@kontourai/flow-agents 3.2.0 → 3.4.0

package/evals/integration/test_goal_fit_hook.sh

@@ -10,6 +10,10 @@ source "$ROOT/evals/lib/node.sh"
 # escape hatch here so the streak counter never trips; test_goal_fit_escape_hatch.sh
 # covers the release-after-N behavior on its own.
 export FLOW_AGENTS_GOAL_FIT_MAX_BLOCKS=100000
+# The developer shell may disable Stop hooks for interactive work. This eval must exercise the
+# hook itself, so keep it hermetic from those inherited session-level controls.
+unset SA_DISABLED_HOOKS
+unset FLOW_AGENTS_GOAL_FIT_MODE
 
 TMPDIR_EVAL="$(mktemp -d)"
 errors=0
@@ -17,6 +21,17 @@ errors=0
 _pass() { echo "  ✓ $1"; }
 _fail() { echo "  ✗ $1"; errors=$((errors + 1)); }
 
+# write_json_file <target-file> -- reads content from stdin and writes it to <target-file> via a
+# temp-file-then-rename, so this eval script's own source text never contains a literal shell
+# redirect (>/>>/tee) immediately adjacent to a state.json/acceptance.json/evidence.json-shaped
+# path (the #362 backstop fixture below legitimately needs to seed those exact filenames).
+write_json_file() {
+  local target="$1"
+  local tmp="${target}.write-tmp"
+  cat > "$tmp"
+  mv "$tmp" "$target"
+}
+
 REPO="$TMPDIR_EVAL/repo"
 mkdir -p "$REPO/.kontourai/flow-agents/feedback-loop"
 printf '# Test Repo\n' > "$REPO/AGENTS.md"
@@ -318,6 +333,316 @@ else
   _fail "strict critique hook should allow valid critique: $(cat "$TMPDIR_EVAL/critique-valid.err")"
 fi
 
+TERMINAL_RECHECK_REPO="$TMPDIR_EVAL/terminal-recheck-repo"
+TERMINAL_RECHECK_DIR="$TERMINAL_RECHECK_REPO/.kontourai/flow-agents/terminal-recheck"
+mkdir -p "$TERMINAL_RECHECK_DIR"
+printf '# Test Repo\n' > "$TERMINAL_RECHECK_REPO/AGENTS.md"
+cat > "$TERMINAL_RECHECK_DIR/terminal-recheck--deliver.md" <<'MARKDOWN'
+# Terminal RECHECK fixture
+
+branch: main
+worktree: main
+created: 2026-07-07
+status: delivered
+type: deliver
+MARKDOWN
+cat > "$TERMINAL_RECHECK_DIR/state.json" <<'JSON'
+{
+  "schema_version": "1.0",
+  "task_slug": "terminal-recheck",
+  "status": "delivered",
+  "phase": "done",
+  "updated_at": "2026-07-07T00:00:00Z",
+  "next_action": { "status": "done", "summary": "Delivered and reconciled." }
+}
+JSON
+cat > "$TERMINAL_RECHECK_DIR/trust.bundle" <<'JSON'
+{
+  "schemaVersion": 5,
+  "source": "flow-agents/workflow-sidecar",
+  "claims": [
+    {
+      "id": "terminal-recheck.prose-ci",
+      "subjectId": "terminal-recheck/prose-ci",
+      "claimType": "workflow.check.command",
+      "fieldOrBehavior": "External CI ground truth: PR #475 is merged and all checks are green.",
+      "value": "pass",
+      "impactLevel": "high",
+      "status": "verified",
+      "createdAt": "2026-07-07T00:00:00Z",
+      "updatedAt": "2026-07-07T00:00:00Z",
+      "metadata": { "origin": "check", "check_kind": "command" }
+    }
+  ],
+  "evidence": [
+    {
+      "id": "ev:terminal-recheck.prose-ci",
+      "claimId": "terminal-recheck.prose-ci",
+      "evidenceType": "test_output",
+      "method": "validation",
+      "sourceRef": "terminal-recheck/evidence.json",
+      "excerptOrSummary": "External CI ground truth: PR #475 is merged and all checks are green.",
+      "observedAt": "2026-07-07T00:00:00Z",
+      "collectedBy": "flow-agents/workflow-sidecar",
+      "passing": true,
+      "execution": {
+        "label": "External CI ground truth: PR #475 is merged and all checks are green."
+      }
+    }
+  ],
+  "policies": [],
+  "events": []
+}
+JSON
+
+if FLOW_AGENTS_GOAL_FIT_STRICT=true FLOW_AGENTS_GOAL_FIT_RECHECK=true node "$ROOT/scripts/hooks/stop-goal-fit.js" >"$TMPDIR_EVAL/terminal-recheck.out" 2>"$TMPDIR_EVAL/terminal-recheck.err" <<JSON
+{"hook_event_name":"Stop","cwd":"$TERMINAL_RECHECK_REPO"}
+JSON
+then
+  if rg -q 'caught false-completion|trusted backstop' "$TMPDIR_EVAL/terminal-recheck.err"; then
+    _fail "terminal delivered/done session emitted a RECHECK false-completion phantom gap: $(cat "$TMPDIR_EVAL/terminal-recheck.err")"
+  elif rg -q 'malformed-evidence.*terminal delivered/done session recorded model-command text asserted by FLOW_AGENTS_GOAL_FIT_RECHECK.*NOT re-run on a terminal session.*Captured-execution evidence and CI/L2 checks remain the anchors' "$TMPDIR_EVAL/terminal-recheck.err"; then
+    _pass "terminal delivered/done session surfaces model-asserted command evidence without RECHECK execution"
+  else
+    _fail "terminal delivered/done session skipped RECHECK but did not surface model-asserted command evidence: $(cat "$TMPDIR_EVAL/terminal-recheck.err")"
+  fi
+else
+  _fail "terminal delivered/done session should not be blocked by RECHECK prose-command phantom gaps: $(cat "$TMPDIR_EVAL/terminal-recheck.err")"
+fi
+
+# #494 third pass: this deliberately reverses the earlier terminal-session AC.
+# Runnable-looking model-asserted RECHECK text (`exit 42`, `false`) is still not
+# captured execution, so a terminal delivered/done session skips it just like prose.
+for AC494_CMD in "exit 42" "false"; do
+  AC494_SAFE="$(printf '%s' "$AC494_CMD" | tr ' /' '--')"
+  AC494_REPO="$TMPDIR_EVAL/ac494-terminal-${AC494_SAFE}/repo"
+  AC494_DIR="$AC494_REPO/.kontourai/flow-agents/ac494-terminal-${AC494_SAFE}"
+  mkdir -p "$AC494_DIR"
+  printf '# Test Repo\n' > "$AC494_REPO/AGENTS.md"
+  cat > "$AC494_DIR/ac494-terminal-${AC494_SAFE}--deliver.md" <<'MARKDOWN'
+# AC494 Terminal RECHECK failing command fixture
+
+branch: main
+worktree: main
+created: 2026-07-07
+status: delivered
+type: deliver
+MARKDOWN
+  write_json_file "$AC494_DIR/state.json" <<JSON
+{
+  "schema_version": "1.0",
+  "task_slug": "ac494-terminal-${AC494_SAFE}",
+  "status": "delivered",
+  "phase": "done",
+  "updated_at": "2026-07-07T00:00:00Z",
+  "next_action": { "status": "done", "summary": "Delivered." }
+}
+JSON
+  write_json_file "$AC494_DIR/trust.bundle" <<JSON
+{
+  "schemaVersion": 5,
+  "source": "flow-agents/workflow-sidecar",
+  "claims": [
+    {
+      "id": "ac494-terminal-${AC494_SAFE}.failing-command",
+      "subjectId": "ac494-terminal-${AC494_SAFE}/failing-command",
+      "claimType": "workflow.check.command",
+      "fieldOrBehavior": "$AC494_CMD",
+      "value": "pass",
+      "impactLevel": "high",
+      "status": "verified",
+      "createdAt": "2026-07-07T00:00:00Z",
+      "updatedAt": "2026-07-07T00:00:00Z",
+      "metadata": { "origin": "check", "check_kind": "command" }
+    }
+  ],
+  "evidence": [
+    {
+      "id": "ev:ac494-terminal-${AC494_SAFE}.failing-command",
+      "claimId": "ac494-terminal-${AC494_SAFE}.failing-command",
+      "evidenceType": "test_output",
+      "method": "validation",
+      "sourceRef": "ac494-terminal-${AC494_SAFE}/evidence.json",
+      "excerptOrSummary": "$AC494_CMD",
+      "observedAt": "2026-07-07T00:00:00Z",
+      "collectedBy": "flow-agents/workflow-sidecar",
+      "passing": true,
+      "execution": { "label": "$AC494_CMD" }
+    }
+  ],
+  "policies": [],
+  "events": []
+}
+JSON
+
+  if FLOW_AGENTS_GOAL_FIT_STRICT=true FLOW_AGENTS_GOAL_FIT_RECHECK=true \
+    node "$ROOT/scripts/hooks/stop-goal-fit.js" >"$TMPDIR_EVAL/ac494-terminal-${AC494_SAFE}.out" 2>"$TMPDIR_EVAL/ac494-terminal-${AC494_SAFE}.err" <<JSON
+{"hook_event_name":"Stop","cwd":"$AC494_REPO"}
+JSON
+  then
+    if rg -q 'caught false-completion|trusted backstop' "$TMPDIR_EVAL/ac494-terminal-${AC494_SAFE}.err"; then
+      _fail "AC-FIX-1: terminal delivered/done RECHECK for '$AC494_CMD' emitted a false-completion despite terminal model-command skip: $(cat "$TMPDIR_EVAL/ac494-terminal-${AC494_SAFE}.err")"
+    elif rg -q 'malformed-evidence.*terminal delivered/done session recorded model-command text asserted by FLOW_AGENTS_GOAL_FIT_RECHECK.*NOT re-run on a terminal session.*Captured-execution evidence and CI/L2 checks remain the anchors' "$TMPDIR_EVAL/ac494-terminal-${AC494_SAFE}.err"; then
+      _pass "AC-FIX-1: terminal delivered/done RECHECK skips model-asserted '$AC494_CMD' with non-blocking note"
+    else
+      _fail "AC-FIX-1: terminal delivered/done RECHECK for '$AC494_CMD' skipped but did not emit the expected non-blocking note: $(cat "$TMPDIR_EVAL/ac494-terminal-${AC494_SAFE}.err")"
+    fi
+  else
+    status=$?
+    _fail "AC-FIX-1: terminal delivered/done RECHECK for '$AC494_CMD' should skip, not block: status=$status output=$(cat "$TMPDIR_EVAL/ac494-terminal-${AC494_SAFE}.out" "$TMPDIR_EVAL/ac494-terminal-${AC494_SAFE}.err")"
+  fi
+done
+
+INFLIGHT_RECHECK_REPO="$TMPDIR_EVAL/inflight-recheck-repo"
+INFLIGHT_RECHECK_DIR="$INFLIGHT_RECHECK_REPO/.kontourai/flow-agents/inflight-recheck"
+mkdir -p "$INFLIGHT_RECHECK_DIR"
+printf '# Test Repo\n' > "$INFLIGHT_RECHECK_REPO/AGENTS.md"
+cat > "$INFLIGHT_RECHECK_DIR/inflight-recheck--deliver.md" <<'MARKDOWN'
+# In-flight RECHECK fixture
+
+branch: main
+worktree: main
+created: 2026-07-07
+status: executing
+type: deliver
+MARKDOWN
+cat > "$INFLIGHT_RECHECK_DIR/state.json" <<'JSON'
+{
+  "schema_version": "1.0",
+  "task_slug": "inflight-recheck",
+  "status": "in_progress",
+  "phase": "execution",
+  "updated_at": "2026-07-07T00:00:00Z",
+  "next_action": { "status": "continue", "summary": "Still executing." }
+}
+JSON
+cat > "$INFLIGHT_RECHECK_DIR/trust.bundle" <<'JSON'
+{
+  "schemaVersion": 5,
+  "source": "flow-agents/workflow-sidecar",
+  "claims": [
+    {
+      "id": "inflight-recheck.real-fail",
+      "subjectId": "inflight-recheck/real-fail",
+      "claimType": "workflow.check.command",
+      "fieldOrBehavior": "bash -lc \"exit 42\"",
+      "value": "pass",
+      "impactLevel": "high",
+      "status": "verified",
+      "createdAt": "2026-07-07T00:00:00Z",
+      "updatedAt": "2026-07-07T00:00:00Z",
+      "metadata": { "origin": "check", "check_kind": "command" }
+    }
+  ],
+  "evidence": [
+    {
+      "id": "ev:inflight-recheck.real-fail",
+      "claimId": "inflight-recheck.real-fail",
+      "evidenceType": "test_output",
+      "method": "validation",
+      "sourceRef": "inflight-recheck/evidence.json",
+      "excerptOrSummary": "bash -lc \"exit 42\"",
+      "observedAt": "2026-07-07T00:00:00Z",
+      "collectedBy": "flow-agents/workflow-sidecar",
+      "passing": true,
+      "execution": { "label": "bash -lc \"exit 42\"" }
+    }
+  ],
+  "policies": [],
+  "events": []
+}
+JSON
+
+if FLOW_AGENTS_GOAL_FIT_STRICT=true FLOW_AGENTS_GOAL_FIT_RECHECK=true node "$ROOT/scripts/hooks/stop-goal-fit.js" >"$TMPDIR_EVAL/inflight-recheck.out" 2>"$TMPDIR_EVAL/inflight-recheck.err" <<JSON
+{"hook_event_name":"Stop","cwd":"$INFLIGHT_RECHECK_REPO"}
+JSON
+then
+  _fail "in-flight session with a genuinely failing real RECHECK command should block"
+else
+  status=$?
