@mogragsigma/dsh-dual-host-plugin 0.33.1 → 0.33.2

package/bundle/compatibility.json

@@ -0,0 +1,980 @@
+{
+  "schema": 1,
+  "plugin": "@mogragsigma/dsh-dual-host-plugin",
+  "version": "0.33.2",
+  "publicEntry": "native-entry.js",
+  "hostBaseline": "0.2.1-rc.5",
+  "imOptional": {
+    "package": "@xmanrui/dsh-im",
+    "testedVersion": "5.6.0",
+    "deliveryContract": 1,
+    "receiptContract": 1,
+    "knownIncompatible": [
+      {
+        "version": "4.39.0",
+        "host": "0.2.1-rc.2",
+        "reason": "missing caller peer / session v4 injected source"
+      }
+    ],
+    "validation": "isolated actual macOS/ECS Host; public delivery contract v1; no private runtime import",
+    "installationVersion": "5.6.0",
+    "installationAcceptance": "step07 isolated real Mac/ECS exclusive-consumer regression; native Desktop carrier verified in alpha33.8; no private IM imports"
+  },
+  "nativePresets": [
+    "standard",
+    "ptc",
+    "cordis"
+  ],
+  "retiredPreset": "dsh-task-intake",
+  "legacyImConsumer": false,
+  "development": false,
+  "publish": false,
+  "globalSkills": [
+    "task-direct-link",
+    "dsh-dual-end",
+    "task-intake",
+    "task-schedule",
+    "task-recovery",
+    "task-handoff",
+    "task-approval",
+    "task-repository",
+    "task-diagnostics",
+    "task-workbench",
+    "task-sidebar",
+    "task-artifacts",
+    "task-development",
+    "task-research",
+    "task-notify",
+    "task-a2a",
+    "task-a2a-worker",
+    "task-onboarding",
+    "task-file-transfer"
+  ],
+  "workerSkill": "task-worker",
+  "approval": {
+    "authority": "cloud",
+    "humanProof": "Existing official IM provider independently verified reply; no new passkey enrollment",
+    "execution": false,
+    "thirdPartyImRequired": false,
+    "chatProvider": "feishu",
+    "chatMode": "p2p reply-bound official API observer",
+    "macRequired": false,
+    "semantic": {
+      "version": 1,
+      "optIn": true,
+      "newProposalsOnly": true,
+      "actions": [
+        "approve",
+        "reject",
+        "hold",
+        "amend",
+        "clarify",
+        "revoke"
+      ],
+      "modelRole": "bounded no-tools interpretation, never identity or execution authority",
+      "amendmentRequiresNewProposal": true,
+      "failurePolicy": "durable hold, no automatic interpretation retry"
+    },
+    "replyNavigation": {
+      "receiptIsNotProposal": true,
+      "misreplyGuidance": "verified receipt only; persistent navigation outbox; no authority",
+      "historicalReplies": "never reinterpreted"
+    },
+    "workbench": {
+      "capability": "approval_workbench:2",
+      "stage": "identity-readiness-only",
+      "defaultEnabled": false,
+      "methods": [
+        "describe"
+      ],
+      "retiredMethods": [
+        "prepare",
+        "begin",
+        "finish",
+        "status"
+      ],
+      "primaryEntry": "local-workbench",
+      "auxiliaryEntry": "local-im",
+      "identity": "reuse independently verified bound IM person; Host owner is not person proof",
+      "registrationRequired": false,
+      "sameDshSessionRequired": false,
+      "localImIdentityLinked": true,
+      "nativeModelToolsAdded": false,
+      "automaticExecution": false,
+      "productionDeployed": false
+    }
+  },
+  "repository": {
+    "provider": "gitee",
+    "metadataOnly": true,
+    "contract": 1,
+    "write": false,
+    "checkout": false
+  },
+  "directProtocol": {
+    "major": 1,
+    "negotiationRequired": true,
+    "legacyPeerPolicy": "reject-peer-RPC; preserve-native-chat",
+    "capabilityVersion": 1
+  },
+  "workbench": {
+    "capability": 1,
+    "transport": "dedicated-loopback-SSH",
+    "carrier": "native-browser",
+    "automaticExecution": false
+  },
+  "taskboard": {
+    "capability": 2,
+    "readonly": true,
+    "nativeRightSidebar": true,
+    "repositoryOptional": true,
+    "developmentProjection": {
+      "contract": 1,
+      "cloudAuthority": true,
+      "localReceiptsSeparate": true,
+      "readOnly": true,
+      "autoRefresh": false,
+      "modelToolsAdded": false,
+      "grantsExecution": false,
+      "maxRequestsPerTask": 20,
+      "maxEventsPerRequest": 20,
+      "actualUIVerified": true,
+      "actualUIEvidence": "Mac/ECS isolated DSH Hosts, synthetic display ledgers; local main/sidebar and ECS main via own SSH workbench proxy; no business execution"
+    },
+    "deliverySummary": {
+      "readOnly": true,
+      "pendingDeliveryWithoutJob": true,
+      "completedDeliveryIsTaskCompletion": false,
+      "autoRefresh": false
+    }
+  },
+  "artifacts": {
+    "capability": 2,
+    "authority": "cloud",
+    "reportLimitBytes": 262144,
+    "giteeLimitBytes": 1048576,
+    "giteeRef": "bound immutable file commit OR completed approved push commit; original binding preserved",
