers": [],
@@ -1121,7 +940,7 @@
         "harnessVersion": {
           "tested": "1.3.3"
         },
-        "class": "blocking",
+        "class": "advisory",
         "verification": "verified",
         "prerequisites": [],
         "covers": [],
@@ -1143,165 +962,150 @@
         ]
       },
       {
-        "policy": "pre-bash-guard",
+        "policy": "session-context",
         "harness": "claude",
-        "event": "PreToolUse",
-        "timing": "pre-tool",
+        "event": "SessionStart",
+        "timing": "session",
         "profile": "any",
         "wired": true,
-        "configSource": "core/harnesses/claude/settings/settings.json:89",
+        "configSource": "core/harnesses/claude/settings/settings.json:44",
         "harnessVersion": {
           "tested": "2.1.287 (Claude Code)"
         },
-        "class": "blocking",
-        "verification": "verified",
+        "class": "unknown",
+        "verification": "unverified",
         "prerequisites": [],
         "covers": [],
         "doesNotCover": [],
-        "caveats": [],
+        "caveats": [
+          "native event enforcement is not yet verified"
+        ],
         "provenance": [
           {
             "kind": "doc",
             "locator": "https://code.claude.com/docs/en/hooks",
             "date": "2026-10-12"
-          },
-          {
-            "kind": "fixture",
-            "locator": "test/fixtures/hooks/claude/pre-bash-guard/deny.json",
-            "date": "2026-10-14"
           }
         ]
       },
       {
-        "policy": "pre-bash-guard",
+        "policy": "session-context",
         "harness": "codex",
-        "event": "PreToolUse",
-        "timing": "pre-tool",
+        "event": "SessionStart",
+        "timing": "session",
         "profile": "any",
         "wired": true,
-        "configSource": "core/harnesses/codex/hooks/hooks.json:45",
+        "configSource": "core/harnesses/codex/hooks/hooks.json:4",
         "harnessVersion": {
           "tested": "codex-cli 0.162.1"
         },
-        "class": "blocking",
-        "verification": "verified",
+        "class": "unknown",
+        "verification": "unverified",
         "prerequisites": [
           "hook-review"
         ],
         "covers": [],
         "doesNotCover": [],
-        "caveats": [],
+        "caveats": [
+          "native event enforcement is not yet verified"
+        ],
         "provenance": [
           {
             "kind": "doc",
             "locator": "https://learn.chatgpt.com/docs/hooks",
             "date": "2026-10-12"
-          },
-          {
-            "kind": "fixture",
-            "locator": "test/fixtures/hooks/codex/pre-bash-guard/deny.json",
-            "date": "2026-10-14"
           }
         ]
       },
       {
-        "policy": "pre-bash-guard",
-        "harness": "opencode",
-        "event": "*",
-        "timing": "pre-tool",
+        "policy": "session-end",
+        "harness": "claude",
+        "event": "SessionEnd",
+        "timing": "session",
         "profile": "any",
-        "wired": false,
-        "configSource": null,
-        "harnessVersion": {
-          "tested": "1.18.30"
-        },
-        "class": "unsupported",
-        "verification": "unverified",
-        "prerequisites": [],
-        "covers": [],
-        "doesNotCover": [],
-        "caveats": [],
-        "provenance": [
-          {
-            "kind": "doc",
-            "locator": "core/registry/harnesses.json: opencode harness; core/registry/contracts.json: unavailable hook mapping",
-            "date": "2026-10-12"
-          }
-        ]
-      },
-      {
-        "policy": "pre-bash-guard",
-        "harness": "kiro",
-        "event": "PreToolUse",
-        "timing": "pre-tool",
-        "profile": "ide",
         "wired": true,
-        "configSource": "core/harnesses/kiro/hooks/doflow.json:24",
+        "configSource": "core/harnesses/claude/settings/settings.json:176",
         "harnessVersion": {
-          "tested": "kiro-cli 2.29.1"
+          "tested": "2.1.287 (Claude Code)"
         },
-        "class": "blocking",
-        "verification": "verified",
+        "class": "observation",
+        "verification": "unverified",
         "prerequisites": [],
