@mstar-harness/dsh 2.4.1 → 3.1.0

package/dist/index.js

@@ -59,7 +59,7 @@ var require_lib = __commonJS((exports, module) => {
     is: () => is,
     isNonNullable: () => isNonNullable,
     isNullable: () => isNullable,
-    isPlainObject: () => isPlainObject4,
+    isPlainObject: () => isPlainObject6,
     makeArray: () => makeArray,
     mapValues: () => mapValues,
     noop: () => noop,
@@ -82,7 +82,7 @@ var require_lib = __commonJS((exports, module) => {
   function isNonNullable(value) {
     return !isNullable(value);
   }
-  function isPlainObject4(data) {
+  function isPlainObject6(data) {
     return data && typeof data === "object" && !Array.isArray(data);
   }
   function filterKeys(object, filter) {
@@ -1106,8 +1106,8 @@ var require_lib2 = __commonJS((exports, module) => {
 });
 
 // src/index.ts
-import { existsSync as existsSync18, readFileSync as readFileSync15, readdirSync as readdirSync9 } from "node:fs";
-import { join as join20 } from "node:path";
+import { existsSync as existsSync20, readFileSync as readFileSync18, readdirSync as readdirSync14 } from "node:fs";
+import { join as join23 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 import {
   apply as applySkillLocal,
@@ -1120,24 +1120,26 @@ import {
 import { existsSync, mkdirSync, readFileSync, renameSync, unlinkSync, writeFileSync } from "node:fs";
 import { basename, dirname, join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
-import { mkdirSync as mkdirSync2, readdirSync, readFileSync as readFileSync2, statSync } from "node:fs";
+import { readFileSync as readFileSync2, statSync } from "node:fs";
+import { dirname as dirname2, isAbsolute, join as join2, relative, resolve as resolve2 } from "node:path";
+import { mkdirSync as mkdirSync2, readdirSync, readFileSync as readFileSync3, statSync as statSync2 } from "node:fs";
 import { execFileSync } from "node:child_process";
-import { basename as basename2, dirname as dirname2, isAbsolute, join as join2, relative, resolve as resolve2 } from "node:path";
-import { existsSync as existsSync2, readFileSync as readFileSync3, readdirSync as readdirSync2 } from "node:fs";
-import { join as join4, resolve as resolve4 } from "node:path";
-import { dirname as dirname3, isAbsolute as isAbsolute2, join as join3, resolve as resolve3 } from "node:path";
+import { basename as basename2, dirname as dirname3, isAbsolute as isAbsolute2, join as join3, relative as relative2, resolve as resolve3 } from "node:path";
+import { existsSync as existsSync2, readFileSync as readFileSync4, readdirSync as readdirSync2, realpathSync } from "node:fs";
+import { dirname as dirname5, join as join6, resolve as resolve5, sep } from "node:path";
+import { dirname as dirname4, isAbsolute as isAbsolute3, join as join4, resolve as resolve4 } from "node:path";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { execFileSync as execFileSync2 } from "node:child_process";
 import { existsSync as existsSync3 } from "node:fs";
-import { isAbsolute as isAbsolute3, resolve as resolve5 } from "node:path";
+import { isAbsolute as isAbsolute4, resolve as resolve6 } from "node:path";
 import { execFileSync as execFileSync3 } from "node:child_process";
-import { mkdirSync as mkdirSync4, readFileSync as readFileSync4, realpathSync, statSync as statSync3, writeFileSync as writeFileSync3 } from "node:fs";
-import { basename as basename3, dirname as dirname4, isAbsolute as isAbsolute4, join as join5, resolve as resolve6 } from "node:path";
-import { existsSync as existsSync4, readdirSync as readdirSync3, readFileSync as readFileSync5 } from "node:fs";
-import { existsSync as existsSync5, readdirSync as readdirSync5, readFileSync as readFileSync7 } from "node:fs";
-import { basename as basename4, isAbsolute as isAbsolute5, join as join8, relative as relative2, resolve as resolve8, sep } from "node:path";
-import { existsSync as existsSync6 } from "node:fs";
-import { join as join9 } from "node:path";
+import { mkdirSync as mkdirSync5, readdirSync as readdirSync3, readFileSync as readFileSync5, realpathSync as realpathSync2, statSync as statSync4, writeFileSync as writeFileSync3 } from "node:fs";
+import { basename as basename3, dirname as dirname6, isAbsolute as isAbsolute5, join as join7, resolve as resolve7 } from "node:path";
+import { existsSync as existsSync4, readdirSync as readdirSync4, readFileSync as readFileSync6 } from "node:fs";
+import { existsSync as existsSync6, readdirSync as readdirSync8, readFileSync as readFileSync10 } from "node:fs";
+import { basename as basename4, isAbsolute as isAbsolute7, join as join12, relative as relative4, resolve as resolve10, sep as sep3 } from "node:path";
+import { existsSync as existsSync7 } from "node:fs";
+import { join as join13 } from "node:path";
 var SEVERITY_ORDER = ["critical", "high", "medium", "low", "nit"];
 function applyEnforcement(gate, opts) {
   return { ...gate, hardBlocked: opts.hard && gate.violations.length > 0 };
@@ -1189,23 +1191,111 @@ function harnessVersionFrom(moduleDir) {
 function readHarnessVersion() {
   return harnessVersionFrom(dirname(fileURLToPath(import.meta.url)));
 }
+var MSTARC_FILE = ".mstarc";
+var MSTARC_SECTION = "config";
+var MSTARC_HARNESS_DIR_KEY = "harness_dir";
+var MSTARC_PLAN_DIR_KEY = "plan_dir";
+var MSTARC_SDD_DIR_KEY = "sdd_dir";
+var MSTARC_ITERATION_DIR_KEY = "iteration_dir";
+var MSTARC_KNOWLEDGE_DIR_KEY = "knowledge_dir";
+var MSTARC_SPECS_DIR_KEY = "specs_dir";
+var MSTARC_WORKFLOW_DIR_KEY = "workflow_dir";
+var MSTARC_PROJECT_DIR_KEY = "project_dir";
+var MSTARC_ENFORCEMENT_KEY = "enforcement";
+var CONFIG_KEYS = {
+  [MSTARC_HARNESS_DIR_KEY]: "harnessDir",
+  [MSTARC_PLAN_DIR_KEY]: "planDir",
+  [MSTARC_SDD_DIR_KEY]: "sddDir",
+  [MSTARC_ITERATION_DIR_KEY]: "iterationDir",
+  [MSTARC_KNOWLEDGE_DIR_KEY]: "knowledgeDir",
+  [MSTARC_SPECS_DIR_KEY]: "specsDir",
+  [MSTARC_WORKFLOW_DIR_KEY]: "workflowDir",
+  [MSTARC_PROJECT_DIR_KEY]: "projectDir",
+  [MSTARC_ENFORCEMENT_KEY]: "enforcement"
+};
+function parseMstarc(text) {
+  let section = null;
+  const out = {};
+  for (const raw of text.split(/\r?\n/)) {
+    const line = raw.trim();
+    if (line === "" || line.startsWith("#") || line.startsWith(";"))
+      continue;
+    const header = /^\[([^\]]+)\]$/.exec(line);
+    if (header !== null) {
+      section = header[1].trim();
+      continue;
+    }
+    if (section !== MSTARC_SECTION)
+      continue;
+    const eq = line.indexOf("=");
+    if (eq === -1)
+      continue;
+    const field = CONFIG_KEYS[line.slice(0, eq).trim()];
+    if (field === undefined)
+      continue;
+    const value = line.slice(eq + 1).trim();
+    if (value === "")
+      continue;
+    if (field === "enforcement" && value !== "hard" && value !== "soft")
+      continue;
+    out[field] = value;
+  }
+  return out;
+}
+function isFile(file) {
+  try {
+    return statSync(file).isFile();
+  } catch {
+    return false;
+  }
+}
+function findMstarc(startDir, boundary) {
+  let dir = resolve2(startDir);
+  const bound = resolve2(boundary);
+  for (;; ) {
+    if (!isAtOrBelow(dir, bound))
+      return null;
+    const candidate = join2(dir, MSTARC_FILE);
+    if (isFile(candidate))
+      return candidate;
+    if (dir === bound)
+      return null;
+    const parent = dirname2(dir);
+    if (parent === dir)
+      return null;
+    dir = parent;
+  }
+}
+function loadMstarc(startDir, boundary) {
+  const file = findMstarc(startDir, boundary);
+  if (file === null)
+    return null;
+  return { file, dir: dirname2(file), config: parseMstarc(readFileSync2(file, "utf8")) };
+}
+function isAtOrBelow(dir, root) {
+  const rel = relative(root, dir);
+  return rel === "" || !rel.startsWith("..") && !isAbsolute(rel);
+}
 function resolveHarnessDir(startDir = process.cwd(), opts = {}) {
-  const start = resolve2(startDir);
+  const start = resolve3(startDir);
   const explicit = opts.harnessDir ?? process.env.MSTAR_HARNESS_DIR;
   if (explicit)
-    return resolve2(start, explicit);
-  const boundary = resolve2(start, opts.workspaceRoot ?? defaultWorkspaceRoot(start));
+    return resolve3(start, explicit);
+  const boundary = resolve3(start, opts.workspaceRoot ?? defaultWorkspaceRoot(start));
+  const rc = loadMstarc(start, boundary);
+  if (rc !== null && rc.config.harnessDir)
+    return resolve3(rc.dir, rc.config.harnessDir);
   let dir = start;
   for (;; ) {
-    if (!isAtOrBelow(dir, boundary))
+    if (!isAtOrBelow2(dir, boundary))
       return null;
-    for (const candidate of [join2(dir, ".mstar"), join2(dir, ".agents"), join2(dir, ".plans"), join2(dir, "plans")]) {
+    for (const candidate of [join3(dir, ".mstar"), join3(dir, ".agents"), join3(dir, ".plans"), join3(dir, "plans")]) {
       if (isDirectory(candidate))
         return candidate;
     }
     if (dir === boundary)
       return null;
-    const parent = dirname2(dir);
+    const parent = dirname3(dir);
     if (parent === dir)
       return null;
     dir = parent;
@@ -1223,15 +1313,21 @@ function defaultWorkspaceRoot(startDir) {
     let boundary = startDir;
     for (const segment of cdup.split(/[\\/]/)) {
       if (segment && segment !== ".")
-        boundary = dirname2(boundary);
+        boundary = dirname3(boundary);
     }
-    return resolve2(boundary);
+    return resolve3(boundary);
   } catch {}
   return startDir;
 }
-function isAtOrBelow(dir, root) {
-  const rel = relative(root, dir);
-  return rel === "" || !rel.startsWith("..") && !isAbsolute(rel);
+function isAtOrBelow2(dir, root) {
+  const rel = relative2(root, dir);
+  return rel === "" || !rel.startsWith("..") && !isAbsolute2(rel);
+}
+function mstarcDirOverride(harnessDir, key) {
+  const dir = resolve3(harnessDir);
+  const rc = loadMstarc(dir, dirname3(dir));
+  const declared = rc?.config[key];
+  return declared ? resolve3(rc.dir, declared) : null;
 }
 function assertSafePathComponent(value, what) {
   if (value === "" || value === "." || value === ".." || !/^[A-Za-z0-9._-]+$/.test(value)) {
@@ -1240,10 +1336,30 @@ function assertSafePathComponent(value, what) {
 }
 function resolveSddDir(harnessDir, planId) {
   assertSafePathComponent(planId, "planId");
-  return join2(resolve2(harnessDir), "sdd", planId);
+  const base = resolve3(harnessDir);
+  const declared = mstarcDirOverride(base, "sddDir");
+  const sddBase = declared !== null ? declared : join3(base, "sdd");
+  return join3(sddBase, planId);
 }
 function resolveIterationDir(harnessDir) {
-  return join2(resolve2(harnessDir), "iterations");
+  const declared = mstarcDirOverride(harnessDir, "iterationDir");
+  if (declared !== null)
+    return declared;
+  return join3(resolve3(harnessDir), "iterations");
+}
+function resolveHarnessSubdir(startDir, opts, key, fallback) {
+  const harness = resolveHarnessDir(startDir, opts);
+  if (harness === null) {
+    throw new Error(`harness dir not found from ${resolve3(startDir)} — cannot resolve the ${fallback} dir (run \`mstar init\`, pass opts.harnessDir, or set MSTAR_HARNESS_DIR)`);
+  }
+  const declared = mstarcDirOverride(harness, key);
+  return declared !== null ? declared : join3(resolve3(harness), fallback);
+}
+function resolveWorkflowDir(startDir = process.cwd(), opts = {}) {
+  return resolveHarnessSubdir(startDir, opts, "workflowDir", "workflows");
+}
+function resolveProjectDir(startDir = process.cwd(), opts = {}) {
+  return resolveHarnessSubdir(startDir, opts, "projectDir", "projects");
 }
 var GITIGNORE_SNIPPET = `# Morning Star harness (.mstar/)
 # Principle: process stays local; results are shared with the team.
@@ -1254,6 +1370,8 @@ var GITIGNORE_SNIPPET = `# Morning Star harness (.mstar/)
 !.mstar/knowledge/**
 !.mstar/specs/
 !.mstar/specs/**
+# .mstarc — repo-local harness config (may declare [config] harness_dir=<name>)
+.mstarc
 `;