+    "access": "authenticated Host; live check on each access",
+    "arbitraryPathImport": false,
+    "development": false,
+    "presentation": "introduction + verified Gitee external page or owning execution session",
+    "download": false,
+    "upload": false,
+    "explicitFeishuMedia": "task-notify per-artifact consent only; does not change default no-upload",
+    "delivery": "read-only durable journal projection; independent commit identity check on click; no extra execution"
+  },
+  "developmentCandidate": {
+    "defaultEnabled": false,
+    "operatorBindingRequired": true,
+    "trustedApprovalRequired": true,
+    "adapter": "bounded-js-v1",
+    "commit": false,
+    "push": false,
+    "publish": false,
+    "requiresOwnDevelopmentPreset": true,
+    "requiredHostApis": [
+      "agents.create setup(AgentContext)",
+      "tools.restrict scoped inherited allow-list",
+      "tools.guard monotonic"
+    ]
+  },
+  "candidateValidation": {
+    "version": "0.24.0-alpha.21",
+    "scope": "alpha.16 delivery-derived artifact candidate; alpha.15 S45 actual Git evidence retained separately; no new commit/push/formal deployment",
+    "formalDeployment": false,
+    "fullRegression": false,
+    "realCommitPushValidated": false
+  },
+  "persistentScheduling": {
+    "contract": "triggers:1",
+    "jobVersions": [
+      "0.5.0",
+      "0.17.0",
+      "0.17.1",
+      "0.18.0",
+      "0.18.1",
+      "0.18.2",
+      "0.18.3",
+      "0.19.0",
+      "0.19.1",
+      "0.19.2",
+      "0.21.0"
+    ],
+    "rules": [
+      "once",
+      "interval",
+      "weekly",
+      "explicit-user-event"
+    ],
+    "timezoneLibrary": "@js-temporal/polyfill@0.5.1",
+    "maxConcurrentRange": [
+      1,
+      4
+    ],
+    "defaultConcurrency": 1,
+    "maxOccurrenceLimit": 366,
+    "automaticDevelopment": false,
+    "subtaskOrchestration": {
+      "contract": "workflows:1",
+      "mode": "bounded-readonly-dag",
+      "maxNodes": 6,
+      "maxSharedRuns": 20,
+      "sameParentConcurrency": 1,
+      "recursiveSpawn": false,
+      "verification": "real isolated dual Host: offline intake, dependent child sessions, cloud pause, SIGKILL/restart, local resume/input, same shared budget"
+    },
+    "separateOSProcess": false
+  },
+  "readonlySources": {
+    "operatorRootsRequired": true,
+    "exactTaskReferenceRequired": true,
+    "formats": [
+      "markdown",
+      "text",
+      "json",
+      "csv"
+    ],
+    "maxBytes": 65536,
+    "webSearch": true,
+    "urlRead": true,
+    "peerRead": false,
+    "contract": "sources:1",
+    "maxReadsPerRun": 8,
+    "modelDefault": null,
+    "maxWebAttemptsPerRun": 4,
+    "httpAdapter": {
+      "package": "@deepseek-ai/dsh-web-fetch-http",
+      "version": "0.2.1-rc.2",
+      "import": "public root HttpFetchProvider",
+      "modelCalls": false,
+      "nativeSettingsChanged": false
+    },
+    "durableSourceVersions": [
+      "0.18.0",
+      "0.18.1",
+      "0.18.2",
+      "0.18.3"
+    ],
+    "urlDefaultEnabled": false,
+    "searchDefaultEnabled": false,
+    "searchContract": "search:1",
+    "searchAdapter": {
+      "package": "@deepseek-ai/dsh-web-search-deepseek",
+      "version": "0.2.1-rc.2",
+      "model": "explicit per-task stage, no default",
+      "reasoningEffort": "disabled",
+      "maxRequestsPerRun": 2,
+      "maxServerUsesPerRequest": 1,
+      "maxResults": 5,
+      "rawResponseLimit": "upstream public API does not expose a byte cap; normalized evidence bounded at 64 KiB"
+    }
+  },
+  "workerModelBudget": {
+    "maxDispatchReservationsPerRun": 6,
+    "maxTokensPerDispatch": 2048,
+    "purposes": [
+      "worker",
+      "search"
+    ],
+    "persistent": true,
+    "failedOrUnknownRefund": false,
+    "searchEnabled": "only when explicitly declared and operator enabled",
+    "modelDefault": null,
+    "historicalCallsBackfilled": false,
+    "searchModel": "per-task search stage, not forced to primary route",
+    "reasoningDefault": "high for newly submitted managed cloud task revisions; explicit values override; no historical rewrite"
+  },
+  "notificationCandidate": {
+    "version": 1,
+    "taskScoped": true,
+    "hostDelivery": [
+      "local",
+      "cloud"
+    ],
+    "modelCalls": 0,
+    "checkedText": true,
+    "receiptModes": [
+      "message",
+      "acceptance"
+    ],
+    "mediaSupported": "explicit own feishu-openapi only",
+    "mobileArtifactLinksVerified": false,
+    "unknownSendRetry": false,
+    "formalDeployment": false,
+    "dualHostFixtureValidated": true,
+    "unknownSendReconciliationAvailable": true,
+    "discovery": {
+      "contract": 1,
+      "publicMethodsOnly": true,
+      "upstreamTargetMutation": false,
+      "candidateTTLSeconds": 300,
+      "maxInflightReads": 8,
+      "durableOwnRegistration": true,
