@moretea-labs/forge 1.8.0 → 1.8.2

package/scripts/check-runtime-architecture.mjs

@@ -43,11 +43,20 @@ function forbidBetween(path, startNeedle, endNeedle, expression, description) {
   }
   if (expression.test(source.slice(start, end))) failures.push(`${path} violates ${description}`);
 }
+const GENERATED_SOURCE_DIRECTORY_NAMES = new Set([
+  'node_modules',
+  'dist',
+  'build',
+  'coverage',
+  'target',
+]);
+
 function sourceFiles(directory) {
   const absolute = resolve(root, directory);
   if (!existsSync(absolute)) return [];
   const files = [];
   for (const entry of readdirSync(absolute, { withFileTypes: true })) {
+    if (entry.isDirectory() && GENERATED_SOURCE_DIRECTORY_NAMES.has(entry.name)) continue;
     const path = `${directory}/${entry.name}`;
     if (entry.isDirectory()) files.push(...sourceFiles(path));
     else if (entry.isFile() && path.endsWith('.ts')) files.push(path);
@@ -255,18 +264,24 @@ function requireExactShrinkingInventory(label, actual, allowed) {
   }
 }
 
-// Stage 4 boundary: rh_work is an ABI/translation adapter. Durable lifecycle
-// ownership stays in Kernel/application services and physical WorkHandle state
-// may not be persisted from the MCP adapter.
+// Thin rh_work boundary: semantic Requirement/Plan/Work records and explicit
+// launcher/schedule/workflow intent only. Repository execution, checks and Git
+// delivery stay on their typed capability surfaces; old lifecycle verbs are gone.
 requireText('adapters/mcp/runtime-gateway/runtime-tools.ts', "if (name === 'rh_work') return callWorkAdapter(ctx, args);");
-requireText('adapters/mcp/runtime-gateway/controller-authority-adapter.ts', 'controllerTerminalizationAuthorityForInvocation');
-requireText('adapters/mcp/runtime-gateway/controller-authority-adapter.ts', 'assertControllerRoundInvocationAuthority');
-forbid('adapters/mcp/runtime-gateway/work-adapter.ts', /\b(?:transitionWorkHandle|writeWorkHandle|markWorkHandleFailed)\s*\(/, 'rh_work adapter must not persist WorkHandle lifecycle state; use the canonical completion/finalization authority');
-forbid('adapters/mcp/runtime-gateway/work-adapter.ts', /control-plane\/facade\/work-contract-store|kernel\/work\/infrastructure/, 'rh_work adapter must consume canonical Work application/API authority, not persistence infrastructure');
-forbid('adapters/mcp/runtime-gateway/work-adapter.ts', /\b(?:appendWorkEvidence|recordWorkCompletionReceipt|updateWorkContract)\s*\(/, 'rh_work adapter must not write Work lifecycle/evidence records directly');
-forbid('adapters/mcp/runtime-gateway/work-adapter.ts', /\b(?:createRequirement|resumeRetainedCancelledWorkContract|acceptRequirementOutcome)\s*\(/, 'rh_work adapter must delegate Requirement and retained-Work lifecycle transitions to canonical application authorities');
-forbid('adapters/mcp/runtime-gateway/work-adapter.ts', /function\s+(?:assert|evaluate|derive)[A-Za-z0-9_]*ImplementationReview/, 'rh_work adapter must not implement implementation-review policy authority');
-forbid('adapters/mcp/runtime-gateway/work-adapter.ts', /repositoryGit(?:Commit|FinishWorkflow|MergeBranch|DeleteBranch|RebaseOnto)\s*\(/, 'rh_work adapter must delegate physical Git delivery to canonical Work finalization authority');
+requireText('adapters/mcp/runtime-gateway/work-controller-operations.ts', "const RH_WORK_CONTROLLER_OPERATIONS = new Set(['launcher_start']);");
+requireText('adapters/mcp/runtime-gateway/work-adapter.ts', "if (operation === 'launcher_start')");
+requireText('adapters/mcp/runtime-gateway/work-requirement-operations.ts', 'export async function callRhWorkRequirementOperation');
+requireText('adapters/mcp/runtime-gateway/work-plan-operations.ts', 'export async function callRhWorkPlanOperation');
+requireText('adapters/mcp/runtime-gateway/work-plan-operations.ts', 'export async function callRhWorkPlanCreateOperation');
+requireText('adapters/mcp/runtime-gateway/work-adapter.ts', 'callRhWorkRequirementOperation(ctx, repository, operation, args)');
+requireText('adapters/mcp/runtime-gateway/work-adapter.ts', 'callRhWorkPlanOperation(store, operation, args)');
+requireText('adapters/mcp/runtime-gateway/work-adapter.ts', 'callRhWorkPlanCreateOperation(store, operation, args');
+forbid('adapters/mcp/runtime-gateway/work-adapter.ts', /operation === ['"](?:continue|verify|review|finalize|stop|delegate|controller_get_owner|controller_claim|controller_disposition|controller_release)['"]/, 'thin rh_work must not route retired lifecycle/controller operations');
+forbid('adapters/mcp/runtime-gateway/work-adapter.ts', /\b(?:transitionWorkHandle|writeWorkHandle|markWorkHandleFailed|executeWorkVerification|requestWorkImplementationReview)\b/, 'rh_work must not own mechanical execution, verification or review authority');
+forbid('adapters/mcp/runtime-gateway/work-adapter.ts', /repositoryGit(?:Commit|FinishWorkflow|MergeBranch|DeleteBranch|RebaseOnto)\s*\(/, 'rh_work must not perform physical Git delivery');
+forbid('adapters/mcp/runtime-gateway/work-adapter.ts', /control-plane\/facade\/work-contract-store|kernel\/work\/infrastructure/, 'rh_work must consume canonical semantic APIs instead of persistence infrastructure');
+forbid('adapters/mcp/runtime-gateway/work-plan-operations.ts', /plan_approve|plan_accept_step|plan_supersede|approvePlanContractAsync|acceptPlanStepEvidence|supersedePlanContract/, 'retired Plan approval/acceptance/supersession APIs must not remain on the runtime surface');
+forbid('src/runtime/control-plane/facade/plan-contract-store.ts', /approvePlanContract|approvePendingPlanRevision|supersedePlanContract|plan_revision_approved/, 'legacy Plan approval/supersession writers must stay retired');
 
 // #197 MCP mega-adapter decomposition. These are debt ledgers, not target
 // architecture: entries may only disappear. New domain-authority imports or
@@ -275,6 +290,7 @@ forbid('adapters/mcp/runtime-gateway/work-adapter.ts', /repositoryGit(?:Commit|F
 const MCP_GATEWAY_AUTHORITY_IMPORT_PATTERN = /(?:packages\/kernel\/|src\/runtime\/|src\/cli\/(?:repositories|editing)\/)/;
 
 function gatewayAuthorityImportInventoryFromSources(sources, importPattern = MCP_GATEWAY_AUTHORITY_IMPORT_PATTERN) {
+
   const ts = loadTypeScriptCompiler();
   if (!ts) return new Set();
   const records = new Set();
@@ -301,12 +317,27 @@ function runtimeToolSwitchCaseInventory(source) {
   return new Set([...source.slice(start).matchAll(/case\s+['"]([^'"]+)['"]\s*:/g)].map((match) => match[1]));
 }
 
+const SUPERVISOR_CONCRETE_BROWSER_TRANSPORT_IMPORT_PATTERN = /(?:browser-macos-bridge|browser-adapter|chrome-extension|native-messaging)/;
+
+function supervisorConcreteBrowserTransportImportsFromSources(sources) {
+  return gatewayAuthorityImportInventoryFromSources(sources, SUPERVISOR_CONCRETE_BROWSER_TRANSPORT_IMPORT_PATTERN);
+}
+
+const supervisorComputerBoundaryFixture = process.env.FORGE_SUPERVISOR_COMPUTER_BOUNDARY_FIXTURE;
+if (supervisorComputerBoundaryFixture) {
+  const fixture = JSON.parse(supervisorComputerBoundaryFixture);
+  const sources = Array.isArray(fixture.sources) ? fixture.sources : [];
+  const actual = supervisorConcreteBrowserTransportImportsFromSources(sources);
+  if (actual.size > 0) {
+    console.error('[supervisor-computer-boundary-guardrail] FAILED');
+    for (const record of actual) console.error(`- Workflow Supervisor semantic code must depend on Computer target ports, never concrete Browser transports: ${record}`);
+    process.exit(1);
+  }
+  console.log('[supervisor-computer-boundary-guardrail] OK');
+  process.exit(0);
+}
+
 const MCP_RUNTIME_GATEWAY_AUTHORITY_IMPORT_DEBT = new Set([
-  'adapters/mcp/runtime-gateway/router.ts::../../../src/cli/repositories/command-classifier',
-  'adapters/mcp/runtime-gateway/router.ts::../../../src/runtime/diagnostics/process-facade',
-  'adapters/mcp/runtime-gateway/router.ts::../../../src/runtime/execution/jobs/types',
-  'adapters/mcp/runtime-gateway/router.ts::../../../src/runtime/execution/process-runtime',
-  'adapters/mcp/runtime-gateway/router.ts::../../../src/runtime/execution/thin-harness',
   'adapters/mcp/runtime-gateway/runtime-tools.ts::../../../src/runtime/execution/process-runtime/check-result',
 ]);
 
@@ -349,6 +380,18 @@ requireExactShrinkingInventory(
   runtimeToolSwitchCaseInventory(text('adapters/mcp/runtime-gateway/runtime-tools.ts')),
   MCP_RUNTIME_TOOLS_SWITCH_CASE_DEBT,
 );
+const supervisorSemanticSources = sourceFiles('supervisor')
+  .filter((path) => !path.startsWith('supervisor/native-messaging/'))
+  .map((path) => ({ path, source: text(path) }));
+requireExactShrinkingDebt(
+  'Workflow Supervisor concrete Browser transport imports',
+  supervisorConcreteBrowserTransportImportsFromSources(supervisorSemanticSources),
+  new Set(),
+);
+for (const path of supervisorSemanticSources.map((entry) => entry.path)) {
+  forbid(path, /\b(?:windowId|tabId|window\.name)\b/, 'Workflow Supervisor semantic code must not own provider tab/window identity; Computer target authority owns provider bindings');
+}
+
 
 const MCP_PURE_TRANSPORT_FORBIDDEN_IMPORT_PATTERN = /(?:packages\/kernel\/|src\/runtime\/)/;
 requireExactShrinkingDebt(
@@ -360,57 +403,33 @@ requireExactShrinkingDebt(
   new Set(),
 );
 
-const FROZEN_CAPABILITY_PREFIX_FILES = [
-  'adapters/mcp/runtime-gateway/runtime-tools.ts',
-  'adapters/mcp/runtime-gateway/work-adapter.ts',
+// Hard cutover: retired lifecycle decoders remain absent. One bounded
+// frozen-session wire decoder may translate the pre-Thin semantic.v1 carrier
+// and current-conversation enrollment into current owners because host MCP
+// schemas can remain frozen across Runtime reconnect. That decoder owns no
+// lifecycle or persistence and must not grow retired lifecycle carriers.
+for (const path of [
+  'adapters/mcp/runtime-gateway/work-controller-recovery-operations.ts',
   'adapters/mcp/controller-round-compatibility.ts',
   'adapters/mcp/frozen-client-semantic-compatibility.ts',
-];
-const CANONICAL_FROZEN_SEMANTIC_PREFIX = 'semantic.v1:';
-
-function frozenCapabilityPrefixRecordsFromSources(sources) {
-  const records = new Set();
-  const protocolLiteral = /(['"`])([a-z][a-z0-9_-]*(?:\.[a-z0-9_-]+)+:)\1/g;
-  for (const { path, source } of sources) {
-    for (const match of source.matchAll(protocolLiteral)) {
-      const prefix = match[2];
-      if (prefix === CANONICAL_FROZEN_SEMANTIC_PREFIX) continue;
-      records.add(`${path}::${prefix}`);
-    }
-  }
-  return records;
-}
-
-const capabilityPrefixFixture = process.env.FORGE_CAPABILITY_PREFIX_GUARDRAIL_FIXTURE;
-if (capabilityPrefixFixture) {
-  const fixture = JSON.parse(capabilityPrefixFixture);
-  const actual = frozenCapabilityPrefixRecordsFromSources(Array.isArray(fixture.sources) ? fixture.sources : []);
-  const allowed = new Set(Array.isArray(fixture.allowed) ? fixture.allowed : []);
-  requireExactShrinkingInventory('frozen capability prefix fixture debt', actual, allowed);
-  if (failures.length) {
-    console.error('[frozen-capability-prefix-guardrail] FAILED');
-    for (const failure of failures) console.error(`- ${failure}`);
-    process.exit(1);
-  }
-  console.log(`[frozen-capability-prefix-guardrail] OK (${actual.size} debt entries)`);
-  process.exit(0);
-}
-
-const LEGACY_FROZEN_CAPABILITY_PREFIX_DEBT = new Set([
-  'adapters/mcp/runtime-gateway/work-adapter.ts::controller.authority.recover:',
-  'adapters/mcp/runtime-gateway/work-adapter.ts::controller.provider.recover:',
-  'adapters/mcp/runtime-gateway/work-adapter.ts::plan.step.retry:',
-  'adapters/mcp/runtime-gateway/work-adapter.ts::schedule.delete:',
-  'adapters/mcp/runtime-gateway/work-adapter.ts::work.review:',
-  'adapters/mcp/controller-round-compatibility.ts::controller.disposition:',
-  'adapters/mcp/controller-round-compatibility.ts::controller.round:',
-  'adapters/mcp/controller-round-compatibility.ts::plan.obligations.v1:',
-]);
-requireExactShrinkingInventory(
-  'legacy frozen capability prefix debt',
-  frozenCapabilityPrefixRecordsFromSources(FROZEN_CAPABILITY_PREFIX_FILES.map((path) => ({ path, source: text(path) }))),
-  LEGACY_FROZEN_CAPABILITY_PREFIX_DEBT,
+]) requireMissing(path);
+requireText(
+  'adapters/mcp/runtime-gateway/work-input-wire-migration.ts',
+  "const FROZEN_SEMANTIC_V1_PREFIX = 'semantic.v1:';",
+);
+requireText(
+  'adapters/mcp/runtime-gateway/work-input-wire-migration.ts',
+  "const FROZEN_CURRENT_CONVERSATION_ENROLLMENT = 'controller.current_conversation.enroll';",
 );
+forbid(
+  'adapters/mcp/runtime-gateway/work-input-wire-migration.ts',
+  /schedule\.delete:|work\.review:|controller\.(?:authority|provider|disposition|round):|plan\.step\.retry:/,
+  'the bounded frozen-session decoder must not restore retired lifecycle carriers',
+);
+for (const path of sourceFiles('adapters/mcp')) {
+  if (path === 'adapters/mcp/runtime-gateway/work-input-wire-migration.ts') continue;
+  forbid(path, /semantic\.v1:/, 'semantic.v1 frozen-session decoding must have exactly one transport owner');
+}
 