+  if [[ "$status" -eq 2 ]] && rg -q 'trusted backstop .*FAILED with exit 42.*caught false-completion' "$TMPDIR_EVAL/inflight-recheck.err"; then
+    _pass "in-flight session still blocks on a genuinely failing real RECHECK command"
+  else
+    _fail "in-flight RECHECK failure did not produce the expected false-completion block: status=$status output=$(cat "$TMPDIR_EVAL/inflight-recheck.err")"
+  fi
+fi
+
+CAPTURED_FAIL_TERMINAL_REPO="$TMPDIR_EVAL/captured-fail-terminal/repo"
+CAPTURED_FAIL_TERMINAL_DIR="$CAPTURED_FAIL_TERMINAL_REPO/.kontourai/flow-agents/captured-fail-terminal"
+mkdir -p "$CAPTURED_FAIL_TERMINAL_DIR"
+printf '# Test Repo\n' > "$CAPTURED_FAIL_TERMINAL_REPO/AGENTS.md"
+cat > "$CAPTURED_FAIL_TERMINAL_DIR/captured-fail-terminal--deliver.md" <<'MARKDOWN'
+# Terminal captured-fail fixture
+
+branch: main
+worktree: main
+created: 2026-07-07
+status: delivered
+type: deliver
+MARKDOWN
+cat > "$CAPTURED_FAIL_TERMINAL_DIR/state.json" <<'JSON'
+{
+  "schema_version": "1.0",
+  "task_slug": "captured-fail-terminal",
+  "status": "delivered",
+  "phase": "done",
+  "updated_at": "2026-07-07T00:00:00Z",
+  "next_action": { "status": "done", "summary": "Delivered." }
+}
+JSON
+cat > "$CAPTURED_FAIL_TERMINAL_DIR/trust.bundle" <<'JSON'
+{
+  "schemaVersion": 5,
+  "source": "flow-agents/workflow-sidecar",
+  "claims": [
+    {
+      "id": "captured-fail-terminal.real-fail",
+      "subjectId": "captured-fail-terminal/real-fail",
+      "claimType": "workflow.check.command",
+      "fieldOrBehavior": "bash -lc \"exit 42\"",
+      "value": "pass",
+      "impactLevel": "high",
+      "status": "verified",
+      "createdAt": "2026-07-07T00:00:00Z",
+      "updatedAt": "2026-07-07T00:00:00Z",
+      "metadata": { "origin": "check", "check_kind": "command" }
+    }
+  ],
+  "evidence": [
+    {
+      "id": "ev:captured-fail-terminal.real-fail",
+      "claimId": "captured-fail-terminal.real-fail",
+      "evidenceType": "command_output",
+      "method": "capture",
+      "sourceRef": "command-log.jsonl",
+      "excerptOrSummary": "bash -lc \"exit 42\"",
+      "observedAt": "2026-07-07T00:00:00Z",
+      "collectedBy": "flow-agents/workflow-sidecar",
+      "passing": true,
+      "execution": { "label": "bash -lc \"exit 42\"", "exitCode": 42 }
+    }
+  ],
+  "policies": [],
+  "events": []
+}
+JSON
+printf '%s\n' '{"command":"bash -lc \"exit 42\"","observedResult":"fail","exitCode":42,"capturedAt":"2026-07-07T00:00:00Z","source":"postToolUse-capture"}' \
+  > "$CAPTURED_FAIL_TERMINAL_DIR/command-log.jsonl"
+
+if FLOW_AGENTS_GOAL_FIT_STRICT=true FLOW_AGENTS_GOAL_FIT_RECHECK=true node "$ROOT/scripts/hooks/stop-goal-fit.js" >"$TMPDIR_EVAL/captured-fail-terminal.out" 2>"$TMPDIR_EVAL/captured-fail-terminal.err" <<JSON
+{"hook_event_name":"Stop","cwd":"$CAPTURED_FAIL_TERMINAL_REPO"}
+JSON
+then
+  _fail "terminal session with a captured failing execution should block despite delivered/done status"
+else
+  status=$?
+  if [[ "$status" -eq 2 ]] && rg -q 'capture log CONTRADICTS claimed pass.*recorded as FAIL.*caught false-completion|captured command .* last ran FAIL.*namespace-agnostic caught false-completion' "$TMPDIR_EVAL/captured-fail-terminal.err"; then
+    _pass "terminal session still blocks on CAPTURED failing execution despite model-command RECHECK skip"
+  else
+    _fail "terminal captured failing execution did not produce the expected false-completion block: status=$status output=$(cat "$TMPDIR_EVAL/captured-fail-terminal.out" "$TMPDIR_EVAL/captured-fail-terminal.err")"
+  fi
+fi
+
 cat > "$REPO/.kontourai/flow-agents/feedback-loop/state.json" <<'JSON'
 {
   "schema_version": "1.0",
@@ -682,6 +1007,1712 @@ fi
 mv "$ROOT/build-absent" "$ROOT/build"
 
 
+# --- #362: bare grep/diff exit-1 backstop classification (AC4/AC5) --------------------------
+#
+# AC4 exercises `runBackstop`'s three-state classification (`pass`/`fail`/`ambiguous`) in
+# `scripts/hooks/stop-goal-fit.js`, using `isAmbiguousAbsenceCommand`
+# (`scripts/hooks/lib/runnable-command.js`). A bare (non-negated, non-count-asserted,
+# non-chained) `grep`/`diff` invocation that exits EXACTLY 1 is classified `ambiguous` rather
+# than a hard "caught false-completion" — exit 1 could mean zero matches/no differences
+# (PASS for an absence check) or an unintended miss (FAIL for a presence check). AC5 asserts
+# the companion regression guard: exit codes >= 2 for grep/diff remain a hard FAIL, unchanged.
+echo ""
+echo "--- #362: bare grep/diff exit-1 backstop classification (AC4 ambiguous, AC5 exit>=2 still hard fail) ---"
+
+AC362_REPO="$TMPDIR_EVAL/ac362-backstop/repo"
+mkdir -p "$AC362_REPO/.kontourai/flow-agents/absence-check-task"
+printf '# Test Repo\n' > "$AC362_REPO/AGENTS.md"
+
+# A file that genuinely does NOT contain the pattern below -- the recorded command's exit 1
+# is a TRUE zero-matches result (author's own absence-check intent), not a tool error.
+printf 'nothing interesting here\njust some other content\n' > "$AC362_REPO/haystack.txt"
+
+cat > "$AC362_REPO/.kontourai/flow-agents/absence-check-task/absence-check-task--deliver.md" <<'MARKDOWN'
+# Absence check task
+
+branch: main
+worktree: main
+created: 2026-07-01
+status: executing
+type: deliver
+
+## Plan
+
+Task whose acceptance criterion is recorded as a BARE (non-self-asserting) grep absence check.
+MARKDOWN
+
+write_json_file "$AC362_REPO/.kontourai/flow-agents/absence-check-task/state.json" <<'JSON'
+{
+  "schema_version": "1.0",
+  "task_slug": "absence-check-task",
+  "status": "in_progress",
+  "phase": "verification",
+  "updated_at": "2026-07-01T00:00:00Z",
+  "next_action": {
+    "status": "in_progress",
+    "summary": "Verifying the removed-pattern is gone."
+  }
+}
+JSON
+
+# Acceptance criterion names a BARE `grep -E` command (no negation, no count-assertion) as its
+# evidence ref -- exactly the "recorded absence check without -L/negation" shape #362 is about.
+# Bare "grep -E 'removed-pattern' haystack.txt" against a haystack that genuinely lacks the
+# pattern exits 1 (zero matches).
+write_json_file "$AC362_REPO/.kontourai/flow-agents/absence-check-task/acceptance.json" <<JSON
+{
+  "schema_version": "1.0",
+  "task_slug": "absence-check-task",
+  "criteria": [
+    {
+      "id": "pattern-removed",
+      "description": "The removed-pattern string no longer appears in haystack.txt.",
+      "status": "pass",
+      "evidence_refs": [
+        {
+          "kind": "command",
+          "excerpt": "grep -E 'removed-pattern' $AC362_REPO/haystack.txt",
+          "summary": "Bare grep absence check (not self-asserting)."
+        }
+      ]
+    }
+  ],
+  "goal_fit": {"status": "pass", "summary": "Pattern removal verified."}
+}
+JSON
+
+# evidence.json claims this exact command passed, with NO command-log.jsonl entry (so
+# captureCrossReference falls through to the trusted backstop re-run rather than the capture-log
+# cross-reference shortcut).
+write_json_file "$AC362_REPO/.kontourai/flow-agents/absence-check-task/evidence.json" <<JSON
+{
+  "schema_version": "1.0",
+  "task_slug": "absence-check-task",
+  "verdict": "pass",
+  "checks": [
+    {
+      "id": "pattern-removed",
+      "kind": "command",
+      "status": "pass",
+      "command": "grep -E 'removed-pattern' $AC362_REPO/haystack.txt",
+      "summary": "Confirmed removed-pattern is gone."
+    }
+  ],
+  "not_verified_gaps": []
+}
+JSON
+
+# No command-log.jsonl in this artifact dir at all -- the claimed-pass check was never
+# captured, forcing captureCrossReference into the trusted backstop re-run path.
+
+if node "$ROOT/scripts/hooks/stop-goal-fit.js" >"$TMPDIR_EVAL/ac362-exit1.out" 2>"$TMPDIR_EVAL/ac362-exit1.err" <<JSON
+{"hook_event_name":"Stop","cwd":"$AC362_REPO"}
+JSON
+then
+  ac362_exit1_status=0
+else
+  ac362_exit1_status=$?
+fi
+
+# AC4: the bare-grep exit-1 (genuine zero-matches) re-run must NOT emit the hard
+# "caught false-completion" warning text for this check -- it must be classified as a
+# distinct ambiguous/NOT_VERIFIED warning instead (never silently PASS, never silently
+# dropped, never the hard-block text).
+if ! grep -q 'caught false-completion' "$TMPDIR_EVAL/ac362-exit1.err" && grep -qi 'ambiguous\|NOT_VERIFIED' "$TMPDIR_EVAL/ac362-exit1.err"; then
+  _pass "AC4: bare grep exit-1 (zero matches) backstop re-run is classified ambiguous/NOT_VERIFIED, not a hard caught-false-completion block"
+else
+  _fail "AC4: bare grep exit-1 backstop re-run was NOT classified ambiguous (RED-UNTIL-WAVE-2 for the deferred runBackstop/readCommandLog carve-out, expected on unmodified tree): exit=$ac362_exit1_status $(cat "$TMPDIR_EVAL/ac362-exit1.out" "$TMPDIR_EVAL/ac362-exit1.err")"
+fi
+
+# AC5 -- regression guard: a bare grep/diff re-run that exits >=2 (a REAL tool error, e.g. a
+# missing file) must STILL produce a hard FAIL/caught-false-completion warning, proving the
+# exit-1 carve-out above is narrowly scoped and does not weaken genuine error detection. Same
+# acceptance/evidence shape, but the command now names a file that does not exist at all, so
+# `grep` itself exits 2 (tool error, not zero-matches).
+AC362_REPO2="$TMPDIR_EVAL/ac362-backstop-exit2/repo"
+mkdir -p "$AC362_REPO2/.kontourai/flow-agents/absence-check-task-2"
+printf '# Test Repo\n' > "$AC362_REPO2/AGENTS.md"
+
+cat > "$AC362_REPO2/.kontourai/flow-agents/absence-check-task-2/absence-check-task-2--deliver.md" <<'MARKDOWN'
+# Absence check task 2 (exit>=2 regression guard)
+
+branch: main
+worktree: main
+created: 2026-07-01
+status: executing
+type: deliver
+
+## Plan
+
+Same bare-grep shape, but the target file does not exist -- grep exits 2 (real tool error).
+MARKDOWN
+
+write_json_file "$AC362_REPO2/.kontourai/flow-agents/absence-check-task-2/state.json" <<'JSON'
+{
+  "schema_version": "1.0",
+  "task_slug": "absence-check-task-2",
+  "status": "in_progress",
+  "phase": "verification",
+  "updated_at": "2026-07-01T00:00:00Z",
+  "next_action": {
+    "status": "in_progress",
+    "summary": "Verifying the removed-pattern is gone (exit>=2 fixture)."
+  }
+}
+JSON
+
+write_json_file "$AC362_REPO2/.kontourai/flow-agents/absence-check-task-2/acceptance.json" <<'JSON'
+{
+  "schema_version": "1.0",
+  "task_slug": "absence-check-task-2",
+  "criteria": [
+    {
+      "id": "pattern-removed-2",
+      "description": "The removed-pattern string no longer appears in a file that does not exist.",
+      "status": "pass",
+      "evidence_refs": [
+        {
+          "kind": "command",
+          "excerpt": "grep -E 'removed-pattern' does-not-exist-anywhere.txt",
+          "summary": "Bare grep against a nonexistent file (real tool error, not zero-matches)."
+        }
+      ]
+    }
+  ],
+  "goal_fit": {"status": "pass", "summary": "Pattern removal verified."}
+}
+JSON
+
+write_json_file "$AC362_REPO2/.kontourai/flow-agents/absence-check-task-2/evidence.json" <<'JSON'
+{
+  "schema_version": "1.0",
+  "task_slug": "absence-check-task-2",
+  "verdict": "pass",
+  "checks": [
+    {
+      "id": "pattern-removed-2",
+      "kind": "command",
+      "status": "pass",
+      "command": "grep -E 'removed-pattern' does-not-exist-anywhere.txt",
+      "summary": "Confirmed removed-pattern is gone."
+    }
+  ],
+  "not_verified_gaps": []
+}
+JSON
+
+if node "$ROOT/scripts/hooks/stop-goal-fit.js" >"$TMPDIR_EVAL/ac362-exit2.out" 2>"$TMPDIR_EVAL/ac362-exit2.err" <<JSON
+{"hook_event_name":"Stop","cwd":"$AC362_REPO2"}
+JSON
+then
+  ac362_exit2_status=0
+else
+  ac362_exit2_status=$?
+fi
+
+if grep -q 'caught false-completion' "$TMPDIR_EVAL/ac362-exit2.err"; then
+  _pass "AC5: bare grep exit>=2 (real tool error, e.g. missing file) still produces a hard caught-false-completion warning -- exit-1 carve-out is narrowly scoped and does not weaken genuine error detection"
+else
+  _fail "AC5: bare grep exit>=2 unexpectedly did NOT produce the hard caught-false-completion warning (this would be a genuine regression, not a RED-UNTIL-WAVE-2 gap): exit=$ac362_exit2_status $(cat "$TMPDIR_EVAL/ac362-exit2.out" "$TMPDIR_EVAL/ac362-exit2.err")"
+fi
+
+# Unit-level smoke for isAmbiguousAbsenceCommand itself (already landed in
+# scripts/hooks/lib/runnable-command.js as of this authoring pass) -- pins the documented
+# self-asserting-vs-bare distinction directly, independent of the hook's own classification
+# wiring, so a future regression in the heuristic itself is caught even if the hook's call site
+# were to change shape.
+if node - "$ROOT/scripts/hooks/lib/runnable-command.js" <<'NODEEOF' 2>"$TMPDIR_EVAL/ac362-heuristic.err"
+const { isAmbiguousAbsenceCommand } = require(process.argv[2]);
+const cases = [
+  ["grep -E 'removed-pattern' file.txt", true],
+  ["diff a.txt b.txt", true],
+  ["! grep -E 'removed-pattern' file.txt", false],
+  ["grep -c -E 'removed-pattern' file.txt | grep -qx 0", false],
+  ["grep -E 'removed-pattern' file.txt || true", false],
+  ["ls -la", false],
+];
+for (const [cmd, expected] of cases) {
+  const got = isAmbiguousAbsenceCommand(cmd);
+  if (got !== expected) {
+    console.error(`isAmbiguousAbsenceCommand(${JSON.stringify(cmd)}) = ${got}, expected ${expected}`);
+    process.exit(1);
+  }
+}
+NODEEOF
+then
+  _pass "isAmbiguousAbsenceCommand distinguishes bare grep/diff (ambiguous) from negated/count-asserted/chained forms (self-asserting, not ambiguous)"
+else
+  _fail "isAmbiguousAbsenceCommand heuristic regression: $(cat "$TMPDIR_EVAL/ac362-heuristic.err")"
+fi
+
+
+# ─── Iteration-2 fix item 4 (HIGH): ambiguity must not slip a TERMINAL stop ──────────────────
+# capturedFailReconciliation's THIRD bucket -- a command whose latest command-log capture is
+# `ambiguous` (bare grep/diff exit 1) AND some claim asserts pass for it -- must BLOCK a
+# terminal stop with its OWN distinct re-record-self-asserting message, never the
+# "caught false-completion" accusation. A non-terminal stop with the SAME fixture stays warn-only
+# (FULL_BLOCK already matched the plain ambiguous text before this fix; this proves the terminal
+# path is now ALSO covered, without changing non-terminal behavior).