+      "localPublication": "authenticated idempotent outbox",
+      "grantsTaskConsent": false
+    },
+    "ui": "read-only manual discovery and durable receipt timeline",
+    "realModelValidation": {
+      "provider": "deepseek-official",
+      "model": "deepseek-flash",
+      "reasoningEffort": "high",
+      "requests": 4,
+      "batches": 1,
+      "realIMMessages": 1,
+      "notificationTransport": "explicit own Feishu OpenAPI",
+      "replayOnRestart": false
+    },
+    "review": {
+      "contract": 1,
+      "appendOnly": true,
+      "originalReceiptImmutable": true,
+      "retry": false,
+      "userObservationIsProviderProof": false
+    },
+    "directFeishu": {
+      "explicitOnly": true,
+      "privateChat": true,
+      "transport": "official-openapi",
+      "publicIMFallback": false,
+      "thirdPartyChanges": false
+    },
+    "media": {
+      "contract": 2,
+      "independentArtifactConsent": true,
+      "queueStates": "media_*; old text consumers ignore",
+      "maxReportBytes": 262144,
+      "maxGiteeBytes": 1048576,
+      "uploadUnknownRetry": false,
+      "exactFileBytesVerified": true,
+      "imagePostContentVerified": true,
+      "officialAppLink": "chat + provider message_position when available",
+      "physicalPhoneVerified": true,
+      "formalDeployment": false,
+      "physicalPhoneEvidence": {
+        "basis": "direct user report",
+        "date": "2026-10-18",
+        "scope": "open existing image and report attachments in Feishu mobile",
+        "reply": "图片和报告都能打开"
+      },
+      "desktopAppLinkVerified": true,
+      "mobileAppLinkVerified": false,
+      "inAppBrowserProtocolHandoffVerified": false,
+      "navigationEvidence": "Workbench opens exact official AppLink; Chrome one-time app launch reaches cloud chat; image opened. In-app-browser native handoff not verified."
+    }
+  },
+  "a2aCandidate": {
+    "contract": 2,
+    "defaultEnabled": false,
+    "authority": "cloud",
+    "userGrantRequired": true,
+    "taskRevisionBound": true,
+    "modelPolicy": "per host per task grant, no fallback",
+    "maxTurns": 12,
+    "maxModelRequests": 72,
+    "maxRequestsPerTurn": 6,
+    "unknownReplay": false,
+    "automaticEndpointImplemented": true,
+    "localFileReadImplemented": true,
+    "formalDeployment": false,
+    "mainSessionIsolationVerified": true,
+    "mainSessionIsolationScope": "actual Mac/local and ECS/cloud independent model Agents; standard entry remains responsive; alpha4",
+    "actualDualHostZeroModelVerified": true,
+    "realModelA2AVerified": true,
+    "realInflightCrashVerified": true,
+    "persistentModelObservation": true,
+    "modelReservationIsSuccessEvidence": false,
+    "realModelEvidence": "results/s39-alpha4-real-session-evidence.json; local deepseek-flash/high 3 calls + cloud deepseek-v4-pro/high 2 calls; new campaign only",
+    "realInflightRecoveryScope": "alpha3 backend: owned Mac recipient SIGKILL, link loss and pause/drain; zero-model fixtures; not provider-network failure proof",
+    "workbench": {
+      "readonly": true,
+      "manualRefresh": true,
+      "boundedProjection": true,
+      "taskOwnedNavigation": true,
+      "actualUI": "Actual Mac/local + ECS/cloud Hosts; completed zero-model campaign; same-host and SSH-proxied cloud session navigation after restart",
+      "realCrossHostNavigationVerified": true,
+      "browserDependency": "Official ui-sidebar-browser must be explicitly enabled in the authorized profile overlay; no third-party source changes",
+      "navigationFailureRetained": true
+    }
+  },
+  "developmentDrainCandidate": {
+    "contract": 2,
+    "jobVersion": "0.21.0",
+    "schedulerOwner": "database-bound host label and loopback port; no timeout takeover",
+    "childDrain": "close event plus durable test operation record; fixed no-descendant runner only",
+    "unknownChildRecovery": "hold for review; no PID-only killing or automatic release",
+    "legacyJobs": "not upgraded or replayed",
+    "actualProcessRecovery": true,
+    "resourceHandoffComplete": false,
+    "formalDeployment": false,
+    "workspaceIdentity": "request-bound real path and device/inode of checkout and Git directory; baseline and branch pinned; legacy NULL held",
+    "legacySchedulerMigration": "first adoption still requires a verified stopped legacy Host and its existing lock port; formal migration not performed"
+  },
+  "developmentBridgeCandidate": {
+    "contract": 1,
+    "optIn": true,
+    "explicitExecutors": true,
+    "storageHost": "cloud",
+    "client": "internal durable plugin API; no model tools or automatic execution",
+    "authority": "same DevelopmentGate as cloud native development worker",
+    "unknownResults": "persist and hold; no automatic mutation replay",
+    "formalDeployment": false,
+    "actualDualHostVerified": true,