 const SEMANTIC_AUTHORITY_CRITICAL_ROOTS = [
   'packages/kernel',
@@ -533,9 +552,7 @@ const SEMANTIC_STRING_AUTHORITY_DEBT = new Set([
   `packages/kernel/controller/domain/controller-round-transition-policy.ts::reason.startsWith('consecutive_failures:')`,
   `packages/kernel/controller/domain/controller-round-transition-policy.ts::reason.startsWith('repeated_state:')`,
   `packages/kernel/controller/domain/controller-round-transition-policy.ts::reason.startsWith('round_budget_exhausted:')`,
-  `packages/kernel/scheduler/application/continuation-service.ts::error.message.startsWith('CONTROLLER_RELAY_ROUND_ALREADY_OPEN:')`,
-  `src/cli/local-bridge/facade-api.ts::selection.reason.includes('Small')`,
-  `src/cli/local-bridge/facade-api.ts::selection.reason.includes('small')`,
+  `packages/kernel/controller/application/continuation-service.ts::error.message.startsWith('CONTROLLER_RELAY_ROUND_ALREADY_OPEN:')`,
   `src/cli/local-bridge/job-store.ts::message.startsWith(\"LOCAL_JOB_ID_REQUIRED:\")`,
   `src/cli/local-bridge/job-store.ts::message.startsWith(\"LOCAL_JOB_PATH_INVALID:\")`,
   `src/cli/local-bridge/server.ts::message.startsWith(\"REPOSITORY_SELF_PROTECTED\")`,
@@ -546,14 +563,12 @@ const SEMANTIC_STRING_AUTHORITY_DEBT = new Set([
   `src/runtime/control-plane/execution/work-head-settlement.ts::error.message.includes('CONTROL_PLANE_REVISION_CONFLICT')`,
   `src/runtime/control-plane/facade/requirement-authority.ts::error.message.startsWith('REQUIREMENT_ALREADY_EXISTS:')`,
   `src/runtime/control-plane/global-scheduler/reconciliation.ts::message.includes(':')`,
-  `src/runtime/control-plane/global-scheduler/reconciliation.ts::message.startsWith('WRITER_FENCED:')`,
   `src/runtime/control-plane/global-scheduler/scheduler.ts::error.message.startsWith('LOCK_HELD:')`,
   `src/runtime/control-plane/launcher/chatgpt-work-continuation.ts::error.message.includes(':')`,
   `src/runtime/control-plane/persistence/sqlite-store.ts::(error instanceof Error ? error.message : String(error)).startsWith('CONTROL_PLANE_SQLITE_BUSY:')`,
   `src/runtime/control-plane/persistence/sqlite-store.ts::/database is locked|SQLITE_BUSY/i.test(message)`,
   `src/runtime/control-plane/persistence/sqlite-store.ts::message.startsWith('CONTROL_PLANE_')`,
   `src/runtime/control-plane/persistence/sqlite-store.ts::message.startsWith('CONTROL_PLANE_SQLITE_CORRUPT:')`,
-  `src/runtime/execution/jobs/store.ts::error.message.startsWith('WRITER_FENCED:')`,
   `src/runtime/execution/process-runtime/lightweight-managed.ts::error.message.startsWith('PROCESS_REQUEST_CONFLICT:')`,
   `src/runtime/execution/process-runtime/process-runner-entry.ts::message.startsWith('PROCESS_RUNNER_ALREADY_STARTED:')`,
   `src/runtime/execution/process-runtime/process-runner-entry.ts::message.startsWith('PROCESS_RUNNER_RECEIPT_CORRUPT:')`,
@@ -668,18 +683,14 @@ const required = [
   'src/runtime/execution/workers/worker-entry.ts',
   'src/runtime/execution/thin-harness/index.ts',
   'src/runtime/execution/thin-harness/execution-router.ts',
-  'src/runtime/control-plane/routing/route-policy.ts',
-  'src/runtime/control-plane/routing/workspace-admission.ts',
   'src/runtime/control-plane/facade/requirement-authority.ts',
   'src/runtime/control-plane/facade/repository-work-admission.ts',
   'src/runtime/control-plane/execution/retained-work-resume.ts',
   'src/runtime/control-plane/execution/work-handle-authority.ts',
   'src/runtime/control-plane/execution/work-verification-context.ts',
   'src/runtime/control-plane/execution/work-verification-service.ts',
-  'src/runtime/control-plane/execution/content-equivalent-commit-authority.ts',
   'src/runtime/control-plane/execution/implementation-review-content.ts',
   'packages/protocols/handoff/status.ts',
-  'packages/kernel/work/domain/admission-policy.ts',
   'packages/kernel/work/domain/implementation-review.ts',
   'packages/kernel/work/domain/state-machine.ts',
   'packages/kernel/identity/domain/scope.ts',
@@ -702,15 +713,12 @@ const required = [
   'packages/kernel/controller/infrastructure/controller-session-store.ts',
   'packages/kernel/controller/application/controller-service.ts',
   'packages/kernel/controller/api/index.ts',
-  'src/runtime/control-plane/facade/work-implementation-review.ts',
   'src/runtime/control-plane/execution/repository-work-attribution.ts',
   'src/runtime/control-plane/execution/work-completion-authority.ts',
   'src/runtime/control-plane/execution/work-evidence-policy.ts',
   'src/runtime/control-plane/execution/work-execution-support.ts',
-  'src/runtime/control-plane/execution/work-finalization-service.ts',
   'src/runtime/control-plane/execution/work-preparation-service.ts',
   'src/runtime/control-plane/execution/work-operation-service.ts',
-  'src/runtime/control-plane/facade/work-state-machine.ts',
   'src/runtime/evidence/process-check-execution.ts',
   'src/runtime/context/semantic-navigation-contract.ts',
   'packages/protocols/mcp/tool-contract.ts',
@@ -789,21 +797,106 @@ for (const { from, specifier } of stage7fMemoryImports) {
     failures.push(`Stage7F operational Memory store has an unauthorized active consumer: ${from} -> ${specifier}`);
   }
 }
-forbid('src/runtime/control-plane/persistence/operational-prior-store.ts', /context-plane|brain|pks|requirement-authority|plan-contract|work-state-machine|approval|authorization/, 'Stage7F operational Memory must remain mechanical derived state only');
+forbid('src/runtime/control-plane/persistence/operational-prior-store.ts', /context-plane|brain|pks|requirement-authority|plan-contract|approval|authorization/, 'Stage7F operational Memory must remain mechanical derived state only');
 requireText('src/runtime/control-plane/persistence/operational-prior-store.ts', "OPERATIONAL_MEMORY_NAMESPACE = 'operational_memory_prior'");
 requireText('src/runtime/control-plane/persistence/operational-prior-store.ts', 'resolveCheckCompletionGraceWaitMs');
 requireText('src/runtime/execution/process-runtime/check-facade.ts', 'resolveCheckCompletionGraceWaitMs');
 for (const path of sourceFiles('src/runtime/control-plane')) {
   forbid(path, /(?:from\s+['"]|import\s*\(\s*['"])(?:\.\.\/)+gateway\//, 'control-plane domain/application code must not depend on Gateway transport');
 }
-requireText('src/runtime/control-plane/routing/route-policy.ts', "export function decideRoute");
-requireText('src/runtime/control-plane/routing/route-policy.ts', 'inputFingerprint');
-requireText('src/runtime/control-plane/routing/route-policy.ts', 'policyVersion');
+for (const path of [
+  'adapters/mcp/tool-mapping/repository-tools.ts',
+  'adapters/mcp/tool-mapping/legacy-tool-service.ts',
+  'adapters/mcp/runtime-gateway/runtime-observation-adapter.ts',
+]) {
+  forbid(path, /assessWorkMode|parseExplicitTaskMode|assess_work_mode|assess_work_request|recommendedMode\s*:/, 'production capability/context surfaces must not expose or infer engineering work modes');
+}
+// Engineering execution strategy belongs to the model. Forge must not carry a
+// route/mode/driver vocabulary, a task-size or complexity heuristic, or a
+// second router that decides Direct/Work/Goal, worker/provider, verify, review,
+// or completion on the model's behalf.
+requireMissing('src/runtime/control-plane/routing/route-policy.ts');
+requireMissing('src/runtime/control-plane/routing/index.ts');
+for (const path of [...sourceFiles('src'), ...sourceFiles('adapters'), ...sourceFiles('packages')]) {
+  forbid(
+    path,
+    /\bRouteExecutionMode\b|\bRouteWorkMode\b|\bRouteExecutionPath\b|\bExplicitTaskMode\b|\bWorkRouteDecisionSnapshot\b|\bWorkContractDriverPolicy\b|\bExecutionModeSelection\b|\bselectExecutionMode\b|\bmodeInput\b/,
+    'Forge must not model engineering execution modes, work modes, execution paths, drivers, or mode selection',
+  );
+  forbid(
+    path,
+    /['"](?:direct_control|goal_workloop|handoff_only)['"]/,
+    'retired engineering mode tokens must not return as typed Forge vocabulary',
+  );
+  forbid(
+    path,
+    /\bdirect_edit\b\s*\|\s*['"]bounded_work['"]|['"]bounded_work['"]\s*\|\s*['"]quick_agent['"]|['"]quick_agent['"]\s*\|\s*['"]issue_task['"]/,
+    'retired work-mode vocabulary must not return',
+  );
+}
+forbid(
+  'packages/kernel/work/domain/types.ts',
+  /\bmode:\s*ExecutionMode\b|\bdriver:\s*WorkContractDriverPolicy\b|routeDecision/,
+  'WorkContract must persist no engineering-mode, driver, or route-decision authority',
+);
+for (const path of [...sourceFiles('src'), ...sourceFiles('adapters')]) {
+  forbid(
+    path,
+    /\bisSmallScopedTask\b|\bsmallScopedTask\b|\bdurableWorkRequired\b|\bcoordinationRequired\b|\bexplicitParallelMode\b|\bexpectedFiles\b|\bexpectedChangedLines\b|\brequiresInvestigation\b|\brequiresLongRunningChecks\b|\brequiresParallelism\b|\bindependentTaskCount\b|\bagentRequested\b|\broutingKey\(|\bproviderOrder\(|\bKIND_RANK\b/,
+    'Forge must not infer engineering method, worker choice, or Work topology from task size, complexity, path classification, or semantic intent',
+  );
+}
+forbid(
+  'src/runtime/plugins/store.ts',
+  /acceptSubmittedWorkContract|localSystemActionRequiresWork/,
+  'plugin capability execution must not manufacture semantic Work from action risk',
+);
+forbid(
+  'src/runtime/control-plane/facade/goal-workloop.ts',
+  /repositoryChangeIntent|directEditWithinBoundary|maxChangedFiles\s*<|maxChangedLines\s*</,
+  'Work-kind classification must not be inferred from predicted scope size or a task-size threshold',
+);
+forbid(
+  'src/runtime/control-plane/facade/goal-workloop.ts',
+  /linkedEngineeringBlockerWorkId|work-linked-engineering-blocker-/,
+  'continuation must not manufacture child Work; an unrelated blocker names an explicitly created owning Work',
+);
+requireText('src/runtime/control-plane/facade/goal-workloop.ts', 'ENGINEERING_BLOCKER_LINKED_WORK_REQUIRED');
+for (const path of [...sourceFiles('src'), ...sourceFiles('adapters')]) {
+  forbid(path, /operation:\s*['"](?:plan_approve|plan_accept_step|plan_supersede)['"]/, 'retired Plan approval/acceptance/supersession operations must not be advertised or suggested');
+}
+forbid(
+  'src/runtime/control-plane/facade/rh-work-operation-contract.ts',
+  /plan_approve|plan_accept_step|plan_supersede/,
+  'retired Plan lifecycle operations must not remain accepted rh_work ABI operations',
+);
+for (const path of [
+  'src/runtime/control-plane/facade/goal-workloop.ts',
+  'src/runtime/control-plane/facade/goal-workloop-access.ts',
+  'src/cli/local-bridge/facade-api.ts',
+  'src/cli/local-bridge/server.ts',
+]) {
+  forbid(path, /force_mode|forceMode/, 'retired mode-override tokens must not return as caller-visible input');
+}
+requireText('src/runtime/plugins/capability-authorization-grants.ts', 'migrateLegacyPluginCapabilityGrants');
+requireText('src/runtime/plugins/capability-authorization-grants.ts', 'findActiveCanonicalGrant');
+requireText('src/runtime/plugins/capability-authorization-grants.ts', 'legacyPluginGrantMigrationMarkerPath');
+forbid(
+  'src/runtime/plugins/capability-authorization-grants.ts',
+  /saveStore\(|writeJsonAtomic\(\s*pluginCapabilityAuthorizationGrantStorePath|writeFileSync/,
+  'the legacy plugin capability authorization file is migration input only; the canonical Grant authority is the single writer',
+);
+for (const path of [
+  ...sourceFiles('src/runtime/control-plane'),
+  ...sourceFiles('adapters/mcp'),
+]) {
+  forbid(path, /directEditWithinBoundary|DirectEditBoundary/, 'task-size authorization shortcuts must not be reintroduced');
+}
 requireText('src/runtime/control-plane/execution/work-verification-service.ts', 'runPersistedCheckViaProcessRuntime({');
 requireText('src/runtime/control-plane/execution/work-verification-service.ts', 'interactiveWaitMs: input.interactiveWaitMs ?? 0');
 requireText('src/runtime/control-plane/execution/work-verification-service.ts', 'checkContentRevision');
 requireText('src/runtime/control-plane/execution/work-verification-service.ts', 'observedGitHead');
-requireText('adapters/mcp/runtime-gateway/work-adapter.ts', 'executeWorkVerification({');
+forbid('adapters/mcp/runtime-gateway/work-adapter.ts', /executeWorkVerification|recordWorkCheckEvidence/, 'rh_work must not execute or attribute repository checks');
 requireText('src/cli/local-bridge/facade-api.ts', 'executeWorkVerification({');
 forbid(
   'src/cli/local-bridge/facade-api.ts',
@@ -822,53 +915,43 @@ forbid(
 );
 
