@khoavu882/doflow 2.0.1 → 2.0.2

package/core/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "doflow",
-  "version": "2.0.1",
+  "version": "2.0.2",
   "description": "Reusable engineering workflows, quality gates, and specialist guidance for Claude Code.",
   "author": {
     "name": "DoFlow"

package/core/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "doflow",
-  "version": "2.0.1",
+  "version": "2.0.2",
   "description": "Reusable engineering workflows, quality gates, and specialist guidance for Codex.",
   "author": {
     "name": "DoFlow",

package/core/.plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "doflow",
-  "version": "2.0.1",
+  "version": "2.0.2",
   "description": "Reusable engineering workflows, quality gates, and specialist guidance for GitHub Copilot CLI.",
   "author": {
     "name": "DoFlow",

package/core/harnesses/claude/hooks/session-end.sh

@@ -5,7 +5,7 @@ case "${OSTYPE:-}" in msys*|cygwin*|win32*) if command -v jq >/dev/null 2>&1; th
 # Runs when Claude Code closes a session. Responsibilities:
 #   1. Append END marker to sessions.log
 #   2. Write uncommitted-warning.txt if the working tree is dirty
-#   3. Delete the session-scoped state directory (cleanup)
+#   3. Delete the session-scoped state directory (cleanup) and the main session's model observation
 #   4. Trim sessions.log to last 500 lines (lock-guarded for parallel safety)
 #
 # Multi-session safe: with_file_lock (lib.sh) prevents concurrent sessions from
@@ -81,6 +81,26 @@ if [[ -n "$SESSION_ID" ]]; then
   rm -rf "$SESSION_PATH" 2>/dev/null || true
 fi
 
+# ── 3b. Remove this main session's model observation (120 IC-005) ─────────────
+
+# observe-model.sh keys the file by the first 16 hex of sha256(session id), under primary/<cwd_hash>/<harness>/.
+# Only the ending main session's own file goes: other sessions, worker observations and a missing file are left
+# alone, and a failure here changes nothing (SessionEnd is fire-and-forget).
+forget_model_observation() {
+  local key="" cwd="${CWD:-}" file=""
+  [[ -n "$SESSION_ID" ]] || return 0
+  [[ "$(doflow_session_role || echo main)" == "main" ]] || return 0
+  if command -v sha256sum >/dev/null 2>&1; then key=$(printf '%s' "$SESSION_ID" | sha256sum | cut -c1-16)
+  elif command -v shasum >/dev/null 2>&1; then key=$(printf '%s' "$SESSION_ID" | shasum -a 256 | cut -c1-16)
+  else return 0; fi
+  [[ $key =~ ^[0-9a-f]{16}$ ]] || return 0
+  case "$cwd" in /*) ;; *) cwd=$PWD ;; esac
+  file="$STATE_DIR/primary/$(cwd_hash "$cwd")/claude/$key.json"
+  if [[ -f "$file" && ! -L "$file" ]]; then rm -f "$file"; fi
+  return 0
+}
+forget_model_observation 2>/dev/null || true
+
 start_storage_upkeep
 
 # ── 4. Trim sessions.log (lock-guarded) ───────────────────────────────────────

package/core/harnesses/codex/hooks/session-end.impl.sh

@@ -5,7 +5,7 @@ case "${OSTYPE:-}" in msys*|cygwin*|win32*) if command -v jq >/dev/null 2>&1; th
 # Runs when Claude Code closes a session. Responsibilities:
 #   1. Append END marker to sessions.log
 #   2. Write uncommitted-warning.txt if the working tree is dirty
-#   3. Delete the session-scoped state directory (cleanup)
+#   3. Delete the session-scoped state directory (cleanup) and the main session's model observation
 #   4. Trim sessions.log to last 500 lines (lock-guarded for parallel safety,
 #      via lib.sh's portable with_file_lock — no flock dependency)
 #
@@ -82,6 +82,26 @@ if [[ -n "$SESSION_ID" ]]; then
   rm -rf "$SESSION_PATH" 2>/dev/null || true
 fi
 
