@moretea-labs/forge 1.5.1 → 1.7.0

package/assets/hooks/prompt-guard.sh

@@ -139,7 +139,7 @@ plan_evidence_contract_error() {
   fi
 
   local label line value
-  for label in "State/progress path" "Verification evidence" "Evaluator rubric" "Stop condition" "Rollback surface"; do
+  for label in "State/progress path" "Verification evidence" "Impact review|Evaluator rubric" "Stop condition" "Rollback surface"; do
     line="$(printf '%s\n' "$section" | grep -Ei "^[[:space:]]*-[[:space:]]*(\\*\\*)?${label}(\\*\\*)?[[:space:]]*:" | head -1 || true)"
     if [[ -z "$line" ]]; then
       echo "missing field: ${label}"
@@ -656,7 +656,6 @@ emit_forge_route_hint() {
 
   if pg_fact REVIEW_RELEASE; then
     echo "[ForgeRoute] Review/release intent detected. Use /review first; use /release only after review evidence is clear."
-    emit_external_acceptance_prompt review
     emit_cross_review_hint merge
   fi
 }
@@ -684,50 +683,6 @@ emit_cross_review_hint() {
   esac
 }
 
-emit_external_acceptance_prompt() {
-  local mode="${1:-review}"
-  local expected_reviewer expected_source command active_plan_local contract_file_local review_file checks_file
-
-  expected_reviewer="$(workflow_external_acceptance_expected_reviewer)"
-  expected_source="$(workflow_external_acceptance_expected_source "$expected_reviewer")"
-  if [ "$expected_source" = "claude-review" ]; then
-    command="/claude-review"
-  else
-    command="codex-review"
-  fi
-
-  active_plan_local="$(get_active_plan || true)"
-  contract_file_local="$(workflow_active_contract || true)"
-  review_file="$(workflow_active_review || true)"
-  checks_file="$(workflow_checks_file)"
-
-  echo "[ExternalAcceptance] Review/release intent detected. Start peer acceptance in parallel with local /review and focused checks."
-  echo "[ExternalAcceptance] Mode: $mode"
-  echo "[ExternalAcceptance] Current active plan: ${active_plan_local:-"(none)"}"
-  echo "[ExternalAcceptance] Current contract: ${contract_file_local:-"(none)"}"
-  echo "[ExternalAcceptance] Current review: ${review_file:-tasks/reviews/<slug>.review.md}"
-  echo "[ExternalAcceptance] Current checks: $checks_file"
-  echo "[ExternalAcceptance] Peer reviewer: $expected_reviewer via $command"
-  echo "[ExternalAcceptance] Diff scope for peer: branch diff against target, staged diff, unstaged diff, and untracked files."
-  cat <<EOF_EXTERNAL_ACCEPTANCE
-[ExternalAcceptance] Prompt to send with $command:
-Review the current sprint for acceptance only. Do not run Forge /review or local checks. Do not edit files. Do not write files. Inspect the diff scope, contract, review evidence, and checks evidence, then return only a Markdown block that can be pasted into ${review_file:-tasks/reviews/<slug>.review.md}.
-
-## External Acceptance Advice
-> **External Acceptance**: pass
-> **External Reviewer**: $expected_reviewer
-> **External Source**: $expected_source
-> **External Started**: YYYY-MM-DDTHH:MM:SS+0800
-> **External Completed**: YYYY-MM-DDTHH:MM:SS+0800
-
-- P1 blockers: none
-- P2 advisories:
-- Acceptance checklist: pass
-
-If the peer CLI is unavailable, record **External Acceptance**: unavailable and include the failure reason. That does not satisfy the completion gate unless a Manual Override: line with a concrete reason is also recorded.
-EOF_EXTERNAL_ACCEPTANCE
-}
-
 # --- Action rendering ---
 # Plan/spec/contract prompt gates are advisory (exit 0): pre-edit-guard.sh
 # enforces the same state deterministically at the edit boundary. Done-claim
@@ -768,7 +723,7 @@ render_prompt_guard_action() {
       exit 0
       ;;
     plan_status_no_active_block)
-      echo "[PlanStatusGuard] Advisory: No active plan found in plans/. Implementation edits will be blocked at the edit layer until a plan is captured."
+      echo "[PlanStatusGuard] Legacy advisory: no active Plan found. Ordinary implementation is not gated by Plan presence."
       echo "[PlanStatusGuard] Capture the approved planning output with: bash scripts/capture-plan.sh --slug <slug> --title <title> --status Approved --execute"
       echo "[PlanStatusGuard] If there is no captured planning output yet, run: bash scripts/ensure-task-workflow.sh --slug <slug> --title <title>"
       exit 0
@@ -780,13 +735,13 @@ render_prompt_guard_action() {
       exit 0
       ;;
     plan_status_not_approved_block)
-      echo "[PlanStatusGuard] Advisory: plan status is '$plan_status' in $active_plan. Complete the annotation cycle and move the plan to Approved; implementation edits are blocked at the edit layer until then."
+      echo "[PlanStatusGuard] Legacy advisory: plan status is '$plan_status' in $active_plan. This does not authorize or block ordinary implementation."
       exit 0
       ;;
     evidence_contract_block)
       echo "[EvidenceContractGuard] Advisory: plan Evidence Contract is incomplete in $active_plan:"
       printf '%s\n' "$evidence_error"
-      echo "[EvidenceContractGuard] Fill ## Evidence Contract with state/progress path, verification evidence, evaluator rubric, stop condition, and rollback surface before implementation."
+      echo "[EvidenceContractGuard] Fill ## Evidence Contract with state/progress path, verification evidence, impact review, stop condition, and rollback surface before implementation."
       exit 0
       ;;
     plan_execution_scaffold_advice)
@@ -833,7 +788,7 @@ render_prompt_guard_action() {
       hook_structured_error \
         "EvidenceContractGuard" \
         "Done intent detected without a complete plan Evidence Contract." \
-        "Fill ## Evidence Contract with state/progress path, verification evidence, evaluator rubric, stop condition, and rollback surface before marking work done." \
+        "Fill ## Evidence Contract with state/progress path, verification evidence, impact review, stop condition, and rollback surface before marking work done." \
         "quality_gate"
       exit 2
       ;;
@@ -962,38 +917,7 @@ if [ "$done_intent" -eq 1 ]; then
     echo "[ContractGuard] verify-contract.sh not found at scripts/verify-contract.sh (degraded mode: skipping strict verification)."
   fi
 