 
-// Kernel V2 B1/B2: Work lifecycle/review authority lives in packages/kernel/work.
-// Historical facade modules are compatibility-only re-exports. Gateway/finalizer
-// consume the Kernel API/domain instead of owning a parallel policy/store.
-requireText('packages/kernel/work/domain/implementation-review.ts', 'assertImplementationReviewPreDeliveryBoundary');
-requireText('packages/kernel/work/domain/implementation-review.ts', 'deriveImplementationReviewAcrossCommit');
-requireText('packages/kernel/work/domain/state-machine.ts', 'validateWorkSemanticTransition');
-requireText('packages/kernel/work/application/work-service.ts', 'transitionWorkContractPhase');
+// Thin Work authority: semantic state is open/completed/cancelled. Review and
+// verification may exist as evidence/capabilities, never as generic Work/Git
+// admission authority. The old delivery/finalizer modules are intentionally gone.
+requireText('packages/kernel/work/domain/types.ts', "export const SEMANTIC_WORK_STATES = ['open', 'completed', 'cancelled'] as const;");
+requireText('packages/kernel/work/domain/types.ts', 'export type SemanticWorkState = (typeof SEMANTIC_WORK_STATES)[number];');
 requireText('packages/kernel/work/api/index.ts', "export * from '../application/work-service'");
-requireText('src/runtime/control-plane/execution/implementation-review-content.ts', 'implementationReviewContentFingerprint');
-requireText('src/runtime/control-plane/execution/implementation-review-content.ts', 'implementationReviewIndexFingerprint');
-requireText('packages/kernel/work/infrastructure/work-contract-store.ts', 'requestWorkImplementationReview');
-requireText('packages/kernel/work/infrastructure/work-contract-store.ts', 'recordWorkImplementationReview');
-requireText('packages/kernel/work/infrastructure/work-contract-store.ts', 'activateWorkContract');
-requireText('packages/kernel/work/infrastructure/work-contract-store.ts', 'failWorkContract');
-requireText('packages/kernel/work/infrastructure/work-contract-store.ts', 'cancelWorkContract');
-requireText('packages/kernel/work/infrastructure/work-contract-store.ts', 'recordWorkEvidenceState');
-requireText('packages/kernel/work/infrastructure/work-contract-store.ts', 'WORK_LIFECYCLE_REQUIRES_TRANSITION_API');
-requireText('packages/kernel/work/infrastructure/work-contract-store.ts', 'work_contract_schema_v3_migrated');
-forbid('packages/kernel/work/infrastructure/work-contract-store.ts', /phaseForStatusUpdate|dispatchStateForStatusUpdate/, 'Work status must not regain hidden phase/dispatch transition authority');
-forbid('packages/kernel/work/infrastructure/work-contract-store.ts', /phaseEvidence:\s*legacyPhaseEvidence\(/, 'new Work construction must not reuse legacy migration phase-evidence inference');
-requireText('src/runtime/control-plane/facade/work-contract-store.ts', '@deprecated Kernel V2 compatibility shim');
-requireText('src/runtime/control-plane/facade/work-state-machine.ts', '@deprecated Kernel V2 compatibility shim');
-requireText('src/runtime/control-plane/facade/work-implementation-review.ts', '@deprecated Kernel V2 compatibility shim');
-requireText('packages/kernel/work/domain/types.ts', "['implementation', 'verification', 'review', 'delivery', 'cleanup']");
 requireText('src/cli/repositories/selected-path-actions.ts', 'beforeCommitGuard');
-requireText('src/runtime/control-plane/execution/direct-edit-work-completion.ts', 'prepareReviewedDirectEditWorkCommit');
-requireText('src/runtime/control-plane/execution/direct-edit-work-completion.ts', 'completeReviewedDirectEditWorkAfterCommit');
-requireText('src/runtime/control-plane/execution/direct-edit-work-completion.ts', 'transferReviewedWorkAuthorityAcrossContentEquivalentCommit');
-requireText('src/runtime/control-plane/execution/work-verification-service.ts', 'planWorkVerificationAcrossContentEquivalentCommit');
+requireMissing('src/runtime/control-plane/execution/direct-edit-work-completion.ts');
+requireMissing('src/runtime/control-plane/execution/content-equivalent-commit-authority.ts');
+requireMissing('src/runtime/control-plane/execution/work-finalization-service.ts');
+forbid('adapters/mcp/runtime-gateway/work-adapter.ts', /ImplementationReview|executeWorkVerification|work_finalize/, 'rh_work must not regain review, verification, or finalization behavior authority');
+forbid('src/cli/repositories/selected-path-actions.ts', /ImplementationReview|workRequiresImplementationReview|requestWorkImplementationReview/, 'repository Git safety must not depend on Work review methodology');
+
+// The model-facing rh_work surface is the thin semantic ABI: the schema enum must
+// come from the single operation registry, that registry's model list must not
+// re-advertise legacy engineering lifecycle verbs, and the schema must not
+// hand-write lifecycle-only inputs. Legacy verbs stay reachable only through the
+// bounded server-side compatibility carrier, never as advertised model surface.
+requireText('adapters/mcp/runtime-gateway/runtime-tool-definitions.ts', '[...RH_WORK_MODEL_OPERATIONS]');
 forbid(
-  'src/runtime/control-plane/execution/work-verification-service.ts',
-  /export\s+function\s+transferWorkVerificationAcrossContentEquivalentCommit\s*\(/,
-  'content-equivalent verification planning must stay pure; authority persistence belongs to the atomic transfer owner',
-);
-requireText('src/runtime/control-plane/execution/content-equivalent-commit-authority.ts', 'transferReviewedWorkAuthorityAcrossContentEquivalentCommit');
-requireText('src/runtime/control-plane/execution/content-equivalent-commit-authority.ts', 'recordContentEquivalentCommitAuthorityTransfer');
-requireText('packages/kernel/work/infrastructure/work-contract-store.ts', 'recordContentEquivalentCommitAuthorityTransfer');
-requireText('src/runtime/control-plane/execution/edit-validation-coordinator.ts', 'workId: session.workId');
-requireText('src/runtime/control-plane/execution/edit-validation-coordinator.ts', 'verificationSnapshot: work ?');
-requireText('src/runtime/control-plane/execution/work-finalization-service.ts', 'assertPhysicalImplementationReviewGate');
-requireText('src/runtime/control-plane/execution/work-finalization-service.ts', 'assertPhysicalBranchCleanupImplementationReviewGate');
-requireText('src/runtime/control-plane/execution/work-finalization-service.ts', 'transferReviewedWorkAuthorityAcrossContentEquivalentCommit');
-requireText('adapters/mcp/runtime-gateway/runtime-tool-definitions.ts', 'review_decision');
-requireText('adapters/mcp/runtime-gateway/runtime-tool-definitions.ts', 'implementation_review_findings');
-requireText('adapters/mcp/runtime-gateway/work-adapter.ts', "operation === 'review'");
-requireText('adapters/mcp/runtime-gateway/work-adapter.ts', 'implementationReviewContentFingerprint');
-requireText('adapters/mcp/controller-round-compatibility.ts', "'review'");
+  'adapters/mcp/runtime-gateway/runtime-tool-definitions.ts',
+  /review_decision|implementation_review_findings|review_rationale|requiredPlanStepId/,
+  'the model-facing rh_work schema must not hand-write legacy lifecycle review inputs',
+);
+const rhWorkOperationContract = text('src/runtime/control-plane/facade/rh-work-operation-contract.ts');
+const rhWorkModelOperations = (rhWorkOperationContract.match(/RH_WORK_MODEL_OPERATIONS = \[([\s\S]*?)\] as const/) ?? [])[1] ?? '';
+if (!rhWorkModelOperations.trim()) {
+  failures.push('rh_work operation contract must define RH_WORK_MODEL_OPERATIONS as the thin model-facing ABI');
+}
+for (const legacyModelVerb of [
+  'continue', 'verify', 'review', 'finalize', 'stop', 'delegate',
+  'controller_claim', 'controller_release', 'controller_disposition', 'controller_get_owner',
+]) {
+  if (new RegExp(`['"]${legacyModelVerb}['"]`).test(rhWorkModelOperations)) {
+    failures.push(`RH_WORK_MODEL_OPERATIONS must not re-advertise the legacy engineering lifecycle verb: ${legacyModelVerb}`);
+  }
+}
 requireText('packages/kernel/controller/infrastructure/controller-round-store.ts', 'readControllerRoundContextSnapshot');
 const controllerRoundTransitionPolicyPath = 'packages/kernel/controller/domain/controller-round-transition-policy.ts';
 if (existsSync(resolve(root, controllerRoundTransitionPolicyPath))) {
@@ -884,37 +967,29 @@ if (existsSync(resolve(root, controllerRoundTransitionPolicyPath))) {
   requireText('packages/kernel/controller/infrastructure/controller-round-store.ts', "blockedReason: 'provider_dispatch_outcome_unknown'");
 }
 requireText('src/runtime/control-plane/launcher/chatgpt-work-continuation.ts', 'CHATGPT_AUTOMATION_SUBMISSION_OUTCOME_UNKNOWN');
-requireText('adapters/chatgpt/controller-host.ts', 'CONTROLLER_HOST_PROVIDER_DISPATCH_OUTCOME_UNKNOWN');
-requireText('packages/kernel/scheduler/application/continuation-service.ts', 'outcomeUnknown: providerDispatchOutcomeUnknown');
+requireMissing('adapters/chatgpt/controller-host.ts');
+requireText('packages/kernel/controller/application/continuation-service.ts', 'const outcomeUnknown =');
+requireText('packages/kernel/controller/application/continuation-service.ts', 'outcomeUnknown });');
 requireText('adapters/chatgpt/controller-round-host.ts', 'buildChatgptControllerRoundPrompt');
 requireText('adapters/chatgpt/controller-round-settlement-store.ts', 'recordChatgptControllerRoundSettlement');
 forbid('packages/kernel/controller/infrastructure/controller-round-store.ts', /browserSessionId|conversationUrl|recordControllerRoundTabSettlement|buildControllerRoundRelayPrompt|capability_id=/, 'Kernel ControllerRound must remain provider/transport neutral; ChatGPT/MCP rendering and settlement belong to adapters');
-requireText('src/runtime/control-plane/global-scheduler/maintenance.ts', "controllerTypes: ['chatgpt']");
-requireText('src/runtime/control-plane/facade/suggested-actions.ts', "case 'review'");
+forbid(
+  'src/runtime/control-plane/global-scheduler/maintenance.ts',
+  /beginControllerRoundProviderDispatch|runWorkChatgptContinuation|createChatgptControllerHost/,
+  'Scheduler maintenance must never become a Work-bound ChatGPT provider writer',
+);
 forbid(
   'adapters/mcp/runtime-gateway/runtime-tools.ts',
   /function\s+(?:assert|evaluate|derive)[A-Za-z0-9_]*ImplementationReview/,
   'Gateway transport must not implement implementation-review policy authority',
 );
-forbid(
-  'src/runtime/control-plane/execution/work-finalization-service.ts',
-  /function\s+deriveImplementationReviewAcrossCommit/,
-  'Finalizer must consume the canonical Kernel Work review derivation instead of owning a second review authority',
-);
-for (const adapter of [
-  'src/cli/controller/work-mode.ts',
-  'src/runtime/control-plane/facade/types.ts',
-]) {
-  requireText(adapter, '@deprecated Compatibility adapter');
-  requireText(adapter, 'decideRoute(');
-  forbid(adapter, /expectedFiles\s*>|expectedChangedLines\s*>|KIND_RANK|providerOrder\s*\(/, 'delegate all routing thresholds and provider selection to Route Policy');
-}
-let routeAuthorityCount = 0;
+requireMissing('src/runtime/control-plane/execution/work-finalization-service.ts');
+requireMissing('src/cli/controller/work-mode.ts');
+forbid('src/runtime/control-plane/facade/types.ts', /repeated_infrastructure_failure|codex_worker_requires_review/, 'Handoff compatibility types may represent only genuine human blockers');
 for (const path of sourceFiles('src')) {
-  routeAuthorityCount += (text(path).match(/export function decideRoute\s*\(/g) ?? []).length;
+  forbid(path, /export function decideRoute\s*\(/, 'Route Policy was deleted; Forge must not regain an execution-strategy router');
   forbid(path, /requirePlanForGoalWorkloop\s*:\s*true/, 'never restore mandatory Plan gating in production');
 }
-if (routeAuthorityCount !== 1) failures.push(`exactly one decideRoute authority is required; found ${routeAuthorityCount}`);
 forbid(
   'src/runtime/control-plane/facade/goal-workloop.ts',
   /function\s+(?:evaluateWorkCompletionEvidence|evaluateWorkImplementationEvidence|verificationRecordAppliesToCurrentWorkspace)\s*\(/,
@@ -932,7 +1007,7 @@ for (const path of sourceFiles('src/runtime/control-plane')) {
 // B2 ownership fence: production code may consume only the Kernel Work API/domain,
 // never the retired facade store/state-machine or Kernel persistence implementation.
 for (const path of sourceFiles('src')) {
-  forbid(path, /(?:from\s+['"]|import\s*\(\s*['"])[^'"]*(?:work-contract-store|work-state-machine|work-implementation-review)['"]/, 'production source must consume packages/kernel/work instead of retired Work facade authority');
+  forbid(path, /(?:from\s+['"]|import\s*\(\s*['"])[^'"]*(?:work-contract-store|work-implementation-review)['"]/, 'production source must consume packages/kernel/work instead of retired Work facade authority');
   forbid(path, /packages\/kernel\/work\/infrastructure\/work-contract-store/, 'production source must consume the Work application/API boundary, not persistence infrastructure');
 }
 for (const record of genericWorkLifecycleMutationRecords([...sourceFiles('src'), ...sourceFiles('adapters')])) {
@@ -948,36 +1023,31 @@ forbid(
   /\b(?:appendWorkEvidence|recordWorkCompletionReceipt)\s*\(/,
   'MCP Gateway must submit Work application commands instead of writing lifecycle/evidence records directly',
 );
-requireText('adapters/mcp/runtime-gateway/work-adapter.ts', 'completeRemoteEffectWorkFromProcessReceipt');
-requireText('src/runtime/control-plane/execution/work-finalization-service.ts', 'packages/kernel/work/api/index');
 requireText('src/runtime/control-plane/facade/goal-workloop.ts', 'packages/kernel/work/api/index');
 requireText('packages/kernel/work/domain/types.ts', 'predecessorWorkId?: string');
-requireText('src/runtime/control-plane/facade/goal-workloop.ts', 'PLAN_STEP_SEMANTIC_ACCEPTANCE_REQUIRED');
-requireText('src/runtime/control-plane/facade/goal-workloop.ts', 'PLAN_SUCCESSOR_STEP_RESOLUTION_REQUIRED');
-requireText('src/runtime/control-plane/facade/goal-workloop.ts', 'CONTINUATION_GOAL_COMPLETE');
+forbid('src/runtime/control-plane/facade/goal-workloop.ts', /PLAN_(?:STEP_|SUCCESSOR_|NOT_EXECUTABLE|EXECUTION_BASELINE)/, 'Work admission must not consult Plan item status, binding, dependency or approval state');
 requireText('src/runtime/control-plane/facade/goal-workloop.ts', "requestedBy ?? 'chatgpt') === 'scheduler'");
 // V2 Goal authority convergence: lifecycle enums are canonical Kernel Goal
-// domain facts; progression is a pure derived decision service and explicit
-// Controller goal_complete is the Requirement semantic acceptance boundary.
+// domain facts and explicit Controller goal_complete is the Requirement semantic
+// acceptance boundary. PlanStep progression is retired: Plan items are authored
+// working memory that never selects, gates or progresses Work.
 requireText('packages/kernel/goal/domain/types.ts', 'export const REQUIREMENT_STATES');
 requireText('packages/kernel/goal/domain/types.ts', 'export const PLAN_CONTRACT_STATUSES');
 requireText('packages/kernel/goal/domain/types.ts', 'export const PLAN_STEP_STATUSES');
 requireText('src/runtime/control-plane/persistence/requirement-store.ts', 'packages/kernel/goal/api/index');
 requireText('src/runtime/control-plane/facade/types.ts', 'packages/kernel/goal/api/index');
-requireText('packages/kernel/progression/domain/types.ts', "from '../../goal/api/index'");
-requireText('packages/kernel/progression/domain/types.ts', "from '../../scheduler/api/index'");
-forbid('packages/kernel/progression/domain/types.ts', /export type Progression(?:RequirementState|PlanStatus|PlanStepStatus)\s*=/, 'Goal progression must consume canonical Goal lifecycle types instead of copying status unions');
-requireText('packages/kernel/progression/domain/types.ts', 'completionTargetRevision?: string');
-requireText('packages/kernel/progression/application/projector.ts', 'PLAN_FINALIZED_REQUIRES_REQUIREMENT_ACCEPTANCE');
-requireText('packages/kernel/progression/application/projector.ts', 'completionTargetRevision === snapshot.currentSourceRevision');
-requireText('src/runtime/control-plane/facade/requirement-authority.ts', 'acceptRequirementOutcome');
-requireText('src/runtime/control-plane/facade/requirement-authority.ts', 'REQUIREMENT_ACCEPTANCE_PLAN_INCOMPLETE');
-requireText('src/runtime/control-plane/facade/requirement-authority.ts', 'completeRequirementGoal');
-requireText('src/runtime/control-plane/facade/requirement-authority.ts', 'withPlanAdmissionLock');
+requireText('src/runtime/control-plane/persistence/requirement-store.ts', 'reviseRequirementSemantic');
+requireText('src/runtime/control-plane/facade/plan-contract-store.ts', 'revisePlanSemanticContext');
+requireText('docs/architecture/decisions/20260924-thin-semantic-working-context.md', 'only three cross-domain model-authored semantic records');
+requireText('docs/architecture/decisions/20260924-thin-semantic-working-context.md', 'semantic revision must be applied to the latest persisted aggregate inside the same storage transaction');
+forbid('src/runtime/control-plane/facade/requirement-authority.ts', /continueRequirement|acceptRequirementOutcome|completeRequirementGoal|requirement_semantic_acceptance|requirement_semantic_continue/, 'Requirement semantic state changes must use revisioned requirement_revise CAS only');
 requireText('src/runtime/control-plane/facade/plan-contract-store.ts', 'PLAN_REQUIREMENT_TERMINAL');
-requireText('adapters/mcp/runtime-gateway/work-adapter.ts', 'completeRequirementGoal');
-forbid('adapters/mcp/runtime-gateway/runtime-tools.ts', /\bacceptRequirementOutcome\s*\(/, 'MCP transport must delegate Requirement-bound goal completion to the canonical Goal application boundary');
-requireText('adapters/mcp/runtime-gateway/work-adapter.ts', "disposition === 'goal_complete' && work.requirementId");
+forbid('adapters/mcp/runtime-gateway/work-controller-operations.ts', /completeRequirementGoal|requirementAcceptance/, 'Controller disposition must not complete or accept Requirement semantics');
+forbid('adapters/mcp/runtime-gateway/runtime-tools.ts', /\bacceptRequirementOutcome\s*\(/, 'MCP transport must never own Requirement semantic completion');
+forbid('src/runtime/control-plane/facade/rh-work-operation-contract.ts', /requirement_continue/, 'retired Requirement lifecycle compatibility operation must not remain accepted');
+requireText('adapters/mcp/tool-mapping/post-finalize-work-attribution.ts', 'semanticWorkState(work)');
+forbid('adapters/mcp/tool-mapping/post-finalize-work-attribution.ts', /isTerminalWorkContractStatus|lifecycleClosed|work\.status\s*!==?\s*['"]completed['"]/, 'post-completion readonly attribution must follow semantic Work state, not legacy lifecycle projections');