+# ── 3b. Remove this main session's model observation (120 IC-005) ─────────────
+
+# observe-model.sh keys the file by the first 16 hex of sha256(session id), under primary/<cwd_hash>/<harness>/.
+# Only the ending main session's own file goes: other sessions, worker observations and a missing file are left
+# alone, and a failure here changes nothing (SessionEnd is fire-and-forget).
+forget_model_observation() {
+  local key="" cwd="${CWD:-}" file=""
+  [[ -n "$SESSION_ID" ]] || return 0
+  [[ "$(doflow_session_role || echo main)" == "main" ]] || return 0
+  if command -v sha256sum >/dev/null 2>&1; then key=$(printf '%s' "$SESSION_ID" | sha256sum | cut -c1-16)
+  elif command -v shasum >/dev/null 2>&1; then key=$(printf '%s' "$SESSION_ID" | shasum -a 256 | cut -c1-16)
+  else return 0; fi
+  [[ $key =~ ^[0-9a-f]{16}$ ]] || return 0
+  case "$cwd" in /*) ;; *) cwd=$PWD ;; esac
+  file="$STATE_DIR/primary/$(cwd_hash "$cwd")/codex/$key.json"
+  if [[ -f "$file" && ! -L "$file" ]]; then rm -f "$file"; fi
+  return 0
+}
+forget_model_observation 2>/dev/null || true
+
 start_storage_upkeep
 
 # ── 4. Trim sessions.log (lock-guarded) ───────────────────────────────────────

package/core/harnesses/shared/hooks/policies/compact-text.sh

@@ -21,6 +21,14 @@ doflow_compact_text() {
       "$preserve" "${CWD:-unknown}")
   fi
 
+  # Malformed UTF-8 (a commit subject or path can carry any byte) becomes U+FFFD here, before the cap, so the
+  # Claude (raw stdout) and Codex (jq --arg) outputs decode to the same text and the cap counts the bytes sent.
+  # jq is a hard requirement of both hooks; without it the text is left as it was (FU-535bfv).
+  if command -v jq >/dev/null 2>&1; then
+    local clean
+    if clean=$(printf '%s' "$text" | jq -Rsj '.' 2>/dev/null); then text="$clean"; fi
+  fi
+
   # The cap is 490 BYTES in every locale: LC_ALL=C makes the substring and length below count bytes,
   # where a UTF-8 locale would count characters. A cut can then end inside a multi-byte character, so
   # a trailing partial UTF-8 sequence is dropped (FU-tsq77m).

package/core/harnesses/shared/hooks/policies/subagent-audit.sh

@@ -67,6 +67,26 @@ TIMESTAMP=$(date -u +%FT%TZ)
 
 SESSION_PATH=$(ensure_session_dir "$SESSION_ID")
 
+# One SubagentStop record per session+agent id. A harness that runs another harness's hook wiring as
+# well as its own (Copilot with a Claude install, issue 21) delivers each stop twice, possibly at the
+# same moment. mkdir is the atomic claim: the delivery that creates the marker writes the record, a
+# delivery that finds it is a duplicate. SubagentStart, an id-less stop and an id that is not a plain
+# token (no safe marker name) are always recorded, and any failure to claim records anyway (fail open).
+STOP_CLAIM=""
+STOP_EVENT_KEY=$(printf '%s' "$EVENT" | tr 'A-Z_' 'a-z')
+if [ "$STOP_EVENT_KEY" = "subagentstop" ] && [ -n "$AGENT_ID" ] && [ "${#AGENT_ID}" -le 128 ]; then
+  case "$AGENT_ID" in
+    [A-Za-z0-9]*) case "$AGENT_ID" in *[!A-Za-z0-9._-]*) ;; *)
+      if mkdir -p "$SESSION_PATH/subagent-stops" 2>/dev/null; then
+        if mkdir "$SESSION_PATH/subagent-stops/$AGENT_ID" 2>/dev/null; then
+          STOP_CLAIM="$SESSION_PATH/subagent-stops/$AGENT_ID"
+        elif [ -d "$SESSION_PATH/subagent-stops/$AGENT_ID" ]; then
+          exit 0
+        fi
+      fi ;; esac ;;
+  esac
+fi
+
 jq -nc \
   --arg ts "$TIMESTAMP" \
   --arg session "$SESSION_ID" \
@@ -74,6 +94,10 @@ jq -nc \
   --arg agent_type "$AGENT_TYPE" \
   --arg agent_id "$AGENT_ID" \
   '{timestamp: $ts, session_id: $session, event: $event, agent_type: $agent_type, agent_id: $agent_id}' \
-  >> "$SESSION_PATH/subagent-audit.log" 2>/dev/null || doflow_decide error audit-write-failed
+  >> "$SESSION_PATH/subagent-audit.log" 2>/dev/null || {
+    # Release the claim so a later delivery of the same stop can still be recorded.
+    [ -z "$STOP_CLAIM" ] || rmdir "$STOP_CLAIM" 2>/dev/null || true
+    doflow_decide error audit-write-failed
+  }
 