-        "covers": [],
-        "doesNotCover": [],
-        "caveats": [],
+        "covers": [
+          "removes the ending main session's hashed model observation"
+        ],
+        "doesNotCover": [
+          "worker observations",
+          "sessions that end without the hook running (the model-observations age bound applies)"
+        ],
+        "caveats": [
+          "native event enforcement is not yet verified"
+        ],
         "provenance": [
           {
             "kind": "doc",
-            "locator": "https://kiro.dev/docs/hooks/types/",
+            "locator": "https://code.claude.com/docs/en/hooks",
             "date": "2026-10-12"
           },
           {
             "kind": "fixture",
-            "locator": "test/fixtures/hooks/kiro/pre-bash-guard/deny.json",
-            "date": "2026-10-14"
+            "locator": "test/hooks/session-end-observation.test.ts",
+            "date": "2026-11-04"
           }
         ]
       },
       {
-        "policy": "pre-bash-guard",
-        "harness": "kiro",
-        "event": "PreToolUse",
-        "timing": "pre-tool",
-        "profile": "cli-v3",
+        "policy": "session-end",
+        "harness": "codex",
+        "event": "SessionEnd",
+        "timing": "session",
+        "profile": "any",
         "wired": true,
-        "configSource": "core/harnesses/kiro/hooks/doflow.json:24",
+        "configSource": "core/harnesses/codex/hooks/hooks.json:100",
         "harnessVersion": {
-          "tested": "kiro-cli 2.29.1"
+          "tested": "codex-cli 0.162.1"
         },
-        "class": "blocking",
-        "verification": "verified",
-        "prerequisites": [],
-        "covers": [],
-        "doesNotCover": [],
-        "caveats": [],
+        "class": "observation",
+        "verification": "unverified",
+        "prerequisites": [
+          "hook-review"
+        ],
+        "covers": [
+          "removes the ending main session's hashed model observation"
+        ],
+        "doesNotCover": [
+          "worker observations",
+          "sessions that end without the hook running (the model-observations age bound applies)"
+        ],
+        "caveats": [
+          "native event enforcement is not yet verified"
+        ],
         "provenance": [
           {
             "kind": "doc",
-            "locator": "https://kiro.dev/docs/hooks/types/",
+            "locator": "https://learn.chatgpt.com/docs/hooks",
             "date": "2026-10-12"
           },
           {
             "kind": "fixture",
-            "locator": "test/fixtures/hooks/kiro/pre-bash-guard/deny.json",
-            "date": "2026-10-14"
+            "locator": "test/hooks/session-end-observation.test.ts",
+            "date": "2026-11-04"
           }
         ]
       },
       {
-        "policy": "pre-bash-guard",
-        "harness": "kiro",
-        "event": "PreToolUse",
-        "timing": "pre-tool",
-        "profile": "cli-v3-agent",
-        "wired": true,
-        "configSource": "core/harnesses/kiro/agents/doflow.json:21",
+        "policy": "session-end",
+        "harness": "opencode",
+        "event": "*",
+        "timing": "session",
+        "profile": "any",
+        "wired": false,
+        "configSource": null,
         "harnessVersion": {
-          "tested": "kiro-cli 2.29.1"
+          "tested": "1.18.30"
         },
-        "class": "blocking",
-        "verification": "verified",
+        "class": "unsupported",
+        "verification": "unverified",
         "prerequisites": [],
         "covers": [],
         "doesNotCover": [],
@@ -1309,56 +1113,49 @@
         "provenance": [
           {
             "kind": "doc",
-            "locator": "https://kiro.dev/docs/hooks/types/",
+            "locator": "core/registry/harnesses.json: opencode harness; core/registry/contracts.json: unavailable hook mapping",
             "date": "2026-10-12"
-          },
-          {
-            "kind": "fixture",
-            "locator": "test/fixtures/hooks/kiro/pre-bash-guard/agent-deny.json",
-            "date": "2026-10-14"
           }
         ]
       },
       {
-        "policy": "pre-bash-guard",
-        "harness": "kiro",
-        "event": "PreToolUse",