-  review_file="$(workflow_active_review || true)"
-  if [ -z "$review_file" ] || [ ! -f "$review_file" ]; then
-    echo "[ReviewGuard] Missing sprint review: ${review_file:-tasks/reviews/<slug>.review.md}"
-    hook_structured_error \
-      "ReviewGuard" \
-      "Done intent detected without a sprint review artifact." \
-      "Run Forge /review after verification and record the evaluator recommendation in tasks/reviews/<slug>.review.md before marking work done." \
-      "quality_gate"
-    exit 2
-  fi
-
-  if ! workflow_review_recommends_pass "$review_file"; then
-    echo "[ReviewGuard] Sprint review does not recommend pass: $review_file"
-    hook_structured_error \
-      "ReviewGuard" \
-      "Sprint review is missing a passing recommendation." \
-      "Run Forge /review with fresh verification evidence and record a pass recommendation before marking work done." \
-      "quality_gate"
-    exit 2
-  fi
-
-  external_status="$(workflow_external_acceptance_status "$review_file")"
-  IFS=$'\t' read -r external_state external_reviewer external_source external_message <<< "$external_status"
-  if [ "$external_state" != "pass" ] && [ "$external_state" != "manual_override" ]; then
-    echo "[ExternalAcceptanceGuard] ${external_message:-External acceptance is missing.}"
-    hook_structured_error \
-      "ExternalAcceptanceGuard" \
-      "${external_message:-External acceptance is missing from $review_file.}" \
-      "Run peer acceptance via $(workflow_external_acceptance_expected_source) and record ## External Acceptance Advice in $review_file before marking work done." \
-      "quality_gate"
-    exit 2
-  fi
+  echo "[Review] Before declaring completion, freshly re-evaluate user intent, affected domains, downstream consumers, and missing state transitions."
 
   checks_file="$(workflow_checks_file)"
   if [ ! -f "$checks_file" ]; then
@@ -1006,7 +930,7 @@ if [ "$done_intent" -eq 1 ]; then
     exit 2
   fi
 