 exit 0

package/core/registry/contribution-points.json

@@ -30,6 +30,6 @@
       "referencedBy": [], "slice": "136", "template": "package-templates/intake-category" }
   ],
   "bundled": [
-    { "id": "doflow", "dir": "core/registry/packages/doflow", "contentDigest": "4684bab1385564aef5e65100c789605895f3597c7fc23f340afa55333d11377b" }
+    { "id": "doflow", "dir": "core/registry/packages/doflow", "contentDigest": "a8f5766277e1cf284780c78efa487e2b8a9272951a5f8c67fabb830a54b55af8" }
   ]
 }

package/core/registry/intake.json

@@ -11,7 +11,7 @@
       "names": ["prd", "requirements"],
       "summary": "Product requirement documents, briefs and stories as the user wrote them.",
       "rules": [
-        { "extensions": ["md", "txt", "pdf", "docx"], "namePattern": "prd|requirement|brief|epic|(^|[^a-z0-9])(story|stories)([^a-z0-9]|$)" }
+        { "extensions": ["md", "txt", "pdf", "docx"], "namePattern": "prd|requirement|brief|epic|(^|[^a-z0-9])(user[-_ ]?)?(story|stories)([^a-z0-9]|$)" }
       ]
     },
     {
@@ -21,7 +21,7 @@
       "rules": [
         { "extensions": ["mmd", "puml", "drawio", "excalidraw"], "into": "diagrams" },
         { "extensions": ["png", "svg", "jpg", "jpeg"], "companionOf": ["mmd", "puml", "drawio", "excalidraw"] },
-        { "extensions": ["md"], "namePattern": "hld|high[-_ ]?level|design|architecture|decision|adr" }
+        { "extensions": ["md"], "namePattern": "^(?!.*(transcript|meeting|minutes|session[-_ ]?notes)).*(hld|high[-_ ]?level|design|architecture|decision|adr)" }
       ]
     },
     {
@@ -32,7 +32,7 @@
         { "extensions": ["mp3", "m4a", "wav", "ogg", "mp4", "mov", "webm"], "into": "records" },
         { "extensions": ["vtt", "srt"], "into": "transcripts" },
         { "extensions": ["txt", "md"], "namePattern": "transcript|meeting|minutes|discuss|session", "into": "transcripts" },
-        { "extensions": ["txt"], "namePattern": "^(\\d{1,2}-\\d{1,2}-\\d{4}|\\d{4}-\\d{2}-\\d{2})", "into": "transcripts" }
+        { "extensions": ["txt"], "namePattern": "^(\\d{1,2}-\\d{1,2}-\\d{4}|\\d{4}-\\d{2}-\\d{2})([ _T]\\d{1,2}[.:]\\d{2}([.:]\\d{2})?)?$", "into": "transcripts" }
       ]
     },
     {