 var GITIGNORE_SNIPPET_AGENTS = `# Morning Star harness (.agents/) — legacy
 # Default-ignore everything under .agents/, then re-include the tracked results.
@@ -1270,7 +1388,7 @@ var GITIGNORE_PROCESS_ENTRIES_AGENTS = GITIGNORE_SNIPPET_AGENTS.split(`
 `).filter((line) => line.startsWith(".agents/") || line.startsWith("!.agents/")).map((line) => line.trim());
 function isDirectory(dir) {
   try {
-    return statSync(dir).isDirectory();
+    return statSync2(dir).isDirectory();
   } catch {
     return false;
   }
@@ -1314,7 +1432,7 @@ function validateExecutionLease(lease) {
     violations.push(violation("high", "lease.execution-lease.missing-worktree-path", "missing required field: worktree_path"));
   } else if (typeof lease.worktree_path !== "string" || lease.worktree_path.trim() === "") {
     violations.push(violation("medium", "lease.execution-lease.invalid-worktree-path", "worktree_path must be a non-empty string"));
-  } else if (!isAbsolute2(lease.worktree_path)) {
+  } else if (!isAbsolute3(lease.worktree_path)) {
     violations.push(violation("medium", "lease.execution-lease.invalid-worktree-path", "worktree_path must be an absolute path — it identifies the dedicated feature-worktree root (and MUST differ from metadata.control_worktree_path)"));
   }
   validateNonEmptyString(violations, lease.working_branch, "working_branch", "lease.execution-lease.missing-working-branch", "lease.execution-lease.invalid-working-branch");
@@ -1348,13 +1466,11 @@ function validateIntegrationMergeLease(lease) {
   return { ok: violations.length === 0, violations };
 }
 function planExecutionLeaseLocations(row) {
-  const meta = row.metadata;
-  const metadataLease = meta && typeof meta === "object" && !Array.isArray(meta) ? meta.execution_lease : undefined;
-  return { row: row.execution_lease, metadata: metadataLease };
+  return { row: row.execution_lease };
 }
 function verifyPlanExecutionLease(row, planId) {
-  const { row: rowLease, metadata: metadataLease } = planExecutionLeaseLocations(row);
-  const lease = rowLease !== undefined ? rowLease : metadataLease;
+  const { row: rowLease } = planExecutionLeaseLocations(row);
+  const lease = rowLease;
   if (lease === undefined) {
     if (row.status === "InProgress") {
       return {
@@ -1367,16 +1483,11 @@ function verifyPlanExecutionLease(row, planId) {
     return {
       ok: false,
       violations: [
-        violation("high", "lease.verify.missing", `plan ${planId} has no execution_lease (neither plans[].execution_lease nor legacy plans[].metadata.execution_lease)`)
+        violation("high", "lease.verify.missing", `plan ${planId} has no execution_lease at the SSOT location plans[].execution_lease`)
       ]
     };
   }
   const violations = [];
-  if (rowLease !== undefined && metadataLease !== undefined) {
-    violations.push(violation("high", "lease.verify.dual-write", "execution_lease present in BOTH plans[].execution_lease (SSOT) and plans[].metadata.execution_lease — the row-level lease wins; delete the metadata copy to remove the dual write"));
-  } else if (rowLease === undefined) {
-    violations.push(violation("high", "lease.verify.non-ssot-location", "execution_lease found only under plans[].metadata.execution_lease — the SSOT location is plans[].execution_lease; the metadata location is a legacy/hand-written read-compat fallback, not equivalent to SSOT success (migrate the lease to the plan row)"));
-  }
   violations.push(...validateExecutionLease(lease).violations);
   return { ok: violations.length === 0, violations, lease };
 }
@@ -1602,14 +1713,124 @@ function antiRecursionPrecheck(subagentType, executeAs) {
   }
   return { ok: true, violations: [] };
 }
+var WORKFLOW_SNAPSHOT_FILE = "snapshot.json";
+var WORKFLOW_LIFECYCLE_STATUSES = ["running", "paused", "completed", "failed", "stopped"];
+var WORKFLOW_TERMINAL_STATUSES = ["completed", "failed", "stopped"];
+var WORKFLOW_LIFECYCLE_TYPES = ["plan", "iteration"];
+function isPlainObject2(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function violation3(severity, code, message, fix) {
+  return { ok: false, severity, code, message, fix };
+}
+function validateNonEmptyString2(violations, value, field, missingCode, invalidCode) {
+  if (value === undefined) {
+    violations.push(violation3("high", missingCode, `missing required field: ${field}`));
+  } else if (typeof value !== "string" || value.trim() === "") {
+    violations.push(violation3("medium", invalidCode, `${field} must be a non-empty string`));
+  }
+}
+function validateWorkflowSnapshot(doc) {
+  const violations = [];
+  if (!isPlainObject2(doc)) {
+    return {
+      ok: false,
+      violations: [violation3("high", "workflow.snapshot.invalid", "workflow snapshot must be an object")]
+    };
+  }
+  if (doc.schema_version === undefined) {
+    violations.push(violation3("high", "workflow.snapshot.missing-schema-version", "missing required field: schema_version"));
+  } else if (doc.schema_version !== 1) {
+    violations.push(violation3("high", "workflow.snapshot.invalid-schema-version", `schema_version must be 1 — got ${JSON.stringify(doc.schema_version)} (version is reserved for the root file discriminator)`));
+  }
+  if (doc.version !== undefined) {
+    violations.push(violation3("medium", "workflow.snapshot.reserved-version", `top-level version is reserved for the root status.json discriminator — snapshots use schema_version; remove the version key (got ${JSON.stringify(doc.version)})`, "remove the version key from the snapshot"));
+  }
+  validateNonEmptyString2(violations, doc.id, "id", "workflow.snapshot.missing-id", "workflow.snapshot.invalid-id");
+  if (doc.type === undefined) {
+    violations.push(violation3("high", "workflow.snapshot.missing-type", "missing required field: type"));
+  } else if (typeof doc.type !== "string" || !WORKFLOW_LIFECYCLE_TYPES.includes(doc.type)) {
+    violations.push(violation3("medium", "workflow.snapshot.invalid-type", `type must be one of ${WORKFLOW_LIFECYCLE_TYPES.join(" | ")} — got ${JSON.stringify(doc.type)}`));
+  }
+  if (doc.status === undefined) {
+    violations.push(violation3("high", "workflow.snapshot.missing-status", "missing required field: status"));
+  } else if (typeof doc.status !== "string" || !WORKFLOW_LIFECYCLE_STATUSES.includes(doc.status)) {
+    violations.push(violation3("medium", "workflow.snapshot.invalid-status", `status must be one of ${WORKFLOW_LIFECYCLE_STATUSES.join(" | ")} — got ${JSON.stringify(doc.status)}`));
+  }
+  validateNonEmptyString2(violations, doc.started_at, "started_at", "workflow.snapshot.missing-started-at", "workflow.snapshot.invalid-started-at");
+  validateNonEmptyString2(violations, doc.updated_at, "updated_at", "workflow.snapshot.missing-updated-at", "workflow.snapshot.invalid-updated-at");
+  if (doc.ended_at !== undefined) {
+    validateNonEmptyString2(violations, doc.ended_at, "ended_at", "workflow.snapshot.missing-ended-at", "workflow.snapshot.invalid-ended-at");
+  }
+  if (doc.phase !== undefined && typeof doc.phase !== "string") {
+    violations.push(violation3("medium", "workflow.snapshot.invalid-phase", "phase must be a string (free-form phase machine label)"));
+  }
+  if (doc.plans === undefined) {
+    violations.push(violation3("high", "workflow.snapshot.missing-plans", "missing required field: plans"));
+  } else if (!Array.isArray(doc.plans)) {
+    violations.push(violation3("high", "workflow.snapshot.invalid-plans", "plans must be an array of legacy plan rows"));
+  } else {
+    for (const row of doc.plans) {
+      violations.push(...validatePlanRow(row).violations);
+      if (isPlainObject2(row) && row.execution_lease !== undefined) {
+        violations.push(...validateExecutionLease(row.execution_lease).violations);
+      }
+    }
+  }
+  if (doc.execution_policy !== undefined) {
+    if (!isPlainObject2(doc.execution_policy)) {
+      violations.push(violation3("medium", "workflow.snapshot.invalid-execution-policy", "execution_policy must be an object"));
+    }
+  }
+  if (doc.integration_merge_lease !== undefined) {
+    violations.push(...validateIntegrationMergeLease(doc.integration_merge_lease).violations);
+  }
+  if (doc.branch !== undefined) {
+    if (!isPlainObject2(doc.branch)) {
+      violations.push(violation3("medium", "workflow.snapshot.invalid-branch", "branch must be an object"));
+    } else {
+      for (const key of ["base", "integration", "target"]) {
+        if (doc.branch[key] !== undefined && (typeof doc.branch[key] !== "string" || doc.branch[key].trim() === "")) {
+          violations.push(violation3("medium", "workflow.snapshot.invalid-branch", `branch.${key} must be a non-empty string`));
+        }
+      }
+    }
+  }
+  if (doc.control_worktree_path !== undefined) {
+    validateNonEmptyString2(violations, doc.control_worktree_path, "control_worktree_path", "workflow.snapshot.missing-control-worktree-path", "workflow.snapshot.invalid-control-worktree-path");
+  }
+  if (doc.legacy_metadata !== undefined && !isPlainObject2(doc.legacy_metadata)) {
+    violations.push(violation3("medium", "workflow.snapshot.invalid-legacy-metadata", "legacy_metadata must be an object"));
+  }
+  if (doc.compass_ref !== undefined) {
+    validateNonEmptyString2(violations, doc.compass_ref, "compass_ref", "workflow.snapshot.missing-compass-ref", "workflow.snapshot.invalid-compass-ref");
+  }
+  const terminal = typeof doc.status === "string" && WORKFLOW_TERMINAL_STATUSES.includes(doc.status);
+  if (terminal) {
+    if (doc.ended_at === undefined) {
+      violations.push(violation3("high", "workflow.snapshot.missing-ended-at", `terminal status ${JSON.stringify(doc.status)} requires ended_at — a terminal snapshot must record when the lifecycle ended`));
+    }
+    if (Array.isArray(doc.plans)) {
+      for (const row of doc.plans) {
+        if (isPlainObject2(row) && row.execution_lease !== undefined) {
+          violations.push(violation3("high", "workflow.snapshot.terminal-dangling-execution-lease", `terminal snapshot must not carry a row execution_lease (dangling lease) — release every lease before the lifecycle ends`));
+        }
+      }
+    }
+    if (doc.integration_merge_lease !== undefined) {
+      violations.push(violation3("high", "workflow.snapshot.terminal-dangling-merge-lease", "terminal snapshot must not carry integration_merge_lease (dangling lease) — release the merge lease before the lifecycle ends"));
+    }
+  }
+  return { ok: violations.length === 0, violations };
+}
 var DATE_RE = /^\d{4}-\d{2}-\d{2}$/;
 var PLAN_STATUSES = ["Todo", "InProgress", "InReview", "Blocked", "Done"];
 var RESIDUAL_DECISIONS = ["defer", "accept", "risk-accepted"];
 var RESIDUAL_LIFECYCLES = ["open", "resolved", "waived", "superseded", "duplicate"];
-function isPlainObject2(value) {
+function isPlainObject3(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-function violation3(severity, code, message, fix) {
+function violation4(severity, code, message, fix) {
   return { ok: false, severity, code, message, fix };
 }
 function normalizeSeverity(value) {
@@ -1624,217 +1845,242 @@ function isOpenResidual(entry) {
   const effective = lifecycle === false || lifecycle === null || lifecycle === undefined ? "open" : lifecycle;
   return effective === "open";
 }
-function validateNonEmptyString2(violations, value, field, missingCode, invalidCode) {
+function validateNonEmptyString3(violations, value, field, missingCode, invalidCode) {
   if (value === undefined) {
-    violations.push(violation3("high", missingCode, `missing required field: ${field}`));
+    violations.push(violation4("high", missingCode, `missing required field: ${field}`));
   } else if (typeof value !== "string" || value.trim() === "") {
-    violations.push(violation3("medium", invalidCode, `${field} must be a non-empty string`));
+    violations.push(violation4("medium", invalidCode, `${field} must be a non-empty string`));
   }
 }
 function validatePlanRow(row) {
   const violations = [];
-  if (!isPlainObject2(row)) {
-    return { ok: false, violations: [violation3("high", "status.plan-row.invalid", "plan row must be an object")] };
+  if (!isPlainObject3(row)) {
+    return { ok: false, violations: [violation4("high", "status.plan-row.invalid", "plan row must be an object")] };
   }
   const { id, plan_id: planId, title, file, status, metadata, execution_lease } = row;
   if (id === undefined && planId === undefined) {
-    violations.push(violation3("high", "status.plan-row.missing-id", "missing required field: id (or legacy plan_id)"));
+    violations.push(violation4("high", "status.plan-row.missing-id", "missing required field: id (or legacy plan_id)"));
   } else {
     if (id !== undefined) {
-      validateNonEmptyString2(violations, id, "id", "status.plan-row.missing-id", "status.plan-row.invalid-id");
+      validateNonEmptyString3(violations, id, "id", "status.plan-row.missing-id", "status.plan-row.invalid-id");
     }
     if (planId !== undefined) {
-      validateNonEmptyString2(violations, planId, "plan_id", "status.plan-row.missing-plan-id", "status.plan-row.invalid-plan-id");
+      validateNonEmptyString3(violations, planId, "plan_id", "status.plan-row.missing-plan-id", "status.plan-row.invalid-plan-id");
     }
     if (id !== undefined && planId !== undefined && id !== planId) {
-      violations.push(violation3("medium", "status.plan-row.dual-id", "row has both id and plan_id with different values — write one canonical key (prefer id)"));
+      violations.push(violation4("medium", "status.plan-row.dual-id", "row has both id and plan_id with different values — write one canonical key (prefer id)"));
     }
   }
-  validateNonEmptyString2(violations, title, "title", "status.plan-row.missing-title", "status.plan-row.invalid-title");
-  validateNonEmptyString2(violations, file, "file", "status.plan-row.missing-file", "status.plan-row.invalid-file");
+  validateNonEmptyString3(violations, title, "title", "status.plan-row.missing-title", "status.plan-row.invalid-title");
+  validateNonEmptyString3(violations, file, "file", "status.plan-row.missing-file", "status.plan-row.invalid-file");
   if (status === undefined) {
