@lqc123qwe/car-runtime 1.15.2 → 1.17.0

package/README.md

@@ -286,7 +286,8 @@ node --experimental-transform-types --test test/*.spec.ts
 
 ## 状态
 
-- **版本主线**：S1-S4 48/48 ｜ M2 89/89（v0.2.0）｜ M3 127/127（v0.3.0）｜ M4 139/139（**1.0.0-rc.1 已发布**）｜ M5 156/156（DEC-4 预埋项转正）｜ M6 179/179（2026-09-15 收口）｜ M7 全量 195（192 PASS + 3 能力门控 skip，2026-09-19 收口）｜ **M5-S28 装载签名门 全量 204（201 PASS + 3 skip，2026-09-26）** ｜ **M8 运行时底座 全量 231（228 PASS + 3 skip，2026-09-26 收口，§3.2 八模块全部收口）** ｜ **1.1 签名收尾最小集 全量 249（246 PASS + 3 skip，2026-09-27 收口，1.1.0 已发布，enforce 翻转准备就绪）** ｜ **1.2 会话/遥测小项 全量 263（260 PASS + 3 skip，2026-09-27 收口，1.2.0 已发布）** ｜ **1.3 发布资产自动化 全量 270（267 PASS + 3 skip，2026-09-27 收口，1.3.0 已发布，全链零人工拖拽兑现）** ｜ **1.4 真实模型接入 全量 282（279 PASS + 3 skip，2026-09-27 收口，1.4.0 已发布）** ｜ **1.5 provider 扩展+远程 MCP+配置完整形态 全量 300（297 PASS + 3 skip，2026-09-28 收口，1.5.0 已发布）** ｜ **1.6 宿主工具面+投影收敛+jiti 载体 全量 318（315 PASS + 3 skip，2026-09-28 收口，1.6.0 已发布）** ｜ **1.7 OTLP span 语义收口+metrics 时序修正+mcp-serve span 面 全量 328（325 PASS + 3 skip，2026-09-28 收口，1.7.0 已发布）** ｜ **1.8 W3C traceparent 跨进程传播+LLM 出站通道修复 全量 335（332 PASS + 3 skip，2026-09-29 收口，1.8.0 已发布）** ｜ **1.9 远程 MCP traceparent 传播（HTTP 头通道） 全量 339（336 PASS + 3 skip，2026-09-29 收口，1.9.0 已发布）** ｜ **1.10 KernelSeam 公开导出面+库构建产物 全量 341（338 PASS + 3 skip，2026-09-29 收口，1.10.0 已发布）** ｜ **1.11 seam authz 导出+usage 事件计量采集 全量 355（352 PASS + 3 skip，2026-10-07 收口，1.11.0 已发布）** ｜ **1.12 seam MCP/PTC 真桥导出面+jiti epoch 面确认 全量 363（360 PASS + 3 skip，2026-10-07 收口，1.12.0 已发布）** ｜ **1.13 桌面 S3 治理面（K-FS-1/2/3+K-SC-1 authorizeAll/decideByRule/fs-read·fs-delete 能力 + seam 出面 redact/loadSessionLog/exportForensicsBundle；恢复面 K-S3-2 零登记确认——fromEvents 自 M5 在产） 全量 374（371 PASS + 3 skip，2026-10-11 收口，1.13.0 已发布）** ｜ **1.14 模型参数/压缩/分段/模型池/PluginManager 五候选（K-MP-1 reasoning 透传 + K-MP-2 压缩面 append-only context/compact + K-MP-2b 分段计量 + K-POOL-1 模型池 routing/decide 落链 + K-S4-1 seam 出面装载报告面；D-43 裁决登记 strict 期限不引入 sigstore——engines 硬不兼容见评估报告） 全量 419（416 PASS + 3 skip，2026-10-18 收口，1.14.0 已发布）** ｜ **1.14.1 B2 前置消费面（ChatStepOptions.reasoning 透传 + shouldCompact/applyCompaction + assembleModelPool/probePoolMember 出面，seam 35→39 符号） 全量 423（420 PASS + 3 skip，2026-10-18，1.14.1 已发布）** ｜ **1.15 白盒记忆+引导消息双候选（K-MEM-1 记忆 CRUD 落链 + 链即版本库 rollback + 注入装载预算门控 + K-STEER-1 投影隔离 + pendingSteerTurns 排队扫描；seam 39→42 符号） 全量 439（438 PASS + 1 skip，2026-10-19 收口，1.15.0 已发布）**
+- **版本主线**：S1-S4 48/48 ｜ M2 89/89（v0.2.0）｜ M3 127/127（v0.3.0）｜ M4 139/139（**1.0.0-rc.1 已发布**）｜ M5 156/156（DEC-4 预埋项转正）｜ M6 179/179（2026-09-15 收口）｜ M7 全量 195（192 PASS + 3 能力门控 skip，2026-09-19 收口）｜ **M5-S28 装载签名门 全量 204（201 PASS + 3 skip，2026-09-26）** ｜ **M8 运行时底座 全量 231（228 PASS + 3 skip，2026-09-26 收口，§3.2 八模块全部收口）** ｜ **1.1 签名收尾最小集 全量 249（246 PASS + 3 skip，2026-09-27 收口，1.1.0 已发布，enforce 翻转准备就绪）** ｜ **1.2 会话/遥测小项 全量 263（260 PASS + 3 skip，2026-09-27 收口，1.2.0 已发布）** ｜ **1.3 发布资产自动化 全量 270（267 PASS + 3 skip，2026-09-27 收口，1.3.0 已发布，全链零人工拖拽兑现）** ｜ **1.4 真实模型接入 全量 282（279 PASS + 3 skip，2026-09-27 收口，1.4.0 已发布）** ｜ **1.5 provider 扩展+远程 MCP+配置完整形态 全量 300（297 PASS + 3 skip，2026-09-28 收口，1.5.0 已发布）** ｜ **1.6 宿主工具面+投影收敛+jiti 载体 全量 318（315 PASS + 3 skip，2026-09-28 收口，1.6.0 已发布）** ｜ **1.7 OTLP span 语义收口+metrics 时序修正+mcp-serve span 面 全量 328（325 PASS + 3 skip，2026-09-28 收口，1.7.0 已发布）** ｜ **1.8 W3C traceparent 跨进程传播+LLM 出站通道修复 全量 335（332 PASS + 3 skip，2026-09-29 收口，1.8.0 已发布）** ｜ **1.9 远程 MCP traceparent 传播（HTTP 头通道） 全量 339（336 PASS + 3 skip，2026-09-29 收口，1.9.0 已发布）** ｜ **1.10 KernelSeam 公开导出面+库构建产物 全量 341（338 PASS + 3 skip，2026-09-29 收口，1.10.0 已发布）** ｜ **1.11 seam authz 导出+usage 事件计量采集 全量 355（352 PASS + 3 