-        "timing": "pre-tool",
-        "profile": "cli-2x-agent",
-        "wired": true,
-        "configSource": "core/harnesses/kiro/agents/doflow.json:21",
+        "policy": "session-end",
+        "harness": "pi",
+        "event": "*",
+        "timing": "session",
+        "profile": "any",
+        "wired": false,
+        "configSource": null,
         "harnessVersion": {
-          "tested": "kiro-cli 2.29.1"
+          "tested": "1.1.0"
         },
-        "class": "blocking",
-        "verification": "verified",
+        "class": "unsupported",
+        "verification": "unverified",
         "prerequisites": [],
         "covers": [],
         "doesNotCover": [],
-        "caveats": [],
+        "caveats": [
+          "not wired for this harness mapping",
+          "Pi user- and project-scope extensions have not been exercised in a live session; a later tool_call handler may mutate input after DoFlow allows it"
+        ],
         "provenance": [
           {
             "kind": "doc",
-            "locator": "https://kiro.dev/docs/hooks/types/",
-            "date": "2026-10-12"
-          },
-          {
-            "kind": "fixture",
-            "locator": "test/fixtures/hooks/kiro/pre-bash-guard/agent-deny.json",
-            "date": "2026-10-14"
+            "locator": "core/registry/lifecycle.json: policy session-end mapping for pi",
+            "date": "2026-11-04"
           }
         ]
       },
       {
-        "policy": "pre-bash-guard",
-        "harness": "antigravity",
+        "policy": "session-end",
+        "harness": "copilot",
         "event": "*",
-        "timing": "pre-tool",
+        "timing": "session",
         "profile": "any",
         "wired": false,
         "configSource": null,
         "harnessVersion": {
-          "tested": "1.3.3"
+          "tested": "GitHub Copilot CLI 1.0.103"
         },
         "class": "unsupported",
         "verification": "unverified",
@@ -1371,64 +1168,62 @@
         "provenance": [
           {
             "kind": "doc",
-            "locator": "core/registry/lifecycle.json: policy pre-bash-guard mapping for antigravity",
-            "date": "2026-10-14"
+            "locator": "core/registry/lifecycle.json: policy session-end mapping for copilot",
+            "date": "2026-11-04"
           }
         ]
       },
       {
-        "policy": "session-context",
-        "harness": "claude",
-        "event": "SessionStart",
+        "policy": "session-end",
+        "harness": "kiro",
+        "event": "*",
         "timing": "session",
         "profile": "any",
-        "wired": true,
-        "configSource": "core/harnesses/claude/settings/settings.json:36",
+        "wired": false,
+        "configSource": null,
         "harnessVersion": {
-          "tested": "2.1.287 (Claude Code)"
+          "tested": "kiro-cli 2.29.1"
         },
-        "class": "unknown",
+        "class": "unsupported",
         "verification": "unverified",
         "prerequisites": [],
         "covers": [],
         "doesNotCover": [],
         "caveats": [
-          "native event enforcement is not yet verified"
+          "not wired for this harness mapping"
         ],
         "provenance": [
           {
             "kind": "doc",
-            "locator": "https://code.claude.com/docs/en/hooks",
-            "date": "2026-10-12"
+            "locator": "core/registry/lifecycle.json: policy session-end mapping for kiro",
+            "date": "2026-11-04"
           }
         ]
       },
       {
-        "policy": "session-context",
-        "harness": "codex",
-        "event": "SessionStart",
+        "policy": "session-end",
+        "harness": "antigravity",
+        "event": "*",
         "timing": "session",
         "profile": "any",
-        "wired": true,
-        "configSource": "core/harnesses/codex/hooks/hooks.json:4",
+        "wired": false,
+        "configSource": null,
         "harnessVersion": {
-          "tested": "codex-cli 0.162.1"
+          "tested": "1.3.3"
         },
-        "class": "unknown",
+        "class": "unsupported",
         "verification": "unverified",
-        "prerequisites": [
-          "hook-review"
-        ],
+        "prerequisites": [],
         "covers": [],