-    violations.push(violation3("high", "status.plan-row.missing-status", "missing required field: status"));
+    violations.push(violation4("high", "status.plan-row.missing-status", "missing required field: status"));
   } else if (typeof status !== "string" || !PLAN_STATUSES.includes(status)) {
-    violations.push(violation3("medium", "status.plan-row.invalid-status", `status must be one of ${PLAN_STATUSES.join(" | ")} — got ${JSON.stringify(status)}`));
+    violations.push(violation4("medium", "status.plan-row.invalid-status", `status must be one of ${PLAN_STATUSES.join(" | ")} — got ${JSON.stringify(status)}`));
   }
-  if (metadata !== undefined && !isPlainObject2(metadata)) {
-    violations.push(violation3("medium", "status.plan-row.invalid-metadata", "metadata must be an object"));
+  if (metadata !== undefined && !isPlainObject3(metadata)) {
+    violations.push(violation4("medium", "status.plan-row.invalid-metadata", "metadata must be an object"));
   }
-  if (execution_lease !== undefined && !isPlainObject2(execution_lease)) {
-    violations.push(violation3("medium", "status.plan-row.invalid-execution-lease", "execution_lease must be an object"));
+  if (execution_lease !== undefined && !isPlainObject3(execution_lease)) {
+    violations.push(violation4("medium", "status.plan-row.invalid-execution-lease", "execution_lease must be an object"));
   }
   if (status === "Done" && execution_lease !== undefined) {
-    violations.push(violation3("medium", "status.plan-row.done-with-lease", 'plan status Done must not carry an execution_lease — the Done authority deletes the lease in the same complete-file update as status: "Done" (status-and-residuals.md § Hold, release, and override)', 'delete plans[].execution_lease in the same update that sets status: "Done"'));
+    violations.push(violation4("medium", "status.plan-row.done-with-lease", 'plan status Done must not carry an execution_lease — the Done authority deletes the lease in the same complete-file update as status: "Done" (status-and-residuals.md § Hold, release, and override)', 'delete plans[].execution_lease in the same update that sets status: "Done"'));
   }
   return { ok: violations.length === 0, violations };
 }
 function validateResidual(entry) {
   const violations = [];
-  if (!isPlainObject2(entry)) {
-    return { ok: false, violations: [violation3("high", "status.residual.invalid", "residual entry must be an object")] };
+  if (!isPlainObject3(entry)) {
+    return { ok: false, violations: [violation4("high", "status.residual.invalid", "residual entry must be an object")] };
   }
   const { id, title, severity, source, scope, decision, owner, target, tracking, detail_doc, lifecycle, closed_at } = entry;
-  validateNonEmptyString2(violations, id, "id", "status.residual.missing-id", "status.residual.invalid-id");
-  validateNonEmptyString2(violations, title, "title", "status.residual.missing-title", "status.residual.invalid-title");
-  validateNonEmptyString2(violations, source, "source", "status.residual.missing-source", "status.residual.invalid-source");
-  validateNonEmptyString2(violations, scope, "scope", "status.residual.missing-scope", "status.residual.invalid-scope");
-  validateNonEmptyString2(violations, owner, "owner", "status.residual.missing-owner", "status.residual.invalid-owner");
+  validateNonEmptyString3(violations, id, "id", "status.residual.missing-id", "status.residual.invalid-id");
+  validateNonEmptyString3(violations, title, "title", "status.residual.missing-title", "status.residual.invalid-title");
+  validateNonEmptyString3(violations, source, "source", "status.residual.missing-source", "status.residual.invalid-source");
+  validateNonEmptyString3(violations, scope, "scope", "status.residual.missing-scope", "status.residual.invalid-scope");
+  validateNonEmptyString3(violations, owner, "owner", "status.residual.missing-owner", "status.residual.invalid-owner");
   if (severity === undefined) {
-    violations.push(violation3("high", "status.residual.missing-severity", "missing required field: severity"));
+    violations.push(violation4("high", "status.residual.missing-severity", "missing required field: severity"));
   } else if (typeof severity !== "string" || !SEVERITY_ORDER.includes(severity) && severity !== "warning") {
-    violations.push(violation3("medium", "status.residual.invalid-severity", `severity must be one of ${SEVERITY_ORDER.join(" | ")} — got ${JSON.stringify(severity)}`));
+    violations.push(violation4("medium", "status.residual.invalid-severity", `severity must be one of ${SEVERITY_ORDER.join(" | ")} — got ${JSON.stringify(severity)}`));
   } else if (severity === "warning") {
-    violations.push(violation3("low", "status.residual.legacy-warning", `severity "warning" is legacy — forbidden on new entries; read paths normalize it to "low"`, `use "low" (normalizeSeverity maps 'warning' → 'low')`));
+    violations.push(violation4("low", "status.residual.legacy-warning", `severity "warning" is legacy — forbidden on new entries; read paths normalize it to "low"`, `use "low" (normalizeSeverity maps 'warning' → 'low')`));
   }
   if (decision === undefined) {
-    violations.push(violation3("high", "status.residual.missing-decision", "missing required field: decision"));
+    violations.push(violation4("high", "status.residual.missing-decision", "missing required field: decision"));
   } else if (typeof decision !== "string" || !RESIDUAL_DECISIONS.includes(decision)) {
-    violations.push(violation3("medium", "status.residual.invalid-decision", `decision must be one of ${RESIDUAL_DECISIONS.join(" | ")} — got ${JSON.stringify(decision)}`));
+    violations.push(violation4("medium", "status.residual.invalid-decision", `decision must be one of ${RESIDUAL_DECISIONS.join(" | ")} — got ${JSON.stringify(decision)}`));
   }
   if (target === undefined) {
-    violations.push(violation3("high", "status.residual.missing-target", "missing required field: target"));
+    violations.push(violation4("high", "status.residual.missing-target", "missing required field: target"));
   } else if (typeof target !== "string" && target !== null) {
-    violations.push(violation3("medium", "status.residual.invalid-target", "target must be a string or null"));
+    violations.push(violation4("medium", "status.residual.invalid-target", "target must be a string or null"));
   }
   if (tracking === undefined) {
-    violations.push(violation3("high", "status.residual.missing-tracking", "missing required field: tracking"));
+    violations.push(violation4("high", "status.residual.missing-tracking", "missing required field: tracking"));
   } else if (typeof tracking !== "string" && tracking !== null) {
-    violations.push(violation3("medium", "status.residual.invalid-tracking", "tracking must be a string or null"));
+    violations.push(violation4("medium", "status.residual.invalid-tracking", "tracking must be a string or null"));
   }
   if (detail_doc !== undefined && typeof detail_doc !== "string" && detail_doc !== null) {
-    violations.push(violation3("medium", "status.residual.invalid-detail-doc", "detail_doc must be a string or null"));
+    violations.push(violation4("medium", "status.residual.invalid-detail-doc", "detail_doc must be a string or null"));
   }
   if (closed_at !== undefined && (typeof closed_at !== "string" || !DATE_RE.test(closed_at))) {
-    violations.push(violation3("medium", "status.residual.invalid-closed-at", "closed_at must be YYYY-MM-DD"));
+    violations.push(violation4("medium", "status.residual.invalid-closed-at", "closed_at must be YYYY-MM-DD"));
   }
   if (lifecycle !== undefined) {
     if (typeof lifecycle !== "string" || !RESIDUAL_LIFECYCLES.includes(lifecycle)) {
-      violations.push(violation3("medium", "status.residual.invalid-lifecycle", `lifecycle must be one of ${RESIDUAL_LIFECYCLES.join(" | ")} — got ${JSON.stringify(lifecycle)}`));
+      violations.push(violation4("medium", "status.residual.invalid-lifecycle", `lifecycle must be one of ${RESIDUAL_LIFECYCLES.join(" | ")} — got ${JSON.stringify(lifecycle)}`));
     } else if (lifecycle !== "open") {
       if (closed_at === undefined) {
-        violations.push(violation3("high", "status.residual.closed-missing-closed-at", `lifecycle "${lifecycle}" requires closed_at (YYYY-MM-DD)`, 'set closed_at (e.g. "2026-08-08")'));
+        violations.push(violation4("high", "status.residual.closed-missing-closed-at", `lifecycle "${lifecycle}" requires closed_at (YYYY-MM-DD)`, 'set closed_at (e.g. "2026-08-08")'));
       }
       if (entry.closure_note === undefined) {
-        violations.push(violation3("medium", "status.residual.closed-missing-closure-note", `lifecycle "${lifecycle}" requires closure_note (what changed; how verified)`, "add closure_note explaining the close"));
+        violations.push(violation4("medium", "status.residual.closed-missing-closure-note", `lifecycle "${lifecycle}" requires closure_note (what changed; how verified)`, "add closure_note explaining the close"));
       }
     }
   }
   return { ok: violations.length === 0, violations };
 }
-function validateStatus(docOrPath) {
+function isHarnessRelativePath(dir) {
+  if (dir.startsWith("/") || dir.startsWith("\\"))
+    return false;
+  if (/^[A-Za-z]:[\\/]/.test(dir))
+    return false;
+  return !dir.split(/[\\/]+/).includes("..");
+}
+function validateWorkflowEntry(entry) {
+  const violations = [];
+  if (!isPlainObject3(entry)) {
+    return {
+      ok: false,
+      violations: [violation4("high", "status.workflow.invalid", "workflow entry must be an object")]
+    };
+  }
+  validateNonEmptyString3(violations, entry.id, "id", "status.workflow.missing-id", "status.workflow.invalid-id");
+  if (entry.type === undefined) {
+    violations.push(violation4("high", "status.workflow.missing-type", "missing required field: type"));
+  } else if (typeof entry.type !== "string" || !WORKFLOW_LIFECYCLE_TYPES.includes(entry.type)) {
+    violations.push(violation4("medium", "status.workflow.invalid-type", `type must be one of ${WORKFLOW_LIFECYCLE_TYPES.join(" | ")} — got ${JSON.stringify(entry.type)}`));
+  }
+  validateNonEmptyString3(violations, entry.started_at, "started_at", "status.workflow.missing-started-at", "status.workflow.invalid-started-at");
+  if (entry.dir === undefined) {
+    violations.push(violation4("high", "status.workflow.missing-dir", "missing required field: dir"));
+  } else if (typeof entry.dir !== "string" || entry.dir.trim() === "") {
+    violations.push(violation4("medium", "status.workflow.invalid-dir", "dir must be a non-empty string"));
+  } else if (!isHarnessRelativePath(entry.dir)) {
+    violations.push(violation4("medium", "status.workflow.invalid-dir", `dir must be a harness-relative path (no absolute paths, no ".." segments) — got ${JSON.stringify(entry.dir)}`));
+  }
+  return { ok: violations.length === 0, violations };
+}
+function validateStatusV2(docOrPath, opts = {}) {
   let doc;
+  let harnessDir = opts.harnessDir;
   if (typeof docOrPath === "string") {
     try {
       doc = readJson(docOrPath);
+      harnessDir = dirname5(resolve5(docOrPath));
     } catch (error) {
       return {
         ok: false,
-        violations: [violation3("high", "status.invalid-json", error.message)]
+        violations: [violation4("high", "status.invalid-json", error.message)]
       };
     }
   } else {
     doc = docOrPath;
   }
-  const violations = [];
-  const { version, updated_at, plans, residual_findings, metadata } = doc;
-  if (version === undefined) {
-    violations.push(violation3("high", "status.missing-version", "missing required field: version"));
-  } else if (typeof version !== "number" || !Number.isInteger(version)) {
-    violations.push(violation3("high", "status.invalid-version", "version must be an integer"));
-  } else if (version !== 1) {
-    violations.push(violation3("medium", "status.unsupported-version", `unsupported status.json schema version ${version} — expected 1`));
-  }
-  if (updated_at === undefined) {
-    violations.push(violation3("high", "status.missing-updated-at", "missing required field: updated_at"));
-  } else if (typeof updated_at !== "string" || !DATE_RE.test(updated_at)) {
-    violations.push(violation3("medium", "status.invalid-updated-at", "updated_at must be YYYY-MM-DD"));
-  }
-  if (plans === undefined) {
-    violations.push(violation3("high", "status.missing-plans", "missing required field: plans"));
-  } else if (!Array.isArray(plans)) {
-    violations.push(violation3("high", "status.invalid-plans", "plans must be an array"));
-  } else {
-    for (const row of plans) {
-      violations.push(...validatePlanRow(row).violations);
-    }
+  if (!isPlainObject3(doc)) {
+    return { ok: false, violations: [violation4("high", "status.invalid-doc", "status document must be an object")] };
   }
-  if (residual_findings === undefined) {
-    violations.push(violation3("high", "status.missing-residual-findings", "missing required field: residual_findings (root-only canonical)"));
-  } else if (!isPlainObject2(residual_findings)) {
-    violations.push(violation3("high", "status.invalid-residual-findings", "residual_findings must be an object at root"));
-  } else {
-    for (const [planId, list] of Object.entries(residual_findings)) {
-      if (!Array.isArray(list)) {
-        violations.push(violation3("high", "status.residual.invalid-list", `residual_findings["${planId}"] must be an array`));
-      } else if (list.length === 0) {
-        violations.push(violation3("low", "status.residual.empty-key", `residual_findings["${planId}"] is empty — delete the key (no "plan-id": [])`));
-      } else {
-        for (const entry of list) {
-          violations.push(...validateResidual(entry).violations);
-        }
-      }
-    }
+  if (doc.version !== 2) {
+    return {
+      ok: false,
+      violations: [
+        violation4("high", "status.migration-required", `status.json schema version 2 required — got ${JSON.stringify(doc.version)} (v1 or unknown version); run \`mstar migrate\` to convert the tree`, "run `mstar migrate`")
+      ]
+    };
   }
-  if (metadata === undefined) {