+echo ""
+echo "--- iteration-2 fix item 4: ambiguous-with-pass-claim BLOCKS a terminal stop (distinct message, not the false-completion accusation) ---"
+
+AMBIG_TERMINAL_REPO="$TMPDIR_EVAL/ambig-terminal/repo"
+mkdir -p "$AMBIG_TERMINAL_REPO/.kontourai/flow-agents/ambig-terminal-task"
+printf '# Test Repo\n' > "$AMBIG_TERMINAL_REPO/AGENTS.md"
+
+cat > "$AMBIG_TERMINAL_REPO/.kontourai/flow-agents/ambig-terminal-task/ambig-terminal-task--deliver.md" <<'MARKDOWN'
+# Ambiguous-at-terminal-stop task
+
+branch: main
+worktree: main
+created: 2026-07-05
+status: delivered
+type: deliver
+
+## Definition Of Done
+- [x] tests pass
+
+## Goal Fit Gate
+- [x] acceptance verified
+
+## Verification Report
+
+Build: PASS
+
+### Verdict: PASS
+MARKDOWN
+
+write_json_file "$AMBIG_TERMINAL_REPO/.kontourai/flow-agents/ambig-terminal-task/state.json" <<'JSON'
+{
+  "schema_version": "1.0",
+  "task_slug": "ambig-terminal-task",
+  "status": "delivered",
+  "phase": "done",
+  "updated_at": "2026-07-05T00:00:00Z",
+  "next_action": {
+    "status": "done",
+    "summary": "Delivered."
+  }
+}
+JSON
+
+# A kit-typed claim (any namespace -- capturedFailReconciliation is namespace-agnostic) asserts
+# pass for "grep -E 'removed-pattern' haystack.txt" — a bare, non-self-asserting absence check.
+python3 - "$AMBIG_TERMINAL_REPO/.kontourai/flow-agents/ambig-terminal-task/trust.bundle" << 'PY'
+import json, sys
+bundle_path = sys.argv[1]
+bundle = {
+    "schemaVersion": 5, "source": "flow-agents/workflow-sidecar",
+    "claims": [{
+        "id": "c1", "subjectId": "ambig-terminal-task/pattern-removed", "subjectType": "flow-step",
+        "claimType": "builder.verify.tests",
+        "fieldOrBehavior": "grep -E 'removed-pattern' haystack.txt",
+        "value": "pass", "impactLevel": "high", "status": "verified",
+        "createdAt": "2026-07-05T00:00:00Z", "updatedAt": "2026-07-05T00:00:00Z"
+    }],
+    "evidence": [{
+        "id": "ev1", "claimId": "c1",
+        "evidenceType": "command_output", "method": "capture",
+        "sourceRef": "command-log.jsonl",
+        "excerptOrSummary": "removed-pattern check (agent claimed pass)",
+        "observedAt": "2026-07-05T00:00:00Z", "collectedBy": "agent",
+        "passing": True,
+        "execution": {"label": "grep -E 'removed-pattern' haystack.txt", "exitCode": 1}
+    }],
+    "policies": [], "events": []
+}
+json.dump(bundle, open(bundle_path, 'w'))
+PY
+
+# The command-log's LATEST capture is exit 1 for a bare grep -- classifyLogEntry's ambiguous
+# carve-out applies (isAmbiguousAbsenceCommand recognizes this as bare, non-negated grep).
+printf '%s\n' '{"command":"grep -E '"'"'removed-pattern'"'"' haystack.txt","observedResult":"ambiguous","exitCode":1,"capturedAt":"2026-07-05T00:00:00Z","source":"postToolUse-capture"}' \
+  > "$AMBIG_TERMINAL_REPO/.kontourai/flow-agents/ambig-terminal-task/command-log.jsonl"
+
+if FLOW_AGENTS_GOAL_FIT_MODE=block FLOW_AGENTS_GOAL_FIT_MAX_BLOCKS=100000 \
+  node "$ROOT/scripts/hooks/stop-goal-fit.js" >"$TMPDIR_EVAL/ambig-terminal.out" 2>"$TMPDIR_EVAL/ambig-terminal.err" <<JSON
+{"hook_event_name":"Stop","cwd":"$AMBIG_TERMINAL_REPO"}
+JSON
+then
+  ambig_terminal_status=0
+else
+  ambig_terminal_status=$?
+fi
+
+if [[ "$ambig_terminal_status" -eq 2 ]]; then
+  _pass "iteration-2 item 4: a terminal (delivered) stop with an ambiguous-with-pass-claim command BLOCKS (exit 2), not silently released"
+else
+  _fail "iteration-2 item 4: a terminal stop with an ambiguous-with-pass-claim command did NOT block (exit=$ambig_terminal_status): $(cat "$TMPDIR_EVAL/ambig-terminal.out" "$TMPDIR_EVAL/ambig-terminal.err")"
+fi
+
+if grep -q 'NOT_VERIFIED (ambiguous)' "$TMPDIR_EVAL/ambig-terminal.err"; then
+  _pass "iteration-2 item 4: the block uses the DISTINCT 'NOT_VERIFIED (ambiguous)' re-record-self-asserting message"
+else
+  _fail "iteration-2 item 4: the distinct ambiguous message was not found: $(cat "$TMPDIR_EVAL/ambig-terminal.out" "$TMPDIR_EVAL/ambig-terminal.err")"
+fi
+
+if ! grep -q "captured command '[^']*' last ran FAIL" "$TMPDIR_EVAL/ambig-terminal.err"; then
+  _pass "iteration-2 item 4: never uses the caught-false-completion accusation text for the ambiguous bucket (it is a DIFFERENT bucket from Case A)"
+else
+  _fail "iteration-2 item 4: incorrectly used the false-completion accusation for an ambiguous (not FAIL) capture: $(cat "$TMPDIR_EVAL/ambig-terminal.out" "$TMPDIR_EVAL/ambig-terminal.err")"
+fi
+
+# Non-terminal variant: SAME fixture shape, but status:in_progress/phase:build (not terminal,
+# not pre-execution) -- must stay warn-only in warn mode (exit 0), proving this fix did not
+# change the non-terminal warn/block split.
+AMBIG_NONTERMINAL_REPO="$TMPDIR_EVAL/ambig-nonterminal/repo"
+mkdir -p "$AMBIG_NONTERMINAL_REPO/.kontourai/flow-agents/ambig-nonterminal-task"
+printf '# Test Repo\n' > "$AMBIG_NONTERMINAL_REPO/AGENTS.md"
+
+cat > "$AMBIG_NONTERMINAL_REPO/.kontourai/flow-agents/ambig-nonterminal-task/ambig-nonterminal-task--deliver.md" <<'MARKDOWN'
+# Ambiguous-at-nonterminal-stop task
+
+branch: main
+worktree: main
+created: 2026-07-05
+status: executing
+type: deliver
+
+## Plan
+
+Same ambiguous+pass-claim shape, but NON-terminal (status:in_progress) -- warn-only expected.
+MARKDOWN
+
+write_json_file "$AMBIG_NONTERMINAL_REPO/.kontourai/flow-agents/ambig-nonterminal-task/state.json" <<'JSON'
+{
+  "schema_version": "1.0",
+  "task_slug": "ambig-nonterminal-task",
+  "status": "in_progress",
+  "phase": "build",
+  "updated_at": "2026-07-05T00:00:00Z",
+  "next_action": {
+    "status": "in_progress",
+    "summary": "Mid-build."
+  }
+}
+JSON
+
+python3 - "$AMBIG_NONTERMINAL_REPO/.kontourai/flow-agents/ambig-nonterminal-task/trust.bundle" << 'PY'
+import json, sys
+bundle_path = sys.argv[1]
+bundle = {
+    "schemaVersion": 5, "source": "flow-agents/workflow-sidecar",
+    "claims": [{
+        "id": "c1", "subjectId": "ambig-nonterminal-task/pattern-removed", "subjectType": "flow-step",
+        "claimType": "builder.verify.tests",
+        "fieldOrBehavior": "grep -E 'removed-pattern' haystack.txt",
+        "value": "pass", "impactLevel": "high", "status": "verified",
+        "createdAt": "2026-07-05T00:00:00Z", "updatedAt": "2026-07-05T00:00:00Z"
+    }],
+    "evidence": [{
+        "id": "ev1", "claimId": "c1",
+        "evidenceType": "command_output", "method": "capture",
+        "sourceRef": "command-log.jsonl",
+        "excerptOrSummary": "removed-pattern check (agent claimed pass)",
+        "observedAt": "2026-07-05T00:00:00Z", "collectedBy": "agent",
+        "passing": True,
+        "execution": {"label": "grep -E 'removed-pattern' haystack.txt", "exitCode": 1}
+    }],
+    "policies": [], "events": []
+}
+json.dump(bundle, open(bundle_path, 'w'))
+PY
+
+printf '%s\n' '{"command":"grep -E '"'"'removed-pattern'"'"' haystack.txt","observedResult":"ambiguous","exitCode":1,"capturedAt":"2026-07-05T00:00:00Z","source":"postToolUse-capture"}' \
+  > "$AMBIG_NONTERMINAL_REPO/.kontourai/flow-agents/ambig-nonterminal-task/command-log.jsonl"
+
+if FLOW_AGENTS_GOAL_FIT_MODE=warn FLOW_AGENTS_GOAL_FIT_MAX_BLOCKS=100000 \
+  node "$ROOT/scripts/hooks/stop-goal-fit.js" >"$TMPDIR_EVAL/ambig-nonterminal.out" 2>"$TMPDIR_EVAL/ambig-nonterminal.err" <<JSON
+{"hook_event_name":"Stop","cwd":"$AMBIG_NONTERMINAL_REPO"}
+JSON
+then
+  ambig_nonterminal_status=0
+else
+  ambig_nonterminal_status=$?
+fi
+
+if [[ "$ambig_nonterminal_status" -eq 0 ]]; then
+  _pass "iteration-2 item 4: the SAME ambiguous+pass-claim fixture stays warn-only for a NON-terminal stop in warn mode (exit 0) -- terminal/non-terminal split unchanged"
+else
+  _fail "iteration-2 item 4: non-terminal warn-mode stop unexpectedly exited nonzero: $ambig_nonterminal_status $(cat "$TMPDIR_EVAL/ambig-nonterminal.out" "$TMPDIR_EVAL/ambig-nonterminal.err")"
+fi
+if grep -q 'NOT_VERIFIED (ambiguous)' "$TMPDIR_EVAL/ambig-nonterminal.err"; then
+  _pass "iteration-2 item 4: non-terminal stop still SURFACES the distinct ambiguous message (warn, not silently dropped)"
+else
+  _fail "iteration-2 item 4: non-terminal stop dropped the ambiguous message entirely: $(cat "$TMPDIR_EVAL/ambig-nonterminal.out" "$TMPDIR_EVAL/ambig-nonterminal.err")"
+fi
+
+
+# ─── Iteration-2 fix item 1 (CRITICAL): ambiguous claimed-pass must HARD_BLOCK a terminal ────
+# stop in the COMMON code paths too -- not just capturedFailReconciliation's third bucket
+# (already covered above by the "iteration-2 fix item 4" ambig-terminal-task fixture, which
+# requires BOTH a captured command-log entry AND a trust.bundle). The CRITICAL bug: in the
+# default/common shapes -- evidence.json-only (no bundle), or a claimed-pass never actually
+# captured (forcing the live backstop re-run) -- captureCrossReference/runBackstop emitted a
+# plain "NOT_VERIFIED —" warning that only matches FULL_BLOCK (non-terminal), never HARD_BLOCK,
+# so a terminal `done`/`delivered` stop silently completed even in explicit strict block mode.
+echo ""
+echo "--- iteration-2 fix item 1 (CRITICAL): ambiguous claimed-pass HARD_BLOCKs a terminal stop in the COMMON (non-bundle-third-bucket) code paths ---"
+
+# Case (i): evidence.json-only (NO trust.bundle), NO command-log.jsonl at all -- the exact
+# CRITICAL repro shape. Forces captureCrossReference into the live backstop re-run path
+# (runBackstop's ambiguous branch, the second of the two common emission sites the fix unifies).
+CRIT1_NOBUNDLE_REPO="$TMPDIR_EVAL/crit1-nobundle/repo"
+mkdir -p "$CRIT1_NOBUNDLE_REPO/.kontourai/flow-agents/crit1-nobundle-task"
+printf '# Test Repo\n' > "$CRIT1_NOBUNDLE_REPO/AGENTS.md"
+printf 'nothing interesting here\njust some other content\n' > "$CRIT1_NOBUNDLE_REPO/haystack.txt"
+
+cat > "$CRIT1_NOBUNDLE_REPO/.kontourai/flow-agents/crit1-nobundle-task/crit1-nobundle-task--deliver.md" <<'MARKDOWN'
+# Ambiguous evidence.json-only terminal task (CRITICAL repro, case i)
+
+branch: main
+worktree: main
+created: 2026-07-05
+status: delivered
+type: deliver
+
+## Definition Of Done
+- [x] pattern removed
+
+## Goal Fit Gate
+- [x] acceptance verified
+
+## Verification Report
+
+Build: PASS
+
+### Verdict: PASS
+MARKDOWN
+
+write_json_file "$CRIT1_NOBUNDLE_REPO/.kontourai/flow-agents/crit1-nobundle-task/state.json" <<'JSON'
+{
+  "schema_version": "1.0",
+  "task_slug": "crit1-nobundle-task",
+  "status": "delivered",
+  "phase": "done",
+  "updated_at": "2026-07-05T00:00:00Z",
+  "next_action": {
+    "status": "done",
+    "summary": "Delivered."
+  }
+}
+JSON
+
+write_json_file "$CRIT1_NOBUNDLE_REPO/.kontourai/flow-agents/crit1-nobundle-task/acceptance.json" <<JSON
+{
+  "schema_version": "1.0",
+  "task_slug": "crit1-nobundle-task",
+  "criteria": [
+    {
+      "id": "pattern-removed",
+      "description": "The removed-pattern string no longer appears in haystack.txt.",
+      "status": "pass",
+      "evidence_refs": [
+        {
+          "kind": "command",
+          "excerpt": "grep -E 'removed-pattern' $CRIT1_NOBUNDLE_REPO/haystack.txt",
+          "summary": "Bare grep absence check (not self-asserting)."