-  if ! checks_error="$(workflow_checks_pass "$checks_file" "$contract_file" "$review_file")"; then
+  if ! checks_error="$(workflow_checks_pass "$checks_file" "$contract_file")"; then
     echo "[EvidenceGuard] $checks_error"
     hook_structured_error \
       "EvidenceGuard" \

package/assets/hooks/session-start-context.sh

@@ -397,16 +397,71 @@ current_status_field() {
   ' "$file" | xargs
 }
 
+current_status_stale_after() {
+  local file="$1"
+  local value
+  value="$(current_status_field "$file" "Stale After" 2>/dev/null || true)"
+  if [[ -z "$value" ]]; then
+    value="$(sed -nE 's/^<!--[[:space:]]*stale_after:[[:space:]]*([^[:space:]]+)[[:space:]]*-->$/\1/p' "$file" 2>/dev/null | head -1)"
+  fi
+  printf '%s' "$value"
+}
+
+current_status_updated_epoch() {
+  local value="$1"
+  if date -d "$value" '+%s' >/dev/null 2>&1; then
+    date -d "$value" '+%s'
+    return 0
+  fi
+  date -j -f '%Y-%m-%dT%H:%M:%S%z' "$value" '+%s' 2>/dev/null
+}
+
+# Returns success when the declared freshness contract says the snapshot is
+# expired. A malformed timestamp/duration fails closed once stale_after exists.
+current_status_snapshot_is_stale() {
+  local updated="$1"
+  local stale_after="$2"
+  local amount unit multiplier updated_epoch now_epoch
+  [[ -n "$stale_after" ]] || return 1
+  if [[ ! "$stale_after" =~ ^([0-9]+)([smhd])$ ]]; then
+    return 0
+  fi
+  amount="${BASH_REMATCH[1]}"
+  unit="${BASH_REMATCH[2]}"
+  case "$unit" in
+    s) multiplier=1 ;;
+    m) multiplier=60 ;;
+    h) multiplier=3600 ;;
+    d) multiplier=86400 ;;
+  esac
+  updated_epoch="$(current_status_updated_epoch "$updated" || true)"
+  [[ "$updated_epoch" =~ ^[0-9]+$ ]] || return 0
+  now_epoch="${FORGE_CURRENT_STATUS_NOW_EPOCH:-$(date '+%s')}"
+  [[ "$now_epoch" =~ ^[0-9]+$ ]] || return 0
+  (( now_epoch - updated_epoch >= amount * multiplier ))
+}
+
 current_status_snapshot_context() {
   local current_file="tasks/current.md"
-  local target branch status updated source_commit target_status target_updated
+  local target branch status updated stale_after source_commit target_status target_updated
 
   target="$(workflow_target_branch)"
   branch="$(workflow_current_branch)"
   status="$(current_status_field "$current_file" "Status" 2>/dev/null || true)"
   updated="$(current_status_field "$current_file" "Updated At" 2>/dev/null || true)"
+  stale_after="$(current_status_stale_after "$current_file" 2>/dev/null || true)"
   source_commit="$(current_status_field "$current_file" "Source Commit" 2>/dev/null || true)"
 
+  if current_status_snapshot_is_stale "$updated" "$stale_after"; then
+    cat <<EOF_CONTEXT
+# Stale Current Status Snapshot
+
+- Ignored snapshot: `${current_file}` exceeded its declared freshness contract.
+- Rule: do not use its status, source commit, or focus as current truth; rebuild from active plans, workstreams, handoff, checks, and the target branch.
+EOF_CONTEXT
+    return 0
+  fi
+
   if [[ -z "$status" ]]; then
     if [[ "$branch" != "$target" ]] && git rev-parse --verify --quiet "$target" >/dev/null 2>&1 \
       && git show "${target}:tasks/current.md" >/dev/null 2>&1; then

package/assets/partials/05-workflow.partial.md

@@ -28,7 +28,7 @@ PLAN_LOOP:
   LESSONS_FILE: tasks/lessons.md
   CONTEXT_MAP: .ai/context/context-map.json
   ANNOTATION_GUARD: do not implement until plan Status is "Approved"
-  CONTRACT_GUARD: do not mark done until contract exit criteria pass and review recommends pass
+  CONTRACT_GUARD: do not mark done until contract exit criteria pass; then perform a fresh semantic impact review
   EXECUTION_CONTEXT: contract-level work starts in a linked codex/<slug> worktree when policy enables it; primary worktree warning by default; enforce via .claude/.require-worktree
   CONTRACT_WORKTREE_FINISH: run Forge /review, fill the review artifact from that verdict, then .ai/harness/scripts/contract-worktree.sh finish
   COMMIT_POLICY: explicit commits after green checks; no automatic checkpoint hook