package/core/registry/lifecycle.json

@@ -83,6 +83,47 @@
         }
       }
     },
+    {
+      "id": "session-end",
+      "intent": "remove-session-model-observation",
+      "tier": "enhanced",
+      "requires": [
+        "hooks"
+      ],
+      "mappings": {
+        "claude": {
+          "event": "SessionEnd",
+          "status": "supported"
+        },
+        "codex": {
+          "event": "SessionEnd",
+          "status": "supported",
+          "prerequisites": [
+            "hook-review"
+          ]
+        },
+        "opencode": {
+          "status": "unavailable",
+          "fallback": "guidance"
+        },
+        "pi": {
+          "status": "unavailable",
+          "fallback": "guidance"
+        },
+        "copilot": {
+          "status": "unavailable",
+          "fallback": "guidance"
+        },
+        "kiro": {
+          "status": "unavailable",
+          "fallback": "guidance"
+        },
+        "antigravity": {
+          "status": "unavailable",
+          "fallback": "guidance"
+        }
+      }
+    },
     {
       "id": "mcp-tool-guard",
       "intent": "enforce-mcp-policy",
@@ -169,7 +210,7 @@
   ],
   "coverage": {
     "schemaVersion": 1,
-    "revision": 3,
+    "revision": 4,
     "refresh": {
       "trigger": "a harness bridge, template or installed harness version changes",
       "owner": "the feature that changes it"
@@ -293,7 +334,7 @@
           "tested": "1.1.0"
         },
         "class": "advisory",
-        "verification": "verified",
+        "verification": "unverified",
         "prerequisites": [],
         "covers": [],
         "doesNotCover": [
@@ -321,7 +362,7 @@
           },
           {
             "kind": "live",
-            "locator": "test/fixtures/hooks/pi/live/probe-2026-10-14.jsonl",
+            "locator": "historical blocking evidence: test/fixtures/hooks/pi/live/probe-2026-10-14.jsonl",
             "date": "2026-10-14"
           }
         ]
@@ -976,6 +1017,216 @@
           }
         ]
       },
+      {
+        "policy": "session-end",
+        "harness": "claude",
+        "event": "SessionEnd",
+        "timing": "session",
+        "profile": "any",
+        "wired": true,
+        "configSource": "core/harnesses/claude/settings/settings.json:176",
+        "harnessVersion": {
+          "tested": "2.1.287 (Claude Code)"
+        },
+        "class": "observation",
+        "verification": "unverified",
+        "prerequisites": [],
+        "covers": [
+          "removes the ending main session's hashed model observation"
+        ],
+        "doesNotCover": [
+          "worker observations",
+          "sessions that end without the hook running (the model-observations age bound applies)"
+        ],
+        "caveats": [
+          "native event enforcement is not yet verified"
+        ],
+        "provenance": [
+          {
+            "kind": "doc",
+            "locator": "https://code.claude.com/docs/en/hooks",
+            "date": "2026-10-12"
+          },
+          {
+            "kind": "fixture",
+            "locator": "test/hooks/session-end-observation.test.ts",
+            "date": "2026-11-04"
+          }
+        ]
+      },
+      {
+        "policy": "session-end",
+        "harness": "codex",
+        "event": "SessionEnd",
+        "timing": "session",
+        "profile": "any",
+        "wired": true,
+        "configSource": "core/harnesses/codex/hooks/hooks.json:100",
+        "harnessVersion": {
+          "tested": "codex-cli 0.162.1"
+        },
+        "class": "observation",
+        "verification": "unverified",
+        "prerequisites": [
+          "hook-review"
+        ],
+        "covers": [
+          "removes the ending main session's hashed model observation"
+        ],
+        "doesNotCover": [
+          "worker observations",
+          "sessions that end without the hook running (the model-observations age bound applies)"
+        ],
+        "caveats": [
+          "native event enforcement is not yet verified"
+        ],
+        "provenance": [
+          {
+            "kind": "doc",
+            "locator": "https://learn.chatgpt.com/docs/hooks",
+            "date": "2026-10-12"
+          },
+          {
+            "kind": "fixture",
+            "locator": "test/hooks/session-end-observation.test.ts",
+            "date": "2026-11-04"
+          }
+        ]
+      },
+      {
+        "policy": "session-end",