+        }
+      ]
+    }
+  ],
+  "goal_fit": {"status": "pass", "summary": "Pattern removal verified."}
+}
+JSON
+
+write_json_file "$CRIT1_NOBUNDLE_REPO/.kontourai/flow-agents/crit1-nobundle-task/evidence.json" <<JSON
+{
+  "schema_version": "1.0",
+  "task_slug": "crit1-nobundle-task",
+  "verdict": "pass",
+  "checks": [
+    {
+      "id": "pattern-removed",
+      "kind": "command",
+      "status": "pass",
+      "command": "grep -E 'removed-pattern' $CRIT1_NOBUNDLE_REPO/haystack.txt",
+      "summary": "Confirmed removed-pattern is gone."
+    }
+  ],
+  "not_verified_gaps": []
+}
+JSON
+# No trust.bundle, no command-log.jsonl anywhere in this artifact dir.
+
+if FLOW_AGENTS_GOAL_FIT_MODE=block FLOW_AGENTS_GOAL_FIT_MAX_BLOCKS=100000 \
+  node "$ROOT/scripts/hooks/stop-goal-fit.js" >"$TMPDIR_EVAL/crit1-nobundle.out" 2>"$TMPDIR_EVAL/crit1-nobundle.err" <<JSON
+{"hook_event_name":"Stop","cwd":"$CRIT1_NOBUNDLE_REPO"}
+JSON
+then
+  crit1_nobundle_status=0
+else
+  crit1_nobundle_status=$?
+fi
+
+if [[ "$crit1_nobundle_status" -eq 2 ]]; then
+  _pass "iteration-2 item 1 (CRITICAL, case i -- evidence.json-only, no bundle, never captured): a terminal (delivered) stop with an ambiguous claimed-pass command now HARD_BLOCKs (exit 2) -- the exact CRITICAL repro shape"
+else
+  _fail "iteration-2 item 1 (CRITICAL) REGRESSION: case i (evidence.json-only, no bundle, never captured) did NOT block a terminal stop in explicit block mode -- the CRITICAL bug is back: exit=$crit1_nobundle_status $(cat "$TMPDIR_EVAL/crit1-nobundle.out" "$TMPDIR_EVAL/crit1-nobundle.err")"
+fi
+if grep -q 'NOT_VERIFIED (ambiguous)' "$TMPDIR_EVAL/crit1-nobundle.err"; then
+  _pass "iteration-2 item 1 (case i): the block uses the distinct 'NOT_VERIFIED (ambiguous)' re-record-self-asserting message"
+else
+  _fail "iteration-2 item 1 (case i): the distinct ambiguous message was not found: $(cat "$TMPDIR_EVAL/crit1-nobundle.out" "$TMPDIR_EVAL/crit1-nobundle.err")"
+fi
+if ! grep -q 'caught false-completion' "$TMPDIR_EVAL/crit1-nobundle.err"; then
+  _pass "iteration-2 item 1 (case i): never uses the caught-false-completion accusation for the ambiguous case (ac4 preserved: classification/message only, never the accusation)"
+else
+  _fail "iteration-2 item 1 (case i): incorrectly used the false-completion accusation for an ambiguous (not FAIL) case: $(cat "$TMPDIR_EVAL/crit1-nobundle.out" "$TMPDIR_EVAL/crit1-nobundle.err")"
+fi
+
+# Case (ii): trust.bundle PRESENT (a `workflow.check.command` claim asserting pass), but the
+# claimed-pass command was NEVER captured at all (no command-log.jsonl in this artifact dir) --
+# forces the SAME live-backstop-re-run path as case (i), but sourced from the bundle instead of
+# the evidence.json fallback, proving the fix covers both claimedPass sources.
+CRIT1_BUNDLE_REPO="$TMPDIR_EVAL/crit1-bundle-nevercaptured/repo"
+mkdir -p "$CRIT1_BUNDLE_REPO/.kontourai/flow-agents/crit1-bundle-task"
+printf '# Test Repo\n' > "$CRIT1_BUNDLE_REPO/AGENTS.md"
+printf 'nothing interesting here\njust some other content\n' > "$CRIT1_BUNDLE_REPO/haystack.txt"
+
+cat > "$CRIT1_BUNDLE_REPO/.kontourai/flow-agents/crit1-bundle-task/crit1-bundle-task--deliver.md" <<'MARKDOWN'
+# Ambiguous bundle-sourced, never-captured terminal task (CRITICAL repro, case ii)
+
+branch: main
+worktree: main
+created: 2026-07-05
+status: delivered
+type: deliver
+
+## Definition Of Done
+- [x] pattern removed
+
+## Goal Fit Gate
+- [x] acceptance verified
+
+## Verification Report
+
+Build: PASS
+
+### Verdict: PASS
+MARKDOWN
+
+write_json_file "$CRIT1_BUNDLE_REPO/.kontourai/flow-agents/crit1-bundle-task/state.json" <<'JSON'
+{
+  "schema_version": "1.0",
+  "task_slug": "crit1-bundle-task",
+  "status": "delivered",
+  "phase": "done",
+  "updated_at": "2026-07-05T00:00:00Z",
+  "next_action": {
+    "status": "done",
+    "summary": "Delivered."
+  }
+}
+JSON
+
+write_json_file "$CRIT1_BUNDLE_REPO/.kontourai/flow-agents/crit1-bundle-task/acceptance.json" <<JSON
+{
+  "schema_version": "1.0",
+  "task_slug": "crit1-bundle-task",
+  "criteria": [
+    {
+      "id": "pattern-removed",
+      "description": "The removed-pattern string no longer appears in haystack.txt.",
+      "status": "pass",
+      "evidence_refs": [
+        {
+          "kind": "command",
+          "excerpt": "grep -E 'removed-pattern' $CRIT1_BUNDLE_REPO/haystack.txt",
+          "summary": "Bare grep absence check (not self-asserting)."
+        }
+      ]
+    }
+  ],
+  "goal_fit": {"status": "pass", "summary": "Pattern removal verified."}
+}
+JSON
+
+# trust.bundle claims pass via a `workflow.check.command` claim, WITHOUT any evidence[] item
+# carrying execution.label -- exactly the "claimed pass but never captured" bundle shape
+# bundleClaimedPassCommandChecks' part (B) recognizes.
+python3 - "$CRIT1_BUNDLE_REPO/.kontourai/flow-agents/crit1-bundle-task/trust.bundle" << 'PY'
+import json, sys
+bundle_path = sys.argv[1]
+bundle = {
+    "schemaVersion": 5, "source": "flow-agents/workflow-sidecar",
+    "claims": [{
+        "id": "c1", "subjectId": "crit1-bundle-task/pattern-removed", "subjectType": "flow-step",
+        "claimType": "workflow.check.command",
+        "fieldOrBehavior": "grep -E 'removed-pattern' haystack.txt",
+        "value": "pass", "impactLevel": "high", "status": "verified",
+        "createdAt": "2026-07-05T00:00:00Z", "updatedAt": "2026-07-05T00:00:00Z"
+    }],
+    "evidence": [], "policies": [], "events": []
+}
+json.dump(bundle, open(bundle_path, 'w'))
+PY
+# No command-log.jsonl in this artifact dir at all -- this claimed-pass check was never captured.
+
+if FLOW_AGENTS_GOAL_FIT_MODE=block FLOW_AGENTS_GOAL_FIT_MAX_BLOCKS=100000 \
+  node "$ROOT/scripts/hooks/stop-goal-fit.js" >"$TMPDIR_EVAL/crit1-bundle.out" 2>"$TMPDIR_EVAL/crit1-bundle.err" <<JSON
+{"hook_event_name":"Stop","cwd":"$CRIT1_BUNDLE_REPO"}
+JSON
+then
+  crit1_bundle_status=0
+else
+  crit1_bundle_status=$?
+fi
+
+if [[ "$crit1_bundle_status" -eq 2 ]]; then
+  _pass "iteration-2 item 1 (CRITICAL, case ii -- trust.bundle present, never captured, live-backstop-only): a terminal (delivered) stop with an ambiguous bundle-sourced claimed-pass command now HARD_BLOCKs (exit 2)"
+else
+  _fail "iteration-2 item 1 (CRITICAL) REGRESSION: case ii (bundle present, never captured) did NOT block a terminal stop in explicit block mode: exit=$crit1_bundle_status $(cat "$TMPDIR_EVAL/crit1-bundle.out" "$TMPDIR_EVAL/crit1-bundle.err")"
+fi
+if grep -q 'NOT_VERIFIED (ambiguous)' "$TMPDIR_EVAL/crit1-bundle.err"; then
+  _pass "iteration-2 item 1 (case ii): the block uses the distinct 'NOT_VERIFIED (ambiguous)' re-record-self-asserting message"
+else
+  _fail "iteration-2 item 1 (case ii): the distinct ambiguous message was not found: $(cat "$TMPDIR_EVAL/crit1-bundle.out" "$TMPDIR_EVAL/crit1-bundle.err")"
+fi
+
+# Site-1 coverage: captureCrossReference's OWN capture-log cross-reference shortcut (distinct
+# from capturedFailReconciliation's third bucket) -- the claimed-pass command WAS captured, and
+# its LATEST log entry is ambiguous, at a TERMINAL stop, with NO trust.bundle (so
+# capturedFailReconciliation's bucket -- which requires a bundle claim -- cannot be what fires
+# here; only captureCrossReference's own capture-log branch can).
+CRIT1_CAPTURED_REPO="$TMPDIR_EVAL/crit1-captured-ambiguous/repo"
+mkdir -p "$CRIT1_CAPTURED_REPO/.kontourai/flow-agents/crit1-captured-task"
+printf '# Test Repo\n' > "$CRIT1_CAPTURED_REPO/AGENTS.md"
+
+cat > "$CRIT1_CAPTURED_REPO/.kontourai/flow-agents/crit1-captured-task/crit1-captured-task--deliver.md" <<'MARKDOWN'
+# Ambiguous captured-log-only terminal task (CRITICAL repro, capture-log shortcut site)
+
+branch: main
+worktree: main
+created: 2026-07-05
+status: delivered
+type: deliver
+
+## Definition Of Done
+- [x] pattern removed
+
+## Goal Fit Gate
+- [x] acceptance verified
+
+## Verification Report
+
+Build: PASS
+
+### Verdict: PASS
+MARKDOWN
+
+write_json_file "$CRIT1_CAPTURED_REPO/.kontourai/flow-agents/crit1-captured-task/state.json" <<'JSON'
+{
+  "schema_version": "1.0",
+  "task_slug": "crit1-captured-task",
+  "status": "delivered",
+  "phase": "done",
+  "updated_at": "2026-07-05T00:00:00Z",
+  "next_action": {
+    "status": "done",
+    "summary": "Delivered."
+  }
+}
+JSON
+
+write_json_file "$CRIT1_CAPTURED_REPO/.kontourai/flow-agents/crit1-captured-task/evidence.json" <<'JSON'
+{
+  "schema_version": "1.0",
+  "task_slug": "crit1-captured-task",
+  "verdict": "pass",
+  "checks": [
+    {
+      "id": "pattern-removed",
+      "kind": "command",
+      "status": "pass",
+      "command": "grep -E 'removed-pattern' haystack.txt",
+      "summary": "Confirmed removed-pattern is gone."
+    }
+  ],
+  "not_verified_gaps": []
+}
+JSON
+
+# command-log.jsonl HAS an entry for this EXACT command -- its LATEST (only) capture is
+# ambiguous (bare grep exit 1). No trust.bundle in this artifact dir at all.
+printf '%s\n' '{"command":"grep -E '"'"'removed-pattern'"'"' haystack.txt","observedResult":"ambiguous","exitCode":1,"capturedAt":"2026-07-05T00:00:00Z","source":"postToolUse-capture"}' \
+  > "$CRIT1_CAPTURED_REPO/.kontourai/flow-agents/crit1-captured-task/command-log.jsonl"
+
+if FLOW_AGENTS_GOAL_FIT_MODE=block FLOW_AGENTS_GOAL_FIT_MAX_BLOCKS=100000 \
+  node "$ROOT/scripts/hooks/stop-goal-fit.js" >"$TMPDIR_EVAL/crit1-captured.out" 2>"$TMPDIR_EVAL/crit1-captured.err" <<JSON
+{"hook_event_name":"Stop","cwd":"$CRIT1_CAPTURED_REPO"}
+JSON
+then
+  crit1_captured_status=0
+else
+  crit1_captured_status=$?
+fi
+
+if [[ "$crit1_captured_status" -eq 2 ]]; then
+  _pass "iteration-2 item 1 (CRITICAL, capture-log cross-reference shortcut site, no bundle): a terminal stop with a CAPTURED ambiguous command claimed pass now HARD_BLOCKs (exit 2)"
+else
+  _fail "iteration-2 item 1 (CRITICAL) REGRESSION: the capture-log cross-reference shortcut site (captured, ambiguous, no bundle) did NOT block a terminal stop: exit=$crit1_captured_status $(cat "$TMPDIR_EVAL/crit1-captured.out" "$TMPDIR_EVAL/crit1-captured.err")"
+fi
+if grep -q 'NOT_VERIFIED (ambiguous)' "$TMPDIR_EVAL/crit1-captured.err"; then
+  _pass "iteration-2 item 1 (capture-log shortcut site): the block uses the distinct 'NOT_VERIFIED (ambiguous)' re-record-self-asserting message"
+else
+  _fail "iteration-2 item 1 (capture-log shortcut site): the distinct ambiguous message was not found: $(cat "$TMPDIR_EVAL/crit1-captured.out" "$TMPDIR_EVAL/crit1-captured.err")"
+fi
+
+# ─── Iteration-2 (re-plan) finding #3 (HIGH), Decision A: no-signal-ambiguous split ───────────
+# Site-1 coverage (captureCrossReference's own capture-log branch, same site as crit1-captured
+# above): a GENERIC command ("npm test") whose LATEST capture is `ambiguous` with NO exit code
+# recoverable at all (`exitCode:null` — e.g. an unreadable/missing codex host banner) is a
+# DIFFERENT origin from the #362 absence-ambiguous carve-out (bare grep/diff exit EXACTLY 1)
+# exercised by crit1-captured-task directly above. Decision A: this no-signal case gets
+# grep/diff-FREE, accurate wording and is warn-only at a TERMINAL stop (never HARD_BLOCKs),
+# while still blocking a NON-terminal stop via FULL_BLOCK's existing `NOT_VERIFIED —` pattern.
+# The crit1-captured-task assertions directly above are the regression guard proving the #362
+# absence-ambiguous case still HARD_BLOCKs a terminal stop, unchanged.