+    "actualDualHostScope": "new synthetic operator fixture; Mac local proposals via authenticated SSH/RPC; same cloud gate held FIFO and epochs 2->3; two fixture writes and fixed tests; completed-task restart adds zero writes/models; no human approval or real Gitee metadata",
+    "realFailureInjectionComplete": false,
+    "review": {
+      "contract": 1,
+      "modelTool": false,
+      "automaticResume": false,
+      "mutationReplay": false,
+      "claimRotation": "explicit proof-bound same-request epoch and endpoint; no budget reset",
+      "legacyIntents": "hold if wire fingerprint missing",
+      "completedReceipt": "record only, never reopen",
+      "actualFaultCampaignVerified": true,
+      "actualFaultScope": "real Mac/ECS isolated Hosts; injected lost write acknowledgement and owned SSH shutdown; both restart with held fence; durable receipt reconciliation and explicit same-request rotation; one total fixture file write, two six-case tests; synthetic operator approval and metadata; zero model/IM/Gitee calls"
+    }
+  },
+  "developmentClaimCandidate": {
+    "capability": "development_claim:1",
+    "internalOnly": true,
+    "automaticResume": false,
+    "realMacEcsClaimLossVerified": true,
+    "readOnlyReceipt": true,
+    "reviewRequiredToResume": true,
+    "missingReceiptNeverImpliesIdle": true
+  },
+  "schedulerOwnerMigration": {
+    "operatorOnly": true,
+    "automaticLegacyAdoption": false,
+    "preservesPriorLockPort": true,
+    "backupRequired": true,
+    "replaysJobs": false,
+    "nativeProcessIsolation": false
+  },
+  "workspaceDevelopmentCandidate": {
+    "contract": "workspace-v1",
+    "gateAndContainer": true,
+    "nativeWorkerEnabled": "explicit workspace.enabled only",
+    "peerBridgeEnabled": "explicit workspace.enabled and bridge=true only",
+    "requiredRuntime": "operator-approved local Linux Docker, installed immutable image",
+    "scope": "candidate approved-plan native worker, persistent budgets, multi-file peer handoff and explicit interruption recovery; no formal deployment",
+    "pending": [
+      "roadmap 15 controlled commit/push delivery adapter (requires explicit isolated-test authorization); no actual executor enabled",
+      "roadmap 16 full dual rollback/delivery and final live UI visual regression"
+    ],
+    "jobVersion": "0.22.0",
+    "capability": "development_workspace:1",
+    "realDshHostIntegration": true,
+    "completedTaskRestart": true,
+    "syntheticOperatorApproval": true,
+    "humanApprovalVerified": false,
+    "actualModelPolicy": {
+      "provider": "deepseek-official",
+      "model": "deepseek-flash",
+      "reasoningEffort": "high"
+    },
+    "actualModelRequests": 8,
+    "actualFixtureFiles": 2,
+    "actualContainerCommands": 2,
+    "peerBridgeCapability": "development_workspace_bridge:1",
+    "peerReceiptRecovery": "original completed receipts or explicit failed drain review of known started containers; unresolved cases remain held",
+    "realMultiFilePeerVerified": true,
+    "realPeerFaultScope": "Synthetic operator fixture on actual Mac/ECS Hosts: cloud busy queues local; two-file gate; completed command response discarded and own SSH closed; both restart with same fence; exact receipt reconciliation and explicit epoch rotation; three total writes and six real container commands; no model/IM/Gitee network or business repository effects",
+    "completedPeerRestartNoReplay": true,
+    "unknownContainerRecoveryVerified": true,
+    "unknownContainerRecoveryScope": "alpha.4 exact persisted started container ID; two real ECS Host crashes; stop observed before lost receipt; no inferred success or budget refund",
+    "nativeWorkerRecovery": {
+      "operatorOnly": true,
+      "modelTool": false,
+      "preservesOriginalJob": true,
+      "requiresSeparateResume": true,
+      "preservesAppliedManifest": true,
+      "unknownModelReservationsCount": true,
+      "realHostCrashAfterWrite": true,
+      "pausedRestartNoReplay": true,
+      "completedRestartNoReplay": true,
+      "actualModelRequests": 12,
+      "unknownRequests": 1,
+      "modelRequestLimit": 24,
+      "actualFilesWritten": 2,
+      "actualCommands": 2,
+      "attempts": 2,
+      "syntheticOperatorApproval": true,
+      "humanApproval": false
+    },
+    "nativeChatDuringDevelopment": {
+      "verified": true,
+      "hosts": [
+        "Mac local",
+        "ECS cloud"
+      ],
+      "standardPresetAndToolsUnchanged": true,
+      "separateSessions": true,
+      "realModelReplies": true,
+      "reply": "56",
+      "evidence": "s41-alpha6-concurrency-audit.json",
+      "cloudContainerObservedRunningBeforeAndAfter": true,
+      "entryReturnMs": 111,
+      "workerRequests": 9,
+      "chatRequests": 2,
+      "syntheticOperatorFixture": true,
+      "formalDeployment": false
+    }
+  },