+        "harness": "opencode",
+        "event": "*",
+        "timing": "session",
+        "profile": "any",
+        "wired": false,
+        "configSource": null,
+        "harnessVersion": {
+          "tested": "1.18.30"
+        },
+        "class": "unsupported",
+        "verification": "unverified",
+        "prerequisites": [],
+        "covers": [],
+        "doesNotCover": [],
+        "caveats": [],
+        "provenance": [
+          {
+            "kind": "doc",
+            "locator": "core/registry/harnesses.json: opencode harness; core/registry/contracts.json: unavailable hook mapping",
+            "date": "2026-10-12"
+          }
+        ]
+      },
+      {
+        "policy": "session-end",
+        "harness": "pi",
+        "event": "*",
+        "timing": "session",
+        "profile": "any",
+        "wired": false,
+        "configSource": null,
+        "harnessVersion": {
+          "tested": "1.1.0"
+        },
+        "class": "unsupported",
+        "verification": "unverified",
+        "prerequisites": [],
+        "covers": [],
+        "doesNotCover": [],
+        "caveats": [
+          "not wired for this harness mapping",
+          "Pi user- and project-scope extensions have not been exercised in a live session; a later tool_call handler may mutate input after DoFlow allows it"
+        ],
+        "provenance": [
+          {
+            "kind": "doc",
+            "locator": "core/registry/lifecycle.json: policy session-end mapping for pi",
+            "date": "2026-11-04"
+          }
+        ]
+      },
+      {
+        "policy": "session-end",
+        "harness": "copilot",
+        "event": "*",
+        "timing": "session",
+        "profile": "any",
+        "wired": false,
+        "configSource": null,
+        "harnessVersion": {
+          "tested": "GitHub Copilot CLI 1.0.103"
+        },
+        "class": "unsupported",
+        "verification": "unverified",
+        "prerequisites": [],
+        "covers": [],
+        "doesNotCover": [],
+        "caveats": [
+          "not wired for this harness mapping"
+        ],
+        "provenance": [
+          {
+            "kind": "doc",
+            "locator": "core/registry/lifecycle.json: policy session-end mapping for copilot",
+            "date": "2026-11-04"
+          }
+        ]
+      },
+      {
+        "policy": "session-end",
+        "harness": "kiro",
+        "event": "*",
+        "timing": "session",
+        "profile": "any",
+        "wired": false,
+        "configSource": null,
+        "harnessVersion": {
+          "tested": "kiro-cli 2.29.1"
+        },
+        "class": "unsupported",
+        "verification": "unverified",
+        "prerequisites": [],
+        "covers": [],
+        "doesNotCover": [],
+        "caveats": [
+          "not wired for this harness mapping"
+        ],
+        "provenance": [
+          {
+            "kind": "doc",
+            "locator": "core/registry/lifecycle.json: policy session-end mapping for kiro",
+            "date": "2026-11-04"
+          }
+        ]
+      },
+      {
+        "policy": "session-end",
+        "harness": "antigravity",
+        "event": "*",
+        "timing": "session",
+        "profile": "any",
+        "wired": false,
+        "configSource": null,
+        "harnessVersion": {
+          "tested": "1.3.3"
+        },
+        "class": "unsupported",
+        "verification": "unverified",
+        "prerequisites": [],
+        "covers": [],
+        "doesNotCover": [],
+        "caveats": [
+          "not wired for this harness mapping"
+        ],
+        "provenance": [
+          {
+            "kind": "doc",
+            "locator": "core/registry/lifecycle.json: policy session-end mapping for antigravity",
+            "date": "2026-11-04"
+          }
+        ]
+      },
       {
         "policy": "session-context",
         "harness": "opencode",
@@ -1793,7 +2044,7 @@
         "timing": "stop",
         "profile": "any",
         "wired": true,
-        "configSource": "src/adapters/antigravity/index.js:60",
+        "configSource": "src/adapters/antigravity/index.js:64",
         "harnessVersion": {
           "tested": "1.3.3"
         },
@@ -2448,6 +2699,6 @@
         ]
       }
     ],
-    "rowsDigest": "sha256:39c81a958388528cddec2fa524296872bf420d37073ae643a76faddc54893cf5"
+    "rowsDigest": "sha256:bb6f6cd25ed87131d95bfa0dda3f7a4ecd03b4f19216510685b2a5b640a353c6"
   }
 }