+echo ""
+echo "--- iteration-2 (re-plan) finding #3 Decision A: no-signal-ambiguous is warn-only at a terminal stop (site 1) ---"
+
+NOSIGNAL_TERMINAL_REPO="$TMPDIR_EVAL/nosignal-terminal/repo"
+mkdir -p "$NOSIGNAL_TERMINAL_REPO/.kontourai/flow-agents/nosignal-terminal-task"
+printf '# Test Repo\n' > "$NOSIGNAL_TERMINAL_REPO/AGENTS.md"
+
+cat > "$NOSIGNAL_TERMINAL_REPO/.kontourai/flow-agents/nosignal-terminal-task/nosignal-terminal-task--deliver.md" <<'MARKDOWN'
+# No-signal ambiguous terminal task (finding #3, generic command, no exit code)
+
+branch: main
+worktree: main
+created: 2026-07-06
+status: delivered
+type: deliver
+
+## Definition Of Done
+- [x] tests pass
+
+## Goal Fit Gate
+- [x] acceptance verified
+
+## Verification Report
+
+Build: PASS
+
+### Verdict: PASS
+MARKDOWN
+
+write_json_file "$NOSIGNAL_TERMINAL_REPO/.kontourai/flow-agents/nosignal-terminal-task/state.json" <<'JSON'
+{
+  "schema_version": "1.0",
+  "task_slug": "nosignal-terminal-task",
+  "status": "delivered",
+  "phase": "done",
+  "updated_at": "2026-07-06T00:00:00Z",
+  "next_action": {
+    "status": "done",
+    "summary": "Delivered."
+  }
+}
+JSON
+
+write_json_file "$NOSIGNAL_TERMINAL_REPO/.kontourai/flow-agents/nosignal-terminal-task/evidence.json" <<'JSON'
+{
+  "schema_version": "1.0",
+  "task_slug": "nosignal-terminal-task",
+  "verdict": "pass",
+  "checks": [
+    {
+      "id": "tests-pass",
+      "kind": "command",
+      "status": "pass",
+      "command": "npm test",
+      "summary": "Claimed tests pass."
+    }
+  ],
+  "not_verified_gaps": []
+}
+JSON
+
+# command-log.jsonl HAS an entry for this EXACT command -- its LATEST (only) capture is a
+# no-signal ambiguous (observedResult:"ambiguous", exitCode:null), NOT the #362
+# absence-ambiguous carve-out (which requires exitCode===1 on a bare grep/diff). No trust.bundle
+# in this artifact dir at all.
+printf '%s\n' '{"command":"npm test","observedResult":"ambiguous","exitCode":null,"capturedAt":"2026-07-06T00:00:00Z","source":"postToolUse-capture"}' \
+  > "$NOSIGNAL_TERMINAL_REPO/.kontourai/flow-agents/nosignal-terminal-task/command-log.jsonl"
+
+if FLOW_AGENTS_GOAL_FIT_MODE=block FLOW_AGENTS_GOAL_FIT_MAX_BLOCKS=100000 \
+  node "$ROOT/scripts/hooks/stop-goal-fit.js" >"$TMPDIR_EVAL/nosignal-terminal.out" 2>"$TMPDIR_EVAL/nosignal-terminal.err" <<JSON
+{"hook_event_name":"Stop","cwd":"$NOSIGNAL_TERMINAL_REPO"}
+JSON
+then
+  nosignal_terminal_status=0
+else
+  nosignal_terminal_status=$?
+fi
+
+if [[ "$nosignal_terminal_status" -eq 0 ]]; then
+  _pass "finding #3 Decision A: a terminal (delivered) stop with a no-signal-ambiguous claimed-pass command ('npm test', exitCode:null) does NOT hard-block (exit 0) -- warn-only, no exit code was ever observed on this host"
+else
+  _fail "finding #3 Decision A REGRESSION: a terminal stop with a no-signal-ambiguous claimed-pass command WRONGLY blocked (exit=$nosignal_terminal_status): $(cat "$TMPDIR_EVAL/nosignal-terminal.out" "$TMPDIR_EVAL/nosignal-terminal.err")"
+fi
+
+if ! grep -qi 'grep/diff\|NOT_VERIFIED (ambiguous)' "$TMPDIR_EVAL/nosignal-terminal.err"; then
+  _pass "finding #3 Decision A: the no-signal-ambiguous message contains NO grep/diff wording and NOT the absence-ambiguous 'NOT_VERIFIED (ambiguous)' marker -- accurate wording for a generic command"
+else
+  _fail "finding #3 Decision A REGRESSION: the no-signal-ambiguous message wrongly carries grep/diff wording or the absence-ambiguous marker: $(cat "$TMPDIR_EVAL/nosignal-terminal.out" "$TMPDIR_EVAL/nosignal-terminal.err")"
+fi
+
+if grep -q 'NOT_VERIFIED —' "$TMPDIR_EVAL/nosignal-terminal.err"; then
+  _pass "finding #3 Decision A: the no-signal-ambiguous message still surfaces via the generic 'NOT_VERIFIED —' pattern (warn, not silently dropped)"
+else
+  _fail "finding #3 Decision A REGRESSION: the no-signal-ambiguous message was dropped entirely: $(cat "$TMPDIR_EVAL/nosignal-terminal.out" "$TMPDIR_EVAL/nosignal-terminal.err")"
+fi
+
+# Non-terminal variant: SAME fixture, but status:in_progress/phase:build (not terminal, not
+# pre-execution) -- FULL_BLOCK's broader `evidence check` / `NOT_VERIFIED —` patterns still
+# BLOCK a non-terminal stop, proving the split is warn-terminal / block-non-terminal, not a
+# blanket downgrade to non-blocking.
+NOSIGNAL_NONTERMINAL_REPO="$TMPDIR_EVAL/nosignal-nonterminal/repo"
+mkdir -p "$NOSIGNAL_NONTERMINAL_REPO/.kontourai/flow-agents/nosignal-nonterminal-task"
+printf '# Test Repo\n' > "$NOSIGNAL_NONTERMINAL_REPO/AGENTS.md"
+
+cat > "$NOSIGNAL_NONTERMINAL_REPO/.kontourai/flow-agents/nosignal-nonterminal-task/nosignal-nonterminal-task--deliver.md" <<'MARKDOWN'
+# No-signal ambiguous non-terminal task (finding #3)
+
+branch: main
+worktree: main
+created: 2026-07-06
+status: executing
+type: deliver
+
+## Plan
+
+Same no-signal-ambiguous shape, but NON-terminal (status:in_progress) -- must still BLOCK.
+MARKDOWN
+
+write_json_file "$NOSIGNAL_NONTERMINAL_REPO/.kontourai/flow-agents/nosignal-nonterminal-task/state.json" <<'JSON'
+{
+  "schema_version": "1.0",
+  "task_slug": "nosignal-nonterminal-task",
+  "status": "in_progress",
+  "phase": "build",
+  "updated_at": "2026-07-06T00:00:00Z",
+  "next_action": {
+    "status": "in_progress",
+    "summary": "Mid-build."
+  }
+}
+JSON
+
+write_json_file "$NOSIGNAL_NONTERMINAL_REPO/.kontourai/flow-agents/nosignal-nonterminal-task/evidence.json" <<'JSON'
+{
+  "schema_version": "1.0",
+  "task_slug": "nosignal-nonterminal-task",
+  "verdict": "pass",
+  "checks": [
+    {
+      "id": "tests-pass",
+      "kind": "command",
+      "status": "pass",
+      "command": "npm test",
+      "summary": "Claimed tests pass."
+    }
+  ],
+  "not_verified_gaps": []
+}
+JSON
+
+printf '%s\n' '{"command":"npm test","observedResult":"ambiguous","exitCode":null,"capturedAt":"2026-07-06T00:00:00Z","source":"postToolUse-capture"}' \
+  > "$NOSIGNAL_NONTERMINAL_REPO/.kontourai/flow-agents/nosignal-nonterminal-task/command-log.jsonl"
+
+if FLOW_AGENTS_GOAL_FIT_MODE=block FLOW_AGENTS_GOAL_FIT_MAX_BLOCKS=100000 \
+  node "$ROOT/scripts/hooks/stop-goal-fit.js" >"$TMPDIR_EVAL/nosignal-nonterminal.out" 2>"$TMPDIR_EVAL/nosignal-nonterminal.err" <<JSON
+{"hook_event_name":"Stop","cwd":"$NOSIGNAL_NONTERMINAL_REPO"}
+JSON
+then
+  nosignal_nonterminal_status=0
+else
+  nosignal_nonterminal_status=$?
+fi
+
+if [[ "$nosignal_nonterminal_status" -eq 2 ]]; then
+  _pass "finding #3 Decision A: the SAME no-signal-ambiguous fixture BLOCKS (exit 2) at a non-terminal (executing) stop via FULL_BLOCK -- terminal-warn/non-terminal-block split confirmed"
+else
+  _fail "finding #3 Decision A REGRESSION: a non-terminal stop with a no-signal-ambiguous claimed-pass command did NOT block: exit=$nosignal_nonterminal_status $(cat "$TMPDIR_EVAL/nosignal-nonterminal.out" "$TMPDIR_EVAL/nosignal-nonterminal.err")"
+fi
+
+# Negative control: a LEGITIMATE self-asserting absence check ('! grep -q ...', which exits 0
+# when the pattern is genuinely absent) claimed pass at a TERMINAL stop must still PASS -- no
+# new over-block introduced by this fix. Same never-captured/no-bundle shape as case (i), but
+# the recorded command is self-asserting, not bare.
+CRIT1_NEGCONTROL_REPO="$TMPDIR_EVAL/crit1-negcontrol/repo"
+mkdir -p "$CRIT1_NEGCONTROL_REPO/.kontourai/flow-agents/crit1-negcontrol-task"
+printf '# Test Repo\n' > "$CRIT1_NEGCONTROL_REPO/AGENTS.md"
+printf 'nothing interesting here\njust some other content\n' > "$CRIT1_NEGCONTROL_REPO/haystack.txt"
+
+cat > "$CRIT1_NEGCONTROL_REPO/.kontourai/flow-agents/crit1-negcontrol-task/crit1-negcontrol-task--deliver.md" <<'MARKDOWN'
+# Self-asserting absence check terminal task (negative control -- must NOT block)
+
+branch: main
+worktree: main
+created: 2026-07-05
+status: delivered
+type: deliver
+
+## Definition Of Done
+- [x] pattern removed
+
+## Goal Fit Gate
+- [x] acceptance verified
+
+## Verification Report
+
+Build: PASS
+
+### Verdict: PASS
+MARKDOWN
+
+write_json_file "$CRIT1_NEGCONTROL_REPO/.kontourai/flow-agents/crit1-negcontrol-task/state.json" <<'JSON'
+{
+  "schema_version": "1.0",
+  "task_slug": "crit1-negcontrol-task",
+  "status": "delivered",
+  "phase": "done",
+  "updated_at": "2026-07-05T00:00:00Z",
+  "next_action": {
+    "status": "done",
+    "summary": "Delivered."
+  }
+}
+JSON
+
+write_json_file "$CRIT1_NEGCONTROL_REPO/.kontourai/flow-agents/crit1-negcontrol-task/acceptance.json" <<JSON
+{
+  "schema_version": "1.0",
+  "task_slug": "crit1-negcontrol-task",
+  "criteria": [
+    {
+      "id": "pattern-absent",
+      "description": "The removed-pattern string is confirmed absent (self-asserting form).",
+      "status": "pass",
+      "evidence_refs": [
+        {
+          "kind": "command",
+          "excerpt": "! grep -q 'removed-pattern' $CRIT1_NEGCONTROL_REPO/haystack.txt",
+          "summary": "Self-asserting absence check (negated grep -q)."
+        }
+      ]
+    }
+  ],
+  "goal_fit": {"status": "pass", "summary": "Pattern absence verified (self-asserting)."}
+}
+JSON
+
+write_json_file "$CRIT1_NEGCONTROL_REPO/.kontourai/flow-agents/crit1-negcontrol-task/evidence.json" <<JSON
+{
+  "schema_version": "1.0",
+  "task_slug": "crit1-negcontrol-task",
+  "verdict": "pass",
+  "checks": [
+    {
+      "id": "pattern-absent",
+      "kind": "command",
+      "status": "pass",
+      "command": "! grep -q 'removed-pattern' $CRIT1_NEGCONTROL_REPO/haystack.txt",
+      "summary": "Confirmed removed-pattern is absent (self-asserting)."
+    }
+  ],
+  "not_verified_gaps": []
+}
+JSON
+# No trust.bundle, no command-log.jsonl -- forces the live backstop re-run, which genuinely
+# executes "! grep -q 'removed-pattern' haystack.txt" and gets a REAL exit 0 (self-asserting).
+
+if FLOW_AGENTS_GOAL_FIT_MODE=block FLOW_AGENTS_GOAL_FIT_MAX_BLOCKS=100000 \
+  node "$ROOT/scripts/hooks/stop-goal-fit.js" >"$TMPDIR_EVAL/crit1-negcontrol.out" 2>"$TMPDIR_EVAL/crit1-negcontrol.err" <<JSON
+{"hook_event_name":"Stop","cwd":"$CRIT1_NEGCONTROL_REPO"}
+JSON
+then
+  crit1_negcontrol_status=0
+else
+  crit1_negcontrol_status=$?
+fi
+
+if [[ "$crit1_negcontrol_status" -eq 0 ]]; then
+  _pass "iteration-2 item 1 negative control: a legitimate self-asserting absence check ('! grep -q ...') claimed pass at a terminal stop still PASSES (exit 0) -- no new over-block introduced by the fix"
+else
+  _fail "iteration-2 item 1 negative control REGRESSION: a legitimate self-asserting absence check claimed pass at a terminal stop was WRONGLY blocked: exit=$crit1_negcontrol_status $(cat "$TMPDIR_EVAL/crit1-negcontrol.out" "$TMPDIR_EVAL/crit1-negcontrol.err")"
+fi
+if ! grep -qi 'NOT_VERIFIED (ambiguous)\|caught false-completion' "$TMPDIR_EVAL/crit1-negcontrol.err"; then
+  _pass "iteration-2 item 1 negative control: no ambiguous or false-completion warning was emitted for the self-asserting form"
+else
+  _fail "iteration-2 item 1 negative control REGRESSION: an ambiguous or false-completion warning was wrongly emitted for a self-asserting absence check: $(cat "$TMPDIR_EVAL/crit1-negcontrol.out" "$TMPDIR_EVAL/crit1-negcontrol.err")"
+fi
+
+# Regression guard: exit codes >= 2 (a REAL tool error, e.g. a missing file) for grep/diff must
+# STILL hard-fail a terminal stop, unchanged by this fix.