+forbid('adapters/mcp/runtime-gateway/work-controller-operations.ts', /goal_complete[^\n]{0,200}requirementId|requirementId[^\n]{0,200}goal_complete/, 'Controller goal_complete may settle continuation but must not own Requirement completion');
 // B3 ControllerSession authority and provider-neutral host boundary.
 requireText('packages/kernel/controller/domain/types.ts', 'export interface ControllerBinding');
 requireText('packages/kernel/controller/domain/types.ts', 'export interface ControllerLease');
@@ -993,7 +1063,7 @@ forbid('packages/kernel/controller/application/controller-service.ts', /export\s
 // and dispatches exclusively through ControllerHost.resume.
 requireText('packages/kernel/scheduler/domain/schedule.ts', 'export interface RepositorySchedule');
 requireText('packages/kernel/scheduler/domain/schedule.ts', 'export interface ScheduleOccurrence');
-requireText('packages/kernel/scheduler/infrastructure/schedule-store.ts', "'occurrences.json'");
+requireText('packages/kernel/scheduler/infrastructure/schedule-store.ts', "'occurrences'");
 requireText('packages/kernel/scheduler/infrastructure/schedule-store.ts', 'saveScheduleDecision');
 requireText('packages/kernel/scheduler/application/schedule-service.ts', 'createSchedule');
 requireText('packages/kernel/scheduler/api/index.ts', "../application/schedule-service");
@@ -1005,20 +1075,158 @@ requireText('packages/kernel/scheduler/application/settlement.ts', 'applySchedul
 requireText('packages/kernel/scheduler/application/settlement.ts', 'applyScheduleRetryableFailure');
 requireText('packages/kernel/scheduler/application/settlement.ts', 'settleScheduledExecution');
 requireText('src/runtime/workflow/schedules/settlement.ts', '@deprecated Kernel V2 compatibility shim');
-requireText('packages/kernel/scheduler/domain/continuation.ts', 'export interface ScheduledContinuationDispatch');
-requireText('packages/kernel/scheduler/application/continuation-service.ts', 'resumeScheduledControllerContinuation');
-requireText('packages/kernel/scheduler/application/continuation-service.ts', 'getRetainedControllerSession');
-requireText('packages/kernel/scheduler/application/continuation-service.ts', 'getControllerWorkBinding');
-requireText('packages/kernel/scheduler/application/continuation-service.ts', 'host.resume(bindingRecord.binding');
-forbid('packages/kernel/scheduler/application/continuation-service.ts', /SCHEDULE_CONTINUATION_SESSION_DRIFT/, 'Scheduler continuation must not treat replaceable ControllerSession transport ids as durable continuation identity');
-requireText('packages/kernel/scheduler/application/continuation-service.ts', 'SCHEDULE_CONTINUATION_OUTCOME_UNKNOWN');
-requireText('packages/kernel/scheduler/application/continuation-service.ts', 'scheduler_continuation_prepare');
-requireText('packages/kernel/scheduler/application/continuation-service.ts', 'scheduler_continuation_bind_round');
-requireText('src/runtime/root/scheduled-controller-composition.ts', 'controllerHostForScheduledBinding');
+requireMissing('packages/kernel/scheduler/domain/continuation.ts');
+requireMissing('packages/kernel/scheduler/application/continuation-service.ts');
+requireMissing('packages/kernel/scheduler/infrastructure/continuation-dispatch-store.ts');
+requireText('packages/kernel/controller/application/continuation-service.ts', 'resumeControllerRoundOccurrence');
+requireText('packages/kernel/controller/application/continuation-service.ts', 'getRetainedControllerSession');
+requireText('packages/kernel/controller/application/continuation-service.ts', 'getControllerWorkBinding');
+requireText('packages/kernel/controller/application/continuation-service.ts', 'beginControllerRoundProviderDispatch');
+requireText('packages/kernel/controller/application/continuation-service.ts', 'host.resume(bindingRecord.binding');
+requireText('packages/kernel/controller/infrastructure/controller-round-store.ts', 'controller-provider-dispatch-start');
+requireText('packages/kernel/controller/domain/controller-round-transition-policy.ts', "type: 'provider_dispatch_started'");
+forbid('packages/kernel/controller/application/continuation-service.ts', /scheduler_continuation_dispatch|ScheduledContinuationDispatch/, 'Controller continuation must not recreate Scheduler-owned continuation lifecycle persistence');
+requireText('src/runtime/root/controller-progression-composition.ts', 'reconcileControllerProgression');
+requireText('src/runtime/root/controller-progression-composition.ts', 'ensureWorkflowSupervisorEnrollmentForWork');
+requireText('src/runtime/control-plane/global-scheduler/autonomous-continuation.ts', 'reconcileControllerProgression');
+requireText('src/runtime/workflow/schedules/engine.ts', 'reconcileControllerProgression');
+requireText('adapters/mcp/runtime-gateway/work-controller-operations.ts', 'reconcileControllerProgression');
+forbid(
+  'src/runtime/control-plane/launcher/chatgpt-round-continuation.ts',
+  /beginControllerRoundProviderDispatch|runWorkChatgptContinuation|openChatgptControllerRoundFromSource|continueChatgptControllerRoundFromSource/,
+  'current-source compatibility may close an already-open legacy round but must never send or open a new Work-bound ChatGPT turn',
+);
+forbid(
+  'src/runtime/control-plane/launcher/chatgpt-work-continuation.ts',
+  /runWorkChatgptContinuation|prepareWorkChatgptContinuationTransport/,
+  'Work-bound ChatGPT provider delivery is Workflow Supervisor-owned; this module may expose only standalone prompt and Browser settlement primitives',
+);
+requireText('src/runtime/root/scheduled-controller-composition.ts', 'CHATGPT_CONTROLLER_HOST_SUPERVISOR_OWNED');
+requireText('src/runtime/control-plane/launcher/thin-launcher.ts', 'LAUNCHER_CHATGPT_SUPERVISOR_OWNED');
 requireMissing('adapters/scheduler/controller-binding.ts');
-requireText('adapters/chatgpt/controller-host.ts', 'createChatgptControllerHost');
 requireText('adapters/controller-process/controller-host.ts', 'createProcessControllerHost');
-requireText('src/runtime/workflow/schedules/engine.ts', 'resumeScheduledControllerContinuation');
+requireText('src/runtime/workflow/schedules/engine.ts', 'workflow_supervisor_owns_outer_turn');
+requireText('src/runtime/root/workflow-supervisor-composition.ts', 'registerWorkflowSupervisorTask');
+requireText('src/runtime/root/workflow-supervisor-composition.ts', 'reserveWorkflowSupervisorEnrollment');
+requireText('src/runtime/root/workflow-supervisor-composition.ts', 'getWorkflowSupervisorTask(forgeHome, taskId)');
+requireText('src/runtime/root/workflow-supervisor-composition.ts', "stall.state === 'terminal'");
+requireText('supervisor/control-plane.ts', 'if (exhaustedLeaf && this.store.providerResumeExhausted(exhaustedLeaf.effectId)) sourceEffect = exhaustedLeaf;');
+requireText('supervisor/store.ts', "if (first.action !== 'CONTINUE' || second.action !== 'CONTINUE' || third.action !== 'DONE') continue;");
+requireText('supervisor/store.ts', 'const minimumRuntimeInstances = 2;');
+requireText('supervisor/store.ts', "kind = 'terminal_done'");
+requireText('supervisor/types.ts', "actions: ['CONTINUE', 'CONTINUE', 'DONE'];");
+requireText('src/runtime/root/workflow-supervisor-composition.ts', 'WORKFLOW_SUPERVISOR_TASK_REQUIREMENT_CONFLICT');
+requireText('supervisor/entry.ts', 'forgeWorkflowSupervisorValidators()');
+requireText('supervisor/store.ts', 'workflowSupervisorCompletionContractSha256');
+requireText('supervisor/store.ts', "'task_semantic_binding_revised'");
+requireText('supervisor/store.ts', 'WORKFLOW_SUPERVISOR_COMPLETION_CONTRACT_REVISION_CONFLICT');
+requireText('supervisor/store.ts', 'WORKFLOW_SUPERVISOR_SEMANTIC_BINDING_CONFLICT');
+requireText('supervisor/control-plane.ts', 'WORKFLOW_SUPERVISOR_SEMANTIC_BINDING_WORK_NOT_FOUND');
+requireText('supervisor/control-plane.ts', 'WORKFLOW_SUPERVISOR_SEMANTIC_BINDING_REQUIREMENT_NOT_FOUND');
+requireText('supervisor/client.ts', 'expected_completion_contract_sha256: input.expectedCompletionContractSha256');
+requireText('supervisor/server.ts', 'p.expected_completion_contract_sha256');
+requireText('adapters/mcp/runtime-gateway/runtime-tool-definitions.ts', 'expected_completion_contract_sha256');
+requireText('adapters/mcp/runtime-gateway/workflow-supervisor-adapter.ts', 'completionContractSha256: workflowSupervisorCompletionContractSha256(task.completionContract)');
+requireText('docs/architecture/CURRENT.md', 'An existing nonterminal unbound task may acquire one explicit Work or Requirement binding');
+forbid('supervisor/client.ts', /reserveWorkflowSupervisorSchedulerRecovery|reserve_scheduler_recovery/, 'Scheduler recovery is not a Supervisor RPC; reconciliation stays on the canonical effect ledger');
+forbid('supervisor/control-plane.ts', /reserveSchedulerRecovery/, 'Scheduler recovery must not regrow as a second Supervisor recovery authority');
+forbid('supervisor/server.ts', /reserve_scheduler_recovery/, 'Supervisor RPC surface must not expose retired Scheduler recovery authority');
+requireText('src/runtime/workflow/schedules/engine.ts', "const CONTROLLER_PROGRESSION_OPERATION = 'controller_progression';");
+requireText('packages/kernel/scheduler/application/eligibility.ts', 'return value >= min && value <= max && (value - min) % step === 0;');
+requireText('packages/kernel/scheduler/infrastructure/schedule-store.ts', "schedule.action.operation !== 'external_controller_wake' && schedule.action.operation !== 'controller_progression'");
+requireText('packages/kernel/scheduler/infrastructure/schedule-store.ts', 'const schedule: RepositorySchedule = { ...candidate, policy: boundedSchedulePolicy(candidate) };');
+requireText('packages/kernel/scheduler/infrastructure/schedule-store.ts', 'policy: boundedSchedulePolicy(candidate),');
+requireText('src/cli/local-bridge/console-automations.ts', "schedule.action.operation === 'external_controller_wake' || schedule.action.operation === 'controller_progression'");
+requireText('tests/runtime/rh-work-scheduler-adapter.test.ts', "cronDue('0 8 * * *', Date.parse('2026-10-17T00:00:00.000Z'), 'Asia/Shanghai')");
+requireText('tests/runtime/rh-work-scheduler-adapter.test.ts', "cronDue('0 8 * * *', Date.parse('2026-10-18T00:00:00.000Z'), 'Asia/Shanghai')");
+requireText('src/runtime/workflow/schedules/engine.ts', 'schedule.action.operation === CONTROLLER_PROGRESSION_OPERATION');
+requireText('src/runtime/workflow/schedules/work-continuation.ts', "const CONTROLLER_PROGRESSION_OPERATION = 'controller_progression';");
+requireText('src/runtime/workflow/schedules/pending-activation.ts', "const CONTROLLER_PROGRESSION_OPERATION = 'controller_progression';");
+requireText('src/runtime/workflow/schedules/pending-activation.ts', 'operation: CONTROLLER_PROGRESSION_OPERATION');
+requireText('src/runtime/plugins/gmail-adapter.ts', 'actualEmail !== configuredEmail');
+requireText('src/runtime/plugins/gmail-adapter.ts', "export const GMAIL_AUTOMATION_CAPABILITY_ID = 'scheduled-gmail-automation';");
+requireText('src/runtime/plugins/gmail-adapter.ts', "actionId: 'authorize_scheduled_gmail_automation'");
+requireText('src/runtime/plugins/gmail-adapter.ts', "requiredConfirmationText: 'authorize-scheduled-gmail-automation'");
+requireText('src/runtime/plugins/store.ts', 'if (action.requiredConfirmationText)');
+requireText('src/runtime/plugins/gmail-adapter.ts', "actionId: 'archive_scheduled_message'");
+requireText('src/runtime/plugins/gmail-adapter.ts', "actionId: 'send_owner_notification'");
+requireText('src/runtime/plugins/gmail-adapter.ts', 'to: [gmailAutomationMailbox(current)]');
+requireText('src/runtime/plugins/gmail-adapter.ts', 'requiresExplicitCapabilityGrant: true');
+requireText('src/runtime/plugins/gmail-adapter.ts', 'expiresInMinutes: GMAIL_AUTOMATION_GRANT_MINUTES');
+requireText('src/runtime/plugins/store.ts', 'if (action.requiresExplicitCapabilityGrant && !activeAuthorizationGrant)');
+requireText('src/runtime/plugins/store.ts', 'PLUGIN_CAPABILITY_GRANT_REQUIRED');
+requireText('src/runtime/root/workflow-supervisor-runtime.ts', 'notificationRequestId');
+requireText('src/runtime/root/workflow-supervisor-runtime.ts', 'export function recordUnknownSupervisorNotificationReceipt(');
+requireText('src/runtime/root/workflow-supervisor-runtime.ts', 'readPluginActionReceiptForRequest(controllerHome, input.requestId)');
+requireText('src/runtime/root/workflow-supervisor-runtime.ts', 'submitted.receipt');
+requireText('tests/runtime/thin-capability-substrate.test.ts', 'unknown Gmail Supervisor notification keeps one exact receipt');
+requireText('src/runtime/root/workflow-supervisor-runtime.ts', "notificationRequestId('stall', taskId, stall.state, stall.effectId)");
+requireText('src/runtime/root/workflow-supervisor-runtime.ts', 'getDirectActivity(controllerHome, stallActivityId(taskId))');
+requireText('packages/kernel/identity/infrastructure/activity-projection-store.ts', 'export function getDirectActivity(');
+requireText('src/runtime/root/workflow-supervisor-runtime.ts', "stall.state === 'retryable' && stall.generations >= stall.maxGenerations");
+requireText('src/runtime/root/workflow-supervisor-runtime.ts', 'workflow-supervisor.notification-auth:');
+requireText('supervisor/types.ts', "export type WorkflowSupervisorAction = 'CONTINUE' | 'WAIT' | 'DONE' | 'NEEDS_USER';");
+requireText('supervisor/types.ts', "state: 'waiting'; scheduleId: string; completionFingerprint: string");
+requireText('supervisor/protocol.ts', "scheduled_wake_schedule_id");
+requireText('supervisor/protocol.ts', "WORKFLOW_SUPERVISOR_WAIT_NOT_SCHEDULED");
+requireText('supervisor/store.ts', "scheduled-wake-bound:");
+requireText('supervisor/store.ts', "scheduled-wake-committed:");
+requireText('supervisor/store.ts', "completion_event.kind = 'assistant_completion'");
+requireText('supervisor/store.ts', "WORKFLOW_SUPERVISOR_SCHEDULED_WAKE_ALREADY_CONSUMED");
+requireText('supervisor/control-plane.ts', "action === 'WAIT'");
+requireText('supervisor/control-plane.ts', 'private async validateTerminalProposal');
+requireText('supervisor/control-plane.ts', "'scheduled_work_must_remain_open'");
+requireText('supervisor/protocol.ts', '不要用 DONE 或 NEEDS_USER 终结每日循环');
+requireText('supervisor/server.ts', "req.method === 'task_bind_scheduled_wake'");
+requireText('supervisor/server.ts', "req.method === 'task_wake_scheduled'");
+requireText('src/runtime/root/workflow-supervisor-composition.ts', 'bindWorkflowSupervisorScheduledWakeForWork');
+requireText('src/runtime/root/workflow-supervisor-composition.ts', 'scheduleOccurrenceId');
+requireText('src/runtime/workflow/schedules/engine.ts', 'scheduleOccurrenceId: occurrence.occurrenceId');
+requireText('adapters/mcp/runtime-gateway/scheduler-adapter.ts', 'bindWorkflowSupervisorScheduledWakeForWork');
+requireText('adapters/mcp/runtime-gateway/scheduler-adapter.ts', 'async function bindSupervisorWakeForSchedule');
+requireText('adapters/mcp/runtime-gateway/scheduler-adapter.ts', "operation === 'schedule_resume'");
+requireText('adapters/mcp/runtime-gateway/scheduler-adapter.ts', 'bindSupervisorWakeForSchedule(ctx, repository.repoId, saved)');
+requireText('src/runtime/root/workflow-supervisor-composition.ts', 'wakeWorkflowSupervisorScheduledTaskForWork');
+requireText('src/runtime/root/controller-progression-composition.ts', 'wakeWorkflowSupervisorScheduledTaskForWork');
+requireText('src/runtime/root/controller-progression-composition.ts', "if (wake.status === 'woken' && wake.taskId && wake.effectId)");
+requireText('src/runtime/root/controller-progression-composition.ts', "status: 'scheduled_supervisor_woken'");
+requireText('src/runtime/workflow/schedules/engine.ts', "progression.status === 'scheduled_supervisor_woken'");
+requireText('tests/runtime/rh-work-scheduler-adapter.test.ts', 'executes two distinct cron occurrences through the same durable WAIT task without pausing the Schedule');
+requireText('tests/runtime/rh-work-scheduler-adapter.test.ts', "schedule_request_id: 'schedule-daily-gmail-two-consecutive-occurrences'");
+requireText('tests/runtime/rh-work-scheduler-adapter.test.ts', "cron_expression: '0 8 * * *'");
+requireText('tests/runtime/rh-work-scheduler-adapter.test.ts', "2026-10-18@08:00[Asia/Shanghai]");
+requireText('tests/runtime/rh-work-scheduler-adapter.test.ts', '2026-11-01T00:00:00.000Z');
+requireText('tests/runtime/rh-work-scheduler-adapter.test.ts', "evaluateSchedule(controllerHome, created.data.schedule, false, { source: 'timer' })");
+requireText('src/runtime/workflow/schedules/engine.ts', "schedule.action.operation !== CONTROLLER_PROGRESSION_OPERATION");
+requireText('src/runtime/root/workflow-supervisor-runtime.ts', 'authorizationGrantRefs: [grant.grantId]');
+requireText('src/runtime/root/workflow-supervisor-runtime.ts', 'workflow-supervisor.notification-send-auth:');
+requireText('src/runtime/root/workflow-supervisor-runtime.ts', "creationReason: 'scheduled_gmail_notification_authorization_failed'");
+forbidBetween('src/runtime/plugins/gmail-adapter.ts', "actionId: 'send_owner_notification'", "actionId: 'modify_message_labels',", /\b(?:to|recipient|cc|bcc)\s*:/i, 'scheduled Gmail owner notification must not accept a caller-selected recipient');
+requireText('supervisor/forge-validators.ts', "requirement.state !== 'done'");
+requireText('supervisor/forge-validators.ts', 'validateSemanticCompletionBinding(task, proposal)');
+requireText('supervisor/forge-validators.ts', 'function validateWorkCompletion(');
+requireText('supervisor/forge-validators.ts', 'function validateRequirementCompletion(');
+requireText('adapters/mcp/runtime-gateway/runtime-tool-definitions.ts', "work_id: { type: 'string', minLength: 1, maxLength: 256");
+requireText('adapters/mcp/runtime-gateway/runtime-tool-definitions.ts', "requirement_id: { type: 'string', minLength: 1, maxLength: 256");
+requireText('adapters/mcp/runtime-gateway/workflow-supervisor-adapter.ts', 'WORKFLOW_SUPERVISOR_SEMANTIC_BINDING_AMBIGUOUS');
+requireText('adapters/mcp/runtime-gateway/workflow-supervisor-adapter.ts', 'WORKFLOW_SUPERVISOR_SEMANTIC_BINDING_REPO_REQUIRED');
+requireText('adapters/mcp/runtime-gateway/workflow-supervisor-adapter.ts', "...(workId ? { work_id: workId } : {})");
+requireText('adapters/mcp/runtime-gateway/workflow-supervisor-adapter.ts', "...(requirementId ? { requirement_id: requirementId } : {})");
+requireText('supervisor/forge-validators.ts', "requirement.state === 'waiting_for_user'");
+requireText('supervisor/native-browser-adapter.ts', "command.kind === 'recovery' && prepared.reasonCode === 'provider_recovery_stop_pending'");
+requireText('supervisor/native-browser-adapter.ts', 'provider-turn observation, not an infrastructure preparation failure');
+requireText('supervisor/store.ts', 'proofGeneration === ledger.lastGeneration');