         "doesNotCover": [],
         "caveats": [
-          "native event enforcement is not yet verified"
+          "not wired for this harness mapping"
         ],
         "provenance": [
           {
             "kind": "doc",
-            "locator": "https://learn.chatgpt.com/docs/hooks",
-            "date": "2026-10-12"
+            "locator": "core/registry/lifecycle.json: policy session-end mapping for antigravity",
+            "date": "2026-11-04"
           }
         ]
       },
@@ -1696,7 +1491,7 @@
         "timing": "pre-tool",
         "profile": "any",
         "wired": true,
-        "configSource": "core/harnesses/claude/settings/settings.json:89",
+        "configSource": "core/harnesses/claude/settings/settings.json:97",
         "harnessVersion": {
           "tested": "2.1.287 (Claude Code)"
         },
@@ -1900,7 +1695,7 @@
         "timing": "pre-tool",
         "profile": "ide",
         "wired": true,
-        "configSource": "core/harnesses/kiro/hooks/doflow.json:34",
+        "configSource": "core/harnesses/kiro/hooks/doflow.json:24",
         "harnessVersion": {
           "tested": "kiro-cli 2.29.1"
         },
@@ -1930,7 +1725,7 @@
         "timing": "pre-tool",
         "profile": "cli-v3",
         "wired": true,
-        "configSource": "core/harnesses/kiro/hooks/doflow.json:34",
+        "configSource": "core/harnesses/kiro/hooks/doflow.json:24",
         "harnessVersion": {
           "tested": "kiro-cli 2.29.1"
         },
@@ -1960,7 +1755,7 @@
         "timing": "pre-tool",
         "profile": "cli-v3-agent",
         "wired": true,
-        "configSource": "core/harnesses/kiro/agents/doflow.json:31",
+        "configSource": "core/harnesses/kiro/agents/doflow.json:21",
         "harnessVersion": {
           "tested": "kiro-cli 2.29.1"
         },
@@ -1990,7 +1785,7 @@
         "timing": "pre-tool",
         "profile": "cli-2x-agent",
         "wired": true,
-        "configSource": "core/harnesses/kiro/agents/doflow.json:31",
+        "configSource": "core/harnesses/kiro/agents/doflow.json:21",
         "harnessVersion": {
           "tested": "kiro-cli 2.29.1"
         },
@@ -2047,11 +1842,11 @@
         "timing": "stop",
         "profile": "any",
         "wired": true,
-        "configSource": "core/harnesses/claude/settings/settings.json:147",
+        "configSource": "core/harnesses/claude/settings/settings.json:146",
         "harnessVersion": {
           "tested": "2.1.287 (Claude Code)"
         },
-        "class": "blocking",
+        "class": "advisory",
         "verification": "verified",
         "prerequisites": [],
         "covers": [],
@@ -2077,11 +1872,11 @@
         "timing": "stop",
         "profile": "any",
         "wired": true,
-        "configSource": "core/harnesses/codex/hooks/hooks.json:99",
+        "configSource": "core/harnesses/codex/hooks/hooks.json:89",
         "harnessVersion": {
           "tested": "codex-cli 0.162.1"
         },
-        "class": "blocking",
+        "class": "advisory",
         "verification": "verified",
         "prerequisites": [
           "hook-review"
@@ -2134,7 +1929,7 @@
         "timing": "stop",
         "profile": "any",
         "wired": true,
-        "configSource": "core/harnesses/copilot/hooks/doflow.json:32",
+        "configSource": "core/harnesses/copilot/hooks/doflow.json:26",
         "harnessVersion": {
           "tested": "GitHub Copilot CLI 1.0.103"
         },
@@ -2166,49 +1961,6 @@
           }
         ]
       },
-      {
-        "policy": "pre-bash-guard",
-        "harness": "copilot",
-        "event": "PreToolUse",
-        "timing": "pre-tool",
-        "profile": "any",
-        "wired": true,
-        "configSource": "core/harnesses/copilot/hooks/doflow.json:12",
-        "harnessVersion": {
-          "tested": "GitHub Copilot CLI 1.0.103"
-        },
-        "class": "blocking",
-        "verification": "verified",
-        "prerequisites": [],
-        "covers": [],
-        "doesNotCover": [],
-        "caveats": [
-          "live-verified: the deny output blocked a shell command; Copilot command hooks are fail-closed on a non-zero exit and fail open on a timeout",
-          "version-drift:GitHub Copilot CLI 1.0.104."