+  "developmentRepairAcceptance": {
+    "candidate": true,
+    "realModel": "task-selected deepseek-official/deepseek-flash/high; not a default",
+    "repair": {
+      "writes": 2,
+      "writeLimit": 3,
+      "commands": 2,
+      "failedThenPassed": true,
+      "modelRequests": 8
+    },
+    "exhausted": {
+      "writes": 1,
+      "writeLimit": 1,
+      "commands": 1,
+      "modelRequests": 6,
+      "state": "needs_review",
+      "successArtifact": false,
+      "automaticRetry": false
+    },
+    "failureExplanation": "durable self-owned attention snapshot + job checkpoint + notification event + read-only board",
+    "failureSnapshotIsAuthorityToExecute": false,
+    "sameTaskRestartNoReplay": true,
+    "formalDeployment": false,
+    "liveUiVisualReview": "pending final integration; computer-use local-file bootstrap was blocked, no circumvention",
+    "newImDeliveryTest": false
+  },
+  "deliveryPreviewCandidate": {
+    "schema": 1,
+    "version": "0.24.0-alpha.2",
+    "capability": "delivery_preview:1",
+    "methods": [
+      "delivery_preview",
+      "delivery_status",
+      "delivery_file_page"
+    ],
+    "registersOnlyOwnMetadata": true,
+    "automaticRefresh": false,
+    "commit": false,
+    "push": false,
+    "publish": false,
+    "deploy": false,
+    "approvalBinding": "server-resolved immutable preview + exact file digest, baseline, branch, tests and commit message; bookkeeping only; no executor",
+    "diff": "bounded summary plus explicit before/after Unicode-codepoint pages; each page rechecks full tested workspace; not an executable patch",
+    "formalDeployment": false,
+    "liveHostValidation": "actual isolated Mac/local and ECS/cloud DSH Hosts; synthetic operator approval; one new temporary file and one real container command; zero model/IM; same-state restart no replay",
+    "liveUiVisualReview": "pending normal authorized browser entry; compiled UI, contract and actual board RPC verified, not screen evidence",
+    "reviewCapability": "delivery_review:1",
+    "restartNoReplay": true,
+    "syntheticOperatorApproval": true,
+    "humanApprovalVerified": false,
+    "evidenceStatus": "inherited alpha.2 evidence; not a fresh alpha.3 actual Host/visual validation"
+  },
+  "deliveryExecutionFoundation": {
+    "version": "0.24.0-alpha.3",
+    "internalOnly": true,
+    "publicExecution": false,
+    "defaultEnabled": false,
+    "newLedgerConstructedByGateway": false,
+    "pureObjectCompiler": true,
+    "computedObjectIsPersisted": false,
+    "journalContract": "commit-execution-intent-v1",
+    "requiredFutureAuthority": "delivery-execution-v1; private ledger issuer implemented in alpha.6, no public runtime wiring",
+    "legacyPreviewNeverExecutable": true,
+    "crossQueueOrder": "same Coordinator SQLite transaction; development seq cutoff + delivery seq",
+    "unknownEffect": "needs_review; retain resource/fence; no auto retry",
+    "actualGitWrites": false,
+    "pushAdapter": false,
+    "realHostValidation": false,
+    "formalDeployment": false,
+    "evidenceStatus": "inherited alpha.3 foundation evidence; current observer changes have separate selective validation"
+  },
+  "deliveryGitReadCandidate": {
+    "version": "0.24.0-alpha.4",
+    "readOnly": true,
+    "publicExecution": false,
+    "actualGitWrites": false,
+    "strictGitCommandWhitelist": true,
+    "rawBinaryObjectVerification": true,
+    "unsafeConfigRefused": true,
+    "unappliedRequiresExactBeforeSnapshot": true,
+    "objectsOnlyRemainReview": true,
+    "executionApprovalOneShot": true,
+    "actualExistingECSRepositoryRead": true,
+    "liveTestHashAndDrain": "synthetic caller evidence, not production approval or process-tree attestation",
+    "writeAdapter": false,
+    "pushAdapter": false,
+    "formalDeployment": false,
+    "evidenceStatus": "inherited alpha.4 actual readonly evidence; alpha.5 owned-lock support separately regression tested"
+  },
+  "deliveryCommitCandidate": {
+    "version": "0.24.0-alpha.5",
+    "sourceImplemented": true,
+    "defaultEnabled": false,
+    "publicExecution": false,
+    "actualCommitExecutionTested": false,
+    "mutationTests": "in-memory filesystem/Git substitutes; actual SQLite and one non-Git child abort",
+    "index": "private in-memory v2 buffer, stage0 and no assume-valid/sparse flags",
+    "reference": "explicit branch and old/new OID CAS; never default tracking",
+    "durableOperations": [
+      "lock",
+      "object",
+      "reference",
+      "index",
+      "unlock"
+    ],
+    "unknown": "no automatic retry/reset; operation drain and inode-bound cleanup",
+    "signing": "raw unsigned commit object; future approval must disclose",
+    "pushAdapter": false,
+    "formalDeployment": false
+  },
+  "deliveryApprovalCandidate": {
+    "version": "0.24.0-alpha.6",
+    "defaultEnabled": false,