+requireText('supervisor/store.ts', 'dispatch_generation: dispatch.lastGeneration');
+requireText('supervisor/store.ts', 'dispatch_generation: row?.dispatch_generation, pre_send_rejection: true');
+requireText('supervisor/store.ts', 'effect-dispatch-budget-refund:${effectId}:${proofGeneration}');
+requireText('supervisor/control-plane.ts', 'const recoveryStopPending = effect.kind === \'recovery\' && input.reason.trim() === \'provider_recovery_stop_pending\';');
+requireText('supervisor/native-browser-adapter.ts', "reasonCode: dispatch.reasonCode ?? 'COMPUTER_CHATGPT_DISPATCH_NOT_ATTEMPTED'");
+forbid('src/runtime/root/workflow-supervisor-composition.ts', /WorkflowSupervisorStore|supervisor\.sqlite|registerTask\(|reserveEffect\(/, 'Forge composition must access Supervisor state only through daemon RPC, never open its database or become a second writer');
+requireText('src/runtime/root/workflow-supervisor-composition.ts', 'workflowSupervisorBoundaryForWork');
+requireText('src/runtime/root/workflow-supervisor-composition.ts', '`forge:${repoId}:work:${workId}`');
+requireText('src/runtime/root/workflow-supervisor-composition.ts', 'registeredTask.taskId');
+forbid('src/runtime/root/workflow-supervisor-composition.ts', /forge:\$\{repoId\}:conversation:\$\{conversationId\}/, 'Supervisor task identity must remain conversation-stable through registration, not be recomputed from the current Work conversation');
+forbid('supervisor/client.ts', /task_has_effect|taskHasAnyEffect/, 'Supervisor boundary is derived from canonical Work+conversation facts; do not add a second ownership projection RPC');
 requireText('src/runtime/workflow/schedules/engine.ts', 'evaluateScheduleTriggerEligibility');
 requireText('src/runtime/workflow/schedules/engine.ts', 'evaluateScheduleOccurrenceAdmission');
 requireText('src/runtime/workflow/schedules/engine.ts', 'controller_session_id');
@@ -1040,22 +1248,31 @@ for (const path of sourceFiles('src')) {
 }
 const B7_KERNEL_INTERNAL_COMPATIBILITY_SHIMS = new Set([
   'src/runtime/control-plane/facade/controller-session-store.ts',
-  'src/runtime/control-plane/facade/controller-round-relay.ts',
   'src/runtime/control-plane/facade/work-contract-store.ts',
-  'src/runtime/control-plane/facade/work-state-machine.ts',
-  'src/runtime/control-plane/facade/work-implementation-review.ts',
   'src/runtime/control-plane/facade/types.ts',
   'src/runtime/workflow/schedules/settlement.ts',
   'src/runtime/workflow/schedules/types.ts',
 ]);
+// The compatibility-shim ledger may only shrink. A shim with no remaining
+// importer at all is migration debt, not a boundary: delete the file and its
+// entry in the same slice instead of keeping an unused authority surface alive.
+// Shims that survive only because a test still imports them are bounded debt to
+// be removed together with that test, never a reason to keep production authority.
+const shimImportRecords = staticTypeScriptImportRecords([...productionTypeScriptFiles(), ...sourceFiles('tests')]);
+for (const shim of B7_KERNEL_INTERNAL_COMPATIBILITY_SHIMS) {
+  const shimBasename = shim.slice(shim.lastIndexOf('/') + 1).replace(/\.ts$/, '');
+  const importedBy = shimImportRecords.filter((record) => record.from !== shim
+    && (record.specifier === `./${shimBasename}` || record.specifier.endsWith(`/${shimBasename}`)));
+  if (importedBy.length === 0) {
+    failures.push(`${shim} is a dead compatibility shim with no importer; delete it and remove its compatibility-shim entry`);
+  }
+}
 for (const path of sourceFiles('src')) {
   if (B7_KERNEL_INTERNAL_COMPATIBILITY_SHIMS.has(path)) continue;
   forbid(path, /packages\/kernel\/[^'"/]+\/(?:domain|application|infrastructure)\//, 'active legacy Runtime code must consume Kernel public api/index surfaces; direct internals are compatibility-boundary-only');
 }
 requireText('src/runtime/control-plane/facade/types.ts', 'packages/kernel/work/domain/types');
 requireText('src/runtime/control-plane/facade/types.ts', 'packages/kernel/controller/domain/types');
-requireText('src/runtime/control-plane/execution/work-finalization-service.ts', 'completeWorkWithReceipt(');
-requireText('adapters/mcp/runtime-gateway/execution-tools.ts', 'resetFinalizationStagesForRequest');
 forbid(
   'src/runtime/plugins/browser-handoff-host.ts',
   /browser\/sessions|saveBrowserSession|writeBrowserSession|sessionPath/,
@@ -1087,6 +1304,12 @@ forbid(
   /\bcreateWorkContract\s*\(/,
   'keep the legacy MCP surface as translation over canonical Work admission authority',
 );
+requireMissing('src/runtime/control-plane/routing/workspace-admission.ts');
+forbid('packages/kernel/work/domain/types.ts', /requireHandoffOnAmbiguity|requireWorktree|directMainProhibited/, 'retired Work placement/handoff policy fields must not return as durable authority');
+forbid('adapters/mcp/runtime-gateway/work-adapter.ts', /require_handoff_on_ambiguity|require_worktree|direct_main_prohibited/, 'retired placement/handoff wire flags must not drive repository topology');
+requireText('adapters/mcp/runtime-gateway/work-adapter.ts', "rawConstraints.workspace_mode === 'current'\n      ? 'current'\n      : 'isolated'", 'repository-bound rh_work.start must default omitted placement to isolated execution');
+requireText('src/runtime/control-plane/execution/work-preparation-service.ts', 'WORK_PREPARE_PLACEMENT_CONFLICT', 'work_prepare must not silently reuse a conflicting existing WorkHandle placement');
+forbid('src/cli/controller/execution-policy.ts', /requiresHumanAcceptance|autoRunDeclaredChecks|autoCompleteAfterSuccessfulRun|requiresScopedPaths|requiresDiffEvidence|requiresAnyVerificationEvidence|requiresAcceptanceEvidence|READ_ONLY_INTENT|DESTRUCTIVE_INTENT|SENSITIVE_PATH_PATTERNS/, 'task risk/text/path classification must not decide workflow, placement, verification, scope, or acceptance authority');
 requireMissing('src/runtime/control-plane/daemon-entry.ts');
 requireMissing('scripts/smoke-runtime-control-plane.ts');
 requireMissing('src/cli/controller/lifecycle.ts');
@@ -1111,6 +1334,100 @@ requireMissing('src/runtime/bootstrap/runtime-authority.ts');
 requireMissing('src/runtime/bootstrap/activation-transaction.ts');
 requireMissing('src/runtime/bootstrap/stable-bootstrap.ts');
 requireMissing('src/runtime/supervisor');
+requireText('supervisor/store.ts', 'BEGIN IMMEDIATE');
+requireText('supervisor/forge-validators.ts', "work.semanticState === 'completed'");
+requireText('supervisor/forge-validators.ts', 'work.predecessorWorkId');
+requireText('supervisor/forge-validators.ts', 'work.supersedes ?? []');
+requireText('supervisor/forge-validators.ts', 'work.supersededBy ? [work.supersededBy]');
+requireText('supervisor/store.ts', 'completions_one_per_source_effect');
+requireText('supervisor/store.ts', 'WORKFLOW_SUPERVISOR_SOURCE_EFFECT_COMPLETION_CONFLICT');
+requireText('supervisor/paths.ts', 'resolveControllerHome');
+requireText('supervisor/paths.ts', "join(resolveWorkflowSupervisorForgeHome(controllerHome), 'supervisor')");
+forbid('supervisor/paths.ts', /control-plane\/persistence\/sqlite-store|workflow-run-store|packages\/kernel\/(?:work|controller)/, 'Workflow Supervisor path authority may share the canonical Controller Home root but must not depend on lower lifecycle persistence or Kernel authorities');
+forbid('supervisor/store.ts', /resolveControllerHome|FORGE_CONTROLLER_HOME|control-plane\/persistence\/sqlite-store|workflow-run-store|packages\/kernel\/(?:work|controller)/, 'Workflow Supervisor persistence must resolve its root only through supervisor/paths and remain a separate database authority');
+requireMissing('supervisor/service.ts');
+requireText('src/runtime/root/runtime.ts', 'startWorkflowSupervisorRuntime');
+requireText('src/runtime/root/runtime.ts', 'WORKFLOW_SUPERVISOR_STOPPED');
+requireText('src/runtime/root/workflow-supervisor-runtime.ts', 'startWorkflowSupervisorRuntime(controllerHome: string)');
+requireText('src/runtime/root/workflow-supervisor-runtime.ts', 'new WorkflowSupervisorStore(forgeHome, {');
+requireText('src/runtime/root/workflow-supervisor-runtime.ts', 'activeReleaseId: () => getRuntimeWriteClaim()?.releaseId');
+requireText('src/runtime/root/workflow-supervisor-runtime.ts', 'createWorkflowSupervisorServer');
+requireText('src/runtime/root/workflow-supervisor-runtime.ts', 'startWorkflowSupervisorNativeBrowserAdapter');
+requireText('supervisor/native-browser-adapter.ts', 'targetPort: ComputerChatgptConversationTargetPort;');
+requireText('src/runtime/root/workflow-supervisor-runtime.ts', 'const targetPort = extensionTargetPort;');
+forbid('src/runtime/root/workflow-supervisor-runtime.ts', /PreferredChatgptConversationTargetPort|MacOsChatgptConversationTargetPort|chatgpt-target-router/, 'Work-bound ChatGPT delivery uses one Chrome Extension target port, never a native fallback router');
+requireMissing('adapters/computer/chatgpt-target-router.ts');
+requireMissing('src/runtime/plugins/computer-chatgpt-macos-target.ts');
+requireMissing('src/runtime/plugins/browser-provider-registry.ts');
+requireText('src/runtime/plugins/browser-runtime.ts', 'options.providers.length !== 1');
+forbid('src/runtime/plugins/browser-runtime.ts', /excludedProviderIds|BrowserProviderUnavailableBeforeActionError/, 'Browser Runtime must not retry an action through another provider');
+forbid('supervisor/native-browser-adapter.ts', /MacOs|AppleEvents|browser-macos-bridge|\bwindowId\b|\btabId\b|window\.name/, 'Workflow Supervisor browser consumer must depend only on the provider-neutral Computer ChatGPT target port');
+forbid('supervisor/native-browser-adapter.ts', /supervisor\/store|sqlite|scheduler|packages\/kernel\/(?:work|controller)|control-plane\/persistence/, 'Native Supervisor browser adapter is transport-only and must not own durable lifecycle, Scheduler, Work, Controller, or persistence authority');
+requireText('src/runtime/root/workflow-supervisor-composition.ts', 'resolveWorkflowSupervisorForgeHome(options.controllerHome)');
+forbid('src/runtime/root/workflow-supervisor-runtime.ts', /createPlatformServiceManagerHost|launchd|systemd|startDetached/, 'Workflow Supervisor reuses the Canonical Runtime process lifecycle and must not own a second OS service');
+requireText('supervisor/entry.ts', "argument('--controller-home')");
+forbid('supervisor/entry.ts', /FORGE_HOME|--forge-home/, 'Workflow Supervisor foreground entry must use the canonical Controller Home authority rather than a second Forge-home root');
+requireText('supervisor/control-plane.ts', 'await this.validateTerminalProposal(task, parsed.proposal)');
+requireText('supervisor/protocol.ts', 'SUPERVISOR_BLOCK_END');
+requireText('supervisor/protocol.ts', 'validateSupervisorObjective(task.objective)');
+forbid('supervisor/protocol.ts', /objective:\s*task\.objective\.slice\(/, 'Supervisor must reject oversized objectives, never silently truncate them in rendered effects');
+requireText('supervisor/store.ts', 'validateSupervisorObjective(input.objective)');
+requireText('supervisor/store.ts', 'const objective = validateSupervisorObjective(input.objective)');
+requireText('supervisor/server.ts', 'createWorkflowSupervisorServer');
+forbid('supervisor/server.ts', /from ['"]\.\/store['"]|supervisor\.sqlite|BEGIN IMMEDIATE/, 'Supervisor transport must relay typed commands through the control plane and never own persistence');
+forbid('src/runtime/plugins/browser-macos-bridge.ts', /PLUGIN_BROWSER_NATIVE_PROCESS_AMBIGUOUS|pids\.length\s*!==\s*1/, 'Chrome GUI PID selection has one authority: Desktop Operator');
+requireText('src/runtime/plugins/browser-macos-bridge.ts', 'await assertMacOsBrowserApplicationRunning(request.product, timeoutMs)');
+requireText('adapters/computer/chrome-extension/manifest.json', 'nativeMessaging');
+requireText('adapters/computer/chrome-extension/background.js', 'computer_extension_claim');
+requireText('adapters/computer/chrome-extension/background.js', 'computer_extension_complete');
+requireText('adapters/computer/chrome-extension/background.js', "typeof observation.composerText === 'string'");
+requireText('adapters/computer/chrome-extension/background.js', "command.identity.namespace === 'chatgpt.bootstrap'");
+forbid('adapters/computer/chrome-extension/background.js', /if \(typeof observation\?\.url === 'string' && observation\.url\) return observation/, 'New bootstrap URL does not attest composer/model hydration before pre-send preparation');
+requireText('adapters/computer/chrome-extension/background.js', 'chrome.runtime.connectNative');
+forbid('adapters/computer/chrome-extension/background.js', /browser_begin_effect|browser_observe_effect|browser_poll|browser_tasks|browser_observe_assistant|task_register|reserve_enrollment/, 'Computer Chrome provider must not consume or mutate Workflow Supervisor effect authority; it executes only typed Computer target commands');
+requireText('adapters/computer/chrome-extension/content.js', 'ForgeComputerChatgptCore');
+requireText('adapters/computer/chrome-extension/content.js', "bootstrapTargetGuard: 'project-checked-before-send-v1'");
+requireText('adapters/computer/chrome-extension/content.js', 'exactComposerText(payload)');
+requireText('adapters/computer/chrome-extension/content.js', "return text.trim() ? text : '';");
+requireText('adapters/computer/chrome-extension/content.js', "blocks.every((block) => block.tagName === 'P')");
+requireText('adapters/computer/chrome-extension/content.js', "blocks.map((block) => {");
+requireText('adapters/computer/chrome-extension/background.js', 'resolveTarget(command.identity, false, command.providerBinding)');
+requireText('adapters/computer/chatgpt-extension-target.ts', "response.result.code === 'COMPUTER_CHATGPT_BOOTSTRAP_PINNED_TAB_MISSING'");
+requireText('adapters/computer/chatgpt-extension-target.ts', 'this.authority.withSurfaceLease(this.controllerHome, previous.targetId');
+requireText('adapters/computer/chatgpt-extension-target.ts', 'return await this.openBootstrap(projectUrl, bootstrapKey, false)');
+requireText('adapters/computer/chatgpt-extension-target.ts', 'if (pinned && !bootstrapMatch) continue;');
+requireText('adapters/computer/chatgpt-extension-target.ts', 'const candidate = pinned');
+requireText('adapters/computer/chatgpt-extension-target.ts', 'observed.ownerToken === binding.ownerToken');
+forbid('adapters/computer/chrome-extension/background.js', /resolveTarget\(command\.identity,\s*false\)\.catch/, 'Extension worker must recover a pinned bootstrap from the durable Computer binding, not its ephemeral in-worker Map');
+forbid('adapters/computer/chrome-extension/content.js', /core\.normalizeText\(payload\)/, 'Provider pre-send evidence must preserve whitespace in immutable effect payload');
+requireMissing('supervisor/chrome-extension');
+requireText('src/runtime/plugins/browser-adapter.ts', "browserMode: browserMode(raw.browserMode) ?? 'attach_preferred'");
+requireText('src/runtime/plugins/browser-adapter.ts', "nativeAttachMode: browserNativeAttachMode(raw.nativeAttachMode) ?? 'auto'");
+requireText('supervisor/native-messaging/host.ts', 'ALLOWED_BROWSER_METHODS');
+requireText('supervisor/native-messaging/host.ts', 'computer_extension_claim');
+forbid('supervisor/native-messaging/host.ts', /['"](?:browser_tasks|browser_poll|browser_begin_effect|browser_observe_effect|browser_observe_dispatch_failure|browser_observe_provider_turn|browser_observe_assistant|bootstrap_poll|bootstrap_project_url|bootstrap_begin_effect|bootstrap_observe_effect|bootstrap_bind_conversation)['"]/, 'Chrome Native Messaging transport must not expose Workflow Supervisor effect RPCs; extension traffic terminates at Computer target commands');
+requireText('supervisor/store.ts', 'recordEffectNotAppliedProof');
+requireText('supervisor/store.ts', 'preSendComposerObservation(effectId: string)');
+requireText('supervisor/store.ts', "if (value && typeof value === 'object' && !Array.isArray(value)) return value as Record<string, unknown>;");
+requireText('supervisor/native-browser-adapter.ts', 'function retiredBootstrapDraftReplacementPrompt(');
+requireText('supervisor/native-browser-adapter.ts', 'control.preSendComposerObservation(staleEffect.effectId)');
+requireText('supervisor/native-browser-adapter.ts', "retired?.terminal !== 'STOPPED'");
+requireText('supervisor/native-browser-adapter.ts', 'control.effectDispatchBudget(staleEffect.effectId).generations !== 0');
+requireText('adapters/computer/chrome-extension/content.js', 'FORGE_RETIRED_DRAFT_V1');
+requireText('docs/architecture/CURRENT.md', 'A STOPPED bootstrap draft may be replaced only from the canonical Supervisor ledger');
+requireText('supervisor/store.ts', 'tried.at(-1)?.eventId');
+requireText('supervisor/store.ts', 'WORKFLOW_SUPERVISOR_PRE_SEND_OPERATOR_REARM_EXHAUSTED');
+requireText('supervisor/store.ts', '`effect-dispatch:${effectId}:${generation}`');
+requireText('supervisor/control-plane.ts', 'PERSISTED_BROWSER_EVIDENCE_KEYS');
+requireText('supervisor/control-plane.ts', "reason: 'not_applied_proof_incomplete'");
+requireText('supervisor/server.ts', "if (!['applied','unknown'].includes(outcome))");
+forbid('adapters/computer/chrome-extension/background.js', /supervisor\.sqlite|BEGIN IMMEDIATE/, 'Computer Chrome provider must reconstruct provider bindings from live inventory and Computer target authority rather than browser shadow persistence');
+// Provider-local browser identity may persist; tasks and effects remain Supervisor-owned.
+forbid('adapters/computer/chrome-extension/content.js', /chrome\.storage|supervisor\.sqlite|BEGIN IMMEDIATE/, 'Computer Chrome content script must remain a page capability surface rather than durable authority');
+forbid('supervisor/native-messaging/host.ts', /task_register|reserve_enrollment|supervisor\.sqlite|BEGIN IMMEDIATE|bun:sqlite|node:sqlite|from ['"][^'"]*(?:store|control-plane)['"]/, 'Chrome Native Messaging host must remain a stateless browser-method relay and never own Supervisor persistence/lifecycle');
+forbid('adapters/computer/chrome-extension/background.js', /task_register|reserve_enrollment|supervisor\.sqlite|BEGIN IMMEDIATE/, 'Computer Chrome provider must never become durable workflow authority');
+forbid('adapters/computer/chrome-extension/content.js', /task_register|reserve_enrollment|supervisor\.sqlite|BEGIN IMMEDIATE|chrome\.storage/, 'Computer Chrome content script must observe/execute one exact page only and never own durable workflow state');
+
 requireMissing('docs/architecture/current/stable-external-runtime-supervisor.md');
 requireMissing('docs/architecture/modules/controller-runtime/stable-supervisor.md');
 requireMissing('docs/operations/stable-external-runtime-supervisor.md');
@@ -1200,6 +1517,9 @@ forbid(
 );
 