-    violations.push(violation3("high", "status.missing-metadata", "missing required field: metadata"));
-  } else if (!isPlainObject2(metadata)) {
-    violations.push(violation3("high", "status.invalid-metadata", "metadata must be an object"));
-  } else if (Object.prototype.hasOwnProperty.call(metadata, "residual_findings")) {
-    violations.push(violation3("medium", "status.dual-write-residuals", "residual_findings must be root-only — metadata.residual_findings is legacy read-only; remove it (no dual-write)", "move entries to root residual_findings and delete metadata.residual_findings"));
+  if (Array.isArray(doc.plans)) {
+    return {
+      ok: false,
+      violations: [
+        violation4("high", "status.migration-required", "v1-shaped status.json (root plans[]) is not a v2 document — run `mstar migrate` to convert the tree", "run `mstar migrate`")
+      ]
+    };
   }
-  return { ok: violations.length === 0, violations };
-}
-function planFindingsCleanup(doc, planId) {
-  if (!Array.isArray(doc.plans))
-    return;
-  for (const row of doc.plans) {
-    if (!isPlainObject2(row))
-      continue;
-    const rowId = row.id ?? row.plan_id;
-    if (rowId !== planId)
-      continue;
-    if (!isPlainObject2(row.metadata))
-      return;
-    const mode = row.metadata.findings_cleanup;
-    if (mode === "zero-residual" || mode === "allow-residual")
-      return mode;
-    return;
+  if (doc.residual_findings !== undefined) {
+    return {
+      ok: false,
+      violations: [
+        violation4("high", "status.migration-required", "v1-shaped status.json (root residual_findings) is not a v2 document — run `mstar migrate` to convert the tree", "run `mstar migrate`")
+      ]
+    };
   }
-  return;
-}
-function openResidualsOf(doc, planId) {
-  if (!isPlainObject2(doc.residual_findings))
-    return [];
-  const list = doc.residual_findings[planId];
-  if (!Array.isArray(list))
-    return [];
-  return list.filter((entry) => isPlainObject2(entry) && isOpenResidual(entry));
-}
-function findingsCleanupGate(doc, planId, opts) {
-  const mode = opts?.mode ?? planFindingsCleanup(doc, planId) ?? "allow-residual";
   const violations = [];
-  const residuals = openResidualsOf(doc, planId);
-  for (const entry of residuals) {
-    const id = typeof entry.id === "string" ? entry.id : "<unnamed>";
-    const label = `R#${id}`;
-    if (mode === "zero-residual") {
-      if (entry.severity === "nit") {
-        violations.push(violation3("medium", "findings.zero-residual-nit", `${label}: style-only nits must be fixed in-session or dropped — never left open under zero-residual`));
-      } else if (entry.decision === "risk-accepted" || entry.lifecycle === "waived") {
-        violations.push(violation3("medium", "findings.zero-residual-risk-accepted", `${label}: waived/risk-accepted findings must be closed/archived, not left open under zero-residual`));
-      } else if (entry.decision === "defer") {
-        if (typeof entry.target !== "string" || entry.target.trim() === "") {
-          violations.push(violation3("medium", "findings.zero-residual-defer-no-target", `${label}: blocker-defer requires a target (next iteration/milestone) under zero-residual`));
+  if (doc.updated_at === undefined) {
+    violations.push(violation4("high", "status.missing-updated-at", "missing required field: updated_at"));
+  } else if (typeof doc.updated_at !== "string" || !DATE_RE.test(doc.updated_at)) {
+    violations.push(violation4("medium", "status.invalid-updated-at", "updated_at must be YYYY-MM-DD"));
+  }
+  if (doc.workflows === undefined) {
+    violations.push(violation4("high", "status.missing-workflows", "missing required field: workflows"));
+  } else if (!Array.isArray(doc.workflows)) {
+    violations.push(violation4("high", "status.invalid-workflows", "workflows must be an array"));
+  } else {
+    const seen = new Set;
+    for (const entry of doc.workflows) {
+      violations.push(...validateWorkflowEntry(entry).violations);
+      if (isPlainObject3(entry) && typeof entry.id === "string") {
+        if (seen.has(entry.id)) {
+          violations.push(violation4("medium", "status.workflow.duplicate-id", `duplicate workflow id in workflows[]: ${JSON.stringify(entry.id)}`));
         }
-      } else {
-        violations.push(violation3("medium", "findings.zero-residual-open-fixable", `${label}: fixable finding must not remain open under zero-residual — fix now or convert to a blocker-defer`));
+        seen.add(entry.id);
+      }
+    }
+  }
+  if (harnessDir !== undefined && Array.isArray(doc.workflows)) {
+    let realHarnessDir = null;
+    try {
+      realHarnessDir = realpathSync(harnessDir);
+    } catch {}
+    for (const entry of doc.workflows) {
+      if (!isPlainObject3(entry) || typeof entry.dir !== "string")
+        continue;
+      const relSnapshot = join6(entry.dir, WORKFLOW_SNAPSHOT_FILE);
+      const snapshotPath = join6(harnessDir, relSnapshot);
+      const label = typeof entry.id === "string" ? entry.id : relSnapshot;
+      let physical;
+      try {
+        physical = realpathSync(snapshotPath);
+      } catch {
+        violations.push(violation4("high", "status.workflow.snapshot-missing", `workflows[] lists ${JSON.stringify(label)} but its snapshot does not exist at ${JSON.stringify(relSnapshot)} — the root holds active lifecycles only; unregister the id when its snapshot is removed`));
+        continue;
+      }
+      if (realHarnessDir !== null && physical !== realHarnessDir && !physical.startsWith(`${realHarnessDir}${sep}`)) {
+        violations.push(violation4("high", "status.workflow.snapshot-outside-harness", `workflows[] lists ${JSON.stringify(label)} but its snapshot resolves outside the harness dir (${JSON.stringify(physical)}) — symlinked snapshot paths are rejected; the snapshot must physically live under ${JSON.stringify(harnessDir)}`));
+        continue;
+      }
+      let snapshot;
+      try {
+        snapshot = readJson(snapshotPath);
+      } catch (error) {
+        violations.push(violation4("high", "status.workflow.snapshot-invalid", `snapshot at ${JSON.stringify(relSnapshot)} is not valid JSON: ${error.message}`));
+        continue;
+      }
+      if (typeof snapshot.status === "string" && WORKFLOW_TERMINAL_STATUSES.includes(snapshot.status)) {
+        violations.push(violation4("high", "status.workflow.terminal-listed", `workflows[] lists ${JSON.stringify(label)} whose snapshot status is terminal (${snapshot.status}) — removal-at-terminal: terminal writers unregister AFTER the snapshot write`));
+      }
+      if (typeof entry.type === "string" && typeof snapshot.type === "string" && entry.type !== snapshot.type) {
+        violations.push(violation4("medium", "status.workflow.mismatched-type", `workflows[] entry ${JSON.stringify(label)} type ${JSON.stringify(entry.type)} does not match its snapshot type ${JSON.stringify(snapshot.type)} — the root entry mirrors the snapshot; align them`));
+      }
+      if (typeof entry.started_at === "string" && typeof snapshot.started_at === "string" && entry.started_at !== snapshot.started_at) {
+        violations.push(violation4("medium", "status.workflow.mismatched-started-at", `workflows[] entry ${JSON.stringify(label)} started_at ${JSON.stringify(entry.started_at)} does not match its snapshot started_at ${JSON.stringify(snapshot.started_at)} — the root entry mirrors the snapshot; align them`));
       }
-    } else if (normalizeSeverity(entry.severity) === "critical") {
-      violations.push(violation3("high", "findings.allow-residual-critical", `${label}: unresolved critical blocks Approve with residuals`));
     }
   }
   return { ok: violations.length === 0, violations };
 }
+var validateStatus = validateStatusV2;
 function resolveCompassEnforcement(harnessDir) {
   const iterationsDir = resolveIterationDir(harnessDir);
   if (!existsSync2(iterationsDir))
@@ -1848,12 +2094,12 @@ function resolveCompassEnforcement(harnessDir) {
   for (const entry of entries) {
     if (!entry.isDirectory())
       continue;
-    const compassPath = join4(iterationsDir, entry.name, "delivery-compass.md");
+    const compassPath = join6(iterationsDir, entry.name, "delivery-compass.md");
     if (!existsSync2(compassPath))
       continue;
     let content;
     try {
-      content = readFileSync3(compassPath, "utf8");
+      content = readFileSync4(compassPath, "utf8");
     } catch {
       continue;
     }
@@ -1867,6 +2113,22 @@ function resolveCompassEnforcement(harnessDir) {
   }
   return { hard: false, source: "none" };
 }
+function resolveMstarcEnforcement(harnessDir) {
+  const dir = resolve5(harnessDir);
+  const rc = loadMstarc(dir, dirname5(dir));
+  const value = rc?.config.enforcement;
+  if (value === "hard")
+    return { hard: true, source: "mstarc" };
+  if (value === "soft")
+    return { hard: false, source: "mstarc" };
+  return { hard: false, source: "none" };
+}
+function resolveRepoEnforcement(harnessDir) {
+  const rc = resolveMstarcEnforcement(harnessDir);
+  if (rc.source !== "none")
+    return rc;
+  return resolveCompassEnforcement(harnessDir);
+}
 var DEFAULT_PROBE_TIMEOUT_MS = 1e4;
 function probeTimeoutMs() {
   const raw = process.env.MSTAR_GIT_PROBE_TIMEOUT_MS;
@@ -1875,7 +2137,7 @@ function probeTimeoutMs() {
   const parsed = Number(raw);
   return Number.isFinite(parsed) && parsed > 0 ? parsed : DEFAULT_PROBE_TIMEOUT_MS;
 }
-function violation4(severity, code, message, fix) {
+function violation5(severity, code, message, fix) {
   return { ok: false, severity, code, message, fix };
 }
 function gate(violations) {
@@ -1909,25 +2171,25 @@ function l1PreDispatchCheck(input, opts = {}) {
   const violations = [];
   const { controlWorktreePath, leaseWorktreePath, leaseWorkingBranch, planId } = input;
   if (controlWorktreePath.trim() === "") {
-    violations.push(violation4("high", "worktree.l1.control-missing", "metadata.control_worktree_path is not recorded — the L1 control worktree (integration-branch checkout) must be recorded in status.json before writable dispatch", "record the control worktree path in status.json metadata.control_worktree_path"));
+    violations.push(violation5("high", "worktree.l1.control-missing", "metadata.control_worktree_path is not recorded — the L1 control worktree (integration-branch checkout) must be recorded in status.json before writable dispatch", "record the control worktree path in status.json metadata.control_worktree_path"));
   }
   if (leaseWorktreePath.trim() === "") {
-    violations.push(violation4("high", "worktree.l1.lease-missing", `execution_lease.worktree_path is empty for plan "${planId}" — no verified execution_lease to dispatch against`, "claim the execution_lease with an absolute feature worktree path before dispatch"));
+    violations.push(violation5("high", "worktree.l1.lease-missing", `execution_lease.worktree_path is empty for plan "${planId}" — no verified execution_lease to dispatch against`, "claim the execution_lease with an absolute feature worktree path before dispatch"));
   }
   if (leaseWorkingBranch.trim() === "") {
-    violations.push(violation4("high", "worktree.l1.lease-branch-missing", `execution_lease.working_branch is empty for plan "${planId}"`, "record the lease working_branch before dispatch"));
+    violations.push(violation5("high", "worktree.l1.lease-branch-missing", `execution_lease.working_branch is empty for plan "${planId}"`, "record the lease working_branch before dispatch"));
   }
-  if (controlWorktreePath !== "" && leaseWorktreePath !== "" && resolve5(controlWorktreePath) === resolve5(leaseWorktreePath)) {
-    violations.push(violation4("critical", "worktree.l1.lease-equals-control", `execution_lease.worktree_path "${leaseWorktreePath}" equals metadata.control_worktree_path — the feature worktree MUST differ from the control worktree (L1 isolation; product edits never land in the control checkout)`, "use a distinct feature worktree for the plan (git worktree add <path> <branch>) and update the lease"));
+  if (controlWorktreePath !== "" && leaseWorktreePath !== "" && resolve6(controlWorktreePath) === resolve6(leaseWorktreePath)) {
+    violations.push(violation5("critical", "worktree.l1.lease-equals-control", `execution_lease.worktree_path "${leaseWorktreePath}" equals metadata.control_worktree_path — the feature worktree MUST differ from the control worktree (L1 isolation; product edits never land in the control checkout)`, "use a distinct feature worktree for the plan (git worktree add <path> <branch>) and update the lease"));
   }
   if (leaseWorktreePath !== "" && !existsSync3(leaseWorktreePath)) {
-    violations.push(violation4("high", "worktree.l1.feature-missing", `feature worktree directory "${leaseWorktreePath}" does not exist for plan "${planId}"`, `create it before dispatch: git worktree add ${leaseWorktreePath} <working-branch>`));
+    violations.push(violation5("high", "worktree.l1.feature-missing", `feature worktree directory "${leaseWorktreePath}" does not exist for plan "${planId}"`, `create it before dispatch: git worktree add ${leaseWorktreePath} <working-branch>`));
   } else if (leaseWorktreePath !== "" && leaseWorkingBranch !== "") {
     const probe = probeBranch(leaseWorktreePath, opts);
     if ("error" in probe) {
-      violations.push(violation4("high", "worktree.l1.branch-probe-failed", `cannot probe branch at "${leaseWorktreePath}" for plan "${planId}": ${probe.error}`, "verify the path is a git worktree checkout on the lease working branch (not detached)"));
+      violations.push(violation5("high", "worktree.l1.branch-probe-failed", `cannot probe branch at "${leaseWorktreePath}" for plan "${planId}": ${probe.error}`, "verify the path is a git worktree checkout on the lease working branch (not detached)"));
     } else if (probe.branch !== leaseWorkingBranch) {
-      violations.push(violation4("high", "worktree.l1.branch-mismatch", `feature worktree "${leaseWorktreePath}" is on branch "${probe.branch}", expected execution_lease.working_branch "${leaseWorkingBranch}" (plan "${planId}")`, `checkout ${leaseWorkingBranch} in the feature worktree`));