skip，2026-10-07 收口，1.11.0 已发布）** ｜ **1.12 seam MCP/PTC 真桥导出面+jiti epoch 面确认 全量 363（360 PASS + 3 skip，2026-10-07 收口，1.12.0 已发布）** ｜ **1.13 桌面 S3 治理面（K-FS-1/2/3+K-SC-1 authorizeAll/decideByRule/fs-read·fs-delete 能力 + seam 出面 redact/loadSessionLog/exportForensicsBundle；恢复面 K-S3-2 零登记确认——fromEvents 自 M5 在产） 全量 374（371 PASS + 3 skip，2026-10-11 收口，1.13.0 已发布）** ｜ **1.14 模型参数/压缩/分段/模型池/PluginManager 五候选（K-MP-1 reasoning 透传 + K-MP-2 压缩面 append-only context/compact + K-MP-2b 分段计量 + K-POOL-1 模型池 routing/decide 落链 + K-S4-1 seam 出面装载报告面；D-43 裁决登记 strict 期限不引入 sigstore——engines 硬不兼容见评估报告） 全量 419（416 PASS + 3 skip，2026-10-18 收口，1.14.0 已发布）** ｜ **1.14.1 B2 前置消费面（ChatStepOptions.reasoning 透传 + shouldCompact/applyCompaction + assembleModelPool/probePoolMember 出面，seam 35→39 符号） 全量 423（420 PASS + 3 skip，2026-10-18，1.14.1 已发布）** ｜ **1.15 白盒记忆+引导消息双候选（K-MEM-1 记忆 CRUD 落链 + 链即版本库 rollback + 注入装载预算门控 + K-STEER-1 投影隔离 + pendingSteerTurns 排队扫描；seam 39→42 符号） 全量 439（438 PASS + 1 skip，2026-10-19 收口，1.15.0 已发布）** ｜ **1.16 子 Agent config schema（D-K2-2：llm.subagent 三键 model/maxConcurrent/maxCumulative 嵌套 strict zod——compaction 先例；空对象拒禁静默 no-op + 未登记键 CAR-E-CONFIG 带路径；SubagentConfig 类型面、运行时符号 43 零加法；D-1 KEY_SPACES 误写 llm.modelPool.* 勘误闭环） 全量 446（443 PASS + 3 skip，2026-10-24 收口，1.16.0 已发布）**
+- **1.16.0 已发布（2026-10-24，K3 批——子 Agent config schema，D-K2-2 触发）**：npm latest → 1.16.0 + SLSA provenance 在案。Release `1.16.0`（id 422584868，target_commitish = `c8f6476` 完整 SHA）→ j16 run 40074395764 全 13 步 success（五件套上传齐：tgz + sig.bundle + SHA256SUMS + sbom + release-audit）→ ci success。post-publish 对拍：registry 包 src 面 53 文件与 tag 树逐字节一致（common 55 文件全同，含 package.json/README）；registry dist/seam.js 43 运行时符号零 subagent 面 + `llm.subagent.model` 实解析生效（本地 dist 探针）；本地 release-pipeline 预演 11 PASS / 2 DRY-RUN / 0 FAIL（干净 env——会话凭据 env 残留会使内嵌全量假红，既知纪律）。s58 5/5 + 全量 446（443 pass / 0 fail / 3 skip zstd 能力门控）。桌面消费批 K3-C 已随批落地（car-desktop `ec5d356`：SubagentManager 三键消费 + 池/端点压过口径 + k2 spec 13/13 + SMOKE seam 1.16.0）。
 - **1.15 状态（白盒记忆 + 引导消息双候选，桌面 v0.2-B3 批）**：S1 K-MEM-1（`be08c3e`）+ S2 K-STEER-1（`2f1a466`）+ S3 seam 出面（39→42 运行时符号：+MemoryStore/+loadMemoryForInjection/+pendingSteerTurns + 5 类型；负面清单：存储引擎内部件/注入落链执行器/消费调度器不出面）；dist 重建 s44 检查绿；规划与执行注记：`car-docs/10-内核v1/1.15-迭代规划.md`（D-46/D-47/D-48）。
 - **1.14.0 正式发布（2026-10-18，桌面 v0.2-B1 批）**：npm `@lqc123qwe/car-runtime@1.14.0` 在架——**dist-tags latest → 1.14.0 + SLSA provenance 在案**（npm transparency log 3308759260）。Release `1.14.0`（id 416323415，target_commitish=完整 SHA `92a35904c5179a99cdb69d82542953f82fb920ba`；main 推送**首次直连通道**——90c653c→92a3590 共 13 commits，WorkBuddy 沙箱代理 502 根因落档后直连常态化，Git Data API 复刻通道退役为应急预案）→ **j16 run 全 13 步 success**（cosign keyless OIDC+Rekor：tgz bundle logIndex 3308757191）→ **post-publish REMOTE_CHECK 13 PASS / 0 DRY-RUN / 0 FAIL**（G-09 npm 在架 latest + SLSA provenance ✓ / G-10 Release 五件套齐备 / G-04 audit 0）；外部等价检查：Release 实下载件 SHA256 MATCH（cb43ec0b9b1f7ad4…）+ cosign verify-blob **Verified OK**（Fulcio + Rekor tlog）+ registry tarball ↔ tag 树 src 面逐字节一致（51 文件）+ dist 面语义等价（去引号逐字节一致——CI `npx -y -p typescript` 未钉版引号发射差异，登记非偏差）+ dist/seam.js 35 符号在库 ✓。seam 32→35 运行时符号（+8 类型）。
 - **1.14.1 已发布（2026-10-18，B2 前置消费面，`cdb28d0`）**：npm latest → 1.14.1——ChatStepOptions.reasoning 透传（K-MP-1 消费面：reasoning 仅经直接 adapter.chat 在 1.14.0 不可达，off/缺席 = 字节面零痕迹）+ seam 出面 shouldCompact/applyCompaction + CompactionConfig（K-MP-2 行为 API：自动挂载点在宿主装配层，立即压缩 API 独立可用，append-only 红线随本面）+ assembleModelPool/probePoolMember + PoolMember/RoutingDecision 类型（K-POOL-1 池设置 UI + doctor 端点健康消费面）；s54 4/4；seam 35→39 符号；桌面 B2 消费实证（v0.2-S5 终验 12/12 PASS）。