-        ],
-        "provenance": [
-          {
-            "kind": "doc",
-            "locator": "https://docs.github.com/en/copilot/reference/hooks-reference",
-            "date": "2026-10-27"
-          },
-          {
-            "kind": "fixture",
-            "locator": "test/fixtures/hooks/copilot/pre-bash-guard/deny.json",
-            "date": "2026-10-27"
-          },
-          {
-            "kind": "live",
-            "locator": "test/fixtures/hooks/copilot/live/deny-proof-2026-10-27.json",
-            "date": "2026-10-27"
-          },
-          {
-            "kind": "live",
-            "locator": "test/fixtures/hooks/copilot/live/capture-2026-10-27.jsonl",
-            "date": "2026-10-27"
-          }
-        ]
-      },
       {
         "policy": "stop-check",
         "harness": "kiro",
@@ -2216,7 +1968,7 @@
         "timing": "stop",
         "profile": "ide",
         "wired": true,
-        "configSource": "core/harnesses/kiro/hooks/doflow.json:44",
+        "configSource": "core/harnesses/kiro/hooks/doflow.json:34",
         "harnessVersion": {
           "tested": "kiro-cli 2.29.1"
         },
@@ -2254,7 +2006,7 @@
         "timing": "stop",
         "profile": "cli-v3",
         "wired": true,
-        "configSource": "core/harnesses/kiro/hooks/doflow.json:44",
+        "configSource": "core/harnesses/kiro/hooks/doflow.json:34",
         "harnessVersion": {
           "tested": "kiro-cli 2.29.1"
         },
@@ -2292,11 +2044,11 @@
         "timing": "stop",
         "profile": "any",
         "wired": true,
-        "configSource": "src/adapters/antigravity/index.js:60",
+        "configSource": "src/adapters/antigravity/index.js:64",
         "harnessVersion": {
           "tested": "1.3.3"
         },
-        "class": "blocking",
+        "class": "advisory",
         "verification": "verified",
         "prerequisites": [],
         "covers": [],
@@ -2322,7 +2074,7 @@
         "timing": "pre-tool",
         "profile": "project-interactive",
         "wired": true,
-        "configSource": "core/harnesses/pi/extensions/doflow-guard.js:129",
+        "configSource": "core/harnesses/pi/extensions/doflow-guard.js:128",
         "harnessVersion": {
           "tested": "1.1.0"
         },
@@ -2358,47 +2110,6 @@
           }
         ]
       },
-      {
-        "policy": "pre-bash-guard",
-        "harness": "pi",
-        "event": "tool_call",
-        "timing": "pre-tool",
-        "profile": "project-interactive",
-        "wired": true,
-        "configSource": "core/harnesses/pi/extensions/doflow-guard.js:129",
-        "harnessVersion": {
-          "tested": "1.1.0"
-        },
-        "class": "unknown",
-        "verification": "unverified",
-        "prerequisites": [
-          "project-trust"
-        ],
-        "covers": [],
-        "doesNotCover": [],
-        "caveats": [
-          "project-trust is required for the project-scope extension",
-          "loading path not live-observed",
-          "project-trust is required for the project-scope extension"
-        ],
-        "provenance": [
-          {
-            "kind": "types",
-            "locator": "@earendil-works/pi-coding-agent@1.1.0 dist/core/extensions/types.d.ts:907-958",
-            "date": "2026-10-14"
-          },
-          {
-            "kind": "doc",
-            "locator": "@earendil-works/pi-coding-agent@1.1.0 docs/extensions.md:169",
-            "date": "2026-10-14"
-          },
-          {
-            "kind": "fixture",
-            "locator": "test/fixtures/hooks/pi/tool_call/bash-deny.json",
-            "date": "2026-10-14"
-          }
-        ]
-      },
       {
         "policy": "mcp-tool-guard",