+      violations.push(violation5("high", "worktree.l1.branch-mismatch", `feature worktree "${leaseWorktreePath}" is on branch "${probe.branch}", expected execution_lease.working_branch "${leaseWorkingBranch}" (plan "${planId}")`, `checkout ${leaseWorkingBranch} in the feature worktree`));
     }
   }
   return gate(violations);
@@ -1937,32 +2199,32 @@ function l2PreDispatchCheck(input, opts = {}) {
   const tracks = input.tracks ?? [];
   const seenPaths = new Set;
   if (tracks.length < 1) {
-    violations.push(violation4("high", "worktree.l2.no-tracks", "no parallel writable tracks — the L2 pre-dispatch checklist requires at least one track with an absolute worktreePath and Working branch", "pass each track's absolute Worktree path and PM-approved Working branch"));
+    violations.push(violation5("high", "worktree.l2.no-tracks", "no parallel writable tracks — the L2 pre-dispatch checklist requires at least one track with an absolute worktreePath and Working branch", "pass each track's absolute Worktree path and PM-approved Working branch"));
   }
   tracks.forEach((track, index) => {
     if (track.worktreePath.trim() === "" || track.workingBranch.trim() === "") {
-      violations.push(violation4("high", "worktree.l2.track-invalid", `track ${index + 1} is missing worktreePath and/or workingBranch`, "fill both fields for every track"));
+      violations.push(violation5("high", "worktree.l2.track-invalid", `track ${index + 1} is missing worktreePath and/or workingBranch`, "fill both fields for every track"));
       return;
     }
-    if (!isAbsolute3(track.worktreePath)) {
-      violations.push(violation4("high", "worktree.l2.track-path-relative", `track ${index + 1} worktreePath "${track.worktreePath}" is not an absolute path — L2 tracks MUST use absolute worktree checkout paths (consistent with the lease validator's absolute worktree_path enforcement)`, `use an absolute path for track ${index + 1} (e.g. /Users/<you>/worktrees/<branch>)`));
+    if (!isAbsolute4(track.worktreePath)) {
+      violations.push(violation5("high", "worktree.l2.track-path-relative", `track ${index + 1} worktreePath "${track.worktreePath}" is not an absolute path — L2 tracks MUST use absolute worktree checkout paths (consistent with the lease validator's absolute worktree_path enforcement)`, `use an absolute path for track ${index + 1} (e.g. /Users/<you>/worktrees/<branch>)`));
       return;
     }
-    const normalized = resolve5(track.worktreePath);
+    const normalized = resolve6(track.worktreePath);
     if (seenPaths.has(normalized)) {
-      violations.push(violation4("high", "worktree.l2.track-path-collision", `duplicate worktreePath "${track.worktreePath}" across parallel tracks — L2 parallel-writable isolation requires a distinct absolute Worktree path per track (N parallel invokes ≠ isolation)`, "give every parallel track its own git worktree checkout"));
+      violations.push(violation5("high", "worktree.l2.track-path-collision", `duplicate worktreePath "${track.worktreePath}" across parallel tracks — L2 parallel-writable isolation requires a distinct absolute Worktree path per track (N parallel invokes ≠ isolation)`, "give every parallel track its own git worktree checkout"));
       return;
     }
     seenPaths.add(normalized);
     if (!existsSync3(track.worktreePath)) {
-      violations.push(violation4("high", "worktree.l2.track-missing", `track worktree directory "${track.worktreePath}" does not exist`, `create it before dispatch: git worktree add ${track.worktreePath} ${track.workingBranch}`));
+      violations.push(violation5("high", "worktree.l2.track-missing", `track worktree directory "${track.worktreePath}" does not exist`, `create it before dispatch: git worktree add ${track.worktreePath} ${track.workingBranch}`));
       return;
     }
     const probe = probeBranch(track.worktreePath, opts);
     if ("error" in probe) {
-      violations.push(violation4("high", "worktree.l2.branch-probe-failed", `cannot probe branch at "${track.worktreePath}": ${probe.error}`, "verify the path is a git worktree checkout on its Working branch (not detached)"));
+      violations.push(violation5("high", "worktree.l2.branch-probe-failed", `cannot probe branch at "${track.worktreePath}": ${probe.error}`, "verify the path is a git worktree checkout on its Working branch (not detached)"));
     } else if (probe.branch !== track.workingBranch) {
-      violations.push(violation4("high", "worktree.l2.branch-mismatch", `track worktree "${track.worktreePath}" is on branch "${probe.branch}", expected Working branch "${track.workingBranch}"`, `checkout ${track.workingBranch} in that worktree`));
+      violations.push(violation5("high", "worktree.l2.branch-mismatch", `track worktree "${track.worktreePath}" is on branch "${probe.branch}", expected Working branch "${track.workingBranch}"`, `checkout ${track.workingBranch} in that worktree`));
     }
   });
   return gate(violations);
@@ -1977,14 +2239,14 @@ class SddScriptError extends Error {
 }
 function isDirectory2(dir) {
   try {
-    return statSync3(dir).isDirectory();
+    return statSync4(dir).isDirectory();
   } catch {
     return false;
   }
 }
-function isFile(file) {
+function isFile2(file) {
   try {
-    return statSync3(file).isFile();
+    return statSync4(file).isFile();
   } catch {
     return false;
   }
@@ -2003,25 +2265,48 @@ function gitOut(cwd, args) {
   }
 }
 function probeHarnessWithStatus(root) {
-  if (isFile(join5(root, ".mstar", "status.json")))
-    return join5(root, ".mstar");
-  if (isFile(join5(root, ".agents", "status.json")))
-    return join5(root, ".agents");
+  if (isFile2(join7(root, ".mstar", "status.json")))
+    return join7(root, ".mstar");
+  if (isFile2(join7(root, ".agents", "status.json")))
+    return join7(root, ".agents");
+  if (hasWorkflowSnapshot(join7(root, ".mstar")))
+    return join7(root, ".mstar");
+  if (hasWorkflowSnapshot(join7(root, ".agents")))
+    return join7(root, ".agents");
   return null;
 }
+function hasWorkflowSnapshot(harnessDir) {
+  let workflowsDir;
+  try {
+    workflowsDir = resolveWorkflowDir(harnessDir, { harnessDir });
+  } catch {
+    workflowsDir = join7(harnessDir, "workflows");
+  }
+  if (!isDirectory2(workflowsDir))
+    return false;
+  try {
+    for (const entry of readdirSync3(workflowsDir, { withFileTypes: true })) {
+      if (entry.isDirectory() && isFile2(join7(workflowsDir, entry.name, "snapshot.json")))
+        return true;
+    }
+  } catch {
+    return false;
+  }
+  return false;
+}
 function isLinkedWorktree(root) {
   const gitDirRaw = gitOut(root, ["rev-parse", "--git-dir"]);
   const commonRaw = gitOut(root, ["rev-parse", "--git-common-dir"]);
   if (gitDirRaw === null || commonRaw === null)
     return false;
-  const gitDir = isAbsolute4(gitDirRaw) ? gitDirRaw : join5(root, gitDirRaw);
-  const common = isAbsolute4(commonRaw) ? commonRaw : join5(root, commonRaw);
+  const gitDir = isAbsolute5(gitDirRaw) ? gitDirRaw : join7(root, gitDirRaw);
+  const common = isAbsolute5(commonRaw) ? commonRaw : join7(root, commonRaw);
   if (gitDir.includes("/.git/worktrees/") || gitDir.includes("/worktrees/"))
     return true;
   try {
-    const gdParent = realpathSync(dirname4(gitDir));
-    const cmAbs = realpathSync(common);
-    return join5(gdParent, basename3(gitDir)) !== cmAbs && gitDir !== cmAbs;
+    const gdParent = realpathSync2(dirname6(gitDir));
+    const cmAbs = realpathSync2(common);
+    return join7(gdParent, basename3(gitDir)) !== cmAbs && gitDir !== cmAbs;
   } catch {
     return false;
   }
@@ -2038,10 +2323,10 @@ function sddWorkspace(planId, opts = {}) {
     if (!isDirectory2(controlRoot)) {
       throw new SddScriptError(`mstar sdd workspace: CONTROL_ROOT / MSTAR_CONTROL_ROOT is not a directory: ${controlRoot}`, 1);
     }
-    root = realpathSync(controlRoot);
+    root = realpathSync2(controlRoot);
   } else {
     const topLevel = gitOut(cwd, ["rev-parse", "--show-toplevel"]);
-    root = realpathSync(topLevel ?? cwd);
+    root = realpathSync2(topLevel ?? cwd);
   }
   if (!controlRoot && isLinkedWorktree(root)) {
     throw new SddScriptError(`mstar sdd workspace: linked worktree at ${root} has no {HARNESS_DIR}/status.json (default gitignore).
@@ -2052,24 +2337,30 @@ function sddWorkspace(planId, opts = {}) {
   const harnessOverride = opts.harnessDir ?? (process.env.MSTAR_HARNESS_DIR || undefined);
   let harnessDir;
   if (harnessOverride) {
-    harnessDir = resolve6(root, harnessOverride);
+    harnessDir = resolve7(root, harnessOverride);
   } else {
-    const probed = probeHarnessWithStatus(root);
-    if (probed) {
-      harnessDir = probed;
-    } else if (isDirectory2(join5(root, ".mstar"))) {
-      harnessDir = join5(root, ".mstar");
-    } else if (isDirectory2(join5(root, ".agents"))) {
-      harnessDir = join5(root, ".agents");
+    const rc = findMstarc(root, root);
+    const rcHarnessDir = rc !== null ? parseMstarc(readFileSync5(rc, "utf8")).harnessDir : undefined;
+    if (rcHarnessDir) {
+      harnessDir = resolve7(rc !== null ? dirname6(rc) : root, rcHarnessDir);
     } else {
-      harnessDir = join5(root, ".mstar");
+      const probed = probeHarnessWithStatus(root);
+      if (probed) {
+        harnessDir = probed;
+      } else if (isDirectory2(join7(root, ".mstar"))) {
+        harnessDir = join7(root, ".mstar");
+      } else if (isDirectory2(join7(root, ".agents"))) {
+        harnessDir = join7(root, ".agents");
+      } else {
+        harnessDir = join7(root, ".mstar");
+      }
     }
   }
   const sddDir = resolveSddDir(harnessDir, planId);
-  mkdirSync4(sddDir, { recursive: true });
-  writeFileSync3(join5(sddDir, ".gitignore"), `*
+  mkdirSync5(sddDir, { recursive: true });
+  writeFileSync3(join7(sddDir, ".gitignore"), `*
 `);
-  return realpathSync(sddDir);
+  return realpathSync2(sddDir);
 }
 function taskBrief(planFile, taskN, outFile, opts = {}) {
   if (!planFile || !Number.isInteger(taskN) || taskN < 1) {
@@ -2077,7 +2368,7 @@ function taskBrief(planFile, taskN, outFile, opts = {}) {
   }
   let content;
   try {
-    content = readFileSync4(planFile, "utf8");
+    content = readFileSync5(planFile, "utf8");
   } catch {
     throw new SddScriptError(`no such plan file: ${planFile}`, 2);
   }
@@ -2089,8 +2380,8 @@ function taskBrief(planFile, taskN, outFile, opts = {}) {
     if (!sddDir) {
       throw new SddScriptError("mstar sdd task-brief: set SDD_DIR or pass OUTFILE (run mstar sdd workspace PLAN_ID first)", 2);
     }
-    mkdirSync4(sddDir, { recursive: true });
-    out = join5(sddDir, `task-${taskN}-brief.md`);
+    mkdirSync5(sddDir, { recursive: true });
+    out = join7(sddDir, `task-${taskN}-brief.md`);
   }
   const records = content.endsWith(`
 `) ? content.split(`
@@ -2192,18 +2483,18 @@ function validateCompassShape(doc) {
     }
   };
 }
-function violation5(severity, code, message, fix) {
+function violation6(severity, code, message, fix) {
   return { ok: false, severity, code, message, fix };
 }
-function isPlainObject3(value) {
+function isPlainObject4(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function validateCompassFrontmatter(doc) {
-  if (!isPlainObject3(doc)) {
+  if (!isPlainObject4(doc)) {
     return {
       ok: false,
       violations: [
-        violation5("medium", "COMPASS_INVALID_FIELD", "Compass frontmatter must be a YAML object with iteration_id / start_date / status / iteration_base_branch / target_branch (template: mstar-iteration §1.3)", "Fix the frontmatter of {ITERATION_DIR}/<iteration-id>/delivery-compass.md")
+        violation6("medium", "COMPASS_INVALID_FIELD", "Compass frontmatter must be a YAML object with iteration_id / start_date / status / iteration_base_branch / target_branch (template: mstar-iteration §1.3)", "Fix the frontmatter of {ITERATION_DIR}/<iteration-id>/delivery-compass.md")
       ]
     };
   }
@@ -2213,17 +2504,17 @@ function validateCompassFrontmatter(doc) {
       ok: false,
       violations: parsed.issues.map((issue) => {
         const field = issue.path.join(".") || "(root)";
-        return violation5("medium", "COMPASS_INVALID_FIELD", `Compass frontmatter field '${field}' is invalid: ${issue.message}`, `Fix '${field}' in {ITERATION_DIR}/<iteration-id>/delivery-compass.md frontmatter (template: mstar-iteration §1.3)`);
+        return violation6("medium", "COMPASS_INVALID_FIELD", `Compass frontmatter field '${field}' is invalid: ${issue.message}`, `Fix '${field}' in {ITERATION_DIR}/<iteration-id>/delivery-compass.md frontmatter (template: mstar-iteration §1.3)`);
       })
     };
   }
   const violations = [];
   const { status, end_date } = parsed.data;
   if (status === "completed" && end_date === undefined) {
-    violations.push(violation5("high", "COMPASS_END_DATE_REQUIRED", "Compass frontmatter status is 'completed' but end_date is missing — end_date is required at iteration-close (mstar-iteration §3.4, template Fields guide)", "Add `end_date: YYYY-MM-DD` to the frontmatter"));
+    violations.push(violation6("high", "COMPASS_END_DATE_REQUIRED", "Compass frontmatter status is 'completed' but end_date is missing — end_date is required at iteration-close (mstar-iteration §3.4, template Fields guide)", "Add `end_date: YYYY-MM-DD` to the frontmatter"));
   }
   if (status !== "completed" && end_date !== undefined) {
-    violations.push(violation5("medium", "COMPASS_END_DATE_NOT_ALLOWED", `Compass frontmatter sets end_date while status is '${status}' — end_date is only written at iteration-close (mstar-iteration §3.4)`, "Remove end_date until iteration-close"));
+    violations.push(violation6("medium", "COMPASS_END_DATE_NOT_ALLOWED", `Compass frontmatter sets end_date while status is '${status}' — end_date is only written at iteration-close (mstar-iteration §3.4)`, "Remove end_date until iteration-close"));
   }
   return { ok: violations.length === 0, violations };
 }
@@ -2232,11 +2523,11 @@ function registeredPlanIds(compassDoc) {
     return [];
   return compassDoc.plans.filter((plan) => typeof plan === "string" && plan.length > 0);
 }
-function findPlanRow(statusDoc, planId) {
-  if (!Array.isArray(statusDoc.plans))
+function findPlanRow(snapshotDoc, planId) {
+  if (!Array.isArray(snapshotDoc.plans))