package/dist/SHA256SUMS

@@ -1 +1 @@
-e0800ec15d94c8b4e6410a98642f4dc703c2335fa85cf75436003ccc26a2d327  car-runtime-1.15.2.tgz
+c41096564679afc091d41182a3ddddd4970e79b6c4022fa46d5363aad4d2becd  car-runtime-1.17.0.tgz

package/dist/car-runtime-1.17.0.tgz.sig.bundle

@@ -0,0 +1 @@
+{"base64Signature":"MEUCIGgexNsJf84aA4UdxElf74Okk3NjA/df7MjypGaQeOnwAiEAu6ME/UhRd96P7cGfvMoZRra9khCag//m4FRvCbfb3SY=","cert":"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","rekorBundle":{"SignedEntryTimestamp":"MEUCIBRv/i7GyGNRzCBGRdS2TE1uopY0+xqxl6topqmnyYZEAiEA++PwUNO1URlr7gcj6bdwPwrcOxbXLNKdnn1t6qleiPg=","Payload":{"body":"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","integratedTime":1792830639,"logIndex":3438526446,"logID":"c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d"}}}

package/dist/cli.js

@@ -39,6 +39,8 @@ const HELP = `用法: car <command> [args]
                                     装配并运行插件（快速上手流；装载前签名门 warn 缺省）
                                     真路径：--prompt <text> + --base-url/--model（或 llm.* 配置）；
                                     --adapter-id anthropic = Messages API（凭据 ANTHROPIC_API_KEY）；
+                                    --no-prompt-cache = 关断 anthropic 稳定前缀缓存断点（D-48；
+                                    等价 env CAR_LLM_PROMPT_CACHE=off，A/B 与回退通道）；
                                     --demo = stub 演示流
   reload <file|dir> [--sig-enforce] [--config <path>]
                                     热重载插件并打印六阶段加载报告（含 verify 签名门）
@@ -63,8 +65,9 @@ const HELP = `用法: car <command> [args]
 CAR_UNSIGNED_ALLOW=1 显式声明豁免（warn 缺签路径计数 confirmed=yes，横幅保留）
 配置文件通道（1.5 起双载体）：cwd car.config.ts（export default {…}；发现序 ts > json）或
 car.config.json 或 --config <path>；键位 sandbox.unsigned.allow / sandbox.sig.enforce /
-sandbox.sig.trustRoot / llm.* / llm.modelPool.*（多端点 fallback：endpoints id/baseUrl/model/
-adapterId/keyEnv/priority/weight/maxTokens + probe + maxAttempts；路由决策落链）/ mcp.servers.*
+sandbox.sig.trustRoot / llm.* / modelPool.*（多端点 fallback：endpoints id/baseUrl/model/
+adapterId/keyEnv/priority/weight/maxTokens + probe + maxAttempts；路由决策落链）/ llm.subagent.*
+（子 Agent：model 独立锚点 / maxConcurrent / maxCumulative 护栏上限）/ mcp.servers.*
 （stdio: command/args/env；远程: url/headers，\${ENV_VAR} 引用注入凭据）；优先级 flag > env > 配置 > 缺省；未知键 fail-visible`;
 // 进程内热重载会话（ReloadManager 持有 epoch 与实例注册表；同进程连续 reload 语义完整）
 let reloadMgrPromise;
@@ -216,6 +219,10 @@ async function main() {
                 const cfgBaseUrl = llm.baseUrl;
                 const cfgModel = llm.model;
                 let modelName = cfgModel ?? '';
+                // 1.17-K4（D-48 P1 / V1-A）：提示缓存断点关断 flag——flag > env（置 env 后适配器内部决策；
+                // 池/单端点两分支通用，须先于适配器创建）
+                if (rest.includes('--no-prompt-cache'))
+                    process.env.CAR_LLM_PROMPT_CACHE = 'off';
                 const credService = new CredentialService();
                 const core = new RuntimeCore(credService);
                 core.bindContext(ctx);
@@ -244,7 +251,7 @@ async function main() {
                         console.error('CAR-E-LLM-CONFIG: 真实模型路径需要 baseUrl + model——');
                         console.error('  配置：car.config.ts（export default）或 car.config.json {"llm":{"baseUrl":"https://…","model":"…"}} / env CAR_LLM_BASE_URL+CAR_LLM_MODEL / flag --base-url --model');
                         console.error('  anthropic：llm.adapterId "anthropic"（或 --adapter-id anthropic）+ baseUrl https://api.anthropic.com；凭据 ANTHROPIC_API_KEY');
-                        console.error('  模型池：llm.modelPool.endpoints（多端点 fallback + health 预检；凭据 keyEnv 引用；路由决策落链）');
+                        console.error('  模型池：modelPool.endpoints（多端点 fallback + health 预检；凭据 keyEnv 引用；路由决策落链）');
                         console.error('  凭据：OPENAI_API_KEY / ANTHROPIC_API_KEY（env fallback 需 CAR_ALLOW_ENV_CREDENTIALS=1 或 llm.allowEnvFallback）或 keychain；诊断：car doctor');
                         return 2;
                     }

package/dist/load/config.d.ts

@@ -21,6 +21,17 @@ export interface LlmConfig {
     allowEnvFallback?: boolean;
     /** 1.14-S2（K-MP-2 / D-40）：历史压缩策略（阈值自动触发判定入参；立即压缩 API 独立可用） */
     compaction?: CompactionConfig;
+    /** 1.16-K3（D-K2-2）：子 Agent 配置（缺省 = 继承父会话模型锚点 Q-A2 + 宿主护栏常量 Q-A3） */
+    subagent?: SubagentConfig;
+}
+/** 1.16-K3（D-K2-2）：子 Agent 配置面——宿主编排消费（内核自身不装配编排；schema 只登记键位） */
+export interface SubagentConfig {
+    /** 独立子模型锚点（缺省 = 继承父会话现值；modelPool 激活时被池压过——与 llm.model 同口径） */
+    model?: string;
+    /** 并发子 Agent 上限（正整数；缺省 = 宿主常量 3，Q-A3） */
+    maxConcurrent?: number;
+    /** 单父会话累计派生上限（正整数；缺省 = 宿主常量 10，Q-A3） */
+    maxCumulative?: number;
 }
 /** 1.14-S4（K-POOL-1 / D-42）：模型池端点登记（多端点 fallback 候选；凭据仅收 keyEnv 引用） */
 export interface ModelPoolEndpointSpec {

package/dist/load/config.js

@@ -133,6 +133,18 @@ const rawSchema = z.object({
             protectLastTurns: z.number({ invalid_type_error: '必须为正整数', required_error: '必须为正整数' })
                 .refine(v => Number.isInteger(v) && v > 0, { message: '必须为正整数' }).optional(),
         }).strict().optional(),
+        // 1.16-K3（D-K2-2）：子 Agent 配置（model 独立锚点 + 护栏上限；空对象无意义显式拒——禁静默 no-op）
+        subagent: z.object({
+            model: nonEmptyTrimmed().optional(),
+            maxConcurrent: z.number({ invalid_type_error: '必须为正整数', required_error: '必须为正整数' })
+                .refine(v => Number.isFinite(v) && Number.isInteger(v) && v > 0, { message: '必须为正整数' })
+                .optional(),
+            maxCumulative: z.number({ invalid_type_error: '必须为正整数', required_error: '必须为正整数' })
+                .refine(v => Number.isFinite(v) && Number.isInteger(v) && v > 0, { message: '必须为正整数' })
+                .optional(),
+        }).strict()
+            .refine(v => Object.keys(v).length > 0, { message: '至少登记一个键（model/maxConcurrent/maxCumulative；无子 Agent 配置需求请移除 llm.subagent 键，行为与 1.15.2 一致）' })
+            .optional(),
     }).strict().optional(),
     // 1.14-S4（K-POOL-1 / D-42）：模型池登记（多端点 fallback + health + routing/decide 落链）
     modelPool: modelPoolSchema.optional(),
@@ -140,8 +152,8 @@ const rawSchema = z.object({
         servers: z.record(z.string(), mcpServerSchema, { invalid_type_error: '必须为对象（serverId → 启动规格）' }),
     }).strict().optional(),
 }, { invalid_type_error: '配置顶层必须为 JSON 对象' }).strict();
-/** 未登记键提示（渲染层拼 path）——与系统设计键位空间同步 */
-const KEY_SPACES = '登记键位：sandbox.* / llm.* / llm.modelPool.* / mcp.servers.*';
+/** 未登记键提示（渲染层拼 path）——与系统设计键位空间同步；D-1 勘误：modelPool 为顶层键（非 llm.modelPool） */
+const KEY_SPACES = '登记键位：sandbox.* / llm.* / modelPool.* / llm.subagent.* / mcp.servers.*';
 /** zod issue → CAR-E-CONFIG 渲染（首个 issue；unrecognized_keys 按键路径展开） */
 function renderIssue(error) {
     const iss = error.issues[0];
@@ -194,6 +206,16 @@ function parseCarConfig(raw) {
                 cp.protectLastTurns = d.llm.compaction.protectLastTurns;
             llm.compaction = cp;
         }
+        if (d.llm.subagent) {
+            const sg = {};
+            if (d.llm.subagent.model !== undefined)
+                sg.model = d.llm.subagent.model;
+            if (d.llm.subagent.maxConcurrent !== undefined)
+                sg.maxConcurrent = d.llm.subagent.maxConcurrent;
+            if (d.llm.subagent.maxCumulative !== undefined)
+                sg.maxCumulative = d.llm.subagent.maxCumulative;
+            llm.subagent = sg;
+        }
         out.llm = llm;
     }
     if (d.mcp) {