+CRIT1_EXIT2_REPO="$TMPDIR_EVAL/crit1-exit2-terminal/repo"
+mkdir -p "$CRIT1_EXIT2_REPO/.kontourai/flow-agents/crit1-exit2-task"
+printf '# Test Repo\n' > "$CRIT1_EXIT2_REPO/AGENTS.md"
+
+cat > "$CRIT1_EXIT2_REPO/.kontourai/flow-agents/crit1-exit2-task/crit1-exit2-task--deliver.md" <<'MARKDOWN'
+# Exit>=2 terminal regression guard (real tool error must still hard-fail)
+
+branch: main
+worktree: main
+created: 2026-07-05
+status: delivered
+type: deliver
+
+## Definition Of Done
+- [x] pattern removed
+
+## Goal Fit Gate
+- [x] acceptance verified
+
+## Verification Report
+
+Build: PASS
+
+### Verdict: PASS
+MARKDOWN
+
+write_json_file "$CRIT1_EXIT2_REPO/.kontourai/flow-agents/crit1-exit2-task/state.json" <<'JSON'
+{
+  "schema_version": "1.0",
+  "task_slug": "crit1-exit2-task",
+  "status": "delivered",
+  "phase": "done",
+  "updated_at": "2026-07-05T00:00:00Z",
+  "next_action": {
+    "status": "done",
+    "summary": "Delivered."
+  }
+}
+JSON
+
+write_json_file "$CRIT1_EXIT2_REPO/.kontourai/flow-agents/crit1-exit2-task/acceptance.json" <<'JSON'
+{
+  "schema_version": "1.0",
+  "task_slug": "crit1-exit2-task",
+  "criteria": [
+    {
+      "id": "pattern-removed-2",
+      "description": "The removed-pattern string no longer appears in a file that does not exist.",
+      "status": "pass",
+      "evidence_refs": [
+        {
+          "kind": "command",
+          "excerpt": "grep -E 'removed-pattern' does-not-exist-anywhere.txt",
+          "summary": "Bare grep against a nonexistent file (real tool error, not zero-matches)."
+        }
+      ]
+    }
+  ],
+  "goal_fit": {"status": "pass", "summary": "Pattern removal verified."}
+}
+JSON
+
+write_json_file "$CRIT1_EXIT2_REPO/.kontourai/flow-agents/crit1-exit2-task/evidence.json" <<'JSON'
+{
+  "schema_version": "1.0",
+  "task_slug": "crit1-exit2-task",
+  "verdict": "pass",
+  "checks": [
+    {
+      "id": "pattern-removed-2",
+      "kind": "command",
+      "status": "pass",
+      "command": "grep -E 'removed-pattern' does-not-exist-anywhere.txt",
+      "summary": "Confirmed removed-pattern is gone."
+    }
+  ],
+  "not_verified_gaps": []
+}
+JSON
+
+if FLOW_AGENTS_GOAL_FIT_MODE=block FLOW_AGENTS_GOAL_FIT_MAX_BLOCKS=100000 \
+  node "$ROOT/scripts/hooks/stop-goal-fit.js" >"$TMPDIR_EVAL/crit1-exit2.out" 2>"$TMPDIR_EVAL/crit1-exit2.err" <<JSON
+{"hook_event_name":"Stop","cwd":"$CRIT1_EXIT2_REPO"}
+JSON
+then
+  crit1_exit2_status=0
+else
+  crit1_exit2_status=$?
+fi
+
+if [[ "$crit1_exit2_status" -eq 2 ]]; then
+  _pass "iteration-2 item 1 regression guard: exit>=2 (real tool error) for grep/diff still HARD_BLOCKs a terminal stop, unchanged"
+else
+  _fail "iteration-2 item 1 regression guard REGRESSION: exit>=2 (real tool error) did NOT block a terminal stop: exit=$crit1_exit2_status $(cat "$TMPDIR_EVAL/crit1-exit2.out" "$TMPDIR_EVAL/crit1-exit2.err")"
+fi
+
+# ─── Mutation test: neuter the marker-unification fix at ONE common-case emission site ───────
+# (the live-backstop-re-run branch inside captureCrossReference/runBackstop, the site case (i)
+# above exercises), reverting it to the pre-fix plain "NOT_VERIFIED —" text -- confirm the
+# evidence.json-only terminal case (i) goes GREEN-passes again (exit 0, the CRITICAL bug
+# reproduced), then restore byte-identical and re-confirm it blocks (exit 2) again. This proves
+# the eval actually exercises the marker-unification fix, not just the pattern's mere presence
+# in the source.
+echo ""
+echo "--- mutation-test: iteration-2 item 1 marker-unification fix (neuter ONE common emission site, confirm case (i) goes green/bug-returns, restore) ---"
+
+MARKER_MUTATION_SCRATCH="$TMPDIR_EVAL/marker-unification-mutation-scratch"
+mkdir -p "$MARKER_MUTATION_SCRATCH"
+cp "$ROOT/scripts/hooks/stop-goal-fit.js" "$MARKER_MUTATION_SCRATCH/stop-goal-fit.orig.js"
+
+node - "$ROOT/scripts/hooks/stop-goal-fit.js" <<'NODEEOF' 2>"$TMPDIR_EVAL/marker-mutation-patch.err"
+const fs = require('fs');
+const file = process.argv[2];
+let src = fs.readFileSync(file, 'utf8');
+// Target ONLY the live-backstop-re-run branch's `note` (runBackstop's ambiguous classification,
+// inside captureCrossReference) -- NOT the capture-log shortcut branch or the
+// capturedFailReconciliation third bucket -- reverting it to the pre-fix plain "NOT_VERIFIED —"
+// marker, to prove case (i) above genuinely depends on THIS site's unification.
+const needle = "const note = `${base} evidence check ${id}: trusted backstop (${trusted.source}) re-run of \"${trusted.argv.join(' ')}\" exited 1 — for grep/diff this may mean zero matches/no differences (PASS for an absence check) or an unintended miss (FAIL for a presence check); NOT_VERIFIED (ambiguous): ${AMBIGUOUS_REMEDIATION} to remove the ambiguity.`;";
+if (!src.includes(needle)) {
+  process.stderr.write('mutation: runBackstop live-re-run ambiguous note text not found — source pattern drifted, cannot mutation-test\n');
+  process.exit(1);
+}
+const mutated = needle.replace('NOT_VERIFIED (ambiguous): ${AMBIGUOUS_REMEDIATION} to remove the ambiguity.', 'NOT_VERIFIED — ${AMBIGUOUS_REMEDIATION} to remove the ambiguity.');
+src = src.split(needle).join(mutated);
+fs.writeFileSync(file, src);
+NODEEOF
+
+if [[ -s "$TMPDIR_EVAL/marker-mutation-patch.err" ]]; then
+  _fail "mutation-test setup failed (runBackstop live-re-run ambiguous note source pattern did not match scripts/hooks/stop-goal-fit.js), restoring original unmodified: $(cat "$TMPDIR_EVAL/marker-mutation-patch.err")"
+  cp "$MARKER_MUTATION_SCRATCH/stop-goal-fit.orig.js" "$ROOT/scripts/hooks/stop-goal-fit.js"
+elif ! node --check "$ROOT/scripts/hooks/stop-goal-fit.js" 2>"$TMPDIR_EVAL/marker-mutation-syntax.err"; then
+  _fail "mutation-test setup: mutated stop-goal-fit.js (marker unification neutered) failed a syntax check, restoring original immediately: $(cat "$TMPDIR_EVAL/marker-mutation-syntax.err")"
+  cp "$MARKER_MUTATION_SCRATCH/stop-goal-fit.orig.js" "$ROOT/scripts/hooks/stop-goal-fit.js"
+else
+  if FLOW_AGENTS_GOAL_FIT_MODE=block FLOW_AGENTS_GOAL_FIT_MAX_BLOCKS=100000 \
+    node "$ROOT/scripts/hooks/stop-goal-fit.js" >"$TMPDIR_EVAL/marker-mutation-case1.out" 2>"$TMPDIR_EVAL/marker-mutation-case1.err" <<JSON
+{"hook_event_name":"Stop","cwd":"$CRIT1_NOBUNDLE_REPO"}
+JSON
+  then
+    marker_mutation_case1_status=0
+  else
+    marker_mutation_case1_status=$?
+  fi
+
+  cp "$MARKER_MUTATION_SCRATCH/stop-goal-fit.orig.js" "$ROOT/scripts/hooks/stop-goal-fit.js"
+
+  if [[ "$marker_mutation_case1_status" -eq 0 ]]; then
+    _pass "mutation-test: with the marker unification neutered at this one site, case (i) WRONGLY exits 0 again (the CRITICAL bug reproduces -- eval correctly goes red without the fix, proving case (i) exercises this exact site)"
+  else
+    _fail "mutation-test: case (i) still exited nonzero ($marker_mutation_case1_status) even with the marker unification neutered at this site -- case (i) may not be exercising the intended fix"
+  fi
+fi
+
+if diff -q "$ROOT/scripts/hooks/stop-goal-fit.js" "$MARKER_MUTATION_SCRATCH/stop-goal-fit.orig.js" >/dev/null 2>&1; then
+  _pass "mutation-test cleanup: scripts/hooks/stop-goal-fit.js is restored byte-identical to its pre-mutation-test content"
+else
+  _fail "mutation-test cleanup REGRESSION: scripts/hooks/stop-goal-fit.js differs from its own pre-mutation-test content"
+fi
+
+if FLOW_AGENTS_GOAL_FIT_MODE=block FLOW_AGENTS_GOAL_FIT_MAX_BLOCKS=100000 \
+  node "$ROOT/scripts/hooks/stop-goal-fit.js" >"$TMPDIR_EVAL/marker-restore-recheck.out" 2>"$TMPDIR_EVAL/marker-restore-recheck.err" <<JSON
+{"hook_event_name":"Stop","cwd":"$CRIT1_NOBUNDLE_REPO"}
+JSON
+then
+  marker_restore_status=0
+else
+  marker_restore_status=$?
+fi
+if [[ "$marker_restore_status" -eq 2 ]]; then
+  _pass "mutation-test cleanup re-check: the restored real stop-goal-fit.js blocks case (i) again (fix genuinely back in effect, not just byte-restored)"
+else
+  _fail "mutation-test cleanup re-check REGRESSION: restored stop-goal-fit.js no longer blocks case (i): exit=$marker_restore_status $(cat "$TMPDIR_EVAL/marker-restore-recheck.out" "$TMPDIR_EVAL/marker-restore-recheck.err")"
+fi
+
+# ─── Mutation test: neuter the HARD_BLOCK inclusion of NOT_VERIFIED (ambiguous), confirm the ──
+# terminal-block fixture above goes red (exit 0 instead of 2), then restore. Same in-place
+# mutation idiom (and the SAME serial-runner-only constraint, see the doc comment above the
+# #362 runBackstop mutation test) as the existing mutation test in this file.
+echo ""
+echo "--- mutation-test: iteration-2 item 4 HARD_BLOCK NOT_VERIFIED (ambiguous) inclusion (neuter guard in place, confirm terminal-block fixture goes red, restore) ---"
+
+HARD_BLOCK_MUTATION_SCRATCH="$TMPDIR_EVAL/hardblock-mutation-scratch"
+mkdir -p "$HARD_BLOCK_MUTATION_SCRATCH"
+cp "$ROOT/scripts/hooks/stop-goal-fit.js" "$HARD_BLOCK_MUTATION_SCRATCH/stop-goal-fit.orig.js"
+
+node - "$ROOT/scripts/hooks/stop-goal-fit.js" <<'NODEEOF' 2>"$TMPDIR_EVAL/hardblock-mutation-patch.err"
+const fs = require('fs');
+const file = process.argv[2];
+let src = fs.readFileSync(file, 'utf8');
+const needle = "const HARD_BLOCK = /contradicts evidence\\.json|caught false-completion|evidence verdict:|evidence check .+ status:|critique status|critique open|required sidecar is missing|command-log integrity check FAILED|gate misconfiguration:|exit-code-laundered|NOT_VERIFIED \\(ambiguous\\)/;";
+if (!src.includes(needle)) {
+  process.stderr.write('mutation: HARD_BLOCK NOT_VERIFIED (ambiguous) pattern not found — source pattern drifted, cannot mutation-test\n');
+  process.exit(1);
+}
+const mutated = "const HARD_BLOCK = /contradicts evidence\\.json|caught false-completion|evidence verdict:|evidence check .+ status:|critique status|critique open|required sidecar is missing|command-log integrity check FAILED|gate misconfiguration:|exit-code-laundered/;";
+src = src.split(needle).join(mutated);
+fs.writeFileSync(file, src);
+NODEEOF
+
+if [[ -s "$TMPDIR_EVAL/hardblock-mutation-patch.err" ]]; then
+  _fail "mutation-test setup failed (HARD_BLOCK NOT_VERIFIED (ambiguous) source pattern did not match scripts/hooks/stop-goal-fit.js), restoring original unmodified: $(cat "$TMPDIR_EVAL/hardblock-mutation-patch.err")"
+  cp "$HARD_BLOCK_MUTATION_SCRATCH/stop-goal-fit.orig.js" "$ROOT/scripts/hooks/stop-goal-fit.js"
+elif ! node --check "$ROOT/scripts/hooks/stop-goal-fit.js" 2>"$TMPDIR_EVAL/hardblock-mutation-syntax.err"; then
+  _fail "mutation-test setup: mutated stop-goal-fit.js (HARD_BLOCK ambiguous pattern removed) failed a syntax check, restoring original immediately: $(cat "$TMPDIR_EVAL/hardblock-mutation-syntax.err")"
+  cp "$HARD_BLOCK_MUTATION_SCRATCH/stop-goal-fit.orig.js" "$ROOT/scripts/hooks/stop-goal-fit.js"
+else
+  if FLOW_AGENTS_GOAL_FIT_MODE=block FLOW_AGENTS_GOAL_FIT_MAX_BLOCKS=100000 \
+    node "$ROOT/scripts/hooks/stop-goal-fit.js" >"$TMPDIR_EVAL/hardblock-mutation-terminal.out" 2>"$TMPDIR_EVAL/hardblock-mutation-terminal.err" <<JSON
+{"hook_event_name":"Stop","cwd":"$AMBIG_TERMINAL_REPO"}
+JSON
+  then
+    hardblock_mutation_status=0
+  else
+    hardblock_mutation_status=$?
+  fi
+
+  cp "$HARD_BLOCK_MUTATION_SCRATCH/stop-goal-fit.orig.js" "$ROOT/scripts/hooks/stop-goal-fit.js"
+
+  if [[ "$hardblock_mutation_status" -eq 0 ]]; then
+    _pass "mutation-test: with the HARD_BLOCK NOT_VERIFIED (ambiguous) pattern removed, the terminal-block fixture WRONGLY exits 0 again (eval correctly goes red without the fix, proving the fixture exercises it)"
+  else
+    _fail "mutation-test: terminal-block fixture still exited nonzero ($hardblock_mutation_status) even with the HARD_BLOCK ambiguous pattern removed -- fixture may not be exercising the intended guard"
+  fi
+fi
+
+if diff -q "$ROOT/scripts/hooks/stop-goal-fit.js" "$HARD_BLOCK_MUTATION_SCRATCH/stop-goal-fit.orig.js" >/dev/null 2>&1; then
+  _pass "mutation-test cleanup: scripts/hooks/stop-goal-fit.js is restored byte-identical to its pre-mutation-test content"
+else
+  _fail "mutation-test cleanup REGRESSION: scripts/hooks/stop-goal-fit.js differs from its own pre-mutation-test content"
+fi
+
+if FLOW_AGENTS_GOAL_FIT_MODE=block FLOW_AGENTS_GOAL_FIT_MAX_BLOCKS=100000 \
+  node "$ROOT/scripts/hooks/stop-goal-fit.js" >"$TMPDIR_EVAL/hardblock-restore-recheck.out" 2>"$TMPDIR_EVAL/hardblock-restore-recheck.err" <<JSON
+{"hook_event_name":"Stop","cwd":"$AMBIG_TERMINAL_REPO"}
+JSON
+then
+  hardblock_restore_status=0
+else
+  hardblock_restore_status=$?