 requireText('docs/architecture/CURRENT.md', 'Canonical Runtime is activated as one immutable whole release');
+requireText('src/runtime/root/release-execution-canary.ts', 'releaseScriptRequiresBun');
+forbid('src/runtime/root/package-runtime-release.ts', /ownsProcessRuntimeCanary|PROCESS_RUNTIME_RELEASE_CANARY_ARG/, 'package Runtime wrappers must delegate release canaries to the attested Process Runner/Check Runner implementation');
+requireText('scripts/migrate-windows-wsl-controller-home.ts', 'assertRuntimeReleaseExecutionCanaries(stagedRelease.manifestPath, destination);');
 requireText('docs/architecture/CURRENT.md', 'Runtime availability/recovery keeps Forge itself healthy');
 requireText('docs/architecture/CURRENT.md', 'Historical Issue/Task/Local Job and compatibility projections must not become second mutable authorities.');
 requireText('src/runtime/root/runtime.ts', 'export class CanonicalForgeRuntime');
@@ -1249,12 +1569,17 @@ requireText('src/runtime/root/service.ts', 'SuccessfulExit');
 requireText('src/runtime/root/service.ts', 'ThrottleInterval');
 requireText('src/runtime/root/service-runner.ts', 'activeRuntimeReleaseManifest');
 requireText('src/runtime/standalone-recovery/core.ts', 'restartPrimaryRuntime');
+forbid('src/runtime/standalone-recovery/core.ts', /\bopenSync\s*\([^,]+,\s*['"]wx['"]/, 'Recovery Core must not create a second exclusive mutation lock writer');
 requireText('src/runtime/standalone-recovery/core.ts', 'recoverPrimaryRuntime');
 requireText('src/runtime/standalone-recovery/core.ts', "action: 'restart_primary_runtime'");
 requireText('src/runtime/standalone-recovery/core.ts', 'restartAttempts >= maximumRestartAttempts');
 requireText('src/runtime/standalone-recovery/core.ts', 'rollbackPreviousLocked');
 requireText('src/runtime/standalone-recovery/entry.ts', "'restart_primary_runtime'");
 requireText('src/runtime/standalone-recovery/entry.ts', "'recover_primary_runtime'");
+requireText('src/runtime/standalone-recovery/core.ts', 'armPackageConnectorCutoverDrain');
+requireText('src/runtime/standalone-recovery/entry.ts', "parsed.result.detail.startsWith('RELEASE_SESSION_CUTOVER_DEFERRED_FOR_MCP_ACTIVITY')");
+forbid('src/runtime/standalone-recovery/entry.ts', /if\s*\(decision\.required\s*&&\s*decision\.action\s*===\s*['"]cutover['"]\)\s*\{\s*const gate = await probeReleaseCutoverReadiness/, 'Automatic Recovery must enter the canonical fenced drain transaction rather than block cutover before the drain can be armed');
+
 forbid(
   'src/runtime/standalone-recovery/core.ts',
   /runtime-slots|active-slot|blue\/green|StableSupervisor|component rollback/i,
@@ -1265,6 +1590,39 @@ requireText('src/cli/commands/init-hook.ts', "['open', 'next']");
 requireText('src/cli/commands/init-hook.ts', "command(name)");
 requireText('src/cli/commands/init-hook.ts', "command('close')");
 requireText('src/cli/commands/init-hook.ts', "'.forge'");
+// CLI setup/adoption must use one process/environment implementation, not three writers.
+requireText('src/cli/commands/setup-execution.ts', 'export function withProcessEnv');
+requireText('src/cli/commands/setup-execution.ts', 'export function runSetupProcess');
+requireMissing('src/core/adoption/helper-wrapper-plan.ts');
+// Service and release persistence use one writer rather than five sibling
+// open/write/rename algorithms with incompatible temporary-file identities.
+requireText('src/runtime/shared/atomic-text-file.ts', 'export function writeAtomicTextFile');
+requireText('src/runtime/maintenance/cleanup.ts', 'RUNTIME_CLEANUP_GIT_SOURCE_PROTECTED');
+requireText('src/runtime/maintenance/cleanup.ts', 'protectsGitSource(candidate.path)');
+for (const path of [
+  'src/runtime/root/service.ts',
+  'src/runtime/root/package-connector-service.ts',
+  'src/runtime/root/package-runtime-service.ts',
+  'src/runtime/root/package-runtime-release.ts',
+  'src/cli/controller/systemd-user.ts',
+]) {
+  forbid(path, /^function\s+atomicWrite\s*\(/m, 'service/release text writes must reuse the shared atomic writer');
+  requireText(path, 'writeAtomicTextFile');
+}
+
+// Job recovery and Scheduler must not drift on delegated-operation replay safety.
+requireText('src/runtime/execution/jobs/child-reference.ts', 'export function isAgentDelegationJob');
+for (const path of ['src/runtime/control-plane/global-scheduler/reconciliation.ts', 'src/runtime/execution/jobs/receipt-recovery.ts']) {
+  forbid(path, /^function\s+isAgentDelegationJob\s*\(/m, 'delegation classification must stay in the shared child-reference owner');
+}
+// Live and sampled Git snapshots share the same porcelain partitioning semantics.
+requireText('src/cli/repositories/structured-git.ts', 'export function splitRepositoryGitStatus');
+forbid('src/runtime/projections/git-status-sampler.ts', /^function\s+splitStatus\s*\(/m, 'Git projection must not duplicate the live porcelain parser');
+for (const path of ['src/cli/commands/init.ts', 'src/cli/commands/init-hook.ts', 'src/cli/commands/global-runtime.ts']) {
+  forbid(path, /^function\s+(?:withProcessEnv|runProcess)(?:<|\()/m, 'setup commands must import their canonical synchronous process/environment owner');
+}
+requireText('src/cli/editing/edit-session.ts', 'export function findOccurrence');
+forbid('src/cli/repositories/safe-patch.ts', /^function\s+findOccurrence\s*\(/m, 'Safe Patch preflight must reuse Direct Edit anchor occurrence matching');
 requireText('src/cli/editing/edit-session.ts', 'beforeMode');
 requireText('src/cli/editing/edit-session.ts', 'afterMode');
 requireText('src/cli/editing/edit-session.ts', '{ mode: record.beforeMode }');
@@ -1318,19 +1676,23 @@ forbid(
 requireText('adapters/mcp/runtime-gateway/router.ts', 'executionJobCreationRetired');
 requireText('adapters/mcp/runtime-gateway/router.ts', "'EXECUTION_JOB_RETIRED'");
 requireText('adapters/mcp/runtime-gateway/execution-tools.ts', 'isDurableWorkOperation');
-requireText('adapters/mcp/runtime-gateway/execution-tools.ts', "'work_execute'");
+forbid('adapters/mcp/runtime-gateway/execution-tools.ts', /'work_execute'/, 'A Work-bound execution helper must not be a second public command tool');
+requireText('adapters/mcp/tool-mapping/repository-tools.ts', "definition('execute_command'");
+requireText('adapters/mcp/toolset-names.ts', "'execute_command'");
+forbid('adapters/mcp/toolset-names.ts', /'process_exec'|'repository_command_execute'|'work_execute'/, 'Only execute_command is a public generic command entry');
+forbid('adapters/mcp/runtime-gateway/process-tools.ts', /definition\(\s*'process_exec'/, 'The host command must not re-expose a separate process_exec schema');
+forbid('adapters/mcp/tool-mapping/repository-tools.ts', /definition\('repository_command_preview'/, 'Command dry_run preview must use execute_command rather than a second tool');
+forbid('src/runtime/plugins/local-system-adapter.ts', /actionId:\s*'execute_command'/, 'Do not reintroduce a duplicate local_system generic terminal capability');
 requireText('adapters/mcp/runtime-gateway/execution-tools.ts', "'work_validate'");
-requireText('adapters/mcp/runtime-gateway/execution-tools.ts', "'work_finalize'");
+forbid('adapters/mcp/runtime-gateway/execution-tools.ts', /work_finalize/, 'execution tools must not restore a Work finalization operation');
 requireText('src/runtime/execution/workers/executor.ts', 'executeWork(runtimeContext');
 requireText('src/runtime/execution/workers/executor.ts', 'validateWork(runtimeContext');
-requireText('src/runtime/execution/workers/executor.ts', 'finalizeWork(runtimeContext');
 forbid(
   'src/runtime/execution/workers/executor.ts',
   /gateway\/mcp\/execution-tools|callExecutionTool\s*\(/,
   'Execution Worker must invoke control-plane Work application services directly, never MCP transport',
 );
 requireText('src/runtime/execution/workers/executor.ts', '__from_durable_worker');
-requireText('adapters/mcp/runtime-gateway/work-compat-adapter.ts', 'managedProcessOperationDigest');
 forbid(
   'adapters/mcp/runtime-gateway/runtime-tools.ts',
   /\bcreateExecutionJob\b/,
@@ -1399,7 +1761,7 @@ forbid(
 );
 forbid('adapters/mcp/runtime-gateway/router.ts', /Use process_get \/ process_wait \/ process_logs/, 'Gateway follow-up instructions must use an always-exposed neutral Work facade');
 requireMatch(
-  'adapters/mcp/runtime-gateway/router.ts',
+  'adapters/mcp/runtime-gateway/routing-policy.ts',
   /const DIRECT_REPOSITORY_TOOLS = new Set\(\[[\s\S]*?'repository_list'[\s\S]*?'repository_get'[\s\S]*?'repository_workbench'[\s\S]*?\]\);/,
   'declare DIRECT_REPOSITORY_TOOLS with repository_list, repository_get, and repository_workbench',
 );
@@ -1472,6 +1834,16 @@ requireText('src/runtime/control-plane/global-scheduler/scheduler.ts', 'persistS
 requireText('src/runtime/control-plane/global-scheduler/worker-attachment.ts', 'attachExecutionWorker');
 requireText('src/runtime/control-plane/global-scheduler/scheduler.ts', 'runSchedulerPeriodicCleanup');
 requireText('src/runtime/control-plane/global-scheduler/maintenance.ts', 'runSchedulerValidationReconciliation');
+requireMatch(
+  'src/runtime/control-plane/global-scheduler/maintenance.ts',
+  /input\.runtimeCleanup\(input\.controllerHome,\s*\{\s*reason:\s*['"]periodic['"]/s,
+  'route periodic maintenance through the canonical Runtime cleanup owner',
+);
+requireText('src/runtime/control-plane/runtime-cleanup.ts', 'cleanupControllerReleaseHistory');
+requireText('src/runtime/control-plane/release-retention.ts', "releasePaths.add(releasePathFromAuthorityRecord(releasesRoot, parsed.active, 'active'))");
+requireText('src/runtime/control-plane/release-retention.ts', 'const connectorRelease = loadPackageConnectorReleaseProtection(controllerHome, releasesRoot);');
+requireText('src/runtime/control-plane/release-retention.ts', 'const databaseBackup = (previous as Record<string, unknown>).databaseBackup;');
+requireText('src/runtime/root/scheduler.ts', 'isolatePeriodicCleanup: true');
 requireText('src/runtime/control-plane/global-scheduler/scheduler.ts', 'planSchedulerSourceSampling');
 requireText('src/runtime/control-plane/global-scheduler/source-scan.ts', 'selectSchedulerSourceScanRepositories');
 requireText('src/runtime/control-plane/global-scheduler/scheduler.ts', 'runSchedulerDurableAdmission');
@@ -1508,7 +1880,7 @@ forbidBetween(
   /rebuildRepositoryProjection\s*\(/,
   'Projection rebuild must happen outside the Repo Actor mailbox lock',
 );
-requireText('packages/kernel/scheduler/infrastructure/schedule-store.ts', "'occurrences.json'");
+requireText('packages/kernel/scheduler/infrastructure/schedule-store.ts', "'occurrences'");
 requireText('src/runtime/projections/git-status-sampler.ts', 'writeRepositoryGitStatusSample');
 requireText('src/runtime/projections/git-status-sampler.ts', 'readRepositoryGitStatusSample');
 requireText('adapters/mcp/tool-mapping/repository-tools.ts', 'readRepositoryGitStatusSample');
@@ -1523,13 +1895,9 @@ forbidBetween(
 requireText('src/runtime/control-plane/execution/session-store.ts', 'lastValidatedAt: now');
 requireText('src/runtime/control-plane/execution/validation.ts', 'warnings.push');
 requireText('src/runtime/control-plane/execution/work-handle-store.ts', "failed: ['validating', 'editing', 'committed', 'merged', 'cleaned', 'failed_terminal_cleanup']");
-requireText('adapters/mcp/runtime-gateway/execution-tools.ts', "from '../../../src/runtime/control-plane/execution/work-finalization-service'");
 requireText('adapters/mcp/runtime-gateway/execution-tools.ts', "from '../../../src/runtime/control-plane/execution/work-preparation-service'");
 requireText('adapters/mcp/runtime-gateway/execution-tools.ts', "from '../../../src/runtime/control-plane/execution/work-operation-service'");
-requireText('adapters/mcp/runtime-gateway/execution-tools.ts', 'Compatibility exports: implementation authority lives in control-plane execution.');
-requireText('adapters/mcp/runtime-gateway/execution-tools.ts', 'resetFinalizationStagesForRequest,');
 requireText('adapters/mcp/runtime-gateway/execution-tools.ts', 'selectDefaultWorkValidationChecks');
-requireText('adapters/mcp/runtime-gateway/work-adapter.ts', "callExecutionTool(ctx, 'work_finalize'");
 forbid(
   'adapters/mcp/runtime-gateway/runtime-tools.ts',
   /repositoryGit(?:Commit|FinishWorkflow|MergeBranch|DeleteBranch|RebaseOnto)\s*\(/,
@@ -1542,8 +1910,8 @@ forbid(
 );
 forbid(
   'adapters/mcp/runtime-gateway/execution-tools.ts',
-  /function\s+(?:prepareWork|adoptExistingWorkHead)\s*\(/,
-  'MCP execution transport must delegate Work preparation/adoption to the control-plane application service',
+  /function\s+prepareWork\s*\(/,
+  'MCP execution transport must delegate Work preparation to the control-plane application service',
 );
 forbid(
   'adapters/mcp/runtime-gateway/execution-tools.ts',
@@ -1556,29 +1924,39 @@ forbid(
   'MCP execution transport must not own managed-workspace or WorkContract preparation admission',
 );
 requireText('src/runtime/control-plane/execution/work-preparation-service.ts', 'export function prepareWork(');
-requireText('src/runtime/control-plane/execution/work-preparation-service.ts', 'function adoptExistingWorkHead(');
+requireText('src/runtime/control-plane/execution/work-preparation-service.ts', "const useWorktree = isolation !== 'reuse';");
+forbid(
+  'src/runtime/control-plane/execution/work-preparation-service.ts',
+  /adoptExistingWorkHead|WORK_HEAD_ADOPTION_/,
+  'Work preparation must keep the start revision frozen; changed source HEADs are never adopted during implementation',
+);
+forbid(
+  'src/runtime/control-plane/execution/work-handle-authority.ts',
+  /alignRepositoryMutationBase|WORK_DIRECT_PRE_MUTATION_RECONCILIATION_/,
+  'Repository mutation authority must not advance a Work baseline to follow target-branch movement',
+);
+requireMissing('src/runtime/control-plane/execution/direct-canonical-work-reconciliation.ts');
 requireText('src/runtime/control-plane/execution/work-operation-service.ts', 'export async function executeWork(');
 requireText('src/runtime/control-plane/execution/work-operation-service.ts', 'export async function validateWork(');
-requireText('src/runtime/control-plane/execution/work-finalization-service.ts', 'resetFinalizationStagesForRequest');
-requireText('src/runtime/control-plane/execution/work-finalization-service.ts', 'finalizationComplete');
-forbidBetween(
-  'src/runtime/control-plane/execution/work-finalization-service.ts',
-  'export async function finalizeWork(',
-  '// WORK_FINALIZATION_SERVICE_END',
-  /withControllerLock\([\s\S]{0,900}?(?:repositoryGitCommit|repositoryGitFinishWorkflow|runCleanup|repositoryGitDeleteBranch)/,
-  'Work finalization must not hold the controller lock while committing, merging, deleting branches, or removing worktrees',
-);
+requireMissing('src/runtime/control-plane/execution/work-finalization-service.ts');
 requireText('packages/kernel/scheduler/domain/schedule.ts', "'repository-event'");
 requireText('packages/kernel/scheduler/domain/schedule.ts', "'dependency-checkpoint'");
 requireText('packages/kernel/scheduler/infrastructure/schedule-store.ts', 'saveScheduleDecision');
 requireText('packages/kernel/scheduler/application/settlement.ts', 'backoffMinutes');
 requireText('src/runtime/release/release-gate.ts', 'releaseReady');
-requireText('adapters/mcp/transports/http.ts', "'/ready'");
-requireText('adapters/mcp/transports/http.ts', "'/repos/:repoId/health'");
+requireText('adapters/mcp/transports/http-observation.ts', "'/ready'");
+requireText('adapters/mcp/transports/http-observation.ts', "'/repos/:repoId/health'");
 requireText('src/runtime/control-plane/governance/external-effects.ts', 'EXTERNAL_EFFECT_AUTHORIZATION_REQUIRED');
 requireText('src/runtime/control-plane/governance/external-effects.ts', 'AUTOMATED_REQUIREMENT_REQUIRES_CANDIDATE');
 requireText('adapters/mcp/tool-mapping/tools.ts', "export * from './legacy-tool-service'");
-requireText('src/cli/mcp/tools.ts', '@deprecated Kernel V2 compatibility shim');
+for (const retiredShim of [
+  'src/cli/mcp/access-tools.ts',
+  'src/cli/mcp/repository-tools.ts',
+  'src/cli/mcp/tools.ts',
+  'src/cli/mcp/toolset.ts',
+  'src/cli/mcp/toolset-names.ts',
+  'src/cli/mcp/toolset-selection.ts',
+]) requireMissing(retiredShim);
 