package/dist/loop/stop.d.ts

@@ -62,8 +62,19 @@ export interface TurnPreset {
         concludesTurn?: 'any' | 'all';
         terminate?: 'any' | 'all';
     };
-    /** F13：授权拒绝即收口 blocked（默认 false = 模型继续调整） */
+    /** F13：授权拒绝即收口 blocked（默认 false = 模型继续调整）；1.17-K4（V2-a）缺省随档位收敛——readonly 恒 true（显式传参可覆盖） */
     blockOnDeny?: boolean;
+    /**
+     * 1.17-K4（D-50 / G8）：拒绝累计熔断——同 turn denies 累计 ≥ N 即收口 blocked（gate:'denyBreaker'）。
+     * 缺省 3（预防性闸门：真实样本从未超过 1 次/turn——设计 §10.4-3 诚实定位）；0 = 关。
+     */
+    denyBreaker?: number;
+    /**
+     * 1.17-K4（D-50 / G9）：重复失败熔断——失败签名（tool + 归一化错误串）同 turn 连续 ≥ N 后，
+     * 下一次同签名不再派发（成对补记 no-dispatch 事件）并收口 blocked（gate:'repeatFailureBreaker'）。
+     * 异签名放行（允许探索，禁撞墙）；成功派发重置连击。缺省 2；0 = 关。
+     */
+    repeatFailureBreaker?: number;
 }
 export interface TurnResult {
     reason: TurnEndReason;

package/dist/loop/stop.js

@@ -49,12 +49,37 @@ export async function runTurn(opts) {
         const usage = turnUsageFrom(log, turnId);
         return log.append('runtime', 'turnEnd', turnId, null, { ...meta, ...(usage ? { usage } : {}) });
     };
+    // 1.17-K4（D-50 / V2-a）：blockOnDeny 缺省随档位收敛——readonly 恒 true（拒绝即收口，禁在
+    // 错误理解模式的路上烧 token；「看一眼再决定」应切 confirm——三档设计本义）；confirm/full
+    // 缺省 false 不变；显式传参可覆盖任何档位
+    const blockOnDeny = preset.blockOnDeny ?? preset.mode === 'readonly';
+    // 1.17-K4（D-50）：G8/G9 熔断阈值（缺省 3/2；0 = 关——A/B 与回退通道）
+    const denyBreaker = preset.denyBreaker ?? 3;
+    const repeatFailureBreaker = preset.repeatFailureBreaker ?? 2;
+    let totalDenies = 0;
+    // G9 失败签名连击（turn 级）：成功派发重置；授权拒绝不重置（拒绝 ≠ 探索进展）
+    let lastSignature = null;
+    let lastFailureTool = null;
+    let signatureStreak = 0;
+    /** 失败签名 = tool + 归一化错误串（去空白/时间戳/长 hex id、截断 200——确定性好比对） */
+    const failureSignature = (tool, err) => (tool + ':' + err.replace(/\s+/g, ' ').replace(/\d{4}-\d{2}-\d{2}T[\d:.]+Z?/g, '<ts>').replace(/\b[0-9a-f]{8,}\b/g, '<id>')).slice(0, 200);
+    const advanceStreak = (tool, err) => {
+        const sig = failureSignature(tool, err);
+        if (sig === lastSignature)
+            signatureStreak++;
+        else {
+            lastSignature = sig;
+            signatureStreak = 1;
+        }
+        lastFailureTool = tool;
+    };
     const executeBatch = async (calls) => {
         let concludesTurn = false;
         let concludesVotes = 0;
         let terminateVotes = 0;
         let finalized = 0;
         let denies = 0;
+        let breakerTripped = null;
         for (const call of calls) {
             if (signal?.aborted) {
                 // 取消：未派发调用补记成对事件（日志无缺口）
@@ -64,8 +89,23 @@ export async function runTurn(opts) {
             }
             const def = tools.get(call.tool);
             log.append('model', 'toolCall', turnId, call);
+            // G9（D-50）熔断预检：同签名连击已达阈值且本次同工具 → 不再派发（错误串须派发方知，
+            // 预检口径 = 同工具紧邻重试——换工具探索不受影响；换参数异错误的甄别发生在 streak < 阈值期）。
+            // 未派发也成对落链（与取消补记同纪律——日志无缺口），breakerTripped 交主循环收口。
+            // 位置在 def 查找前：unknown tool 连击（def 缺失分支 continue）同样要被拦
+            if (repeatFailureBreaker > 0 && signatureStreak >= repeatFailureBreaker && lastFailureTool === call.tool) {
+                log.append('runtime', 'toolResult', turnId, {
+                    id: call.id,
+                    error: 'repeated-identical-failure: breaker tripped (no dispatch)',
+                    signature: lastSignature,
+                });
+                breakerTripped = lastSignature;
+                continue;
+            }
             if (!def) {
                 log.append('plugin', 'toolResult', turnId, { id: call.id, error: `unknown tool "${call.tool}"` });
+                // G9：unknown tool 同为失败面（模型反复叫错工具名 = 撞墙形态之一）
+                advanceStreak(call.tool, `unknown tool "${call.tool}"`);
                 continue;
             }
             // 权限门（F4 集成点）：write 类在 readonly/confirm 模式需放行；1.13.0（K-FS-1）：
@@ -92,6 +132,15 @@ export async function runTurn(opts) {
                 toolError = String(e);
             }
             log.append('plugin', 'toolResult', turnId, { id: call.id, result, ...(toolError ? { error: toolError } : {}) });
+            // G9 连击推进：同签名 streak++，异签名重开（允许探索——换参数后不同错误 = 不同签名）；
+            // 成功派发重置（拒绝不重置——拒绝 ≠ 探索进展）
+            if (toolError)
+                advanceStreak(call.tool, toolError);
+            else {
+                lastSignature = null;
+                lastFailureTool = null;
+                signatureStreak = 0;
+            }
             finalized++;
             if (def.concludesTurn) {
                 concludesTurn = true;
@@ -103,7 +152,7 @@ export async function runTurn(opts) {
         return {
             concludesTurn, concludesAll: finalized > 0 && concludesVotes === finalized,
             terminateVotes, terminateAll: finalized > 0 && terminateVotes === finalized,
-            finalized, denies,
+            finalized, denies, breakerTripped,
         };
     };
     try {
@@ -144,12 +193,28 @@ export async function runTurn(opts) {
             }
             if (step.stopReason === 'toolUse' && step.toolCalls?.length) {
                 const batch = await executeBatch(step.toolCalls);
-                // F13：授权拒绝即收口（blockOnDeny 产出点——blocked 仅新增产出点，枚举不增）
-                if (preset.blockOnDeny && batch.denies > 0) {
+                totalDenies += batch.denies;
+                // F13：授权拒绝即收口（blockOnDeny 产出点——blocked 仅新增产出点，枚举不增）；
+                // 1.17-K4（V2-a）：blockOnDeny 缺省随档位（readonly 恒 true）——G6 单次拒绝即收口，
+                // 开则 G8 无机会触发（设计 §5.4 共存口径）
+                if (blockOnDeny && batch.denies > 0) {
                     const seq = closeTurn({ reason: 'blocked', denies: batch.denies }).seq;
                     trail.push({ seq, reason: 'blocked' });
                     return { reason: 'blocked', steps, endReasonTrail: trail };
                 }
+                // G8（D-50）：拒绝累计熔断——同 turn denies 累计 ≥ 阈值收口 blocked（止损优先于
+                // conclude/terminate 判定；denies 为 turn 级累计跨 batch）
+                if (denyBreaker > 0 && totalDenies >= denyBreaker) {
+                    const seq = closeTurn({ reason: 'blocked', denies: totalDenies, gate: 'denyBreaker' }).seq;
+                    trail.push({ seq, reason: 'blocked' });
+                    return { reason: 'blocked', steps, endReasonTrail: trail };
+                }
+                // G9（D-50）：重复失败熔断——executeBatch 已补记 no-dispatch 成对事件，此处收口
+                if (batch.breakerTripped) {
+                    const seq = closeTurn({ reason: 'blocked', gate: 'repeatFailureBreaker', signature: batch.breakerTripped }).seq;
+                    trail.push({ seq, reason: 'blocked' });
+                    return { reason: 'blocked', steps, endReasonTrail: trail };
+                }
                 const agg = preset.aggregate ?? {};
                 const abortedNow = (agg.terminate ?? 'all') === 'any' ? batch.terminateVotes > 0 : batch.terminateAll;
                 if (abortedNow) { // terminate 收口：默认 AND（整批），可配置 any