     return null;
-  for (const row of statusDoc.plans) {
-    if (!isPlainObject3(row))
+  for (const row of snapshotDoc.plans) {
+    if (!isPlainObject4(row))
       continue;
     const rowId = typeof row.id === "string" ? row.id : typeof row.plan_id === "string" ? row.plan_id : null;
     if (rowId === planId)
@@ -2244,65 +2535,35 @@ function findPlanRow(statusDoc, planId) {
   }
   return null;
 }
-function entryPlansAllDone(statusDoc, registered) {
+function entryPlansAllDone(snapshotDoc, registered) {
   const violations = [];
   if (registered.length === 0) {
-    violations.push(violation5("medium", "COMPASS_NO_PLANS", "Compass frontmatter registers no plans — the all-plans-Done transition cannot be verified (mstar-iteration §1.3 / Phase transition gates)", "List the iteration's plan ids in the compass frontmatter `plans`"));
+    violations.push(violation6("medium", "COMPASS_NO_PLANS", "Compass frontmatter registers no plans — the all-plans-Done transition cannot be verified (mstar-iteration §1.3 / Phase transition gates)", "List the iteration's plan ids in the compass frontmatter `plans`"));
     return violations;
   }
   for (const planId of registered) {
-    const row = findPlanRow(statusDoc, planId);
+    const row = findPlanRow(snapshotDoc, planId);
     if (row === null) {
-      violations.push(violation5("high", "PLAN_NOT_IN_STATUS", `Plan '${planId}' is registered in the compass frontmatter but has no row in status.json plans[] (mstar-iteration §3.1 entry item 1)`, "Add the plan row to {HARNESS_DIR}/status.json"));
+      violations.push(violation6("high", "PLAN_NOT_IN_STATUS", `Plan '${planId}' is registered in the compass frontmatter but has no row in the workflow snapshot plans[] (mstar-iteration §3.1 entry item 1)`, "Add the plan row to {HARNESS_DIR}/workflows/<id>/snapshot.json"));
       continue;
     }
     if (row.status !== PLAN_STATUS_DONE) {
-      violations.push(violation5("high", "PLAN_NOT_DONE", `Plan '${planId}' status is ${JSON.stringify(row.status)} in status.json — all compass-registered plans must be 'Done' before iteration-close (mstar-iteration §3.1 entry item 1)`));
+      violations.push(violation6("high", "PLAN_NOT_DONE", `Plan '${planId}' status is ${JSON.stringify(row.status)} in the workflow snapshot — all compass-registered plans must be 'Done' before iteration-close (mstar-iteration §3.1 entry item 1)`));
     }
   }
   return violations;
 }
-function entryResidualsOpen(statusDoc, planId) {
-  const violations = [];
-  const residualRoot = statusDoc.residual_findings;
-  if (residualRoot === undefined || residualRoot === null)
-    return violations;
-  if (!isPlainObject3(residualRoot)) {
-    violations.push(violation5("medium", "RESIDUAL_MALFORMED", "status.json residual_findings must be a plan-id → entries object (mstar-iteration §3.1 entry item 2)"));
-    return violations;
-  }
-  const entries = residualRoot[planId];
-  if (entries === undefined)
-    return violations;
-  if (!Array.isArray(entries)) {
-    violations.push(violation5("medium", "RESIDUAL_MALFORMED", `status.json residual_findings['${planId}'] must be an array of residual entries (mstar-iteration §3.1 entry item 2)`));
-    return violations;
-  }
-  const openIds = [];
-  for (const entry of entries) {
-    if (!isPlainObject3(entry) || !isOpenResidual(entry))
-      continue;
-    const isBlockerDefer = entry.decision === "defer" && typeof entry.target === "string" && entry.target.trim() !== "";
-    if (isBlockerDefer)
-      continue;
-    openIds.push(typeof entry.id === "string" ? entry.id : "<unnamed>");
-  }
-  if (openIds.length > 0) {
-    violations.push(violation5("high", "OPEN_RESIDUALS", `Plan '${planId}' has ${openIds.length} open residual finding(s) not exempted as blocker-defers (${openIds.join(", ")}) — residuals must be closed/archived before iteration-close; only zero-residual blocker-defers (decision: defer + target) may stay open (mstar-iteration §3.1 entry item 2)`, "Close or archive the open residuals, or convert them into blocker-defers (decision: defer + non-empty target) per mstar-plan-artifacts Findings cleanup modes"));
-  }
-  return violations;
-}
 function entryFrontmatterComplete(compassDoc) {
   return validateCompassFrontmatter(compassDoc).violations;
 }
 function exitFrontmatterClosed(compassDoc) {
   const violations = [];
   if (compassDoc.status !== "completed") {
-    violations.push(violation5("high", "EXIT_STATUS_NOT_COMPLETED", `Compass frontmatter status must be 'completed' at close exit — current: ${JSON.stringify(compassDoc.status)} (mstar-iteration §3.4 / §3.5 exit item 4)`));
+    violations.push(violation6("high", "EXIT_STATUS_NOT_COMPLETED", `Compass frontmatter status must be 'completed' at close exit — current: ${JSON.stringify(compassDoc.status)} (mstar-iteration §3.4 / §3.5 exit item 4)`));
   }
   const endDate = compassDoc.end_date;
   if (typeof endDate !== "string" || !DATE_RE2.test(endDate)) {
-    violations.push(violation5("high", "EXIT_END_DATE_REQUIRED", "Compass frontmatter end_date (YYYY-MM-DD) is required when closing (mstar-iteration §3.4 / §3.5 exit item 4)"));
+    violations.push(violation6("high", "EXIT_END_DATE_REQUIRED", "Compass frontmatter end_date (YYYY-MM-DD) is required when closing (mstar-iteration §3.4 / §3.5 exit item 4)"));
   }
   return violations;
 }
@@ -2310,9 +2571,9 @@ function exitBranchCheck(opts) {
   const violations = [];
   const { currentBranch, specIntegrationBranch } = opts;
   if (currentBranch === undefined || specIntegrationBranch === undefined) {
-    violations.push(violation5("medium", "EXIT_BRANCH_UNVERIFIABLE", "Cannot verify the current branch is spec_integration_branch — missing currentBranch / specIntegrationBranch probe inputs (mstar-iteration §3.5 exit item 5)"));
+    violations.push(violation6("medium", "EXIT_BRANCH_UNVERIFIABLE", "Cannot verify the current branch is spec_integration_branch — missing currentBranch / specIntegrationBranch probe inputs (mstar-iteration §3.5 exit item 5)"));
   } else if (currentBranch !== specIntegrationBranch) {
-    violations.push(violation5("high", "EXIT_BRANCH_MISMATCH", `Current branch '${currentBranch}' is not the spec_integration_branch '${specIntegrationBranch}' (mstar-iteration §3.5 exit item 5)`));
+    violations.push(violation6("high", "EXIT_BRANCH_MISMATCH", `Current branch '${currentBranch}' is not the spec_integration_branch '${specIntegrationBranch}' (mstar-iteration §3.5 exit item 5)`));
   }
   return violations;
 }
@@ -2321,17 +2582,16 @@ function exitPrBaseCheck(compassDoc, opts) {
   const target = compassDoc.target_branch;
   const { prBaseBranch } = opts;
   if (prBaseBranch === undefined) {
-    violations.push(violation5("medium", "EXIT_PR_BASE_UNVERIFIABLE", "Cannot verify the PR base — missing prBaseBranch probe input (mstar-iteration §3.5 exit item 6)"));
+    violations.push(violation6("medium", "EXIT_PR_BASE_UNVERIFIABLE", "Cannot verify the PR base — missing prBaseBranch probe input (mstar-iteration §3.5 exit item 6)"));
   } else if (typeof target !== "string" || prBaseBranch !== target) {
-    violations.push(violation5("high", "EXIT_PR_BASE_MISMATCH", `PR base '${prBaseBranch}' must equal the compass target_branch '${String(target)}' — not an undocumented branch (mstar-iteration §3.5 exit item 6)`));
+    violations.push(violation6("high", "EXIT_PR_BASE_MISMATCH", `PR base '${prBaseBranch}' must equal the compass target_branch '${String(target)}' — not an undocumented branch (mstar-iteration §3.5 exit item 6)`));
   }
   return violations;
 }
-function evaluatePhaseGate(statusDoc, compassDoc, opts = {}) {
+function evaluatePhaseGate(snapshotDoc, compassDoc, opts = {}) {
   const registered = registeredPlanIds(compassDoc);
   const entryViolations = [
-    ...entryPlansAllDone(statusDoc, registered),
-    ...registered.flatMap((planId) => entryResidualsOpen(statusDoc, planId)),
+    ...entryPlansAllDone(snapshotDoc, registered),
     ...entryFrontmatterComplete(compassDoc)
   ];
   const exitViolations = [
@@ -2340,7 +2600,7 @@ function evaluatePhaseGate(statusDoc, compassDoc, opts = {}) {
     ...exitPrBaseCheck(compassDoc, opts)
   ];
   const allPlansDone = registered.length > 0 && registered.every((planId) => {
-    const row = findPlanRow(statusDoc, planId);
+    const row = findPlanRow(snapshotDoc, planId);
     return row !== null && row.status === PLAN_STATUS_DONE;
   });
   const entry = { ok: entryViolations.length === 0, violations: entryViolations };
@@ -2363,7 +2623,9 @@ function evaluatePhaseGate(statusDoc, compassDoc, opts = {}) {
   };
 }
 function parseCompassFrontmatter(filePath) {
-  const content = readFileSync5(filePath, "utf8");
+  return parseCompassFrontmatterText(readFileSync6(filePath, "utf8"), filePath);
+}
+function parseCompassFrontmatterText(content, filePath) {
   const lines = content.split(/\r?\n/);
   if (lines[0]?.trim() !== "---") {
     throw new Error(`no YAML frontmatter fence in ${filePath} (expected first line "---")`);
@@ -2424,7 +2686,103 @@ function parseFlowArray(raw, filePath) {
   }
   return items;
 }
-function violation6(severity, code, message, fix) {
+var PROJECT_ROADMAP_FILE = "roadmap.md";
+var PROJECT_REGISTER_FILE = "residuals.json";
+var _DEFAULT_PROJECT = "_default";
+var DATE_RE3 = /^\d{4}-\d{2}-\d{2}$/;
+function isPlainObject5(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function violation7(severity, code, message, fix) {
+  return { ok: false, severity, code, message, fix };
+}
+function validateNonEmptyString4(violations, value, field, missingCode, invalidCode) {
+  if (value === undefined) {
+    violations.push(violation7("high", missingCode, `missing required field: ${field}`));
+  } else if (typeof value !== "string" || value.trim() === "") {
+    violations.push(violation7("medium", invalidCode, `${field} must be a non-empty string`));
+  }
+}
+function validateProjectRegister(doc) {
+  const violations = [];
+  if (!isPlainObject5(doc)) {
+    return {
+      ok: false,
+      violations: [violation7("high", "project.register.invalid", "project register must be an object")]
+    };
+  }
+  if (doc.entries === undefined) {
+    violations.push(violation7("high", "project.register.missing-entries", "missing required field: entries"));
+  } else if (!isPlainObject5(doc.entries)) {
+    violations.push(violation7("high", "project.register.invalid-entries", "entries must be an object keyed by plan id"));
+  } else {
+    for (const [key, entries] of Object.entries(doc.entries)) {
+      if (key.trim() === "") {
+        violations.push(violation7("medium", "project.register.invalid-key", "entries keys must be non-empty plan ids"));
+      }
+      if (!Array.isArray(entries)) {
+        violations.push(violation7("high", "project.register.invalid-entry-list", `entries[${JSON.stringify(key)}] must be an array of residual entries (one entry per residual; v1 multi-finding semantics)`));
+        continue;
+      }
+      for (const entry of entries) {
+        violations.push(...validateResidual(entry).violations);
+        if (!isPlainObject5(entry))
+          continue;
+        validateNonEmptyString4(violations, entry.source_plan, "source_plan", "project.register.missing-source-plan", "project.register.invalid-source-plan");
+        if (entry.registered_at === undefined) {
+          violations.push(violation7("high", "project.register.missing-registered-at", "missing required field: registered_at"));
+        } else if (typeof entry.registered_at !== "string" || !DATE_RE3.test(entry.registered_at)) {
+          violations.push(violation7("medium", "project.register.invalid-registered-at", "registered_at must be YYYY-MM-DD"));
+        }
+        if (entry.lifecycle_id !== undefined && (typeof entry.lifecycle_id !== "string" || entry.lifecycle_id.trim() === "")) {
+          violations.push(violation7("medium", "project.register.invalid-lifecycle-id", "lifecycle_id must be a non-empty string"));
+        }
+        if (typeof entry.source_plan === "string" && entry.source_plan.trim() !== "" && entry.source_plan !== key) {
+          violations.push(violation7("medium", "project.register.mismatched-source-plan", `source_plan ${JSON.stringify(entry.source_plan)} does not match the entries key ${JSON.stringify(key)} — entries are keyed by plan id`));
+        }
+      }
+    }
+  }
+  return { ok: violations.length === 0, violations };
+}
+function findingsCleanupGate(register, planId, opts) {
+  const mode = opts?.mode ?? "allow-residual";
+  const violations = [];
+  const entries = isPlainObject5(register.entries) ? register.entries[planId] : undefined;
+  if (entries === undefined) {
+    return { ok: true, violations };
+  }
+  if (!Array.isArray(entries)) {
+    violations.push(violation7("high", "project.register.invalid-entry-list", `entries[${JSON.stringify(planId)}] must be an array of residual entries (one entry per residual; v1 multi-finding semantics)`));
+    return { ok: false, violations };
+  }
+  if (entries.length === 0) {
+    return { ok: true, violations };
+  }
+  for (const entry of entries) {
+    if (!isOpenResidual(entry))
+      continue;
+    const id = typeof entry.id === "string" ? entry.id : "<unnamed>";
+    const label = `R#${id}`;
+    if (mode === "zero-residual") {
+      if (entry.severity === "nit") {
+        violations.push(violation7("medium", "findings.zero-residual-nit", `${label}: style-only nits must be fixed in-session or dropped — never left open under zero-residual`));
+      } else if (entry.decision === "risk-accepted" || entry.lifecycle === "waived") {
+        violations.push(violation7("medium", "findings.zero-residual-risk-accepted", `${label}: waived/risk-accepted findings must be closed/archived, not left open under zero-residual`));
+      } else if (entry.decision === "defer") {
+        if (typeof entry.target !== "string" || entry.target.trim() === "") {
+          violations.push(violation7("medium", "findings.zero-residual-defer-no-target", `${label}: blocker-defer requires a target (next iteration/milestone) under zero-residual`));
+        }
+      } else {