 for (const path of [
   'adapters/mcp/runtime-gateway/router.ts',
@@ -1595,8 +1973,6 @@ for (const path of [
 
 requireText('scripts/run-governed-gate.ts', "label: 'source duplication'");
 requireText('scripts/run-governed-gate.ts', "args: ['scripts/check-source-duplication.mjs']");
-requireText('scripts/run-governed-gate.ts', "label: 'controller UI bundle'");
-requireText('scripts/run-governed-gate.ts', "args: ['run', 'check:controller-ui']");
 requireText('docs/architecture/CURRENT.md', '## State ownership');
 requireText('docs/architecture/CURRENT.md', '## Runtime and MCP boundary');
 requireText('docs/architecture/CURRENT.md', '## Testing and verification');
@@ -1698,11 +2074,12 @@ const B7_ALLOWED_KERNEL_LEGACY_EDGES = new Set([
   'packages/kernel/scheduler/infrastructure/schedule-store.ts -> src/runtime/control-plane/facade/handoff-inbox-store.ts',
   'packages/kernel/scheduler/infrastructure/schedule-store.ts -> src/runtime/shared/json-files.ts',
   'packages/kernel/scheduler/infrastructure/schedule-store.ts -> src/runtime/evidence/event-ledger.ts',
-  'packages/kernel/scheduler/infrastructure/continuation-dispatch-store.ts -> src/cli/repositories/locks.ts',
-  'packages/kernel/scheduler/infrastructure/continuation-dispatch-store.ts -> src/runtime/control-plane/persistence/sqlite-store.ts',
 ]);
 requireExactShrinkingDebt('Kernel -> legacy src dependency debt', b7KernelLegacyEdges, B7_ALLOWED_KERNEL_LEGACY_EDGES);
 const b7ProductionEdges = new Set(dependencyEdges(b7ProductionGraph));
+if (!b7ProductionEdges.has('src/runtime/standalone-recovery/core.ts -> src/runtime/standalone-recovery/operation-lock.ts')) {
+  failures.push('Recovery Core must consume the single shared operation-lock authority');
+}
 for (const requiredEdge of [
   'packages/kernel/work/domain/types.ts -> packages/kernel/identity/api/index.ts',
   'packages/kernel/scheduler/domain/schedule.ts -> packages/kernel/identity/api/index.ts',
@@ -1734,7 +2111,243 @@ for (const [symbol, label] of b7UniqueMutationSymbols) {
   }
   if (count !== 1) failures.push(`${label} must have exactly one exported production owner; found ${count} for ${symbol}`);
 }
+// Thin Plan authority: Plan items are authored working memory. Work execution,
+// Plan admission and Plan revision must never re-acquire PlanStep execution
+// writers, Plan approval/acceptance gates or Plan-derived Work progression.
+const retiredPlanExecutionSymbols = [
+  'claimPlanStepForWork',
+  'completePlanStepForWork',
+  'acceptPlanStepEvidence',
+  'repairPlanStepForTechnicalRetry',
+  'repairDanglingPlanStepWorkBinding',
+  'replanActivePlanBoundWorkScope',
+  'retireTerminalPlanBoundWorkAuthorities',
+  'getPlanExecutionBaselineRevision',
+  'updatePlanContractWithExecutionBaseline',
+  'refreshPlanBoundWorkRevision',
+  'retirePlanBoundWorkContract',
+  'rebindPlanBoundWorkContract',
+];
+for (const path of productionTypeScriptFiles()) {
+  const source = text(path);
+  for (const symbol of retiredPlanExecutionSymbols) {
+    if (new RegExp(`\\b${symbol}\\b`).test(source)) failures.push(`${path} must not reintroduce retired PlanStep execution writer ${symbol}`);
+  }
+}
+const retiredPlanGateCodes = /PLAN_STEP_(?:SEMANTIC_ACCEPTANCE_REQUIRED|TERMINAL_WORK_RECONCILIATION_REQUIRED|DEPENDENCIES_PENDING|ALREADY_ACTIVE|ALREADY_COMPLETED|MULTIPLE_PRIMARY_WORKS|BOUND_WORK_MISSING|REUSES_ACTIVE_WORK|WORK_CONTRACT_MISMATCH)|PLAN_NOT_EXECUTABLE|PLAN_EXECUTION_BASELINE_LOCKED|PLAN_OBLIGATION_CONTINUITY_REQUIRED|PLAN_STEP_SEMANTIC_ACCEPTANCE/;
+for (const path of [
+  'src/runtime/control-plane/facade/goal-workloop.ts',
+  'src/runtime/control-plane/facade/plan-contract-store.ts',
+  'src/runtime/control-plane/facade/requirement-authority.ts',
+  'src/runtime/control-plane/global-scheduler/autonomous-continuation.ts',
+  'adapters/mcp/runtime-gateway/work-plan-operations.ts',
+  'adapters/mcp/runtime-gateway/work-repair-adapter.ts',
+]) {
+  if (retiredPlanGateCodes.test(text(path))) failures.push(`${path} must not reintroduce a PlanStep execution gate`);
+}
+for (const path of ['packages/kernel/progression/api/index.ts']) requireMissing(path);
+for (const path of productionTypeScriptFiles()) {
+  if (/packages\/kernel\/progression/.test(text(path))) failures.push(`${path} must not depend on the retired PlanStep progression engine`);
+}
+for (const retiredPath of [
+  'src/runtime/control-plane/execution/work-finalization-service.ts',
+  'src/runtime/control-plane/execution/direct-edit-work-completion.ts',
+  'src/runtime/control-plane/execution/content-equivalent-commit-authority.ts',
+  'adapters/mcp/controller-round-compatibility.ts',
+  'adapters/mcp/frozen-client-semantic-compatibility.ts',
+  'adapters/mcp/runtime-gateway/work-controller-recovery-operations.ts',
+  'adapters/mcp/runtime-gateway/work-plan-repair-operations.ts',
+]) requireMissing(retiredPath);
+for (const path of [...sourceFiles('src'), ...sourceFiles('adapters')]) {
+  forbid(path, /tool:\s*['"]rh_work['"][\s\S]{0,180}?operation:\s*['"](?:continue|verify|review|finalize|stop|plan_approve|plan_accept_step|controller_claim|controller_release|controller_disposition)['"]/, 'retired Work lifecycle operations must not return as current rh_work behavioral authority');
+}
+// Thin semantic Work lifecycle: Work is open/completed/cancelled and
+// work.complete is a mechanical durable close. Review findings are durable
+// observations, never a completion gate.
+requireText('packages/kernel/work/domain/types.ts', "export const SEMANTIC_WORK_STATES = ['open', 'completed', 'cancelled'] as const;");
+requireText('packages/kernel/work/domain/types.ts', 'export type SemanticWorkState = (typeof SEMANTIC_WORK_STATES)[number];');
+requireText('adapters/mcp/runtime-gateway/work-semantic-operations.ts', "const RH_WORK_SEMANTIC_OPERATIONS = new Set(['start', 'get', 'revise', 'complete']);");
+for (const path of [
+  'packages/kernel/work/domain/state-machine.ts',
+  'src/runtime/control-plane/execution/work-evidence-policy.ts',
+  'src/runtime/control-plane/facade/goal-workloop.ts',
+]) {
+  forbid(path, /READ_ONLY_REVIEW_CLEAN_SCOPE|cleanReadOnlyReviewEvidence|READ_ONLY_REVIEW_FINDINGS_BLOCK/, 'read-only review findings must not gate terminal completion');
+}
+// Work lifecycle collapse: semantic Work completion is one durable
+// expected_revision CAS close. Verify/review/finalize/delivery/cleanup are
+// mechanical facts owned elsewhere; they must never be wired back into the
+// semantic close path as a gate.
+for (const path of [
+  'adapters/mcp/runtime-gateway/work-semantic-operations.ts',
+]) {
+  forbid(path, /transitionWorkContractPhase|requestWorkImplementationReview|recordWorkImplementationReview|finalizeGoalWorkloop|verifyGoalWorkloop|reviewGoalWorkloop/, 'semantic Work completion must not invoke a mechanical lifecycle transition');
+  forbid(path, /implementationReview|completionReceipt|dispatchState|evidenceState|ControllerRound|controllerRound/, 'semantic Work completion must not read mechanical lifecycle or controller authority');
+}
+forbidBetween(
+  'packages/kernel/work/infrastructure/work-contract-store.ts',
+  'export function reviseWorkSemanticContext(',
+  'export function getWorkContract(',
+  /WORK_IMPLEMENTATION_REVIEW|WORK_COMPLETION_RECEIPT|WORK_VERIFICATION|WORK_CLEANUP|WORK_DELIVERY|WORK_FINALIZE/,
+  'the semantic close must not require review, verification, delivery, cleanup or finalize',
+);
+requireText('packages/kernel/work/infrastructure/work-contract-store.ts', 'WORK_REVISION_CONFLICT:');
+forbidBetween(
+  'packages/kernel/work/infrastructure/work-contract-store.ts',
+  'export function semanticWorkState(',
+  'export function workSemanticView(',
+  /'failed'|'ready'|'blocked'|'running'/,
+  'semantic Work state must expose only open/completed/cancelled; execution vocabulary is not a semantic state',
+);
+// Controller de-authority: ordinary Work/capability execution is fenced by
+// semantic CAS plus concrete target/resource/effect owners, never by a
+// Work-wide ControllerSession lease. Explicit autonomous-continuation round
+// operations retain their narrow dispatch/effect authority until Slice 4.
+forbid(
+  'packages/kernel/work/domain/state-machine.ts',
+  /WORK_PHASE_EVIDENCE_|WORK_COMPLETION_PHASE_/,
+  'legacy phase evidence must not regain semantic Work authority',
+);
+for (const path of [
+  'adapters/mcp/runtime-gateway/work-workflow-operations.ts',
+  'src/runtime/workflows/runtime.ts',
+]) {
+  forbid(path, /assertFacadeControllerRoundAuthority|getControllerSession|getControllerRoundRelay|controllerSessionAuthorityMatches|WORKFLOW_CONTROLLER_AUTHORITY|WORKFLOW_CONTROLLER_NOT_OWNER/, 'ordinary Workflow execution must not depend on Work-wide Controller authority');
+}
+forbid(
+  'adapters/mcp/runtime-gateway/work-adapter.ts',
+  /claimNewFacadeWork|mintControllerSessionAuthority|resumeControllerSession|bindFacadeControllerOwnership|currentFacadeTerminalizationAuthority|currentTerminalCleanupAuthority|withControllerSessionTerminalizationFence/,
+  'ordinary Work start/continue/review/stop/finalize must not mint or require Work-wide Controller authority',
+);
+for (const path of [
+  'packages/kernel/work/domain/types.ts',
+  'packages/kernel/work/domain/execution-concurrency.ts',
+  'src/runtime/control-plane/concurrency/work-execution-concurrency.ts',
+  'src/runtime/execution/process-runtime/types.ts',
+]) {
+  forbid(path, /controller_release/, 'Work/Process concurrency must wake on concrete Work/resource/scheduler facts, not Controller ownership release');
+}
+for (const path of [
+  'src/runtime/control-plane/execution/work-execution-support.ts',
+  'src/runtime/control-plane/execution/work-operation-service.ts',
+  'src/runtime/control-plane/execution/work-terminal-cleanup.ts',
+  'src/runtime/control-plane/execution/work-preparation-service.ts',
+]) {
+  forbid(path, /assertWorkControllerOwnership|releasePreparedWorkOwnership|claimPreparedWorkOwnership|claimHeadAdoptionOwnership|withControllerSessionTerminalizationFence|getControllerSession|claimControllerSession|resumeControllerSession|releaseControllerSessionWithAuthority|releaseObservedControllerSession|controllerClaimed/, 'ordinary Work preparation/execution/finalization/cleanup must not use ControllerSession as authority');
+}
+forbid(
+  'src/runtime/recovery/maintenance-executor.ts',
+  /withControllerSessionTerminalizationFence|listControllerSessions|getControllerSession|controllerWorkIds|controller_session/,
+  'stale Work maintenance must re-check concrete Work/source/resource facts instead of using ControllerSession as lifecycle authority',
+);
+requireText('src/runtime/control-plane/facade/handoff-inbox-store.ts', 'migrateLegacyHandoffInbox');
+requireText('src/runtime/control-plane/facade/handoff-inbox-store.ts', 'HANDOFF_LEGACY_STORE_READ_ONLY');
+requireText('src/runtime/control-plane/facade/handoff-inbox-store.ts', 'UserRequest owns the durable write');
+forbid('src/runtime/control-plane/facade/handoff-inbox-store.ts', /writeLegacyHandoffInboxStore|export function writeHandoffInboxStore/, 'legacy Handoff store must never remain a writable second authority');
+forbid('src/runtime/plugins/store.ts', /status:\s*terminalRemoteEffect\s*\?\s*['\"]completed['\"]/, 'plugin/effect delivery results must never claim semantic Work completion');
+requireText('src/runtime/plugins/store.ts', "semanticState: 'open' as const");
+for (const path of sourceFiles('src')) {
+  forbid(path, /\bcancelWorkContract\s*\(/, 'runtime/maintenance code must never auto-cancel semantic Work; cancellation belongs to explicit semantic CAS');
+}
+requireText('src/runtime/control-plane/facade/goal-workloop.ts', "state: 'cancelled'");
+requireText('src/runtime/recovery/maintenance-executor.ts', "result: 'work_semantic_completion_required'");
+requireText('src/runtime/control-plane/execution/work-authority-reconciler.ts', "'semantic_work_open_ownerless'");
+forbid(
+  'packages/kernel/scheduler/infrastructure/schedule-store.ts',
+  /repeated_infrastructure_failure|activeScheduleFailureHandoff|stableScheduleFailureHandoffId|resolveRecoveredScheduleFailureHandoffs/,
+  'mechanical Scheduler failures must remain runtime/backoff facts and must not create human-request authority',
+);
+{
+  const workStoreSource = text('packages/kernel/work/infrastructure/work-contract-store.ts');
+  const receiptWriterStart = workStoreSource.indexOf('export function recordWorkCompletionReceipt(');
+  const receiptWriterEnd = workStoreSource.indexOf('\nexport interface AcceptSubmittedWorkInput', receiptWriterStart);
+  const receiptWriter = receiptWriterStart >= 0 && receiptWriterEnd > receiptWriterStart
+    ? workStoreSource.slice(receiptWriterStart, receiptWriterEnd)
+    : '';
+  if (!receiptWriter) fail('recordWorkCompletionReceipt writer not found');
+  if (/status:\s*['"]completed['"]|dispatchState:\s*['"]terminal['"]|phase:\s*['"]cleanup['"]|WORK_IMPLEMENTATION_REVIEW_REQUIRED|transitionWorkContractPhase|requestWorkImplementationReview/.test(receiptWriter)) {
+    fail('delivery/effect receipt recording must not terminalize Work or reintroduce review/lifecycle gates');
+  }
+}
+forbid(
+  'src/runtime/control-plane/execution/work-completion-authority.ts',
+  /completeRequirementFromWork|projectRequirementDeliveryFromCompletedWork|completeWorkWithReceipt/,
+  'delivery evidence must not auto-complete Work or Requirement',
+);
+for (const path of [
+  'adapters/mcp/runtime-gateway/work-adapter.ts',
+  'adapters/mcp/runtime-gateway/repository-compat-adapter.ts',
+  'src/runtime/control-plane/facade/goal-workloop.ts',
+]) {
+  forbid(path, /lifecycleClosed|finalStatus:\s*['"]completed['"]|directEditWorkCompletion/, 'mechanical delivery/finalize responses must not masquerade as semantic Work completion');
+}
+// Temporary migration assertion on automatic dispatch admission. Explicit
+// operator repair may reconstruct a historical dispatch-owner pre-click proof;
+// unknown observation reasons must never be automatic retry authority. Remove
+// this string fence when the existing effect admission contract is AST-fenced.
+forbidBetween(
+  'supervisor/store.ts',
+  'nextBrowserEffect(',
+  'effectDispatchBudget(',
+  /composer_missing|send_button_missing|latestRetryEvidenceEventId/,
+  'dispatch generation may advance only from canonical effect_not_applied proof; effect_unknown never authorizes replay',
+);
+requireText('packages/kernel/controller/domain/controller-round-transition-policy.ts', "Pick<ControllerRoundRelayRecord, 'relayScopeId' | 'originWorkId' | 'roundCount'>");
+forbid(
+  'packages/kernel/controller/domain/controller-round-transition-policy.ts',
+  /controllerRoundProviderEffectId[\s\S]{0,400}authorityId/,
+  'canonical continuation/provider effect identity must survive Controller authority rotation',
+);
+requireText('src/runtime/root/workflow-supervisor-composition.ts', 'reserveWorkflowSupervisorEnrollment(forgeHome, registeredTask.taskId, lowerLayer.providerEffectId)');
+requireText('src/runtime/root/workflow-supervisor-composition.ts', 'providerDispatchEffectId: effect.effectId');
+requireText('supervisor/protocol.ts', '(?:fx|crpe)_');
+// Cognitive Plane stays one advisory application path: all Controller tools expose the
+// same optional settlement metadata, the MCP server settles it after the primary
+// outcome, and Supervisor/external launchers consume Cognition-only projections.
+requireText('adapters/mcp/toolset.ts', 'injectCognitionSettlementFields(injectDurableCommandFields(definition))');
+requireText('adapters/mcp/server.ts', 'settleCognitionAfterTool(ctx, name, args, localResult)');
+forbid('adapters/mcp/runtime-gateway/runtime-tools.ts', /settleCognitionEnvelope/, 'cognition settlement belongs to the canonical all-tool MCP boundary, not the rh_* facade only');
+requireText('src/runtime/root/workflow-supervisor-composition.ts', 'renderCognitiveAttentionForWork');
+requireText('src/runtime/control-plane/launcher/thin-launcher.ts', 'renderCognitiveAttentionForWork');
+forbid('src/runtime/root/workflow-supervisor-composition.ts', /renderAssistantWorkContext/, 'Supervisor prompts may receive bounded Cognition, not the legacy lower-layer AssistantWorkContext blob');
+forbid('src/runtime/control-plane/launcher/thin-launcher.ts', /renderAssistantWorkContext/, 'external controller prompts may receive bounded Cognition, not the legacy lower-layer AssistantWorkContext blob');
+requireText('packages/kernel/cognition/application/activation-service.ts', 'structuredConceptAliasCueScore');
+requireText('packages/kernel/cognition/application/activation-service.ts', 'fairScopedRead');
+requireText('packages/kernel/cognition/application/activation-service.ts', 'seenFamilies');
+
+for (const path of [
+  'adapters/mcp/runtime-gateway/work-learning-operations.ts',
+  'src/runtime/control-plane/persistence/experience-store.ts',
+]) {
+  forbid(path, /assertFacadeControllerRoundAuthority|controllerSessionAuthorityMatches|getControllerSession|EXPERIENCE_CONTROLLER_NOT_OWNER|EXPERIENCE_ROUND_AUTHORITY_MISMATCH|EXPERIENCE_CLAIM_AUTHORITY_MISMATCH/, 'advisory learning writes must use Work provenance and evidence, not Controller ownership');
+}
+forbid(
+  'src/cli/commands/brain-assistant.ts',
+  /authority-env|BRAIN_CONTROLLER_AUTHORITY_REQUIRED|BRAIN_AUTHORITY_ENV_INVALID/,
+  'advisory experience CLI must not require a Controller capability',
+);
+// Retired Gateway/CLI forwarding aliases must not be reintroduced: adapter
+// definitions and execution-domain reconciliation own their canonical paths.
 for (const path of [
+  'adapters/mcp/runtime-gateway/work-validation-reconciler.ts',
+  'src/cli/mcp/access-mode.ts',
+  'src/cli/mcp/audit.ts',
+  'src/cli/mcp/auth.ts',
+  'src/cli/mcp/multi-repository.ts',
+  'src/cli/mcp/openai-secure-tunnel.ts',
+  'src/cli/mcp/paths.ts',
+  'src/cli/mcp/policy.ts',
+  'src/cli/mcp/readiness-projection.ts',
+  'src/cli/mcp/redaction.ts',
+  'src/cli/mcp/repo.ts',
+  'src/cli/mcp/server.ts',
+  'src/cli/mcp/setup.ts',
+  'src/cli/mcp/transports/http.ts',
+  'src/cli/mcp/transports/session-registry.ts',
+  'src/cli/mcp/types.ts',
+  'src/cli/mcp/oauth.ts',
+  'src/cli/mcp/tool-contract.ts',
+  'src/cli/mcp/transports/stdio.ts',
   'src/runtime/gateway/mcp/execution-tools.ts',
   'src/runtime/gateway/mcp/legacy-ios-tool-adapter.ts',
   'src/runtime/gateway/mcp/persisted-check-process.ts',
@@ -1743,21 +2356,10 @@ for (const path of [
   'src/runtime/gateway/mcp/runtime-tool-definitions.ts',
   'src/runtime/gateway/mcp/runtime-tools.ts',
   'src/runtime/gateway/mcp/work-validation-reconciler.ts',
-]) requireText(path, '@deprecated Kernel V2 compatibility shim');
-for (const path of [
-  'src/cli/mcp/access-tools.ts',
-  'src/cli/mcp/legacy-context.ts',
-  'src/cli/mcp/legacy-tool-service.ts',
-  'src/cli/mcp/multi-repository.ts',
-  'src/cli/mcp/repository-tools.ts',
-  'src/cli/mcp/server.ts',
-  'src/cli/mcp/tools.ts',
-  'src/cli/mcp/toolset.ts',
-]) requireText(path, '@deprecated Kernel V2 compatibility shim');
+]) requireMissing(path);
 requireText('src/runtime/control-plane/execution/work-execution-support.ts', 'packages/protocols/mcp/execution-context');
 requireText('src/runtime/control-plane/execution/work-preparation-service.ts', 'packages/protocols/mcp/execution-context');
 requireText('src/runtime/control-plane/execution/work-operation-service.ts', 'packages/protocols/mcp/execution-context');
-requireText('src/runtime/control-plane/execution/work-finalization-service.ts', 'packages/protocols/mcp/execution-context');
 for (const path of [
   'adapters/mcp/transports/http.ts',
   'adapters/mcp/transports/session-registry.ts',
@@ -1797,13 +2399,6 @@ forbidBetween(
   /\b(?:pid|process|endpoint|url|tunnel|token)\b/i,
   'ForgeInstanceIdentity creation must remain independent of process and adapter transport/auth metadata',
 );
-for (const path of [
-  'src/cli/mcp/auth.ts',
-  'src/cli/mcp/setup.ts',
-  'src/cli/mcp/openai-secure-tunnel.ts',
-]) {
-  requireText(path, '@deprecated Kernel V2 compatibility shim');
-}
 requireText('adapters/mcp/auth.ts', 'forgeInstanceId?: string');
 forbid('adapters/mcp/auth.ts', /server:\s*\{[\s\S]{0,512}?instanceId\??:\s*string/, 'MCP server process identity must not share semantic Forge instanceId naming');
 requireText('adapters/mcp/setup.ts', 'ensureForgeInstanceIdentity');
@@ -1814,7 +2409,7 @@ requireText('src/runtime/root/runtime.ts', 'readonly forgeInstanceId: string');
 requireText('src/runtime/root/runtime.ts', 'ensureForgeInstanceIdentity');
 requireText('src/runtime/root/entry.ts', 'forgeInstanceId: runtime.forgeInstanceId');
 requireText('adapters/mcp/transports/http.ts', 'forgeInstanceId: forgeInstance.instanceId');
-requireText('adapters/mcp/transports/http.ts', 'controllerInstanceId: process.env.FORGE_MCP_INSTANCE_ID');
+requireText('adapters/mcp/transports/http-observation.ts', 'controllerInstanceId: process.env.FORGE_MCP_INSTANCE_ID');
 forbid('adapters/mcp/transports/http.ts', /\{\s*instanceId:\s*process\.env\.FORGE_MCP_INSTANCE_ID/, 'MCP process identity must not be exposed as semantic Forge instanceId');
 requireText('adapters/mcp/transports/http.ts', "adapterId: 'mcp-http'");
 requireText('adapters/mcp/transports/session-registry.ts', 'connectionId: string');
@@ -1824,6 +2419,43 @@ requireText('adapters/mcp/tunnels/openai-secure-tunnel.ts', 'credentialReference
 forbid('adapters/mcp/tunnels/openai-secure-tunnel.ts', /\bidentityMatches\b/, 'tunnel binding match must not masquerade as Forge semantic identity');
 