package/dist/release-audit.jsonl

@@ -1,4 +1,4 @@
-{"stage":"archive","detail":"git archive HEAD → car-runtime-1.15.2.tgz（395974 bytes，树哈希锚定）","ts":1792464026924}
-{"stage":"sha256sums","detail":"SHA256SUMS e0800ec15d94c8b4…（裸字节复核通过）","ts":1792464026924}
-{"stage":"sbom","detail":"55 个组件（运行时依赖 0 项）","ts":1792464026929}
-{"stage":"cosign-keyless","detail":"signed car-runtime-1.15.2.tgz (keyless OIDC + Rekor)","ts":1792464030951}
+{"stage":"archive","detail":"git archive HEAD → car-runtime-1.17.0.tgz（407177 bytes，树哈希锚定）","ts":1792830637240}
+{"stage":"sha256sums","detail":"SHA256SUMS c41096564679afc0…（裸字节复核通过）","ts":1792830637241}
+{"stage":"sbom","detail":"55 个组件（运行时依赖 0 项）","ts":1792830637247}
+{"stage":"cosign-keyless","detail":"signed car-runtime-1.17.0.tgz (keyless OIDC + Rekor)","ts":1792830639351}

package/dist/runtime-core/llm.js

@@ -519,7 +519,15 @@ function mergeAnthropicUsage(start, delta, model, adapterId) {
  * toolResult 收敛进 user 消息 content（连续多条合并为单 user 多 tool_result 块——Anthropic
  * 消息序列约束）；assistant 工具调用 = content:[{type:'tool_use',id,name,input}]；
  * declaredSideEffect 不出站（与 openai-compat 同红线）。
+ * 1.17-K4（D-48 P1）：system 以单块数组出站并挂 `cache_control: ephemeral` 断点（稳定前缀
+ * 缓存——首个 system 恒不进折叠区间，锚点天然稳定）。断点 = 传输层注解：不进 SessionLog/
+ * 投影/快照比对，N1 零影响；生效有 provider 侧最小长度门槛（~1024 tokens）——短 system
+ * 静默不生效应以 usage.cacheCreationTokens 观测，禁以「配了就该生效」推断。关断 =
+ * CAR_LLM_PROMPT_CACHE=off（cli flag --no-prompt-cache 置本 env；A/B 与故障回退通道）。
  */
+function promptCacheOff() {
+    return process.env.CAR_LLM_PROMPT_CACHE === 'off';
+}
 function toAnthropic(req, apiKey) {
     const system = [];
     const turns = [];
@@ -576,7 +584,14 @@ function toAnthropic(req, apiKey) {
             stream: true,
             max_tokens: maxTokens,
             ...(thinkingBudget !== undefined ? { thinking: { type: 'enabled', budget_tokens: thinkingBudget } } : {}),
-            ...(system.length ? { system: system.join('\n\n') } : {}),
+            // D-48 P1：缺省单块 + ephemeral 断点；关断 = 顶层字符串（1.16.x 前形态，A/B 与回退）
+            ...(system.length
+                ? {
+                    system: promptCacheOff()
+                        ? system.join('\n\n')
+                        : [{ type: 'text', text: system.join('\n\n'), cache_control: { type: 'ephemeral' } }],
+                }
+                : {}),
             messages: turns,
             ...(req.tools.length
                 ? { tools: req.tools.map(t => ({ name: t.name, description: t.description, input_schema: t.parameters })) }

package/dist/sbom.json

@@ -1,7 +1,7 @@
 {
   "bomFormat": "CAR-SBOM",
   "specVersion": "0.1",
-  "version": "1.15.2",
+  "version": "1.17.0",
   "components": [
     {
       "type": "file",
@@ -11,7 +11,7 @@
     {
       "type": "file",
       "path": "src/cli.ts",
-      "sha256": "950c904e6a5dc05ae130b997bf93bcd8ea6a00dfe10b8bc36796641298f8fafa"
+      "sha256": "833d9d33e281115d1ae50858028ce82b930a530b9ef513232f02bf3b94269fcb"
     },
     {
       "type": "file",
@@ -56,7 +56,7 @@
     {
       "type": "file",
       "path": "src/load/config.ts",
-      "sha256": "2cb17ffa5da642ffdb17a2b067d10c421129534366bbe1f41687e1d8a5aeaab3"
+      "sha256": "86584c58bfb5d458475e474b896de6ffa2f89e7e76364f4bfe9f2f3fd3d2ad75"
     },
     {
       "type": "file",
@@ -106,7 +106,7 @@
     {
       "type": "file",
       "path": "src/loop/stop.ts",
-      "sha256": "2c85b1378ab69b3ab52c5cf631c8e75c33b20f532028b1bd7464d782ab6bb49a"
+      "sha256": "d5bca2911a6cd75606fedaea041e62bcd4d3d78dc987030318f91ec53c20e223"
     },
     {
       "type": "file",
@@ -176,7 +176,7 @@
     {
       "type": "file",
       "path": "src/runtime-core/llm.ts",
-      "sha256": "b61eb6d9373442b5e35476b741184b5048451b6530c3490ea2a178d2982a8cc9"
+      "sha256": "3df0703df21657121464e8495d5ffcc58b5b6362ac339d58bfc978686aa8dca0"
     },
     {
       "type": "file",
@@ -211,7 +211,7 @@
     {
       "type": "file",
       "path": "src/seam.ts",
-      "sha256": "54cc179a6b863e6e2d0d94a6275bd1ed17fefa46ca0b6de14d1c8e08cd5c1e2d"
+      "sha256": "bd0bad44f5dc0da542556146eff1318a30cb5b56eaf682d0350947716db2628a"
     },
     {
       "type": "file",
@@ -271,12 +271,12 @@
     {
       "type": "file",
       "path": "package.json",
-      "sha256": "8504cceeead963e5b78bc07d347fef56432304bb8b2db676c7b0c2a386a9d7c2"
+      "sha256": "2e6ab9f35a9401baa661232f059c9447d551802031bdf8809a57dfdddfd67d09"
     },
     {
       "type": "file",
       "path": "README.md",
-      "sha256": "38d26d31d5f4bf80ea6848132847426b0ca67d2eb080136ab563423ab3e39c3d"
+      "sha256": "d44a62a9565267831bbf5a5fc0469b8528b455efafcd5aea0029435ebe1e2327"
     }
   ],
   "runtimeDependencies": []