package/core/registry/packages/doflow/doflow-package.json

@@ -1,9 +1,9 @@
 {
   "manifest": 1,
   "id": "doflow",
-  "version": "2.0.1",
+  "version": "2.0.2",
   "summary": "DoFlow first-party presets",
-  "doflow": "=2.0.1",
+  "doflow": "=2.0.2",
   "contributions": [
     {
       "point": "debate-preset",

package/core/registry/settings.json

@@ -27,62 +27,62 @@
                  { "layer": "project", "kind": "decision-model", "path": "decision-model.json", "field": "model" }],
       "consumers": ["src/runtime/advice/config.js"], "description": "Decision-model name; a project may choose it while advice is on." },
     "advice.kinds.tier": { "type": "enum", "values": ["off", "shadow", "act"], "default": null,
-      "scope": "project-overridable", "combine": "override", "securityRelevant": false, "failSafe": "off",
+      "scope": "project-overridable", "combine": "override", "securityRelevant": true, "failSafe": "off",
       "env": null, "flag": null, "shellRead": null, "needsConfigHome": false, "legacy": [],
       "consumers": ["src/runtime/advice/shadow-config.js"],
       "description": "Advice mode for the tier kind: off, shadow (record only) or act; unset keeps the kind's own path, the highest layer that sets it decides and an invalid value is off." },
     "advice.kinds.task-class": { "type": "enum", "values": ["off", "shadow", "act"], "default": null,
-      "scope": "project-overridable", "combine": "override", "securityRelevant": false, "failSafe": "off",
+      "scope": "project-overridable", "combine": "override", "securityRelevant": true, "failSafe": "off",
       "env": null, "flag": null, "shellRead": null, "needsConfigHome": false, "legacy": [],
       "consumers": ["src/runtime/advice/shadow-config.js"],
       "description": "Advice mode for the task-class kind: off, shadow (record only) or act; unset keeps the kind's own path, the highest layer that sets it decides and an invalid value is off." },
     "advice.kinds.verify-risk": { "type": "enum", "values": ["off", "shadow", "act"], "default": null,
-      "scope": "project-overridable", "combine": "override", "securityRelevant": false, "failSafe": "off",
+      "scope": "project-overridable", "combine": "override", "securityRelevant": true, "failSafe": "off",
       "env": null, "flag": null, "shellRead": null, "needsConfigHome": false, "legacy": [],
       "consumers": ["src/runtime/advice/shadow-config.js"],
       "description": "Advice mode for the verify-risk kind: off, shadow (record only) or act; unset keeps the kind's own path, the highest layer that sets it decides and an invalid value is off." },
     "advice.kinds.review-depth": { "type": "enum", "values": ["off", "shadow", "act"], "default": null,
-      "scope": "project-overridable", "combine": "override", "securityRelevant": false, "failSafe": "off",
+      "scope": "project-overridable", "combine": "override", "securityRelevant": true, "failSafe": "off",
       "env": null, "flag": null, "shellRead": null, "needsConfigHome": false, "legacy": [],
       "consumers": ["src/runtime/advice/shadow-config.js"],
       "description": "Advice mode for the review-depth kind: off, shadow (record only) or act; unset keeps the kind's own path, the highest layer that sets it decides and an invalid value is off." },
     "advice.kinds.mcp-need": { "type": "enum", "values": ["off", "shadow", "act"], "default": null,
-      "scope": "project-overridable", "combine": "override", "securityRelevant": false, "failSafe": "off",
+      "scope": "project-overridable", "combine": "override", "securityRelevant": true, "failSafe": "off",
       "env": null, "flag": null, "shellRead": null, "needsConfigHome": false, "legacy": [],
       "consumers": ["src/runtime/advice/shadow-config.js"],
       "description": "Advice mode for the mcp-need kind: off, shadow (record only) or act; unset keeps the kind's own path, the highest layer that sets it decides and an invalid value is off." },
     "advice.kinds.followup-triage": { "type": "enum", "values": ["off", "shadow", "act"], "default": null,
-      "scope": "project-overridable", "combine": "override", "securityRelevant": false, "failSafe": "off",
+      "scope": "project-overridable", "combine": "override", "securityRelevant": true, "failSafe": "off",
       "env": null, "flag": null, "shellRead": null, "needsConfigHome": false, "legacy": [],
       "consumers": ["src/runtime/advice/shadow-config.js"],
       "description": "Advice mode for the followup-triage kind: off, shadow (record only) or act; unset keeps the kind's own path, the highest layer that sets it decides and an invalid value is off." },
     "advice.models.tier": { "type": "string", "default": null,
-      "scope": "project-overridable", "combine": "override", "securityRelevant": false,
+      "scope": "project-overridable", "combine": "override", "securityRelevant": true, "failSafe": { "gate": "advice.enabled" },
       "env": null, "flag": null, "shellRead": null, "needsConfigHome": false, "legacy": [],
       "consumers": ["src/runtime/advice/shadow-config.js"],
       "description": "Decision-model name for the tier kind; unset uses advice.model." },
     "advice.models.task-class": { "type": "string", "default": null,
-      "scope": "project-overridable", "combine": "override", "securityRelevant": false,
+      "scope": "project-overridable", "combine": "override", "securityRelevant": true, "failSafe": { "gate": "advice.enabled" },
       "env": null, "flag": null, "shellRead": null, "needsConfigHome": false, "legacy": [],
       "consumers": ["src/runtime/advice/shadow-config.js"],
       "description": "Decision-model name for the task-class kind; unset uses advice.model." },
     "advice.models.verify-risk": { "type": "string", "default": null,
-      "scope": "project-overridable", "combine": "override", "securityRelevant": false,
+      "scope": "project-overridable", "combine": "override", "securityRelevant": true, "failSafe": { "gate": "advice.enabled" },
       "env": null, "flag": null, "shellRead": null, "needsConfigHome": false, "legacy": [],
       "consumers": ["src/runtime/advice/shadow-config.js"],
       "description": "Decision-model name for the verify-risk kind; unset uses advice.model." },
     "advice.models.review-depth": { "type": "string", "default": null,
-      "scope": "project-overridable", "combine": "override", "securityRelevant": false,
+      "scope": "project-overridable", "combine": "override", "securityRelevant": true, "failSafe": { "gate": "advice.enabled" },
       "env": null, "flag": null, "shellRead": null, "needsConfigHome": false, "legacy": [],
       "consumers": ["src/runtime/advice/shadow-config.js"],
       "description": "Decision-model name for the review-depth kind; unset uses advice.model." },
     "advice.models.mcp-need": { "type": "string", "default": null,
-      "scope": "project-overridable", "combine": "override", "securityRelevant": false,
+      "scope": "project-overridable", "combine": "override", "securityRelevant": true, "failSafe": { "gate": "advice.enabled" },
       "env": null, "flag": null, "shellRead": null, "needsConfigHome": false, "legacy": [],
       "consumers": ["src/runtime/advice/shadow-config.js"],
       "description": "Decision-model name for the mcp-need kind; unset uses advice.model." },
     "advice.models.followup-triage": { "type": "string", "default": null,
-      "scope": "project-overridable", "combine": "override", "securityRelevant": false,
+      "scope": "project-overridable", "combine": "override", "securityRelevant": true, "failSafe": { "gate": "advice.enabled" },
       "env": null, "flag": null, "shellRead": null, "needsConfigHome": false, "legacy": [],
       "consumers": ["src/runtime/advice/shadow-config.js"],
       "description": "Decision-model name for the followup-triage kind; unset uses advice.model." },