package/assets/partials-agents/03-orchestration.partial.md

@@ -34,7 +34,7 @@
 ### 6b. Contract Verification
 - Use task contracts in `tasks/contracts/` as completion gates.
 - Use implementation notes in `tasks/notes/` for task-local decisions that should not automatically become memory.
-- Validate exit criteria and the Forge `/review` review recommendation before any done/completed response.
+- Validate direct exit criteria, then use Forge `/review` to reassess intent, downstream impact, and missing state transitions before any done/completed response.
 
 ### 7. Balanced Elegance
 - Redesign hacky non-trivial fixes before shipping.

package/assets/plugin-registry.v1.json

@@ -1,8 +1,59 @@
 {
   "schemaVersion": 1,
   "plugins": [
-    {"id":"desktop_operator","name":"Forge Desktop Operator","version":"0.2.1","description":"Native macOS desktop automation provider for Forge.","repository":"https://github.com/moretea-labs/forge-desktop-operator.git","ref":"v0.2.1","installer":"forge-plugin-install.mjs","platforms":["darwin"]},
-    {"id":"design","name":"Forge Design","version":"0.3.0","description":"Repository-native deterministic design workspace and design.md provider.","repository":"https://github.com/moretea-labs/forge-design.git","ref":"v0.3.0","installer":"forge-plugin-install.mjs","platforms":["darwin","linux","win32"]},
-    {"id":"personal_knowledge","name":"Personal Knowledge Assistant","version":"0.2.1","description":"Local-first personal knowledge retrieval, memory, safe-write and analysis provider.","repository":"https://github.com/moretea-labs/personal-knowledge-assistant.git","ref":"v0.2.1","installer":"forge-plugin-install.mjs","platforms":["darwin","linux","win32"]}
+    {
+      "id": "desktop_operator",
+      "name": "Forge Desktop Operator",
+      "version": "0.2.1",
+      "description": "Native macOS desktop automation provider for Forge.",
+      "repository": "https://github.com/moretea-labs/forge-desktop-operator.git",
+      "ref": "v0.2.1",
+      "installer": "forge-plugin-install.mjs",
+      "providerVersion": "0.2.1",
+      "protocolVersion": "1.0",
+      "platforms": [
+        "darwin"
+      ]
+    },
+    {
+      "id": "design",
+      "name": "Forge Design",
+      "version": "0.3.0",
+      "description": "Repository-native deterministic design workspace and design.md provider.",
+      "repository": "https://github.com/moretea-labs/forge-design.git",
+      "ref": "v0.3.0",
+      "installer": "forge-plugin-install.mjs",
+      "platforms": [
+        "darwin",
+        "linux",
+        "win32"
+      ]
+    },
+    {
+      "id": "personal_knowledge",
+      "name": "Personal Knowledge Assistant",
+      "version": "0.2.1",
+      "description": "Local-first personal knowledge retrieval, memory, safe-write and analysis provider.",
+      "repository": "https://github.com/moretea-labs/personal-knowledge-assistant.git",
+      "ref": "v0.2.1",
+      "installer": "forge-plugin-install.mjs",
+      "platforms": [
+        "darwin",
+        "linux",
+        "win32"
+      ]
+    },
+    {
+      "id": "figma",
+      "name": "Forge Figma Bridge",
+      "version": "0.3.0",
+      "description": "Direct Figma Plugin API bridge for typed canvas inspection, editing and native review capture.",
+      "repository": "https://github.com/moretea-labs/forge-figma-bridge.git",
+      "ref": "v0.3.0",
+      "installer": "forge-plugin-install.mjs",
+      "platforms": [
+        "darwin"
+      ]
+    }
   ]
 }