+        violations.push(violation7("medium", "findings.zero-residual-open-fixable", `${label}: fixable finding must not remain open under zero-residual — fix now or convert to a blocker-defer`));
+      }
+    } else if (normalizeSeverity(entry.severity) === "critical") {
+      violations.push(violation7("high", "findings.allow-residual-critical", `${label}: unresolved critical blocks Approve with residuals`));
+    }
+  }
+  return { ok: violations.length === 0, violations };
+}
+function violation8(severity, code, message, fix) {
   return { ok: false, severity, code, message, fix };
 }
 var RAW_GROUP = "__raw";
@@ -2537,7 +2895,7 @@ function validateDesignTokenFrontmatter(frontmatterText) {
   const violations = [];
   const fm = parseDesignFrontmatter(frontmatterText);
   if (fm === null) {
-    violations.push(violation6("medium", "design-md.tokens.missing-frontmatter", "no `---` YAML frontmatter block found — DESIGN.md must open with a fenced frontmatter holding the token SSOT (design-md-spec §1.5)", "add a `---` fenced frontmatter with version, name, description, and the colors/typography/spacing/rounded groups"));
+    violations.push(violation8("medium", "design-md.tokens.missing-frontmatter", "no `---` YAML frontmatter block found — DESIGN.md must open with a fenced frontmatter holding the token SSOT (design-md-spec §1.5)", "add a `---` fenced frontmatter with version, name, description, and the colors/typography/spacing/rounded groups"));
     return { ok: false, violations };
   }
   const groupEntries = (group) => {
@@ -2552,61 +2910,61 @@ function validateDesignTokenFrontmatter(frontmatterText) {
   };
   for (const group of ["colors", "typography", "spacing", "rounded"]) {
     if (!isMap(fm[group])) {
-      violations.push(violation6("medium", "design-md.tokens.group-not-map", `token group "${group}" must be a YAML map, not a scalar (design-md-spec §1.5)`, `rewrite \`${group}\` as a nested map`));
+      violations.push(violation8("medium", "design-md.tokens.group-not-map", `token group "${group}" must be a YAML map, not a scalar (design-md-spec §1.5)`, `rewrite \`${group}\` as a nested map`));
     } else if (!groupIsMap(group)) {
-      violations.push(violation6("medium", "design-md.tokens.group-not-map", `token group "${group}" must be a YAML map, not a scalar (design-md-spec §1.5)`, `rewrite \`${group}\` as a nested map`));
+      violations.push(violation8("medium", "design-md.tokens.group-not-map", `token group "${group}" must be a YAML map, not a scalar (design-md-spec §1.5)`, `rewrite \`${group}\` as a nested map`));
     } else if (groupEntries(group).length === 0) {
-      violations.push(violation6("medium", "design-md.tokens.missing-group", `missing required token group "${group}" — colors/typography/spacing/rounded are required by the frontmatter SSOT (design-md-spec §1.5)`, `add an active \`${group}:\` block with concrete token values`));
+      violations.push(violation8("medium", "design-md.tokens.missing-group", `missing required token group "${group}" — colors/typography/spacing/rounded are required by the frontmatter SSOT (design-md-spec §1.5)`, `add an active \`${group}:\` block with concrete token values`));
     }
   }
   if (!isMap(fm.components) || !groupIsMap("components")) {
-    violations.push(violation6("medium", "design-md.tokens.group-not-map", `token group "components" must be a YAML map, not a scalar (design-md-spec §1.5)`, `rewrite \`components\` as a nested map`));
+    violations.push(violation8("medium", "design-md.tokens.group-not-map", `token group "components" must be a YAML map, not a scalar (design-md-spec §1.5)`, `rewrite \`components\` as a nested map`));
   }
-  const placeholder = (group, name, value) => violations.push(violation6("low", "design-md.tokens.placeholder", `token "${group}.${name}" uses a "[...]" template value — placeholders never count as concrete tokens (completeness-checklist § How to use item 5)`, `replace \`${value}\` with a concrete value`));
+  const placeholder = (group, name, value) => violations.push(violation8("low", "design-md.tokens.placeholder", `token "${group}.${name}" uses a "[...]" template value — placeholders never count as concrete tokens (completeness-checklist § How to use item 5)`, `replace \`${value}\` with a concrete value`));
   for (const [name, value] of groupEntries("colors")) {
     if (typeof value !== "string") {
-      violations.push(violation6("medium", "design-md.tokens.color-format", `color "${name}" must be a string value (design-md-spec §2.2)`, "quote the color value"));
+      violations.push(violation8("medium", "design-md.tokens.color-format", `color "${name}" must be a string value (design-md-spec §2.2)`, "quote the color value"));
       continue;
     }
     if (isPlaceholder(value)) {
       placeholder("colors", name, value);
     } else if (!HEX_RE.test(value) && !OKLCH_RE.test(value)) {
-      violations.push(violation6("medium", "design-md.tokens.color-format", `color "${name}" = "${value}" is not a hex (\`#rrggbb\`/\`#rrggbbaa\`) or oklch() value (design-md-spec §2.2)`, "use an sRGB hex value, optionally with a `-p3` oklch() twin"));
+      violations.push(violation8("medium", "design-md.tokens.color-format", `color "${name}" = "${value}" is not a hex (\`#rrggbb\`/\`#rrggbbaa\`) or oklch() value (design-md-spec §2.2)`, "use an sRGB hex value, optionally with a `-p3` oklch() twin"));
     }
   }
   for (const [name, value] of groupEntries("typography")) {
     if (!isMap(value)) {
-      violations.push(violation6("medium", "design-md.tokens.typography-shape", `typography token "${name}" must be a map of the five properties (design-md-spec §1.5)`, "give it fontFamily/fontSize/fontWeight/lineHeight/letterSpacing"));
+      violations.push(violation8("medium", "design-md.tokens.typography-shape", `typography token "${name}" must be a map of the five properties (design-md-spec §1.5)`, "give it fontFamily/fontSize/fontWeight/lineHeight/letterSpacing"));
       continue;
     }
     const keys = Object.keys(value);
     const missing = TYPOGRAPHY_PROPS.filter((p) => !keys.includes(p));
     const extra = keys.filter((k) => !TYPOGRAPHY_PROPS.includes(k));
     if (missing.length > 0 || extra.length > 0) {
-      violations.push(violation6("medium", "design-md.tokens.typography-shape", `typography token "${name}" must have exactly the five properties fontFamily/fontSize/fontWeight/lineHeight/letterSpacing (design-md-spec §1.5)${missing.length > 0 ? ` — missing: ${missing.join(", ")}` : ""}${extra.length > 0 ? ` — extra: ${extra.join(", ")}` : ""}`, "align the token with the five-property shape"));
+      violations.push(violation8("medium", "design-md.tokens.typography-shape", `typography token "${name}" must have exactly the five properties fontFamily/fontSize/fontWeight/lineHeight/letterSpacing (design-md-spec §1.5)${missing.length > 0 ? ` — missing: ${missing.join(", ")}` : ""}${extra.length > 0 ? ` — extra: ${extra.join(", ")}` : ""}`, "align the token with the five-property shape"));
     }
     for (const prop of ["fontFamily", "fontSize"]) {
       const v = value[prop];
       if (typeof v === "string" && isPlaceholder(v))
         placeholder("typography", name, v);
       else if (typeof v !== "string" || v.trim() === "") {
-        violations.push(violation6("medium", "design-md.tokens.typography-shape", `typography token "${name}" has an empty \`${prop}\` (design-md-spec §1.5)`, `fill \`${prop}\` with a concrete value`));
+        violations.push(violation8("medium", "design-md.tokens.typography-shape", `typography token "${name}" has an empty \`${prop}\` (design-md-spec §1.5)`, `fill \`${prop}\` with a concrete value`));
       }
     }
   }
   if (groupIsMap("spacing")) {
     const spacing = fm.spacing;
     if (!Object.prototype.hasOwnProperty.call(spacing, "base")) {
-      violations.push(violation6("medium", "design-md.tokens.spacing-base", "spacing must declare the base unit as `base` (design-md-spec §2.4)", "add `base: 4px` (or 8px) to the spacing group"));
+      violations.push(violation8("medium", "design-md.tokens.spacing-base", "spacing must declare the base unit as `base` (design-md-spec §2.4)", "add `base: 4px` (or 8px) to the spacing group"));
     }
     for (const [name, value] of Object.entries(spacing)) {
       if (name !== "base" && name !== RAW_GROUP && !/^\d+$/.test(name)) {
-        violations.push(violation6("medium", "design-md.tokens.spacing-key", `spacing key "${name}" must be \`base\` or a numeric multiplier (design-md-spec §1.5)`, "use numeric scale-step keys or `base`"));
+        violations.push(violation8("medium", "design-md.tokens.spacing-key", `spacing key "${name}" must be \`base\` or a numeric multiplier (design-md-spec §1.5)`, "use numeric scale-step keys or `base`"));
       }
       if (typeof value === "string" && isPlaceholder(value)) {
         placeholder("spacing", name, value);
       } else if (typeof value !== "string" || !PX_RE.test(value)) {
-        violations.push(violation6("medium", "design-md.tokens.spacing-format", `spacing value "${name}" = "${String(value)}" is not a px length (design-md-spec §1.5)`, "use a pixel value like `4px`"));
+        violations.push(violation8("medium", "design-md.tokens.spacing-format", `spacing value "${name}" = "${String(value)}" is not a px length (design-md-spec §1.5)`, "use a pixel value like `4px`"));
       }
     }
   }
@@ -2614,12 +2972,12 @@ function validateDesignTokenFrontmatter(frontmatterText) {
     if (typeof value === "string" && isPlaceholder(value)) {
       placeholder("rounded", name, value);
     } else if (typeof value !== "string" || !PX_RE.test(value)) {
-      violations.push(violation6("medium", "design-md.tokens.rounded-format", `rounded value "${name}" = "${String(value)}" is not a px length (design-md-spec §1.5)`, "use a pixel value like `6px`"));
+      violations.push(violation8("medium", "design-md.tokens.rounded-format", `rounded value "${name}" = "${String(value)}" is not a px length (design-md-spec §1.5)`, "use a pixel value like `6px`"));
     }
   }
   for (const [name, value] of groupEntries("components")) {
     if (!isMap(value)) {
-      violations.push(violation6("medium", "design-md.tokens.components-shape", `component token "${name}" must be a map of properties (design-md-spec §2.8)`, "give it backgroundColor/textColor/typography/rounded/padding/height"));
+      violations.push(violation8("medium", "design-md.tokens.components-shape", `component token "${name}" must be a map of properties (design-md-spec §2.8)`, "give it backgroundColor/textColor/typography/rounded/padding/height"));
       continue;
     }
     for (const [prop, v] of Object.entries(value)) {
@@ -2635,7 +2993,7 @@ function validateDesignTokenFrontmatter(frontmatterText) {
       const [, refGroup, refKey] = ref;
       const resolves = REF_GROUPS.includes(refGroup) && groupIsMap(refGroup) && Object.prototype.hasOwnProperty.call(fm[refGroup], refKey);
       if (!resolves) {
-        violations.push(violation6("medium", "design-md.tokens.ref-unresolved", `component "${name}" references "${v}" which does not resolve to an active token in this frontmatter (design-md-spec §6 — {path} refs MUST trace back to a key)`, `add the referenced token or use a literal value`));
+        violations.push(violation8("medium", "design-md.tokens.ref-unresolved", `component "${name}" references "${v}" which does not resolve to an active token in this frontmatter (design-md-spec §6 — {path} refs MUST trace back to a key)`, `add the referenced token or use a literal value`));
       }
     }
   }
@@ -2647,7 +3005,7 @@ function assertLightDarkParity(lightFm, darkFm) {
   const light = parseDesignFrontmatter(lightFm);
   const dark = parseDesignFrontmatter(darkFm);
   if (light === null || dark === null) {
-    violations.push(violation6("medium", "design-md.parity.missing-frontmatter", `light/dark parity needs a YAML frontmatter in both files — ${light === null ? "DESIGN.md" : "DESIGN.dark.md"} has none (design-md-spec §4 rules 1–2)`, "add the fenced frontmatter to both theme files"));
+    violations.push(violation8("medium", "design-md.parity.missing-frontmatter", `light/dark parity needs a YAML frontmatter in both files — ${light === null ? "DESIGN.md" : "DESIGN.dark.md"} has none (design-md-spec §4 rules 1–2)`, "add the fenced frontmatter to both theme files"));
     return { ok: false, violations };
   }
   const activeKeys = (fm) => {
@@ -2665,12 +3023,12 @@ function assertLightDarkParity(lightFm, darkFm) {
   const darkKeys = activeKeys(dark);
   for (const key of lightKeys) {
     if (!darkKeys.has(key)) {
-      violations.push(violation6("medium", "design-md.parity.missing-dark", `token "${key}" is active in DESIGN.md but missing from DESIGN.dark.md — both files must define the same token set (design-md-spec §4 rule 3)`, "add the token to DESIGN.dark.md with a dark-appropriate value"));
+      violations.push(violation8("medium", "design-md.parity.missing-dark", `token "${key}" is active in DESIGN.md but missing from DESIGN.dark.md — both files must define the same token set (design-md-spec §4 rule 3)`, "add the token to DESIGN.dark.md with a dark-appropriate value"));
     }
   }
   for (const key of darkKeys) {
     if (!lightKeys.has(key)) {
-      violations.push(violation6("medium", "design-md.parity.missing-light", `token "${key}" is active in DESIGN.dark.md but missing from DESIGN.md — DESIGN.md is the SSOT for token names (design-md-spec §4 rules 3–4)`, "add the token to DESIGN.md, or remove it from the dark file"));
+      violations.push(violation8("medium", "design-md.parity.missing-light", `token "${key}" is active in DESIGN.dark.md but missing from DESIGN.md — DESIGN.md is the SSOT for token names (design-md-spec §4 rules 3–4)`, "add the token to DESIGN.md, or remove it from the dark file"));
     }
   }
   return { ok: violations.length === 0, violations };
@@ -2823,7 +3181,7 @@ function completenessLevel(frontmatterText, checklist) {
   const upgradeTo = candidate === undefined ? null : candidate;
   return { level, items, missing, placeholders, upgradeTo, bodyUnverified };
 }
-function violation7(severity, code, message, fix) {