package/core/registry/storage.json

@@ -596,8 +596,7 @@
       "match": "^[0-9a-f]{12}$",
       "rule": "report-orphan",
       "bound": {
-        "orphanGraceHours": 24,
-        "foreignMaxAgeDays": 180
+        "orphanGraceHours": 24
       },
       "protect": null,
       "moments": [

package/core/shared/guidance/references/ARTIFACT_FORMAT.md

@@ -308,6 +308,13 @@ reading it whole:
   attributes, keys and cardinalities of that subdomain alone. The table catalog of entities, keys,
   indexes and ORM file references is unchanged and stays below the views. Splitting one diagram into
   views must not drop an entity, a key or a constraint the single diagram carried.
+- **`data-model.md` §3 to §9 — lifecycles, coupling and the rest.** §3 Lifecycles holds every
+  entity state, one `#### Lifecycle: <entity>` block each, and nothing else restates a state; §4 to
+  §9 are Cross-entity coupling, Invariants, Ownership / CRUD matrix, Event catalogue, Retention, PII
+  and migration, and History. Each `#### Dictionary: <entity>` row and each row of the §3 to §8
+  tables ends in a `Source` cell holding one of `FR-###`, `NFR-###`, `IC-###`, `code:<path>:<line>`,
+  `proposed`, or `UNKNOWN -> Open Point`. A `proposed` or `UNKNOWN -> Open Point` row is copied to
+  `design.md` Open Points for Review. A conditional section takes `N/A: [why]`.
 
 ### The `N/A: [why]` escape