+    "publicRuntimeWired": false,
+    "opaqueReference": "commit-execution-reference-v1",
+    "approvalSnapshot": "commit-execution-v1",
+    "authority": "delivery-execution-v1",
+    "legacyPreviewNeverExecutable": true,
+    "sourceEvidence": "completed development plus immutable preview, exact object plan and private preflight",
+    "freshRechecks": [
+      "task specification",
+      "workspace revision",
+      "repository binding",
+      "decision and consumed proof",
+      "source test and drain evidence"
+    ],
+    "chatTest": "real ledger and verifier with synthetic provider data; not human acceptance",
+    "webTest": "real cryptographic verification with software authenticator",
+    "processRestartTest": "new Node process reads durable candidate ledger; not a DSH Host test",
+    "gitWrites": false,
+    "pushAdapter": false,
+    "formalDeployment": false
+  },
+  "deliveryRecoveryCandidate": {
+    "version": "0.24.0-alpha.7",
+    "defaultEnabled": false,
+    "publicRuntimeWired": false,
+    "inspectionReadOnly": true,
+    "explicitDecisions": [
+      "clean_owned_locks",
+      "settle_not_applied",
+      "settle_completed"
+    ],
+    "unknownProcess": "retain review; PID absence is never accepted as drain proof",
+    "cleanupDoesNotReleaseTask": true,
+    "ownedLockProof": [
+      "physical directory",
+      "persisted inode identity",
+      "exact action marker or persisted prepared-index hash",
+      "fresh file identity and bytes"
+    ],
+    "automaticRetry": false,
+    "automaticReset": false,
+    "indexRepair": false,
+    "actualGitWriteRecoveryValidated": false,
+    "filesystemTests": "fresh non-repository temporary directories; real child exit and exact owned-file cleanup",
+    "formalDeployment": false
+  },
+  "deliveryRuntimeCandidate": {
+    "version": "0.24.0-alpha.8",
+    "defaultEnabled": false,
+    "defaultExecutionEnabled": false,
+    "publicStaging": "delivery_commit_plan:1",
+    "publicScheduling": "delivery_commit:1; operator switch + current exact ledger approval",
+    "approvalStartsExecution": false,
+    "objects": "durable private exact bytes; never model-supplied",
+    "readStatus": "additive bounded execution field in delivery_status and board_detail",
+    "startup": "active actions become needs_review; no automatic replay or lock deletion",
+    "shutdown": "abort own action and wait before scheduler owner closes",
+    "realGitCommitValidated": false,
+    "realGiteePushValidated": false,
+    "formalDeployment": false,
+    "liveVisualReview": false
+  },
+  "deliveryPushCandidate": {
+    "version": "0.24.0-alpha.9",
+    "defaultEnabled": false,
+    "publicRuntimeWired": true,
+    "transportImplemented": true,
+    "trustedApprovalBridgeImplemented": true,
+    "plan": "push-commit-v1",
+    "authorityScope": "push",
+    "source": "exact completed commit readback and current workspace revision",
+    "queue": "shared delivery_actions resource FIFO with development cutoff",
+    "maxPushOperations": 1,
+    "remoteCAS": "exact ref and expected OID or explicit absence; ancestry proof separately required",
+    "unchangedRefProvesNotApplied": false,
+    "historicalReadback": "ref_observed, never deployment or release",
+    "actualPushValidated": false,
+    "formalDeployment": false,
+    "transportVersion": "0.24.0-alpha.10",
+    "approvalRuntimeVersion": "0.24.0-alpha.11"
+  },
+  "deliveryPushTransportCandidate": {
+    "version": "0.24.0-alpha.10",
+    "defaultEnabled": false,
+    "publicRuntimeWired": true,
+    "executionPlatform": "Linux cloud only; cross-platform clients use own RPC",
+    "credentials": "operator key and known-hosts files, metadata pinned, not copied or logged",
+    "identity": "fixed gitee.com SSH plus independent official read-only repository ID check",
+    "cas": "fixed source OID/ref/old OID with separately verified ancestor graph",
+    "processDrain": "private Python3 Linux subreaper; ECHILD after descendant reaping and pipe closure, plus nonce-bound supervisor report",
+    "unknownReport": "retain unclosed operation; supervisor exit alone is not drain",
+    "timeout": "terminate only own unreaped direct/adopted children, never cached process groups",
+    "actualGiteePushValidated": false,
+    "approvalBridgeImplemented": true,
+    "formalDeployment": false,
+    "approvalRuntimeVersion": "0.24.0-alpha.11"
+  },
+  "deliveryPushApprovalRuntimeCandidate": {
+    "version": "0.24.0-alpha.11",
+    "defaultEnabled": false,
+    "defaultExecutionEnabled": false,
+    "stagingCapability": "delivery_push_plan:1",
+    "executionCapability": "delivery_push:1",
+    "approval": "independent push-execution-v1 over durable completed commit readback",
+    "trustedProof": "independently verified chat reply; historical recorded credentials remain auditable, retired ceremonies cannot mint new authority",