package/assets/reference-configs/document-generation.md

@@ -31,7 +31,7 @@ Create these only when the agent has concrete repo evidence or the user asks:
 - Prefer short docs that name sources, owners, and verification commands.
 - Let capability `CLAUDE.md` and `AGENTS.md` carry local contract projections; root docs stay concise.
 - Keep complete workstream TODOs in `tasks/workstreams/<domain>/<capability>/`; contract blocks should link to them instead of becoming task logs.
-- Keep onboarding docs split by reader: agents read active source artifacts first; humans review the Human Review Card, diff, latest trace, and rollback first.
+- Keep onboarding docs split by reader: agents read active source artifacts first; humans review the semantic-impact evidence, diff, latest checks, and recovery options first.
 - Hooks may create `docs/architecture/requests/*.md`; agents own semantic snapshots, embedded Mermaid, and optional `mermaid` HTML output.
 - Archive handled architecture requests with `.ai/harness/scripts/archive-architecture-request.sh`; keep `docs/architecture/requests/` pending-only and preserve handled requests under `docs/architecture/requests/archive/YYYY/`.
 - When both Mermaid and HTML exist, keep the Mermaid in Markdown as the semantic source and make the HTML link back to that Markdown source.

package/assets/reference-configs/harness-overview.md

@@ -92,7 +92,7 @@ Required v1 fields:
 - `commands`, `guards`, `handoffs`, `files_changed`, and `allowed_paths_check`
 - `external_acceptance`, `failure_class`, and `next_step`
 
-`scripts/check-task-workflow.sh --strict` validates the latest trace shape when a non-empty latest checks file exists. `scripts/harness-trace-grade.sh --run <trace> --strict` applies the local graders used for workflow regression checks: active plan resolves, contract profile is valid, Human Review Card passes, command evidence exists, and changed files stay inside allowed paths.
+`scripts/check-task-workflow.sh --strict` validates the latest trace shape when a non-empty latest checks file exists. Behavioral evidence comes from the selected checks and fresh controller review, not a score of plan or review metadata.
 
 ## Capability Context
 

package/assets/reference-configs/hook-operations.md

@@ -18,7 +18,7 @@ Generated host adapter commands carry a 30 second timeout; long-running work bel
 
 `UserPromptSubmit.default` dispatches to the active `prompt-guard.sh` resolved by the central-first hook source decision. For ordinary repos that means the packaged/user-level runtime; `.ai/hooks/prompt-guard.sh` is active only when the repo pins `"hook_source": "repo"`. The shell layer parses host prompt JSON, reads workflow files, performs capture side effects, and renders host-safe output; it pipes `{"prompt": ...}` into `forge-hook prompt-guard-decide`, which owns every prompt-text intent classifier (Unicode-aware, in `src/cli/hook/prompt-intents.ts`) plus the intent x state decision table and returns one verdict JSON line (action, intent facts, derived strings). If the engine is unreachable or predates the protocol, the prompt layer degrades to a one-shot advisory instead of guessing; there is no shell fallback decision table.
 
-Prompt-layer plan/spec/contract gates are advisory routing only. `PreToolUse.edit` keeps real path/scope and private-surface safety checks authoritative, while the plan-state gate defaults to `advice`; repositories may opt into `enforce` or `off` through policy `.guards.edit_plan_gate` or `FORGE_EDIT_PLAN_GATE`. Done-claim gates block only on real failed or missing completion evidence, not on workflow ceremony.
+Prompt-layer plan/spec/contract signals are advisory context only. `PreToolUse.edit` keeps real path/scope and private-surface safety checks authoritative; Plan/spec lifecycle is never a write-authorization gate. Legacy `.guards.edit_plan_gate=enforce` or `FORGE_EDIT_PLAN_GATE=enforce` is accepted as advisory compatibility, while `off` suppresses the guidance. Done-claim compatibility gates remain separate until goal-acceptance/evidence convergence removes workflow ceremony from completion.
 
 If you are asking "which hook file should I edit?", default to `assets/hooks/` for product changes and mirror into `.ai/hooks/` only for this self-host repo or another repo that pins `"hook_source": "repo"`; runtime pickup outside repo-pinned development happens on the next `install`/CLI upgrade because hooks resolve central-first.
 After installing or refreshing `~/.codex/hooks.json`, open Codex Settings and mark the user-level hook config as trusted; otherwise Codex will not execute it.

package/assets/reference-configs/sprint-contracts.md

@@ -78,12 +78,12 @@ Existing contracts without this block remain valid. `.ai/harness/scripts/verify-
 
 ## Review Coupling
 
-- A contract is not truly done until the matching review file records a passing recommendation.
-- `tasks/reviews/<plan-stem>.review.md` should be filled from Waza `/check` after verification and cite the contract, implementation notes, checks file, run snapshot, `## External Acceptance Advice`, and any manual observations.
+- After direct verification, use Forge `/review` for a fresh semantic impact review: user intent, affected domains, downstream consumers, missing state transitions, scenario evidence, and residual risks. The review is controller context, not a parser-owned completion gate.
+- `tasks/reviews/<plan-stem>.review.md` may cite the contract, implementation notes, checks file, run snapshot, and manual observations when they clarify the impact review.
 - `tasks/notes/<plan-stem>.notes.md` captures task-local decisions and should be archived or promoted deliberately, not left as hidden long-term memory.
 