package/dist/seam.d.ts

@@ -49,7 +49,7 @@ export { CredentialService } from './runtime-core/credentials.ts';
 export type { LlmAdapter, LlmRequest, LlmChunk } from './runtime-core/types.ts';
 export { mountPlugin } from './load/loader.ts';
 export { Context } from './kernel/context.ts';
-export { loadCarConfig, mergeLlmConfig, mergeSignatureGate, warmCarConfig, type CarConfig, type LlmConfig } from './load/config.ts';
+export { loadCarConfig, mergeLlmConfig, mergeSignatureGate, warmCarConfig, type CarConfig, type LlmConfig, type SubagentConfig } from './load/config.ts';
 export { probeCapabilities, SandboxExecutor } from './sandbox/sandbox.ts';
 export { AuthzService, checkCapability, type Decision, type AuthzRequest, type AuthzDecision, type DeclaredCapabilities } from './authz/authz.ts';
 export { createTelemetryFacade, telemetryConfigFromEnv } from './runtime-core/telemetry.ts';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lqc123qwe/car-runtime",
-  "version": "1.15.2",
+  "version": "1.17.0",
   "description": "Composable Agent Runtime (CAR) - microkernel plugin system with sandboxed PTC, append-only hashed session log, and MCP host bridge",
   "license": "MIT",
   "type": "module",

package/src/cli.ts

@@ -41,6 +41,8 @@ const HELP = `用法: car <command> [args]
                                     装配并运行插件（快速上手流；装载前签名门 warn 缺省）
                                     真路径：--prompt <text> + --base-url/--model（或 llm.* 配置）；
                                     --adapter-id anthropic = Messages API（凭据 ANTHROPIC_API_KEY）；
+                                    --no-prompt-cache = 关断 anthropic 稳定前缀缓存断点（D-48；
+                                    等价 env CAR_LLM_PROMPT_CACHE=off，A/B 与回退通道）；
                                     --demo = stub 演示流
   reload <file|dir> [--sig-enforce] [--config <path>]
                                     热重载插件并打印六阶段加载报告（含 verify 签名门）
@@ -65,8 +67,9 @@ const HELP = `用法: car <command> [args]
 CAR_UNSIGNED_ALLOW=1 显式声明豁免（warn 缺签路径计数 confirmed=yes，横幅保留）
 配置文件通道（1.5 起双载体）：cwd car.config.ts（export default {…}；发现序 ts > json）或
 car.config.json 或 --config <path>；键位 sandbox.unsigned.allow / sandbox.sig.enforce /
-sandbox.sig.trustRoot / llm.* / llm.modelPool.*（多端点 fallback：endpoints id/baseUrl/model/
-adapterId/keyEnv/priority/weight/maxTokens + probe + maxAttempts；路由决策落链）/ mcp.servers.*
+sandbox.sig.trustRoot / llm.* / modelPool.*（多端点 fallback：endpoints id/baseUrl/model/
+adapterId/keyEnv/priority/weight/maxTokens + probe + maxAttempts；路由决策落链）/ llm.subagent.*
+（子 Agent：model 独立锚点 / maxConcurrent / maxCumulative 护栏上限）/ mcp.servers.*
 （stdio: command/args/env；远程: url/headers，\${ENV_VAR} 引用注入凭据）；优先级 flag > env > 配置 > 缺省；未知键 fail-visible`
 
 // 进程内热重载会话（ReloadManager 持有 epoch 与实例注册表；同进程连续 reload 语义完整）
@@ -205,6 +208,9 @@ async function main(): Promise<number> {
         const cfgBaseUrl = llm.baseUrl
         const cfgModel = llm.model
         let modelName = cfgModel ?? ''
+        // 1.17-K4（D-48 P1 / V1-A）：提示缓存断点关断 flag——flag > env（置 env 后适配器内部决策；
+        // 池/单端点两分支通用，须先于适配器创建）
+        if (rest.includes('--no-prompt-cache')) process.env.CAR_LLM_PROMPT_CACHE = 'off'
         const credService = new CredentialService()
         const core = new RuntimeCore(credService)
         core.bindContext(ctx)
@@ -232,7 +238,7 @@ async function main(): Promise<number> {
             console.error('CAR-E-LLM-CONFIG: 真实模型路径需要 baseUrl + model——')
             console.error('  配置：car.config.ts（export default）或 car.config.json {"llm":{"baseUrl":"https://…","model":"…"}} / env CAR_LLM_BASE_URL+CAR_LLM_MODEL / flag --base-url --model')
             console.error('  anthropic：llm.adapterId "anthropic"（或 --adapter-id anthropic）+ baseUrl https://api.anthropic.com；凭据 ANTHROPIC_API_KEY')
-            console.error('  模型池：llm.modelPool.endpoints（多端点 fallback + health 预检；凭据 keyEnv 引用；路由决策落链）')
+            console.error('  模型池：modelPool.endpoints（多端点 fallback + health 预检；凭据 keyEnv 引用；路由决策落链）')
             console.error('  凭据：OPENAI_API_KEY / ANTHROPIC_API_KEY（env fallback 需 CAR_ALLOW_ENV_CREDENTIALS=1 或 llm.allowEnvFallback）或 keychain；诊断：car doctor')
             return 2
           }

package/src/load/config.ts

@@ -52,6 +52,18 @@ export interface LlmConfig {
   allowEnvFallback?: boolean
   /** 1.14-S2（K-MP-2 / D-40）：历史压缩策略（阈值自动触发判定入参；立即压缩 API 独立可用） */
   compaction?: CompactionConfig
+  /** 1.16-K3（D-K2-2）：子 Agent 配置（缺省 = 继承父会话模型锚点 Q-A2 + 宿主护栏常量 Q-A3） */
+  subagent?: SubagentConfig
+}
+
+/** 1.16-K3（D-K2-2）：子 Agent 配置面——宿主编排消费（内核自身不装配编排；schema 只登记键位） */
+export interface SubagentConfig {
+  /** 独立子模型锚点（缺省 = 继承父会话现值；modelPool 激活时被池压过——与 llm.model 同口径） */
+  model?: string
+  /** 并发子 Agent 上限（正整数；缺省 = 宿主常量 3，Q-A3） */
+  maxConcurrent?: number
+  /** 单父会话累计派生上限（正整数；缺省 = 宿主常量 10，Q-A3） */
+  maxCumulative?: number
 }
 
 /** 1.14-S4（K-POOL-1 / D-42）：模型池端点登记（多端点 fallback 候选；凭据仅收 keyEnv 引用） */
@@ -235,6 +247,18 @@ const rawSchema = z.object({
       protectLastTurns: z.number({ invalid_type_error: '必须为正整数', required_error: '必须为正整数' })
         .refine(v => Number.isInteger(v) && v > 0, { message: '必须为正整数' }).optional(),
     }).strict().optional(),
+    // 1.16-K3（D-K2-2）：子 Agent 配置（model 独立锚点 + 护栏上限；空对象无意义显式拒——禁静默 no-op）
+    subagent: z.object({
+      model: nonEmptyTrimmed().optional(),
+      maxConcurrent: z.number({ invalid_type_error: '必须为正整数', required_error: '必须为正整数' })
+        .refine(v => Number.isFinite(v) && Number.isInteger(v) && v > 0, { message: '必须为正整数' })
+        .optional(),
+      maxCumulative: z.number({ invalid_type_error: '必须为正整数', required_error: '必须为正整数' })
+        .refine(v => Number.isFinite(v) && Number.isInteger(v) && v > 0, { message: '必须为正整数' })
+        .optional(),
+    }).strict()
+      .refine(v => Object.keys(v).length > 0, { message: '至少登记一个键（model/maxConcurrent/maxCumulative；无子 Agent 配置需求请移除 llm.subagent 键，行为与 1.15.2 一致）' })
+      .optional(),
   }).strict().optional(),
   // 1.14-S4（K-POOL-1 / D-42）：模型池登记（多端点 fallback + health + routing/decide 落链）
   modelPool: modelPoolSchema.optional(),
@@ -243,8 +267,8 @@ const rawSchema = z.object({
   }).strict().optional(),
 }, { invalid_type_error: '配置顶层必须为 JSON 对象' }).strict()
 