+    "approvalStartsExecution": false,
+    "worker": "cloud independent promise; separate push switch, shared resource FIFO and fencing",
+    "restart": "queued retains exact intent; active becomes needs_review, never resend unknown",
+    "runtimeProjection": "independent commit/push switches; historical remote evidence only",
+    "actualGiteePushValidated": false,
+    "formalDeployment": false
+  },
+  "deliveryProcessReceiptCandidate": {
+    "version": "0.24.0-alpha.12",
+    "defaultEnabled": false,
+    "publicRecoveryTool": false,
+    "automaticReconciliation": false,
+    "scope": "Linux cloud push subprocesses; commit adapter unchanged",
+    "storage": "private pinned directory, one binding per operation, redacted sealed report, exclusive publication and fsync",
+    "binding": [
+      "operation",
+      "action",
+      "epoch",
+      "intent",
+      "plan",
+      "nonce",
+      "boot ID",
+      "directory identity",
+      "journaled supervisor PID"
+    ],
+    "proof": "ECHILD and drained pipes plus exact terminal receipt and original supervisor no longer executing",
+    "unknown": "missing/corrupt/replaced evidence retains hold; PID absence alone never sufficient",
+    "closingReceiptReleasesTask": false,
+    "settlement": "explicit operator + independent fresh local/provider/remote readback; never resend or prove not-applied from unchanged ref",
+    "realGiteePushValidated": false,
+    "hostPowerLossValidated": false,
+    "formalDeployment": false
+  },
+  "approvalReference": {
+    "contract": 1,
+    "mode": "read-only-exact-stored-quote",
+    "currentReplyVerified": false,
+    "imConsumerChanged": false,
+    "unresolvedIsApprovalFailure": false
+  },
+  "modelSelection": {
+    "contract": 1,
+    "catalog": "target Host public llm API",
+    "nativeTool": "task_model_resolve",
+    "clarification": "plain text; no required IM card callback",
+    "changesGlobalDefault": false,
+    "approvesExecution": false
+  },
+  "onboarding": {
+    "contract": 1,
+    "mode": "read-only-default; explicit isolated storage and rules installation opt-in",
+    "pages": 6,
+    "automaticInitialization": false,
+    "credentialStorage": true,
+    "remoteDiscovery": true,
+    "credentialStorageDefault": false,
+    "draftPersistence": true,
+    "storage": "official credentials public record seam; own namespace only",
+    "cloudCredentialTransfer": false,
+    "encryptedByPlugin": false,
+    "osIdentityIsolation": false,
+    "remoteDiscoveryDefault": false,
+    "cloudPreflight": {
+      "contract": 1,
+      "transport": "public SSH CLI, strict pinned host keys",
+      "credential": "existing identity path or SSH agent; never copy private keys",
+      "remoteWrites": false,
+      "initializationExecutor": false,
+      "planExecutable": false,
+      "linuxRuntimeMinimumMajor": 22,
+      "testedViaMacToECS": true,
+      "nativeWindowsSSHVerified": false,
+      "formalDeployment": false
+    },
+    "cloudPreparation": {
+      "contract": 1,
+      "defaultEnabled": false,
+      "scope": "explicit isolated candidate-source staging only; no runtime or Host installation",
+      "transport": "strict pinned SSH; fixed command and bounded stdin; no model tool",
+      "authority": "official credential grant namespace with compare-and-swap; signed remote owner/journal",
+      "source": "exact distributable manifest; original controller and package archived per operation",
+      "recovery": "manual reconcile; no automatic retry; active/unknown process blocks rollback",
+      "rollback": "only exact owned files; unknown/edited files and directories preserved for review",
+      "initialization": false,
+      "hostStarted": false,
+      "testedViaMacToECS": true,
+      "formalDeployment": false,
+      "unknownRetirement": {
+        "contract": 1,
+        "requiresExplicitConfirmation": true,
+        "barrier": "atomic no-replace regular file at original directory pathname",
+        "terminatesOriginalProcess": false,
+        "retainsBarrier": true,
+        "replacementRequiresDifferentInstallationId": true,
+        "historicalBindingAndProof": "official own credential records, not plaintext evidence",
+        "legacyController": "audited source-only alpha.2 digest",
+        "formalDeployment": false
+      }
+    }
+  },
+  "onboardingIntegration": {
+    "officialPackage": "@deepseek-ai/dsh@0.2.1-rc.2",
+    "phase": "candidate",
+    "scope": "fresh isolated macOS Web Host; no real credentials/model calls/ECS",
+    "nativeModesUnchanged": true,
+    "minimalModeLoadsGlobalRulesOrSkills": false,
+    "pathsRemainCandidates": true
+  },
+  "onboardingInstallation": {
+    "contract": 1,
+    "defaultEnabled": false,
+    "scope": "isolated current Host global AGENTS and bundled global Skills only",