 ## Worktree Lifecycle
 
 - When `.ai/harness/policy.json` has `worktree_strategy.auto_for_contract_tasks: true`, `.ai/harness/scripts/plan-to-todo.sh --plan <approved-plan>` starts a linked `codex/<slug>` worktree instead of mutating the primary tree.
 - Execute the sprint in that linked worktree. The primary worktree remains a merge target and must stay clean before merge-back.
-- After implementation, run Waza `/check` so the review file recommends pass, record passing `## External Acceptance Advice` from the peer reviewer or a concrete manual override, then run `.ai/harness/scripts/contract-worktree.sh finish`. The finish command gates on external acceptance before `verify-sprint.sh`, commits the branch, and fast-forwards the target branch only when the target worktree is clean.
+- After implementation, run Forge `/review` to reassess behavior beyond the changed files, then run `.ai/harness/scripts/contract-worktree.sh finish`. Completion uses direct contract checks and declared scope; the finish command commits the branch and fast-forwards the target only when that target worktree is clean.

package/assets/skill-version.json

@@ -1,6 +1,6 @@
 {
-  "version": "1.5.1",
-  "templateVersion": "1.5.1",
+  "version": "1.7.0",
+  "templateVersion": "1.7.0",
   "skillName": "forge",
   "contractId": "tasks-first-harness-v1",
   "compatibility": {

package/assets/templates/contract.template.md

@@ -27,7 +27,7 @@ Describe the exact outcome this task must deliver.
 - Checks file: `.ai/harness/checks/latest.json`
 - Run snapshots: `.ai/harness/runs/`
 - Scope gate: edit only paths listed under `allowed_paths`; update this contract before widening scope.
-- Completion gate: `scripts/verify-sprint.sh` must see this contract pass, the review recommend pass, and `## External Acceptance Advice` pass or record a manual override.
+- Completion evidence: `scripts/verify-sprint.sh` reports this contract's direct checks and declared scope. Then perform a fresh semantic impact review.
 