-/** 未登记键提示（渲染层拼 path）——与系统设计键位空间同步 */
-const KEY_SPACES = '登记键位：sandbox.* / llm.* / llm.modelPool.* / mcp.servers.*'
+/** 未登记键提示（渲染层拼 path）——与系统设计键位空间同步；D-1 勘误：modelPool 为顶层键（非 llm.modelPool） */
+const KEY_SPACES = '登记键位：sandbox.* / llm.* / modelPool.* / llm.subagent.* / mcp.servers.*'
 
 /** zod issue → CAR-E-CONFIG 渲染（首个 issue；unrecognized_keys 按键路径展开） */
 function renderIssue(error: z.ZodError): string {
@@ -287,6 +311,13 @@ function parseCarConfig(raw: unknown): { config: CarConfig; error?: string } {
       if (d.llm.compaction.protectLastTurns !== undefined) cp.protectLastTurns = d.llm.compaction.protectLastTurns
       llm.compaction = cp
     }
+    if (d.llm.subagent) {
+      const sg: SubagentConfig = {}
+      if (d.llm.subagent.model !== undefined) sg.model = d.llm.subagent.model
+      if (d.llm.subagent.maxConcurrent !== undefined) sg.maxConcurrent = d.llm.subagent.maxConcurrent
+      if (d.llm.subagent.maxCumulative !== undefined) sg.maxCumulative = d.llm.subagent.maxCumulative
+      llm.subagent = sg
+    }
     out.llm = llm
   }
   if (d.mcp) {

package/src/loop/stop.ts

@@ -57,8 +57,19 @@ export interface TurnPreset {
   maxSteps?: number
   /** F13：OR/AND 收口可配置（默认 any/all = M1 行为等价） */
   aggregate?: { concludesTurn?: 'any' | 'all'; terminate?: 'any' | 'all' }
-  /** F13：授权拒绝即收口 blocked（默认 false = 模型继续调整） */
+  /** F13：授权拒绝即收口 blocked（默认 false = 模型继续调整）；1.17-K4（V2-a）缺省随档位收敛——readonly 恒 true（显式传参可覆盖） */
   blockOnDeny?: boolean
+  /**
+   * 1.17-K4（D-50 / G8）：拒绝累计熔断——同 turn denies 累计 ≥ N 即收口 blocked（gate:'denyBreaker'）。
+   * 缺省 3（预防性闸门：真实样本从未超过 1 次/turn——设计 §10.4-3 诚实定位）；0 = 关。
+   */
+  denyBreaker?: number
+  /**
+   * 1.17-K4（D-50 / G9）：重复失败熔断——失败签名（tool + 归一化错误串）同 turn 连续 ≥ N 后，
+   * 下一次同签名不再派发（成对补记 no-dispatch 事件）并收口 blocked（gate:'repeatFailureBreaker'）。
+   * 异签名放行（允许探索，禁撞墙）；成功派发重置连击。缺省 2；0 = 关。
+   */
+  repeatFailureBreaker?: number
 }
 
 export interface TurnResult { reason: TurnEndReason; steps: number; endReasonTrail: Array<{ seq: number; reason: TurnEndReason }> }
@@ -117,12 +128,35 @@ export async function runTurn(opts: {
     return log.append('runtime', 'turnEnd', turnId, null, { ...meta, ...(usage ? { usage } : {}) })
   }
 
-  const executeBatch = async (calls: ToolCall[]): Promise<{ concludesTurn: boolean; concludesAll: boolean; terminateVotes: number; terminateAll: boolean; finalized: number; denies: number }> => {
+  // 1.17-K4（D-50 / V2-a）：blockOnDeny 缺省随档位收敛——readonly 恒 true（拒绝即收口，禁在
+  // 错误理解模式的路上烧 token；「看一眼再决定」应切 confirm——三档设计本义）；confirm/full
+  // 缺省 false 不变；显式传参可覆盖任何档位
+  const blockOnDeny = preset.blockOnDeny ?? preset.mode === 'readonly'
+  // 1.17-K4（D-50）：G8/G9 熔断阈值（缺省 3/2；0 = 关——A/B 与回退通道）
+  const denyBreaker = preset.denyBreaker ?? 3
+  const repeatFailureBreaker = preset.repeatFailureBreaker ?? 2
+  let totalDenies = 0
+  // G9 失败签名连击（turn 级）：成功派发重置；授权拒绝不重置（拒绝 ≠ 探索进展）
+  let lastSignature: string | null = null
+  let lastFailureTool: string | null = null
+  let signatureStreak = 0
+  /** 失败签名 = tool + 归一化错误串（去空白/时间戳/长 hex id、截断 200——确定性好比对） */
+  const failureSignature = (tool: string, err: string) =>
+    (tool + ':' + err.replace(/\s+/g, ' ').replace(/\d{4}-\d{2}-\d{2}T[\d:.]+Z?/g, '<ts>').replace(/\b[0-9a-f]{8,}\b/g, '<id>')).slice(0, 200)
+  const advanceStreak = (tool: string, err: string) => {
+    const sig = failureSignature(tool, err)
+    if (sig === lastSignature) signatureStreak++
+    else { lastSignature = sig; signatureStreak = 1 }
+    lastFailureTool = tool
+  }
+
+  const executeBatch = async (calls: ToolCall[]): Promise<{ concludesTurn: boolean; concludesAll: boolean; terminateVotes: number; terminateAll: boolean; finalized: number; denies: number; breakerTripped: string | null }> => {
     let concludesTurn = false
     let concludesVotes = 0
     let terminateVotes = 0
     let finalized = 0
     let denies = 0
+    let breakerTripped: string | null = null
     for (const call of calls) {
       if (signal?.aborted) {
         // 取消：未派发调用补记成对事件（日志无缺口）
@@ -132,8 +166,23 @@ export async function runTurn(opts: {
       }
       const def = tools.get(call.tool)
       log.append('model', 'toolCall', turnId, call)
+      // G9（D-50）熔断预检：同签名连击已达阈值且本次同工具 → 不再派发（错误串须派发方知，
+      // 预检口径 = 同工具紧邻重试——换工具探索不受影响；换参数异错误的甄别发生在 streak < 阈值期）。
+      // 未派发也成对落链（与取消补记同纪律——日志无缺口），breakerTripped 交主循环收口。
+      // 位置在 def 查找前：unknown tool 连击（def 缺失分支 continue）同样要被拦
+      if (repeatFailureBreaker > 0 && signatureStreak >= repeatFailureBreaker && lastFailureTool === call.tool) {
+        log.append('runtime', 'toolResult', turnId, {
+          id: call.id,
+          error: 'repeated-identical-failure: breaker tripped (no dispatch)',
+          signature: lastSignature,
+        })
+        breakerTripped = lastSignature
+        continue
+      }
       if (!def) {
         log.append('plugin', 'toolResult', turnId, { id: call.id, error: `unknown tool "${call.tool}"` })
+        // G9：unknown tool 同为失败面（模型反复叫错工具名 = 撞墙形态之一）
+        advanceStreak(call.tool, `unknown tool "${call.tool}"`)
         continue
       }
       // 权限门（F4 集成点）：write 类在 readonly/confirm 模式需放行；1.13.0（K-FS-1）：
@@ -156,6 +205,10 @@ export async function runTurn(opts: {
         toolError = String(e)
       }
       log.append('plugin', 'toolResult', turnId, { id: call.id, result, ...(toolError ? { error: toolError } : {}) })
+      // G9 连击推进：同签名 streak++，异签名重开（允许探索——换参数后不同错误 = 不同签名）；
+      // 成功派发重置（拒绝不重置——拒绝 ≠ 探索进展）
+      if (toolError) advanceStreak(call.tool, toolError)
+      else { lastSignature = null; lastFailureTool = null; signatureStreak = 0 }
       finalized++
       if (def.concludesTurn) { concludesTurn = true; concludesVotes++ }
       if (def.terminate) terminateVotes++
@@ -163,7 +216,7 @@ export async function runTurn(opts: {
     return {
       concludesTurn, concludesAll: finalized > 0 && concludesVotes === finalized,
       terminateVotes, terminateAll: finalized > 0 && terminateVotes === finalized,
-      finalized, denies,
+      finalized, denies, breakerTripped,
     }
   }
 