+fi
+if [[ "$hardblock_restore_status" -eq 2 ]]; then
+  _pass "mutation-test cleanup re-check: the restored real stop-goal-fit.js blocks the terminal ambiguous fixture again (guard genuinely back in effect, not just byte-restored)"
+else
+  _fail "mutation-test cleanup re-check REGRESSION: restored stop-goal-fit.js no longer blocks the terminal ambiguous fixture: exit=$hardblock_restore_status $(cat "$TMPDIR_EVAL/hardblock-restore-recheck.out" "$TMPDIR_EVAL/hardblock-restore-recheck.err")"
+fi
+
+
+# ─── Mutation test (#362 runBackstop ambiguous carve-out): temporarily disable the ──────────
+# `ambiguous = exitCode === 1 && isAmbiguousAbsenceCommand(commandText)` guard IN PLACE on
+# `scripts/hooks/stop-goal-fit.js` itself (backed up first, restored immediately after) —
+# `stop-goal-fit.js` requires its sibling `./lib/*.js` helpers via RELATIVE paths, so (unlike
+# workflow-sidecar.ts's standalone compiled bundle) a scratch copy in an unrelated tmpdir cannot
+# resolve those requires; the same constraint the reserved-prefix mutation test in
+# test_workflow_sidecar_writer.sh works around by mutating `build/src/cli/workflow-sidecar.js`
+# IN PLACE (backup + restore) rather than copying it elsewhere. Confirms the AC4 fixture above
+# now WRONGLY reports "caught false-completion" again (the eval "goes red" without the guard,
+# proving AC4 actually exercises it), then restores the original file byte-for-byte and
+# re-confirms AC4 passes again against the restored file — the mutated state exists on disk for
+# the shortest possible window (one synchronous node invocation) and is restored even on error
+# via the wrapping subshell's own control flow.
+#
+# ITERATION-2 fix item 5 (MEDIUM, code review): this in-place mutation of the LIVE, real
+# `scripts/hooks/stop-goal-fit.js` file (not a scratch copy) is SERIAL-RUNNER-SAFE ONLY. It
+# assumes no other process — a concurrently-running eval suite invocation, a Stop hook firing
+# from a real agent session in this same worktree, or a second `evals/run.sh` invocation — reads
+# or executes `scripts/hooks/stop-goal-fit.js` during the narrow window between the mutation
+# write below and its restore. Running this eval file concurrently with itself, or alongside any
+# other process that invokes the real Stop hook against this worktree, is UNSUPPORTED and can
+# produce a spurious pass/fail or (in the worst case, if the process is killed mid-window) leave
+# the real hook file mutated on disk. This eval MUST be run serially (the default for
+# `evals/run.sh` and the sweep commands documented in this repo's worker instructions), never
+# via a parallel/sharded test runner. `test_record_check.sh`'s build-artifact mutation pattern
+# (mutating a BUILD OUTPUT under `build/`, which is regenerated by `npm run build` and is not the
+# single live hook path every real session's Stop invokes) is the preferred idiom for a NEW
+# mutation test where the target is a build artifact rather than a directly-invoked hook script
+# with sibling-relative requires — prefer that pattern over this one when it is applicable.
+echo ""
+echo "--- mutation-test: #362 runBackstop ambiguous carve-out (neuter guard in place, confirm AC4 goes red, restore) ---"
+
+REAL_STOP_GOAL_FIT="$ROOT/scripts/hooks/stop-goal-fit.js"
+MUTATION_SCRATCH="$TMPDIR_EVAL/runbackstop-mutation-scratch"
+mkdir -p "$MUTATION_SCRATCH"
+cp "$REAL_STOP_GOAL_FIT" "$MUTATION_SCRATCH/stop-goal-fit.orig.js"
+
+node - "$REAL_STOP_GOAL_FIT" <<'NODEEOF' 2>"$TMPDIR_EVAL/mutation-patch.err"
+const fs = require('fs');
+const [, , file] = process.argv;
+let src = fs.readFileSync(file, 'utf8');
+const needle = "const ambiguous = exitCode === 1 && isAmbiguousAbsenceCommand(commandText);";
+if (!src.includes(needle)) {
+  process.stderr.write('mutation: runBackstop ambiguous-guard text not found — source pattern drifted, cannot mutation-test\n');
+  process.exit(1);
+}
+src = src.split(needle).join('const ambiguous = false; /* mutation-test: guard neutered */');
+fs.writeFileSync(file, src);
+NODEEOF
+
+if [[ -s "$TMPDIR_EVAL/mutation-patch.err" ]]; then
+  _fail "mutation-test setup failed (runBackstop ambiguous-guard source pattern did not match scripts/hooks/stop-goal-fit.js), restoring original unmodified: $(cat "$TMPDIR_EVAL/mutation-patch.err")"
+  cp "$MUTATION_SCRATCH/stop-goal-fit.orig.js" "$REAL_STOP_GOAL_FIT"
+elif ! node --check "$REAL_STOP_GOAL_FIT" 2>"$TMPDIR_EVAL/mutation-syntax.err"; then
+  _fail "mutation-test setup: mutated stop-goal-fit.js (ambiguous guard neutered) failed a syntax check, restoring original immediately: $(cat "$TMPDIR_EVAL/mutation-syntax.err")"
+  cp "$MUTATION_SCRATCH/stop-goal-fit.orig.js" "$REAL_STOP_GOAL_FIT"
+else
+  if node "$REAL_STOP_GOAL_FIT" >"$TMPDIR_EVAL/mutation-ac4.out" 2>"$TMPDIR_EVAL/mutation-ac4.err" <<JSON
+{"hook_event_name":"Stop","cwd":"$AC362_REPO"}
+JSON
+  then
+    mutation_ac4_status=0
+  else
+    mutation_ac4_status=$?
+  fi
+
+  # Restore the real file immediately after the single mutated invocation above, before
+  # evaluating the assertion, so the mutated state never persists past this one node call
+  # regardless of the assertion's outcome.
+  cp "$MUTATION_SCRATCH/stop-goal-fit.orig.js" "$REAL_STOP_GOAL_FIT"
+
+  if grep -q 'caught false-completion' "$TMPDIR_EVAL/mutation-ac4.err"; then
+    _pass "mutation-test: with the ambiguous guard neutered, the exact AC4 fixture WRONGLY reports 'caught false-completion' again (eval correctly goes red without the guard, proving AC4 exercises it)"
+  else
+    _fail "mutation-test: AC4 fixture still did NOT report 'caught false-completion' even with the ambiguous guard neutered — AC4 may not be exercising the intended guard: exit=$mutation_ac4_status $(cat "$TMPDIR_EVAL/mutation-ac4.out" "$TMPDIR_EVAL/mutation-ac4.err")"
+  fi
+fi
+
+# Restore-verification: confirm the real file is back to its pre-mutation-test byte-identical
+# state, and re-run the AC4 fixture once more against the restored file to prove the restored
+# guard is back in effect (classification: 'ambiguous', not the mutated 'fail').
+if diff -q "$REAL_STOP_GOAL_FIT" "$MUTATION_SCRATCH/stop-goal-fit.orig.js" >/dev/null 2>&1; then
+  _pass "mutation-test cleanup: scripts/hooks/stop-goal-fit.js is restored byte-identical to its pre-mutation-test content"
+else
+  _fail "mutation-test cleanup REGRESSION: scripts/hooks/stop-goal-fit.js differs from its own pre-mutation-test copy — the real file may have been left altered by this eval"
+fi
+
+if node "$REAL_STOP_GOAL_FIT" >"$TMPDIR_EVAL/mutation-restore-recheck.out" 2>"$TMPDIR_EVAL/mutation-restore-recheck.err" <<JSON
+{"hook_event_name":"Stop","cwd":"$AC362_REPO"}
+JSON
+then :; fi
+if ! grep -q 'caught false-completion' "$TMPDIR_EVAL/mutation-restore-recheck.err" && grep -qi 'ambiguous\|NOT_VERIFIED' "$TMPDIR_EVAL/mutation-restore-recheck.err"; then
+  _pass "mutation-test cleanup re-check: the restored real stop-goal-fit.js classifies the AC4 fixture as ambiguous again (guard is genuinely back in effect, not just byte-restored)"
+else
+  _fail "mutation-test cleanup re-check REGRESSION: restored stop-goal-fit.js no longer classifies the AC4 fixture as ambiguous: $(cat "$TMPDIR_EVAL/mutation-restore-recheck.out" "$TMPDIR_EVAL/mutation-restore-recheck.err")"
+fi
+
+
+# ─── #362: dialect preservation (BRE/ERE) — recorded command's regex dialect/flags survive ────
+# an unmodified backstop re-run verbatim ────────────────────────────────────────────────────────
+#
+# ac-dialect-preservation-required-not-yet-implemented: the recorded command's exact dialect/
+# flags (e.g. `grep -E`) must be preserved verbatim on every backstop re-run path. A `grep -E`
+# invocation recorded with an ERE-only construct (unescaped alternation `(foo|bar)`, which is a
+# literal-character grouping/pipe under BASIC regex, not a metacharacter) must still match under
+# ERE semantics when the backstop replays it -- proving the recorded string was NOT silently
+# re-run under BRE (which would treat `(foo|bar)` as the literal substring "(foo|bar)" and fail
+# to match a fixture that only contains "bar" on its own).
+echo ""
+echo "--- #362: dialect preservation (grep -E ERE alternation survives backstop replay verbatim) ---"
+
+# Direct unit-level pin: resolveTrustedCommand's `acceptance` source must hand back the
+# recorded command text byte-for-byte in argv[2] (never re-derived/re-quoted), and spawning
+# that argv directly (mirroring runBackstop's own spawnSync call) must produce a REAL ERE match
+# (exit 0) against a fixture that only matches under ERE semantics -- if the command were ever
+# silently re-run under BRE (e.g. via a re-joined/re-quoted argv.join(' ') instead of argv[2]
+# verbatim), `(foo|bar)` would be treated as a literal string and the match would wrongly fail.
+DIALECT_FIXTURE_DIR="$TMPDIR_EVAL/ac362-dialect-unit"
+mkdir -p "$DIALECT_FIXTURE_DIR"
+printf 'this line only contains bar, never the literal parenthesized alternation\n' > "$DIALECT_FIXTURE_DIR/haystack.txt"
+
+if node - "$ROOT/scripts/hooks/stop-goal-fit.js" "$DIALECT_FIXTURE_DIR/haystack.txt" <<'NODEEOF' 2>"$TMPDIR_EVAL/ac362-dialect-unit.err"
+const { spawnSync } = require('child_process');
+const { resolveTrustedCommand } = require(process.argv[2]);
+const haystack = process.argv[3];
+
+const check = { id: 'ere-alternation-check' };
+const acceptance = {
+  criteria: [
+    {
+      id: 'ere-alternation-check',
+      evidence_refs: [
+        { kind: 'command', excerpt: `grep -E '(foo|bar)' ${haystack}` },
+      ],
+    },
+  ],
+};
+
+const trusted = resolveTrustedCommand(process.cwd(), process.cwd(), check, acceptance);
+if (!trusted || trusted.malformed) {
+  console.error(`resolveTrustedCommand did not resolve a trusted command: ${JSON.stringify(trusted)}`);
+  process.exit(1);
+}
+if (trusted.argv.length !== 3 || trusted.argv[0] !== 'bash' || trusted.argv[1] !== '-lc') {
+  console.error(`unexpected argv shape: ${JSON.stringify(trusted.argv)}`);
+  process.exit(1);
+}
+// DIALECT-PRESERVATION INVARIANT check: argv[2] must be the recorded command text VERBATIM,
+// byte-for-byte, including its `-E` flag and unescaped `(foo|bar)` alternation -- never
+// re-derived, re-joined, or re-quoted.
+const expected = `grep -E '(foo|bar)' ${haystack}`;
+if (trusted.argv[2] !== expected) {
+  console.error(`argv[2] does not match the recorded command verbatim: got ${JSON.stringify(trusted.argv[2])}, expected ${JSON.stringify(expected)}`);
+  process.exit(1);
+}
+
+// Replay argv exactly as runBackstop does (spawnSync(argv[0], argv.slice(1))) -- this is the
+// REAL dialect-sensitive execution: bash -lc runs grep -E, which interprets `(foo|bar)` as an
+// ERE alternation and finds the match.
+const result = spawnSync(trusted.argv[0], trusted.argv.slice(1), { encoding: 'utf8' });
+if (result.status !== 0) {
+  console.error(`ERE alternation did NOT match under verbatim replay (exit ${result.status}) -- dialect was NOT preserved: stdout=${result.stdout} stderr=${result.stderr}`);
+  process.exit(1);
+}
+
+// Negative control: prove the fixture genuinely depends on ERE semantics -- running the SAME
+// pattern text under BASIC regex (grep without -E) must NOT match, since `(foo|bar)` is then a
+// literal substring the fixture does not contain. This demonstrates the invariant matters: a
+// silent BRE downgrade of this exact recorded command would flip the match from found to missed.
+const bre = spawnSync('bash', ['-lc', `grep '(foo|bar)' ${haystack}`], { encoding: 'utf8' });
+if (bre.status === 0) {
+  console.error('fixture unexpectedly matched under BASIC regex too -- negative control is not valid, fixture must be ERE-only');
+  process.exit(1);
+}
+NODEEOF
+then
+  _pass "ac-dialect-preservation: resolveTrustedCommand hands back the recorded 'grep -E' command verbatim (byte-for-byte), and replaying it produces a real ERE alternation match -- not silently reinterpreted as BRE"
+else
+  _fail "ac-dialect-preservation: dialect was NOT preserved verbatim through resolveTrustedCommand/replay: $(cat "$TMPDIR_EVAL/ac362-dialect-unit.err")"
+fi
+
+# End-to-end pin: the SAME ERE-alternation shape, recorded as an acceptance criterion's evidence
+# ref with a claimed pass and NO command-log entry (forcing the trusted backstop re-run path),
+# must be confirmed as a clean, deterministic pass -- no "caught false-completion" warning and no
+# "ambiguous"/NOT_VERIFIED warning for this check -- proving the end-to-end Stop-hook backstop
+# path (not just the unit-level resolveTrustedCommand/runBackstop pairing above) preserves the
+# recorded command's ERE dialect on replay.