 ## Allowed Paths
 
@@ -84,12 +84,7 @@ exit_criteria:
   tests_pass:
     - path: tests/unit/{{TASK_SLUG}}.test.ts
   commands_succeed:
-    - bun run typecheck
-  qa_scores:
-    - dimension: functionality
-      min: 7
-  manual_checks:
-    - "Evaluator review file recommends pass"
+    - bun run check:type
 ```
 
 ## Acceptance Notes (Human Review)

package/assets/templates/helpers/capture-plan.sh

@@ -302,8 +302,8 @@ See captured planning output.
 
 - **State/progress path**: \`${plan_file}\` task breakdown, \`tasks/todos.md\` deferred-goal ledger, \`tasks/contracts/${artifact_stem}.contract.md\`, \`tasks/reviews/${artifact_stem}.review.md\`, and \`tasks/notes/${artifact_stem}.notes.md\`
 - **Verification evidence**: \`.ai/harness/checks/latest.json\`, \`.ai/harness/runs/\`, and the commands named in the captured planning output
-- **Evaluator rubric**: \`tasks/reviews/${artifact_stem}.review.md\` must record a passing Forge /review style recommendation
-- **Stop condition**: all task breakdown items are complete, sprint verification passes, and the review recommends pass
+- **Impact review**: after direct checks, reassess user intent, affected domains, downstream consumers, state transitions, and residual risks
+- **Stop condition**: all task breakdown items are complete and sprint verification reports direct checks plus declared scope passing
 - **Rollback surface**: before execution remove \`${plan_file}\`; after execution revert branch \`codex/${slug}\` or the generated task artifacts
 
 ## Captured Planning Output

package/assets/templates/helpers/check-task-workflow.sh

@@ -161,7 +161,7 @@ plan_evidence_contract_error() {
   fi
 
   local label line value
-  for label in "State/progress path" "Verification evidence" "Evaluator rubric" "Stop condition" "Rollback surface"; do
+  for label in "State/progress path" "Verification evidence" "Impact review|Evaluator rubric" "Stop condition" "Rollback surface"; do
     line="$(printf '%s\n' "$section" | grep -Ei "^[[:space:]]*-[[:space:]]*(\\*\\*)?${label}(\\*\\*)?[[:space:]]*:" | head -1 || true)"
     if [[ -z "$line" ]]; then
       echo "missing field: ${label}"
@@ -189,7 +189,7 @@ check_plan_template_evidence_contract() {
     return
   }
 
-  for label in "State/progress path" "Verification evidence" "Evaluator rubric" "Stop condition" "Rollback surface"; do
+  for label in "State/progress path" "Verification evidence" "Impact review" "Stop condition" "Rollback surface"; do
     if ! grep -Eiq "^[[:space:]]*-[[:space:]]*(\\*\\*)?${label}(\\*\\*)?[[:space:]]*:" "$file"; then
       report_issue "Plan template Evidence Contract is missing field '${label}': $file"
     fi
@@ -668,11 +668,11 @@ check_helper_runtime_files() {
       new-spec.sh new-sprint.sh new-plan.sh capture-plan.sh plan-to-todo.sh
       contract-run.ts contract-worktree.sh ship-worktrees.sh archive-workflow.sh
       refresh-current-status.sh prepare-handoff.sh verify-contract.sh summarize-failures.sh
-      verify-sprint.sh harness-trace-grade.sh sprint-backlog.sh check-task-sync.sh check-deploy-sql-order.sh
+      verify-sprint.sh sprint-backlog.sh check-task-sync.sh check-deploy-sql-order.sh
       check-architecture-sync.sh check-agent-tooling.sh check-context-files.sh
       check-brain-manifest.sh sync-brain-docs.sh check-skill-version.ts
       select-agent-context-blocks.sh ensure-task-workflow.sh check-task-workflow.sh
-      maintenance-triage.sh heartbeat-triage.sh switch-plan.sh workflow-contract.ts
+      switch-plan.sh workflow-contract.ts
       inspect-project-state.ts migrate-workflow-docs.ts migrate-project-template.sh
       capability-resolver.ts architecture-event.ts capability-config.ts architecture-queue.sh
       archive-architecture-request.sh context-contract-sync.sh workstream-sync.sh

package/assets/templates/helpers/contract-worktree.sh

@@ -456,8 +456,7 @@ finish_worktree() {
     exit 1
   fi
 
-  local current_branch slug active_plan contract_file review_file target_worktree artifact_stem
-  local external_status external_state external_reviewer external_source external_message
+  local current_branch slug active_plan contract_file target_worktree artifact_stem
   current_branch="$(git branch --show-current)"
   [[ -n "$current_branch" ]] || { echo "contract-worktree: detached HEAD is not supported" >&2; exit 1; }
   [[ "$current_branch" != "$target_branch" ]] || { echo "contract-worktree: already on target branch $target_branch" >&2; exit 1; }
@@ -470,7 +469,6 @@ finish_worktree() {
     active_plan="$(get_active_plan || true)"
     if [[ -n "$active_plan" ]]; then
       contract_file="$(workflow_active_contract || true)"
-      review_file="$(workflow_active_review || true)"