 // C0 Computer capability boundary: Browser and Desktop remain separate providers.
+// Controller-scoped plugins are owned by the serving ForgeInstance. A synthetic
+// RepositoryRecord must not reappear as a canonical execution or manifest path.
+const controllerRepoCallPattern = new RegExp(['controllerPlugin', 'Repository\\s*\\('].join(''));
+const legacyControllerRepoPattern = new RegExp(['CONTROLLER_SCOPE_REPO_ID|__controller__|controllerPlugin', 'Repository'].join(''));
+for (const path of productionTypeScriptFiles()) {
+  forbid(path, controllerRepoCallPattern, 'production controller-plugin paths must not recreate a fake controller RepositoryRecord');
+}
+requireText('src/runtime/plugins/store.ts', 'const CONTROLLER_PLUGIN_SCOPE_KEY = FORGE_INSTANCE_SCOPE_KEY');
+requireText('src/runtime/plugins/store.ts', 'export function preflightPluginActionWorkBinding(');
+requireText('src/runtime/plugins/action-application.ts', 'preflightPluginActionWorkBinding(input.controllerHome, input.scope, action, input.request);');
+requireText('tests/runtime/external-plugin-store-integration.test.ts', 'rejects invalid Work kind without consuming the Process request id');
+forbidBetween(
+  'src/runtime/plugins/store.ts',
+  'function controllerPluginActionScope',
+  'function pluginActionExecutionFields',
+  legacyControllerRepoPattern,
+  'the canonical controller action scope must use the ForgeInstance scope, not the legacy controller repository sentinel',
+);
+for (const [start, end, description] of [
+  ['export function listControllerPluginManifests(', 'function getControllerPluginManifestForExecution', 'controller manifest listing'],
+  ['export function getControllerPluginManifest(', 'function writeControllerRegistry', 'controller manifest lookup'],
+  ['export function submitControllerPluginAction(', 'async function executePluginActionInScope', 'controller action submission'],
+  ['export function executeControllerScopedPluginAction(', 'export function executeAssistantPluginAction', 'controller action execution'],
+]) {
+  forbidBetween(
+    'src/runtime/plugins/store.ts',
+    start,
+    end,
+    legacyControllerRepoPattern,
+    `${description} must not depend on the legacy controller repository sentinel`,
+  );
+}
+// Legacy controller coordinates remain read-only migration/compatibility inputs
+// or explicit rejection paths; they are not allowed to become new write paths.
+requireText('src/runtime/plugins/store.ts', 'One-way read compatibility for pre-cutover controller receipts only.');
+requireText('adapters/mcp/runtime-gateway/plugin-adapter.ts', 'PLUGIN_CONTROLLER_REPOSITORY_SENTINEL_RETIRED');
+requireText('src/runtime/plugins/app-store-connect-adapter.ts', 'APP_STORE_CONNECT_LEGACY_CONTROLLER_SCOPE_WRITE_RETIRED');
 requireText('packages/protocols/computer/contract.ts', 'COMPUTER_BROWSER_AUTOMATION_CAPABILITY');
 requireText('packages/protocols/computer/contract.ts', 'ComputerRuntimeProviderCapabilityId');
 requireText('packages/plugin-runtime/computer/provider.ts', 'ComputerRuntimeProviderCapabilityId');
@@ -1837,16 +2469,60 @@ requireText('packages/protocols/computer/contract.ts', 'export interface Compute
 forbid('adapters/computer/desktop-operator-negotiation.ts', /interface\s+ComputerCapabilityAdvertisement/, 'Desktop Operator negotiation must consume the provider-neutral Computer capability advertisement contract instead of redefining it');
 requireText('packages/plugin-runtime/computer/provider.ts', 'export interface ComputerProvider');
 requireText('packages/plugin-runtime/computer/provider-registry.ts', 'export class ComputerProviderRegistry');
+requireText('src/runtime/plugins/computer-registration.ts', 'return executeIosPhysicalDeviceAction(input)');
+requireText('scripts/smoke-ios-physical-device.ts', "pluginId: 'computer'");
+requireText('scripts/smoke-ios-physical-device.ts', 'artifact?.sha256 !== screenshotSha256');
+requireText('scripts/smoke-ios-physical-device.ts', 'semanticPriceVerified: false');
+requireText('src/runtime/plugins/computer-registration.ts', 'observationReady: physicalReady, inputReady: physicalInputReady');
+requireText('src/runtime/plugins/computer-registration.ts', 'const hidStatus = physicalReady && context ? remoteXpcHidCachedStatus(context.controllerHome) : undefined;');
+requireText('src/runtime/plugins/ios/remote-xpc-hid.ts', 'probeHidToolchain(python)');
+requireText('src/runtime/plugins/ios/remote-xpc-hid.ts', "'--expected-version', IOS_HID_TOOLCHAIN_VERSION");
+requireText('scripts/install-ios-hid-toolchain.sh', 'pymobiledevice3==$version');
+requireText('src/runtime/plugins/ios/remote-xpc-hid.ts', 'return hidToolchainStatus(controllerHome, env, false);');
+requireText('src/runtime/plugins/ios/remote-xpc-hid.ts', 'return hidToolchainStatus(controllerHome, env, true);');
+requireText('src/runtime/plugins/ios-physical-device.ts', 'const confirmed = requireObservedPhysicalTargetForeground(state)');
+requireText('src/runtime/plugins/ios-physical-device.ts', 'const reusable = reusablePhysicalSession(input, selected, bundleId);');
+requireText('src/runtime/plugins/ios-physical-device.ts', "appendEvent(input, reusable.interactionId, 'app_activated'");
+requireText('src/runtime/plugins/ios-physical-device.ts', "state: 'deferred_to_first_input'");
+requireText('src/runtime/plugins/ios-physical-device.ts', 'input.args.prewarm_input === true && input.args.observe_after_open !== true');
+requireText('tests/runtime/ios-physical-device.test.ts', "it('reuses the same session but always reactivates its target app'");
+requireText('src/runtime/plugins/ios-physical-device.ts', "'IOS_DEVICE_LOCK_STATE_UNVERIFIED'");
+requireText('src/runtime/plugins/ios-physical-device.ts', "if (lockState.passcodeRequired === false) return;");
+requireText('src/runtime/plugins/ios-physical-device.ts', 'if (!selected.connected) {');
+requireText('src/runtime/plugins/ios-physical-device.ts', "'IOS_DEVICE_SCREENSHOT_INVALID'");
+requireText('src/runtime/plugins/ios-physical-device.ts', 'chmodSync(path, 0o700);');
+requireText('src/runtime/plugins/ios-physical-device.ts', 'if (file.isFile()) chmodSync(path, 0o600);');
+requireText('src/runtime/plugins/ios-physical-device.ts', 'state.lastScreenshot = undefined;');
+requireText('src/runtime/plugins/ios-physical-device.ts', 'try { unlinkSync(path); } catch');
+requireText('src/runtime/plugins/ios-physical-device.ts', 'PNG_CRC_TABLE');
+requireText('src/runtime/plugins/ios-physical-device.ts', 'sawImageData && length === 0 && end + 4 === image.length');
+requireText('src/runtime/plugins/ios-physical-device.ts', 'screenshotSha256, screenshotBytes: image.length');
+requireText('src/runtime/plugins/ios-physical-device.ts', "requiredConfirmationText: 'list-iphone-app-documents'");
+requireText('src/runtime/plugins/ios-physical-device.ts', "'IOS_DEVICE_DOCUMENT_LIST_UNVERIFIED'");
+requireText('src/runtime/plugins/ios-physical-device.ts', "listedNames.some((name) => typeof name !== 'string' || !name.trim())");
+requireText('src/runtime/plugins/ios-physical-device.ts', "requiredConfirmationText: 'export-iphone-app-document'");
+requireText('src/runtime/plugins/ios-physical-device.ts', "const indexPath = join(dir, 'index.json')");
+requireText('src/runtime/plugins/ios-physical-device.ts', 'const MAX_DOCUMENT_INDEX_BYTES = 512 * 1024;');
+requireText('src/runtime/plugins/ios-physical-device.ts', 'indexFile.size <= 0 || indexFile.size > MAX_DOCUMENT_INDEX_BYTES');
+requireText('src/runtime/plugins/ios-physical-device.ts', 'index.interactionId !== record.interactionId || !validEntries');
+requireText('src/runtime/plugins/ios-physical-device.ts', 'pngDisplayGeometry(bytes) !== undefined');
+requireText('src/runtime/plugins/ios-physical-device.ts', 'bytes.subarray(-2).toString(\'hex\') === \'ffd9\'');
+requireText('src/runtime/plugins/ios-physical-device.ts', 'bytes.readUInt32BE(0) >= 16 && bytes.readUInt32BE(0) <= bytes.length');
+requireText('src/runtime/plugins/ios-physical-device.ts', 'entries: [...entries, entry] }, { mode: 0o600 });');
+requireText('src/runtime/plugins/ios-physical-device.ts', 'organizedIndex: { localArtifact: indexPath, entryCount: entries.length + 1 }');
+requireText('src/runtime/plugins/ios-physical-device.ts', 'requireBundleId(input.args.bundle_id) !== state.bundleId');
+requireText('src/runtime/plugins/ios-physical-device.ts', "'--domain-type', 'appDataContainer', '--domain-identifier', state.bundleId");
+forbid('src/runtime/plugins/ios-physical-device.ts', /source:\s*'atomic_screenshot'/, 'bare iPhone screenshot IDs must never bypass explicit target-foreground confirmation');
+forbid('src/runtime/plugins/ios-adapter.ts', /\bexecuteIosPhysicalDeviceAction\b/, 'CoreDevice iPhone App mutations must have a single public Computer owner, not a retained iOS-adapter writer');
 requireText('adapters/computer/desktop-operator-contract.ts', 'DESKTOP_OPERATOR_PROVIDER_PLUGIN_ID');
 requireText('adapters/computer/desktop-operator-negotiation.ts', 'negotiateDesktopOperatorComputerHandshake');
 requireText('adapters/computer/desktop-operator-negotiation.ts', 'buildDesktopOperatorComputerInvocation');
 requireText('adapters/computer/desktop-operator-provider.ts', 'createDesktopOperatorComputerProvider');
 requireText('adapters/computer/desktop-operator-discovery.ts', 'ComputerProviderRegistrationLookup');
 requireText('adapters/computer/desktop-operator-discovery.ts', "source: 'registration'");
-requireText('adapters/computer/desktop-operator-discovery.ts', "source: 'legacy_fallback'");
-requireText('adapters/computer/desktop-operator-discovery.ts', "DesktopOperatorLegacyFallbackMode");
 requireText('adapters/computer/desktop-operator-discovery.ts', "PLUGIN_COMPUTER_PROVIDER_REGISTRATION_REQUIRED");
-requireText('src/runtime/root/computer-composition.ts', "legacyFallback: 'unregistered_v0_2'");
+forbid('adapters/computer/desktop-operator-discovery.ts', /legacy_fallback|DesktopOperatorLegacyFallbackMode|unregistered_v0_2/, 'Computer provider discovery must not bypass canonical Desktop Operator registration with a legacy socket fallback');
+forbid('src/runtime/root/computer-composition.ts', /legacyFallback|unregistered_v0_2/, 'Computer Runtime composition must not enable an unregistered Desktop Operator compatibility provider');
 requireText('src/cli/commands/computer.ts', "new Command('computer')");
 requireText('src/cli/commands/computer.ts', 'installOfficialPlugin(COMPUTER_PROVIDER_PLUGIN_ID');
 requireText('src/cli/commands/computer.ts', 'provider release: independent');
@@ -1855,7 +2531,7 @@ requireText('src/cli/commands/computer.ts', 'readControllerStoredPluginManifest'
 requireText('src/cli/commands/computer.ts', 'syncControllerPluginManifest');
 requireText('src/cli/commands/computer.ts', 'removeControllerPluginManifestProjection');
 requireText('src/cli/commands/computer.ts', 'withOfficialPluginLifecycleLock');
-forbid('src/cli/commands/computer.ts', /controllerPluginRepository\(|syncAssistantPluginRegistry|getAssistantPluginManifest\(/, 'Computer status/doctor must use Controller-scoped stored/targeted provider APIs rather than a fake repository or global execution-style manifest lookup');
+forbid('src/cli/commands/computer.ts', new RegExp(`${controllerRepoCallPattern.source}|syncAssistantPluginRegistry|getAssistantPluginManifest\\s*\\(`), 'Computer status/doctor must use Controller-scoped stored/targeted provider APIs rather than a fake repository or global execution-style manifest lookup');
 requireText('src/cli/commands/plugin.ts', 'external-plugin:${pluginId}');
 requireText('src/runtime/plugins/store.ts', 'export function readControllerStoredPluginManifest');
 requireText('src/runtime/plugins/store.ts', 'export function syncControllerPluginManifest');
@@ -1909,13 +2585,12 @@ forbid('packages/plugin-runtime/browser/provider-registry.ts', /AssistantPluginE
 requireText('packages/protocols/browser/session.ts', 'export interface BrowserSessionState');
 for (const path of [
   'src/runtime/plugins/browser-runtime-contract.ts',
-  'src/runtime/plugins/browser-provider-registry.ts',
   'src/runtime/plugins/browser-session-types.ts',
 ]) {
   requireText(path, '@deprecated C0 compatibility shim');
 }
 for (const path of sourceFiles('src/runtime/plugins')) {
-  if (['src/runtime/plugins/browser-runtime-contract.ts', 'src/runtime/plugins/browser-provider-registry.ts', 'src/runtime/plugins/browser-session-types.ts'].includes(path)) continue;
+  if (['src/runtime/plugins/browser-runtime-contract.ts', 'src/runtime/plugins/browser-session-types.ts'].includes(path)) continue;
   forbid(path, /from\s+['"]\.\/browser-(?:runtime-contract|provider-registry|session-types)['"]/, 'active Browser runtime code must consume plugin-runtime/protocol Browser contracts, not retired local owners');
 }
 // Computer SurfaceTarget is the only durable interaction-target authority. Browser
@@ -1930,6 +2605,8 @@ requireText('src/runtime/plugins/browser-session-authority.ts', 'findComputerBac
 requireText('src/runtime/plugins/browser-session-authority.ts', 'saveComputerBackedBrowserSession');
 forbid('src/runtime/plugins/browser-session-authority.ts', /\b(?:writeControlPlaneRecord|deleteControlPlaneRecord|withControlPlaneTransaction|createBrowserSessionAuthority|runtimeBrowserSessionAuthority)\b/, 'Browser compatibility facade must delegate semantic identity to Computer and cannot persist its own authority');
 requireText('src/runtime/plugins/browser-session-legacy-migration.ts', 'readLegacyBrowserSessionMigrationEntries');
+requireText('src/runtime/plugins/browser-session-store.ts', 'PLUGIN_BROWSER_SESSION_CONTEXT_REQUIRED');
+forbid('src/runtime/plugins/browser-session-store.ts', /writeJsonAtomic\(sessionPath|readLegacyBrowserSessionJson|rmSync\(sessionPath/, 'steady-state Browser session identity must never fall back to repository-local JSON outside Computer target authority');
 forbid('src/runtime/plugins/browser-session-legacy-migration.ts', /\b(?:writeControlPlaneRecord|deleteControlPlaneRecord|withControlPlaneTransaction|createBrowserSessionAuthority|runtimeBrowserSessionAuthority)\b/, 'legacy Browser migration may read retired state but cannot mutate or recreate Browser durable authority');
 requireText('src/runtime/root/browser-session-composition.ts', 'BrowserSessionExecutionContext');
 forbid('src/runtime/root/browser-session-composition.ts', /\b(?:createBrowserSessionAuthority|runtimeBrowserSessionAuthority|createRuntimeBrowserSessionPersistence)\b/, 'Browser Runtime composition may carry execution context but cannot compose a second durable interaction authority');
@@ -1953,6 +2630,11 @@ for (const path of sourceFiles('packages/workflow-runtime')) {
   forbid(path, /xiaohongshu|douyin|instagram|reddit|facebook/i, 'generic Workflow Runtime contracts must not own site/business choreography');
   forbid(path, /from\s+['"][^'"]*(?:src\/runtime|adapters)\//, 'Workflow Runtime package contracts must remain independent from Runtime/adapters implementation authority');
 }
+requireText('src/runtime/plugins/first-party-registry.ts', "from './computer-registration'");
+requireText('src/runtime/plugins/computer-registration.ts', 'buildBrowserPluginManifest(previousRevision, previousUpdatedAt, repoRoot, context, true)');
+requireText('src/runtime/plugins/computer-registration.ts', '__forge_computer_native_only: true');
+requireText('src/runtime/plugins/browser-adapter.ts', 'if (computerNativeOnly) return normalizeConfig({');
+requireText('src/runtime/plugins/browser-adapter.ts', 'if (computerNativeOnly) {');
 requireText('src/runtime/plugins/browser-registration.ts', 'export const browserPluginAdapter');
 requireText('src/runtime/plugins/first-party-registry.ts', "from './browser-registration'");
 forbid('src/runtime/plugins/first-party-registry.ts', /from\s+['"]\.\/browser-adapter['"]/, 'first-party registry must depend on the thin Browser registration entrypoint, not the action implementation');