+    "previewTTLSeconds": 300,
+    "requiresExplicitApply": true,
+    "overwritesUserRules": false,
+    "unknownSkillConflict": "block entire transaction",
+    "existingOwnedUpgrade": false,
+    "recovery": "explicit exact-postimage rollback; preserve concurrent edits for review",
+    "activation": "separate official scoped-session observation; minimal mode unchanged",
+    "testedOfficialHost": "@deepseek-ai/dsh@0.2.1-rc.2 on macOS",
+    "ecsInitialization": false,
+    "formalDeployment": false
+  },
+  "onboardingNodeBootstrap": {
+    "node": "22.23.4",
+    "architectures": [
+      "linux-x64",
+      "linux-arm64"
+    ],
+    "minimumKernel": "4.18",
+    "minimumGlibc": "2.28",
+    "minimumPython": "3.8",
+    "globalNodeMutation": false,
+    "autoRetry": false,
+    "releaseSource": "https://nodejs.org/dist/v22.23.4/SHASUMS256.txt"
+  },
+  "onboardingHostRestart": 1,
+  "onboardingRuntimeCleanup": 1,
+  "onboardingModelBinding": 1,
+  "onboardingSetupIdentity": 1,
+  "onboardingCloudHandoff": 2,
+  "onboardingCloudModels": 1,
+  "onboardingCloudTokenPlan": 1,
+  "onboardingCloudIm": 1,
+  "onboardingOptionalIm": 1,
+  "onboardingCloudWeb": 1,
+  "onboardingCloudRepository": 1,
+  "onboardingCloudRepositoryRegistry": 1,
+  "onboardingCloudTaskRuntime": 1,
+  "onboardingPeerBinding": 1,
+  "onboardingLocalPair": 1,
+  "onboardingCloudModelProbe": 2,
+  "onboardingModelClarification": 1,
+  "onboardingManagedFiles": 2,
+  "onboardingCloudFiles": 1,
+  "onboardingFileScopeMigration": 1,
+  "onboardingCloudFileMigration": 1,
+  "onboardingFileQueueReview": 2,
+  "onboardingCloudFileQueueReview": 1,
+  "onboardingRuntimeStopPlan": 1,
+  "onboardingMaintenanceHoldContract": 1,
+  "coordinatedMaintenanceHoldContract": 1,
+  "onboardingStartupRecoveryContract": 1,
+  "maintenanceRecordContract": 2,
+  "onboardingHostRestartConsent": 1,
+  "onboardingInspectionGuard": 1,
+  "onboardingHostStopConsent": 1,
+  "onboardingPluginRepair": 1,
+  "onboardingPluginRepairActivation": 1,
+  "onboardingPluginVersion": 1,
+  "onboardingPluginVersionClient": 1,
+  "onboardingPluginVersionRequests": 1,
+  "onboardingPluginVersionArtifacts": 1,
+  "onboardingPluginVersionArtifactsClient": 1,
+  "onboardingPluginVersionLifecycle": 1,
+  "onboardingNativePluginIdentity": 1,
+  "onboardingVersionRepair": 1,
+  "onboardingVersionRepairActivation": 1,
+  "onboardingPluginUninstall": 1,
+  "onboardingPluginUninstallRequests": 1,
+  "onboardingRuntimeReclamation": 1,
+  "onboardingRuntimeReclamationRequests": 1,
+  "onboardingRuntimeReclamationWorker": 1,
+  "onboardingVersionActivation": 1,
+  "additionalHostCompatibility": {
+    "host": "0.2.1-rc.3",
+    "scope": "S60 isolated rc.3 Mac/ECS owned onboarding runtime and native presets; ECS actual read-only worker + restart; real IM acceptance pending",
+    "productionRestored": false
+  },
+  "onboardingNotificationDefaults": 1,
+  "onboardingExistingHostInspection": {
+    "contract": 1,
+    "scope": "existing_pair_review_only",
+    "ownershipGranted": false,
+    "configurationChanged": false,
+    "formalValidation": false
+  },
+  "onboardingExistingSetup": {
+    "contract": 1,
+    "scope": "preserve_existing_configuration",
+    "nativeConfigurationChanged": false,
+    "ownershipGranted": false,
+    "receiptOnly": true,
+    "formalValidation": false
+  },
+  "taskInterventions": {
+    "capability": "task_interventions:1",
+    "authority": "cloud_observation_ledger",
+    "refresh": "explicit task detail observation only",
+    "directApproval": false,
+    "automaticRetry": false,
+    "sessionIndependent": true,
+    "productionDeployed": false
+  },
+  "workbenchInteraction": {
+    "capability": "approval_interaction:1",
+    "identity": "existing_bound_im_private_chat",
+    "windowTTLSeconds": 600,
+    "newRegistration": false,
+    "passkeys": false,
+    "imRoute": "explicit_local_binding_via_paired_platform_relay",
+    "automaticExecution": false,
+    "testedHost": "0.2.1-rc.3 isolated Web roles on macOS",
+    "identitySourceTest": "real isolated test Feishu; authorized browser proxy input, not manual business approval",
+    "nativeDesktopAcceptance": false,
+    "productionDeployed": false
+  },
+  "localApprovalRelay": {
+    "capability": "approval_local:1",
+    "defaultEnabled": false,
+    "credentials": "local_host_only",
+    "fixedPrivateChat": true,
+    "sessionIndependent": true,
+    "secondImConsumer": false,
+    "notificationTarget": "same_bot_same_private_chat; existing task consent unchanged",
+    "offline": "wait; never fallback to cloud bot",
+    "restart": "claimed operations need review; no replay",
+    "productionDeployed": false,
+    "realPlatformTest": "local isolated official Web roles + real test Feishu; not production ECS/Desktop"
+  }
+}