     fi
   fi
 
@@ -483,27 +481,9 @@ finish_worktree() {
       contract_file="tasks/contracts/${artifact_stem}.contract.md"
     fi
   fi
-  if [[ -n "${active_plan:-}" && -z "${review_file:-}" ]]; then
-    artifact_stem="${artifact_stem:-$(derive_artifact_stem_from_plan "$active_plan")}"
-    if [[ -f "tasks/reviews/${artifact_stem}.review.md" ]] || [[ ! -f "tasks/reviews/${slug}.review.md" ]]; then
-      review_file="tasks/reviews/${artifact_stem}.review.md"
-    fi
-  fi
   contract_file="${contract_file:-tasks/contracts/${slug}.contract.md}"
-  review_file="${review_file:-tasks/reviews/${slug}.review.md}"
 
   [[ -n "$contract_file" && -f "$contract_file" ]] || { echo "contract-worktree: no active sprint contract found" >&2; exit 1; }
-  [[ -n "$review_file" && -f "$review_file" ]] || { echo "contract-worktree: no active sprint review found" >&2; exit 1; }
-
-  if declare -F workflow_external_acceptance_status >/dev/null 2>&1; then
-    external_status="$(workflow_external_acceptance_status "$review_file")"
-    IFS=$'\t' read -r external_state external_reviewer external_source external_message <<< "$external_status"
-    if [[ "$external_state" != "pass" && "$external_state" != "manual_override" ]]; then
-      echo "contract-worktree: external acceptance gate failed: ${external_message:-missing external acceptance}" >&2
-      echo "contract-worktree: record ## External Acceptance Advice in $review_file via $(workflow_external_acceptance_expected_source) before finish" >&2
-      exit 1
-    fi
-  fi
 
   check_architecture_freshness "$target_branch"
   bash "scripts/verify-sprint.sh"

package/assets/templates/helpers/ensure-task-workflow.sh

@@ -348,7 +348,7 @@ Complete this inventory before implementation. If any line is unknown, keep the
 
 - **State/progress path**:
 - **Verification evidence**:
-- **Evaluator rubric**:
+- **Impact review**:
 - **Stop condition**:
 - **Rollback surface**:
 
@@ -391,7 +391,7 @@ Describe the exact outcome this task must deliver.
 - Checks file: `.ai/harness/checks/latest.json`
 - Run snapshots: `.ai/harness/runs/`
 - Scope gate: edit only paths listed under `allowed_paths`; update this contract before widening scope.
-- Completion gate: `scripts/verify-sprint.sh` must see this contract pass, the review recommend pass, and `## External Acceptance Advice` pass or record a manual override.
+- Completion evidence: `scripts/verify-sprint.sh` reports this contract's direct checks and declared scope. Then perform a fresh semantic impact review.
 
 ## Allowed Paths
 
@@ -444,7 +444,7 @@ exit_criteria:
   tests_pass:
     - path: tests/unit/{{TASK_SLUG}}.test.ts
   commands_succeed:
-    - bun run typecheck
+    - bun run check:type
   files_contain:
     - path: src/modules/{{TASK_SLUG}}/index.ts
       pattern: "export"
@@ -473,48 +473,23 @@ CONTRACT_TEMPLATE_EOF
 > **Notes File**: {{NOTES_FILE}}
 > **Checks File**: {{CHECKS_FILE}}
 > **Last Updated**: {{TIMESTAMP}}
-> **Recommendation**: fail
+> **Summary**:
 
-## Human Review Card
+## Semantic Impact Review
 
-- Verdict: pending
-- Change type: code-change | docs-only | ledger-closeout | migration | eval-only | delegated-run
-- Intended files changed:
-- Actual files changed:
-- Commands passed:
-- External acceptance: unavailable
-- Residual risks:
-- Reviewer action required: inspect diff and card
-- Rollback:
+- User intent:
+- Affected domains and downstream consumers:
+- State transitions and persistence/restart impact:
+- Missing impact areas or uncertainty:
+- Residual risks and recovery:
 
 ## Verification Evidence
 
-- Forge /review run:
+- Focused/full checks:
 - Commands run:
 - Manual checks:
 - Supporting artifacts:
 
-## External Acceptance Advice
-
-> **External Acceptance**: unavailable
-> **External Reviewer**:
-> **External Source**:
-> **External Started**:
-> **External Completed**:
-
-- P1 blockers:
-- P2 advisories:
-- Acceptance checklist:
-
-## Scorecard
-
-| Dimension | Score | Notes |
-|-----------|-------|-------|
-| Functionality | 0/10 | |
-| Product depth | 0/10 | |
-| Design quality | 0/10 | |
-| Code quality | 0/10 | |
-
 ## Failing Items
 
 - ...
@@ -916,8 +891,8 @@ ARCHITECTURE_INDEX_EOF
   },
   "guards": {
     "edit_plan_gate": "advice",
-    "edit_plan_gate_modes": ["enforce", "advice", "off"],
-    "rule": "pre-edit-guard advises when implementation lacks an active plan; execution remains available unless a real safety boundary blocks it"
+    "edit_plan_gate_modes": ["advice", "off"],
+    "rule": "pre-edit-guard may expose Plan/spec context, but Plan lifecycle never authorizes implementation; only real safety/resource boundaries block execution"
   },
   "sidecar_research": {
     "default": true,