         "harness": "pi",
@@ -2406,7 +2117,7 @@
         "timing": "pre-tool",
         "profile": "project-interactive",
         "wired": true,
-        "configSource": "core/harnesses/pi/extensions/doflow-guard.js:129",
+        "configSource": "core/harnesses/pi/extensions/doflow-guard.js:128",
         "harnessVersion": {
           "tested": "1.1.0"
         },
@@ -2447,7 +2158,7 @@
         "timing": "stop",
         "profile": "cli-2x-agent",
         "wired": true,
-        "configSource": "core/harnesses/kiro/agents/doflow.json:50",
+        "configSource": "core/harnesses/kiro/agents/doflow.json:40",
         "harnessVersion": {
           "tested": "kiro-cli 2.29.1"
         },
@@ -2479,7 +2190,7 @@
         "timing": "stop",
         "profile": "cli-v3-agent",
         "wired": true,
-        "configSource": "core/harnesses/kiro/agents/doflow.json:50",
+        "configSource": "core/harnesses/kiro/agents/doflow.json:40",
         "harnessVersion": {
           "tested": "kiro-cli 2.29.1"
         },
@@ -2517,7 +2228,7 @@
         "timing": "pre-tool",
         "profile": "user-interactive",
         "wired": true,
-        "configSource": "core/harnesses/pi/extensions/doflow-guard.js:129",
+        "configSource": "core/harnesses/pi/extensions/doflow-guard.js:128",
         "harnessVersion": {
           "tested": "1.1.0"
         },
@@ -2550,44 +2261,6 @@
           }
         ]
       },
-      {
-        "policy": "pre-bash-guard",
-        "harness": "pi",
-        "event": "tool_call",
-        "timing": "pre-tool",
-        "profile": "user-interactive",
-        "wired": true,
-        "configSource": "core/harnesses/pi/extensions/doflow-guard.js:129",
-        "harnessVersion": {
-          "tested": "1.1.0"
-        },
-        "class": "unknown",
-        "verification": "unverified",
-        "prerequisites": [],
-        "covers": [],
-        "doesNotCover": [],
-        "caveats": [
-          "Pi extension has not been exercised in a live session; a later tool_call handler may mutate input after DoFlow allows it",
-          "live probe pending"
-        ],
-        "provenance": [
-          {
-            "kind": "types",
-            "locator": "@earendil-works/pi-coding-agent@1.1.0 dist/core/extensions/types.d.ts:907-958",
-            "date": "2026-10-14"
-          },
-          {
-            "kind": "doc",
-            "locator": "@earendil-works/pi-coding-agent@1.1.0 docs/extensions.md:169",
-            "date": "2026-10-14"
-          },
-          {
-            "kind": "fixture",
-            "locator": "test/fixtures/hooks/pi/tool_call/bash-deny.json",
-            "date": "2026-10-14"
-          }
-        ]
-      },
       {
         "policy": "mcp-tool-guard",
         "harness": "pi",
@@ -2595,7 +2268,7 @@
         "timing": "pre-tool",
         "profile": "user-interactive",
         "wired": true,
-        "configSource": "core/harnesses/pi/extensions/doflow-guard.js:129",
+        "configSource": "core/harnesses/pi/extensions/doflow-guard.js:128",
         "harnessVersion": {
           "tested": "1.1.0"
         },
@@ -2633,7 +2306,7 @@
         "timing": "session",
         "profile": "cli-v3-agent",
         "wired": true,
-        "configSource": "core/harnesses/kiro/agents/doflow.json:42",
+        "configSource": "core/harnesses/kiro/agents/doflow.json:32",
         "harnessVersion": {
           "tested": "kiro-cli 2.29.1"
         },
@@ -3026,6 +2699,6 @@
         ]
       }
     ],
-    "rowsDigest": "sha256:d8fdf93bb4a556f0ba91d5a8eb74e5857c29fe7ea87e2731a39afb955d50bb59"
+    "rowsDigest": "sha256:bb6f6cd25ed87131d95bfa0dda3f7a4ecd03b4f19216510685b2a5b640a353c6"
   }
 }