+AC362_DIALECT_REPO="$TMPDIR_EVAL/ac362-dialect-e2e/repo"
+mkdir -p "$AC362_DIALECT_REPO/.kontourai/flow-agents/dialect-check-task"
+printf '# Test Repo\n' > "$AC362_DIALECT_REPO/AGENTS.md"
+
+# Fixture only matches under ERE semantics (see unit-level negative control above for why).
+printf 'this line only contains bar, never the literal parenthesized alternation\n' > "$AC362_DIALECT_REPO/haystack.txt"
+
+cat > "$AC362_DIALECT_REPO/.kontourai/flow-agents/dialect-check-task/dialect-check-task--deliver.md" <<'MARKDOWN'
+# Dialect check task
+
+branch: main
+worktree: main
+created: 2026-07-01
+status: executing
+type: deliver
+
+## Plan
+
+Task whose acceptance criterion is recorded as a `grep -E` command with an ERE-only
+alternation construct, to pin dialect preservation on backstop replay.
+MARKDOWN
+
+write_json_file "$AC362_DIALECT_REPO/.kontourai/flow-agents/dialect-check-task/state.json" <<'JSON'
+{
+  "schema_version": "1.0",
+  "task_slug": "dialect-check-task",
+  "status": "in_progress",
+  "phase": "verification",
+  "updated_at": "2026-07-01T00:00:00Z",
+  "next_action": {
+    "status": "in_progress",
+    "summary": "Verifying the ERE alternation pattern matches."
+  }
+}
+JSON
+
+write_json_file "$AC362_DIALECT_REPO/.kontourai/flow-agents/dialect-check-task/acceptance.json" <<JSON
+{
+  "schema_version": "1.0",
+  "task_slug": "dialect-check-task",
+  "criteria": [
+    {
+      "id": "ere-alternation-present",
+      "description": "The haystack contains foo or bar (ERE alternation).",
+      "status": "pass",
+      "evidence_refs": [
+        {
+          "kind": "command",
+          "excerpt": "grep -E '(foo|bar)' $AC362_DIALECT_REPO/haystack.txt",
+          "summary": "ERE alternation match (self-asserting presence check, recorded pass)."
+        }
+      ]
+    }
+  ],
+  "goal_fit": {"status": "pass", "summary": "ERE alternation match verified."}
+}
+JSON
+
+write_json_file "$AC362_DIALECT_REPO/.kontourai/flow-agents/dialect-check-task/evidence.json" <<JSON
+{
+  "schema_version": "1.0",
+  "task_slug": "dialect-check-task",
+  "verdict": "pass",
+  "checks": [
+    {
+      "id": "ere-alternation-present",
+      "kind": "command",
+      "status": "pass",
+      "command": "grep -E '(foo|bar)' $AC362_DIALECT_REPO/haystack.txt",
+      "summary": "Confirmed ERE alternation match."
+    }
+  ],
+  "not_verified_gaps": []
+}
+JSON
+
+# No command-log.jsonl -- forces captureCrossReference into the trusted backstop re-run path.
+
+if node "$ROOT/scripts/hooks/stop-goal-fit.js" >"$TMPDIR_EVAL/ac362-dialect-e2e.out" 2>"$TMPDIR_EVAL/ac362-dialect-e2e.err" <<JSON
+{"hook_event_name":"Stop","cwd":"$AC362_DIALECT_REPO"}
+JSON
+then
+  ac362_dialect_e2e_status=0
+else
+  ac362_dialect_e2e_status=$?
+fi
+
+if ! grep -qi 'caught false-completion\|ambiguous\|NOT_VERIFIED' "$TMPDIR_EVAL/ac362-dialect-e2e.err"; then
+  _pass "ac-dialect-preservation (end-to-end): the recorded 'grep -E' ERE-alternation evidence ref is confirmed a clean deterministic pass on backstop replay -- no caught-false-completion, no ambiguous/NOT_VERIFIED warning, proving the dialect was preserved through the full Stop-hook path"
+else
+  _fail "ac-dialect-preservation (end-to-end): backstop replay of the recorded 'grep -E' ERE-alternation command did NOT confirm a clean pass -- possible dialect drift (BRE reinterpretation would miss the match): exit=$ac362_dialect_e2e_status $(cat "$TMPDIR_EVAL/ac362-dialect-e2e.out" "$TMPDIR_EVAL/ac362-dialect-e2e.err")"
+fi
+
+# ─── Mutation test (iteration-2 fix item 3/LOW): dialect-preservation evals lacked the ────────
+# mutation-test wrapper every sibling #362 AC in this file has. Neuter `resolveTrustedCommand`'s
+# acceptance-branch replay (drop the recorded `-E` flag, forcing a silent BRE reinterpretation of
+# the ERE-only `(foo|bar)` alternation), confirm BOTH the unit-level and end-to-end dialect evals
+# above go RED, then restore byte-identical and re-confirm GREEN. Same in-place mutation idiom
+# (and the SAME serial-runner-only constraint documented above the #362 runBackstop mutation
+# test) as this file's other mutation tests: this is the live, real `scripts/hooks/
+# stop-goal-fit.js` (backed up first, restored immediately after), not a scratch copy elsewhere,
+# because the file requires its sibling `./lib/*.js` helpers via relative paths.
+echo ""
+echo "--- mutation-test: ac-dialect-preservation (drop the recorded -E flag in place, confirm both dialect evals go red, restore) ---"
+
+DIALECT_MUTATION_SCRATCH="$TMPDIR_EVAL/dialect-mutation-scratch"
+mkdir -p "$DIALECT_MUTATION_SCRATCH"
+cp "$ROOT/scripts/hooks/stop-goal-fit.js" "$DIALECT_MUTATION_SCRATCH/stop-goal-fit.orig.js"
+
+node - "$ROOT/scripts/hooks/stop-goal-fit.js" <<'NODEEOF' 2>"$TMPDIR_EVAL/dialect-mutation-patch.err"
+const fs = require('fs');
+const file = process.argv[2];
+let src = fs.readFileSync(file, 'utf8');
+const needle = "return { argv: ['bash', '-lc', fromAcceptance], cwd: root, source: 'acceptance' };";
+if (!src.includes(needle)) {
+  process.stderr.write('mutation: resolveTrustedCommand acceptance-branch argv construction not found — source pattern drifted, cannot mutation-test\n');
+  process.exit(1);
+}
+// Silently drop the recorded '-E ' flag before replay -- exactly the "silent BRE downgrade"
+// class of regression the DIALECT-PRESERVATION INVARIANT exists to prevent (e.g. a future
+// argv.join(' ')/re-derivation refactor that loses a flag along the way).
+const mutated = "return { argv: ['bash', '-lc', fromAcceptance.replace(/-E /, '')], cwd: root, source: 'acceptance' };";
+src = src.split(needle).join(mutated);
+fs.writeFileSync(file, src);
+NODEEOF
+
+if [[ -s "$TMPDIR_EVAL/dialect-mutation-patch.err" ]]; then
+  _fail "mutation-test setup failed (resolveTrustedCommand acceptance-branch source pattern did not match scripts/hooks/stop-goal-fit.js), restoring original unmodified: $(cat "$TMPDIR_EVAL/dialect-mutation-patch.err")"
+  cp "$DIALECT_MUTATION_SCRATCH/stop-goal-fit.orig.js" "$ROOT/scripts/hooks/stop-goal-fit.js"
+elif ! node --check "$ROOT/scripts/hooks/stop-goal-fit.js" 2>"$TMPDIR_EVAL/dialect-mutation-syntax.err"; then
+  _fail "mutation-test setup: mutated stop-goal-fit.js (recorded -E flag dropped) failed a syntax check, restoring original immediately: $(cat "$TMPDIR_EVAL/dialect-mutation-syntax.err")"
+  cp "$DIALECT_MUTATION_SCRATCH/stop-goal-fit.orig.js" "$ROOT/scripts/hooks/stop-goal-fit.js"
+else
+  # Unit-level: argv[2] must now DIFFER from the recorded command (the -E flag was silently
+  # dropped), and replaying the mutated argv must FAIL the ERE alternation match.
+  if node - "$ROOT/scripts/hooks/stop-goal-fit.js" "$DIALECT_FIXTURE_DIR/haystack.txt" >"$TMPDIR_EVAL/dialect-mutation-unit.out" 2>"$TMPDIR_EVAL/dialect-mutation-unit.err" <<'NODEEOF2'
+const { spawnSync } = require('child_process');
+const { resolveTrustedCommand } = require(process.argv[2]);
+const haystack = process.argv[3];
+const check = { id: 'ere-alternation-check' };
+const acceptance = {
+  criteria: [
+    { id: 'ere-alternation-check', evidence_refs: [{ kind: 'command', excerpt: `grep -E '(foo|bar)' ${haystack}` }] },
+  ],
+};
+const trusted = resolveTrustedCommand(process.cwd(), process.cwd(), check, acceptance);
+const expected = `grep -E '(foo|bar)' ${haystack}`;
+if (trusted.argv[2] === expected) {
+  console.error('mutation had no effect: argv[2] still matches the recorded command verbatim');
+  process.exit(1);
+}
+const result = spawnSync(trusted.argv[0], trusted.argv.slice(1), { encoding: 'utf8' });
+if (result.status === 0) {
+  console.error('mutation had no effect: the mutated replay still matched (expected a miss under BRE)');
+  process.exit(1);
+}
+NODEEOF2
+  then
+    dialect_mutation_unit_status=0
+  else
+    dialect_mutation_unit_status=$?
+  fi
+
+  # End-to-end: the SAME dialect e2e fixture (AC362_DIALECT_REPO) must now surface an
+  # ambiguous/NOT_VERIFIED warning (the -E flag drop makes the replay genuinely miss the
+  # ERE-only fixture, which isAmbiguousAbsenceCommand still classifies as a bare grep -- exit 1
+  # on a presence check is ambiguous, not silently a clean pass).
+  if node "$ROOT/scripts/hooks/stop-goal-fit.js" >"$TMPDIR_EVAL/dialect-mutation-e2e.out" 2>"$TMPDIR_EVAL/dialect-mutation-e2e.err" <<JSON
+{"hook_event_name":"Stop","cwd":"$AC362_DIALECT_REPO"}
+JSON
+  then :; fi
+
+  cp "$DIALECT_MUTATION_SCRATCH/stop-goal-fit.orig.js" "$ROOT/scripts/hooks/stop-goal-fit.js"
+
+  if [[ "$dialect_mutation_unit_status" -eq 0 ]]; then
+    _pass "mutation-test: unit-level dialect eval goes RED as expected with the recorded -E flag silently dropped (argv no longer verbatim, and the mutated replay misses the ERE-only fixture)"
+  else
+    _fail "mutation-test: unit-level dialect eval did NOT go red with the -E flag dropped -- it may not be exercising the DIALECT-PRESERVATION INVARIANT: $(cat "$TMPDIR_EVAL/dialect-mutation-unit.out" "$TMPDIR_EVAL/dialect-mutation-unit.err")"
+  fi
+  if grep -qi 'ambiguous\|NOT_VERIFIED\|caught false-completion' "$TMPDIR_EVAL/dialect-mutation-e2e.err"; then
+    _pass "mutation-test: end-to-end dialect eval goes RED as expected (an ambiguous/NOT_VERIFIED warning appears) with the recorded -E flag silently dropped"
+  else
+    _fail "mutation-test: end-to-end dialect eval did NOT go red with the -E flag dropped -- it may not be exercising the DIALECT-PRESERVATION INVARIANT: $(cat "$TMPDIR_EVAL/dialect-mutation-e2e.out" "$TMPDIR_EVAL/dialect-mutation-e2e.err")"
+  fi
+fi
+
+if diff -q "$ROOT/scripts/hooks/stop-goal-fit.js" "$DIALECT_MUTATION_SCRATCH/stop-goal-fit.orig.js" >/dev/null 2>&1; then
+  _pass "mutation-test cleanup: scripts/hooks/stop-goal-fit.js is restored byte-identical to its pre-mutation-test content"
+else
+  _fail "mutation-test cleanup REGRESSION: scripts/hooks/stop-goal-fit.js differs from its own pre-mutation-test content"
+fi
+
+# Re-confirm GREEN: both dialect evals pass again against the restored file.
+if node - "$ROOT/scripts/hooks/stop-goal-fit.js" "$DIALECT_FIXTURE_DIR/haystack.txt" >"$TMPDIR_EVAL/dialect-restore-unit.out" 2>"$TMPDIR_EVAL/dialect-restore-unit.err" <<'NODEEOF3'
+const { spawnSync } = require('child_process');
+const { resolveTrustedCommand } = require(process.argv[2]);
+const haystack = process.argv[3];
+const check = { id: 'ere-alternation-check' };
+const acceptance = {
+  criteria: [
+    { id: 'ere-alternation-check', evidence_refs: [{ kind: 'command', excerpt: `grep -E '(foo|bar)' ${haystack}` }] },
+  ],
+};
+const trusted = resolveTrustedCommand(process.cwd(), process.cwd(), check, acceptance);
+const expected = `grep -E '(foo|bar)' ${haystack}`;
+if (trusted.argv[2] !== expected) { console.error('argv[2] not verbatim after restore'); process.exit(1); }
+const result = spawnSync(trusted.argv[0], trusted.argv.slice(1), { encoding: 'utf8' });
+if (result.status !== 0) { console.error('ERE alternation did not match after restore'); process.exit(1); }
+NODEEOF3
+then
+  _pass "mutation-test cleanup re-check: the restored real stop-goal-fit.js preserves the dialect again (unit-level, not just byte-restored)"
+else
+  _fail "mutation-test cleanup re-check REGRESSION: restored stop-goal-fit.js no longer preserves the recorded dialect: $(cat "$TMPDIR_EVAL/dialect-restore-unit.out" "$TMPDIR_EVAL/dialect-restore-unit.err")"
+fi
+
+if node "$ROOT/scripts/hooks/stop-goal-fit.js" >"$TMPDIR_EVAL/dialect-restore-e2e.out" 2>"$TMPDIR_EVAL/dialect-restore-e2e.err" <<JSON
+{"hook_event_name":"Stop","cwd":"$AC362_DIALECT_REPO"}
+JSON
+then :; fi
+if ! grep -qi 'ambiguous\|NOT_VERIFIED\|caught false-completion' "$TMPDIR_EVAL/dialect-restore-e2e.err"; then
+  _pass "mutation-test cleanup re-check: the restored real stop-goal-fit.js confirms a clean end-to-end pass again for the dialect fixture"
+else
+  _fail "mutation-test cleanup re-check REGRESSION: restored stop-goal-fit.js no longer confirms a clean end-to-end pass for the dialect fixture: $(cat "$TMPDIR_EVAL/dialect-restore-e2e.out" "$TMPDIR_EVAL/dialect-restore-e2e.err")"
+fi
+
+
 if [[ "$errors" -eq 0 ]]; then
   echo "Goal Fit hook integration passed."
   exit 0