@@ -208,12 +261,28 @@ export async function runTurn(opts: {
 
       if (step.stopReason === 'toolUse' && step.toolCalls?.length) {
         const batch = await executeBatch(step.toolCalls)
-        // F13：授权拒绝即收口（blockOnDeny 产出点——blocked 仅新增产出点，枚举不增）
-        if (preset.blockOnDeny && batch.denies > 0) {
+        totalDenies += batch.denies
+        // F13：授权拒绝即收口（blockOnDeny 产出点——blocked 仅新增产出点，枚举不增）；
+        // 1.17-K4（V2-a）：blockOnDeny 缺省随档位（readonly 恒 true）——G6 单次拒绝即收口，
+        // 开则 G8 无机会触发（设计 §5.4 共存口径）
+        if (blockOnDeny && batch.denies > 0) {
           const seq = closeTurn({ reason: 'blocked', denies: batch.denies }).seq
           trail.push({ seq, reason: 'blocked' })
           return { reason: 'blocked', steps, endReasonTrail: trail }
         }
+        // G8（D-50）：拒绝累计熔断——同 turn denies 累计 ≥ 阈值收口 blocked（止损优先于
+        // conclude/terminate 判定；denies 为 turn 级累计跨 batch）
+        if (denyBreaker > 0 && totalDenies >= denyBreaker) {
+          const seq = closeTurn({ reason: 'blocked', denies: totalDenies, gate: 'denyBreaker' }).seq
+          trail.push({ seq, reason: 'blocked' })
+          return { reason: 'blocked', steps, endReasonTrail: trail }
+        }
+        // G9（D-50）：重复失败熔断——executeBatch 已补记 no-dispatch 成对事件，此处收口
+        if (batch.breakerTripped) {
+          const seq = closeTurn({ reason: 'blocked', gate: 'repeatFailureBreaker', signature: batch.breakerTripped }).seq
+          trail.push({ seq, reason: 'blocked' })
+          return { reason: 'blocked', steps, endReasonTrail: trail }
+        }
         const agg = preset.aggregate ?? {}
         const abortedNow = (agg.terminate ?? 'all') === 'any' ? batch.terminateVotes > 0 : batch.terminateAll
         if (abortedNow) { // terminate 收口：默认 AND（整批），可配置 any

package/src/runtime-core/llm.ts

@@ -563,7 +563,16 @@ function mergeAnthropicUsage(
  * toolResult 收敛进 user 消息 content（连续多条合并为单 user 多 tool_result 块——Anthropic
  * 消息序列约束）；assistant 工具调用 = content:[{type:'tool_use',id,name,input}]；
  * declaredSideEffect 不出站（与 openai-compat 同红线）。
+ * 1.17-K4（D-48 P1）：system 以单块数组出站并挂 `cache_control: ephemeral` 断点（稳定前缀
+ * 缓存——首个 system 恒不进折叠区间，锚点天然稳定）。断点 = 传输层注解：不进 SessionLog/
+ * 投影/快照比对，N1 零影响；生效有 provider 侧最小长度门槛（~1024 tokens）——短 system
+ * 静默不生效应以 usage.cacheCreationTokens 观测，禁以「配了就该生效」推断。关断 =
+ * CAR_LLM_PROMPT_CACHE=off（cli flag --no-prompt-cache 置本 env；A/B 与故障回退通道）。
  */
+function promptCacheOff(): boolean {
+  return process.env.CAR_LLM_PROMPT_CACHE === 'off'
+}
+
 function toAnthropic(req: LlmRequest, apiKey: string) {
   const system: string[] = []
   const turns: Array<{ role: 'user' | 'assistant'; content: unknown }> = []
@@ -618,7 +627,14 @@ function toAnthropic(req: LlmRequest, apiKey: string) {
       stream: true,
       max_tokens: maxTokens,
       ...(thinkingBudget !== undefined ? { thinking: { type: 'enabled', budget_tokens: thinkingBudget } } : {}),
-      ...(system.length ? { system: system.join('\n\n') } : {}),
+      // D-48 P1：缺省单块 + ephemeral 断点；关断 = 顶层字符串（1.16.x 前形态，A/B 与回退）
+      ...(system.length
+        ? {
+            system: promptCacheOff()
+              ? system.join('\n\n')
+              : [{ type: 'text', text: system.join('\n\n'), cache_control: { type: 'ephemeral' } }],
+          }
+        : {}),
       messages: turns,
       ...(req.tools.length
         ? { tools: req.tools.map(t => ({ name: t.name, description: t.description, input_schema: t.parameters })) }

package/src/seam.ts

@@ -49,7 +49,7 @@ export { CredentialService } from './runtime-core/credentials.ts'
 export type { LlmAdapter, LlmRequest, LlmChunk } from './runtime-core/types.ts'
 export { mountPlugin } from './load/loader.ts'
 export { Context } from './kernel/context.ts'
-export { loadCarConfig, mergeLlmConfig, mergeSignatureGate, warmCarConfig, type CarConfig, type LlmConfig } from './load/config.ts'
+export { loadCarConfig, mergeLlmConfig, mergeSignatureGate, warmCarConfig, type CarConfig, type LlmConfig, type SubagentConfig } from './load/config.ts'
 export { probeCapabilities, SandboxExecutor } from './sandbox/sandbox.ts'
 export { AuthzService, checkCapability, type Decision, type AuthzRequest, type AuthzDecision, type DeclaredCapabilities } from './authz/authz.ts'
 export { createTelemetryFacade, telemetryConfigFromEnv } from './runtime-core/telemetry.ts'

package/dist/car-runtime-1.15.2.tgz.sig.bundle

@@ -1 +0,0 @@
-{"base64Signature":"MEUCICbvk8lw/0J5k1bnaKNZCM/xgESEFF1qskK5z/7inngoAiEA5582ex8TI6YiJkKaYNPzuIKkUF7S99dxANZb7kpLwLU=","cert":"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","rekorBundle":{"SignedEntryTimestamp":"MEUCIGu7TqDI7QG1De0ED4bg7V58GvGtV+wwmfbPqrwhlx3vAiEAj917MyoFKHsgkZvu/rLtaR4kd1UzZ7MWzVjP+eUHf00=","Payload":{"body":"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","integratedTime":1792464029,"logIndex":3329865420,"logID":"c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d"}}}