+function violation9(severity, code, message, fix) {
   return { ok: false, severity, code, message, fix };
 }
 var AUDIT_STATUS_FIELDS = ["Priority", "Effort", "Risk", "Depends on", "Category", "Planned at"];
@@ -2853,14 +3211,14 @@ function validateAuditStatusBlocks(planText) {
   const violations = [];
   const blocks = parseStatusBlocks(planText);
   if (blocks.length === 0) {
-    violations.push(violation7("medium", "audit.status.missing-block", "no `## Status` block found — audit plan files carry the Status block fields (mstar-audit SKILL § Plan files)", "add a `## Status` block with Priority, Effort, Risk, Depends on, Category, Planned at"));
+    violations.push(violation9("medium", "audit.status.missing-block", "no `## Status` block found — audit plan files carry the Status block fields (mstar-audit SKILL § Plan files)", "add a `## Status` block with Priority, Effort, Risk, Depends on, Category, Planned at"));
     return { ok: false, violations };
   }
   blocks.forEach((block, index) => {
     const label = blocks.length > 1 ? ` #${index + 1}` : "";
     for (const field of AUDIT_STATUS_FIELDS) {
       if (!block.fields.has(field)) {
-        violations.push(violation7("medium", "audit.status.missing-field", `Status block${label} missing required field "${field}" (mstar-audit SKILL § Plan files)`, `add \`- **${field}**: <value>\` to the Status block`));
+        violations.push(violation9("medium", "audit.status.missing-field", `Status block${label} missing required field "${field}" (mstar-audit SKILL § Plan files)`, `add \`- **${field}**: <value>\` to the Status block`));
       }
     }
     const check = (field, pattern, code, expected) => {
@@ -2868,7 +3226,7 @@ function validateAuditStatusBlocks(planText) {
       if (value === undefined)
         return;
       if (!pattern.test(value)) {
-        violations.push(violation7("medium", code, `Status block${label} "${field}" = "${value}" — expected ${expected} (mstar-audit SKILL § Plan files)`, `fix \`- **${field}**:\` to one of: ${expected}`));
+        violations.push(violation9("medium", code, `Status block${label} "${field}" = "${value}" — expected ${expected} (mstar-audit SKILL § Plan files)`, `fix \`- **${field}**:\` to one of: ${expected}`));
       }
     };
     check("Priority", /^P[123]$/, "audit.status.invalid-priority", "P1 | P2 | P3");
@@ -2948,7 +3306,7 @@ function redactSecrets(text, filePath) {
   const sorted = [...deduped.values()].sort((a, b) => a.line - b.line || a.type.localeCompare(b.type));
   return { text: out, findings: sorted };
 }
-function violation8(severity, code, message, fix) {
+function violation10(severity, code, message, fix) {
   return { ok: false, severity, code, message, fix };
 }
 var KNOWLEDGE_REQUIRED_FIELDS = ["module", "date", "problem_type", "category", "severity"];
@@ -3020,7 +3378,7 @@ var KNOWLEDGE_CATEGORY_MAP = {
   developer_experience: "developer-experience",
   documentation_gap: "documentation"
 };
-var DATE_RE3 = /^\d{4}-\d{2}-\d{2}$/;
+var DATE_RE5 = /^\d{4}-\d{2}-\d{2}$/;
 var isMap2 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
 function parseScalar2(raw) {
   const trimmed = raw.trim();
@@ -3113,36 +3471,36 @@ function validateSchemaYaml(frontmatterText) {
   const violations = [];
   const doc = parseYamlLite(frontmatterText);
   if (doc === null) {
-    violations.push(violation8("medium", "compound.schema.missing-frontmatter", "no `---` YAML frontmatter block found — knowledge docs must open with the schema.yaml contract (mstar-compound/references/schema.yaml)", "add the fenced frontmatter with module, date, problem_type, category, severity"));
+    violations.push(violation10("medium", "compound.schema.missing-frontmatter", "no `---` YAML frontmatter block found — knowledge docs must open with the schema.yaml contract (mstar-compound/references/schema.yaml)", "add the fenced frontmatter with module, date, problem_type, category, severity"));
     return { ok: false, violations };
   }
   const isStr = (v) => typeof v === "string";
-  const missing = (field) => violations.push(violation8("medium", "compound.schema.missing-field", `missing required frontmatter field "${field}" (schema.yaml required_fields)`, `add \`${field}: <value>\` to the frontmatter`));
+  const missing = (field) => violations.push(violation10("medium", "compound.schema.missing-field", `missing required frontmatter field "${field}" (schema.yaml required_fields)`, `add \`${field}: <value>\` to the frontmatter`));
   for (const field of KNOWLEDGE_REQUIRED_FIELDS) {
     if (!(field in doc) || doc[field] === "")
       missing(field);
   }
-  if (doc.date !== undefined && (!isStr(doc.date) || !DATE_RE3.test(doc.date))) {
-    violations.push(violation8("medium", "compound.schema.invalid-date", `date "${String(doc.date)}" must be a YYYY-MM-DD string (schema.yaml required_fields.date)`, "use `YYYY-MM-DD`"));
+  if (doc.date !== undefined && (!isStr(doc.date) || !DATE_RE5.test(doc.date))) {
+    violations.push(violation10("medium", "compound.schema.invalid-date", `date "${String(doc.date)}" must be a YYYY-MM-DD string (schema.yaml required_fields.date)`, "use `YYYY-MM-DD`"));
   }
   const problemType = doc.problem_type;
   if (problemType !== undefined && !isStr(problemType)) {
-    violations.push(violation8("medium", "compound.schema.invalid-problem-type", `problem_type "${String(problemType)}" must be a string — one of the schema.yaml enum values (bug: build_error…config_error; knowledge: developer_experience…testing_pattern)`, "pick the narrowest applicable problem_type from schema.yaml"));
+    violations.push(violation10("medium", "compound.schema.invalid-problem-type", `problem_type "${String(problemType)}" must be a string — one of the schema.yaml enum values (bug: build_error…config_error; knowledge: developer_experience…testing_pattern)`, "pick the narrowest applicable problem_type from schema.yaml"));
   }
   const problemTypeValid = isStr(problemType) && KNOWLEDGE_PROBLEM_TYPES.includes(problemType);
   if (isStr(problemType) && !problemTypeValid) {
-    violations.push(violation8("medium", "compound.schema.invalid-problem-type", `problem_type "${problemType}" is not one of the schema.yaml enum values (bug: build_error…config_error; knowledge: developer_experience…testing_pattern)`, "pick the narrowest applicable problem_type from schema.yaml"));
+    violations.push(violation10("medium", "compound.schema.invalid-problem-type", `problem_type "${problemType}" is not one of the schema.yaml enum values (bug: build_error…config_error; knowledge: developer_experience…testing_pattern)`, "pick the narrowest applicable problem_type from schema.yaml"));
   }
   if (doc.severity !== undefined && !isStr(doc.severity)) {
-    violations.push(violation8("medium", "compound.schema.invalid-severity", `severity "${String(doc.severity)}" must be a string — critical | high | medium | low (schema.yaml required_fields.severity)`, "use one of the four severity values"));
+    violations.push(violation10("medium", "compound.schema.invalid-severity", `severity "${String(doc.severity)}" must be a string — critical | high | medium | low (schema.yaml required_fields.severity)`, "use one of the four severity values"));
   }
   if (isStr(doc.severity) && !KNOWLEDGE_SEVERITIES.includes(doc.severity)) {
-    violations.push(violation8("medium", "compound.schema.invalid-severity", `severity "${doc.severity}" must be critical | high | medium | low (schema.yaml required_fields.severity)`, "use one of the four severity values"));
+    violations.push(violation10("medium", "compound.schema.invalid-severity", `severity "${doc.severity}" must be critical | high | medium | low (schema.yaml required_fields.severity)`, "use one of the four severity values"));
   }
   if (problemTypeValid && isStr(doc.category)) {
     const expected = KNOWLEDGE_CATEGORY_MAP[problemType];
     if (doc.category !== expected) {
-      violations.push(violation8("medium", "compound.schema.category-mismatch", `category "${doc.category}" does not match problem_type "${problemType}" — category-mapping.md rule 1 maps it to "${expected}"`, `set \`category: ${expected}\` (the directory name under {KNOWLEDGE_DIR})`));
+      violations.push(violation10("medium", "compound.schema.category-mismatch", `category "${doc.category}" does not match problem_type "${problemType}" — category-mapping.md rule 1 maps it to "${expected}"`, `set \`category: ${expected}\` (the directory name under {KNOWLEDGE_DIR})`));
     }
   }
   if (problemTypeValid) {
@@ -3150,37 +3508,37 @@ function validateSchemaYaml(frontmatterText) {
     if (isBug) {
       for (const field of ["symptoms", "root_cause", "resolution_type"]) {
         if (!(field in doc)) {
-          violations.push(violation8("medium", "compound.schema.missing-track-field", `bug-track doc missing required field "${field}" (schema.yaml track_rules.bug)`, `add \`${field}:\` to the frontmatter`));
+          violations.push(violation10("medium", "compound.schema.missing-track-field", `bug-track doc missing required field "${field}" (schema.yaml track_rules.bug)`, `add \`${field}:\` to the frontmatter`));
         }
       }
       if (doc.symptoms !== undefined && !Array.isArray(doc.symptoms)) {
-        violations.push(violation8("medium", "compound.schema.invalid-symptoms", "bug-track `symptoms` must be a YAML list (schema.yaml track_rules.bug)", "list the observable symptoms under `symptoms:`"));
+        violations.push(violation10("medium", "compound.schema.invalid-symptoms", "bug-track `symptoms` must be a YAML list (schema.yaml track_rules.bug)", "list the observable symptoms under `symptoms:`"));
       }
       if (doc.root_cause !== undefined && !isStr(doc.root_cause)) {
-        violations.push(violation8("medium", "compound.schema.invalid-root-cause", "bug-track `root_cause` must be a string (schema.yaml track_rules.bug)", "write the fundamental technical cause as a string"));
+        violations.push(violation10("medium", "compound.schema.invalid-root-cause", "bug-track `root_cause` must be a string (schema.yaml track_rules.bug)", "write the fundamental technical cause as a string"));
       }
       if (isStr(doc.resolution_type) && !KNOWLEDGE_RESOLUTION_TYPES.includes(doc.resolution_type)) {
-        violations.push(violation8("medium", "compound.schema.invalid-resolution-type", `resolution_type "${doc.resolution_type}" is not one of the schema.yaml track_rules.bug enum values`, "use code_fix | migration | config_change | test_fix | dependency_update | environment_setup | workflow_improvement | documentation_update | tooling_addition"));
+        violations.push(violation10("medium", "compound.schema.invalid-resolution-type", `resolution_type "${doc.resolution_type}" is not one of the schema.yaml track_rules.bug enum values`, "use code_fix | migration | config_change | test_fix | dependency_update | environment_setup | workflow_improvement | documentation_update | tooling_addition"));
       }
     } else if (doc.applies_when !== undefined && !Array.isArray(doc.applies_when)) {
-      violations.push(violation8("low", "compound.schema.invalid-applies-when", "knowledge-track `applies_when` must be a YAML list when present (schema.yaml track_rules.knowledge)", "list the conditions under `applies_when:`"));
+      violations.push(violation10("low", "compound.schema.invalid-applies-when", "knowledge-track `applies_when` must be a YAML list when present (schema.yaml track_rules.knowledge)", "list the conditions under `applies_when:`"));
     }
   }
   if (doc.plan_id !== undefined && !isStr(doc.plan_id)) {
-    violations.push(violation8("low", "compound.schema.invalid-plan-id", "optional `plan_id` must be a string (schema.yaml optional_fields.plan_id)", "reference the status.json plan id as a string"));
+    violations.push(violation10("low", "compound.schema.invalid-plan-id", "optional `plan_id` must be a string (schema.yaml optional_fields.plan_id)", "reference the status.json plan id as a string"));
   }
   if (doc.tags !== undefined) {
     if (!Array.isArray(doc.tags)) {
-      violations.push(violation8("low", "compound.schema.invalid-tags", "optional `tags` must be a YAML list (schema.yaml optional_fields.tags)", "list lowercase, hyphen-separated keywords"));
+      violations.push(violation10("low", "compound.schema.invalid-tags", "optional `tags` must be a YAML list (schema.yaml optional_fields.tags)", "list lowercase, hyphen-separated keywords"));
     } else if (doc.tags.length > 8) {
-      violations.push(violation8("low", "compound.schema.tags-too-many", `tags has ${doc.tags.length} entries — max 8 (schema.yaml optional_fields.tags.max_items)`, "trim the tag list to at most 8 keywords"));
+      violations.push(violation10("low", "compound.schema.tags-too-many", `tags has ${doc.tags.length} entries — max 8 (schema.yaml optional_fields.tags.max_items)`, "trim the tag list to at most 8 keywords"));
     }
   }
-  if (doc.last_updated !== undefined && (!isStr(doc.last_updated) || !DATE_RE3.test(doc.last_updated))) {
-    violations.push(violation8("low", "compound.schema.invalid-last-updated", `last_updated "${String(doc.last_updated)}" must be YYYY-MM-DD (schema.yaml optional_fields.last_updated)`, "use `YYYY-MM-DD`"));
+  if (doc.last_updated !== undefined && (!isStr(doc.last_updated) || !DATE_RE5.test(doc.last_updated))) {
+    violations.push(violation10("low", "compound.schema.invalid-last-updated", `last_updated "${String(doc.last_updated)}" must be YYYY-MM-DD (schema.yaml optional_fields.last_updated)`, "use `YYYY-MM-DD`"));
   }
   if (doc.related_components !== undefined && !Array.isArray(doc.related_components)) {
-    violations.push(violation8("low", "compound.schema.invalid-related-components", "optional `related_components` must be a YAML list (schema.yaml optional_fields.related_components)", "list the other components involved"));
+    violations.push(violation10("low", "compound.schema.invalid-related-components", "optional `related_components` must be a YAML list (schema.yaml optional_fields.related_components)", "list the other components involved"));
   }
   return { ok: violations.length === 0, violations };
 }
@@ -3202,7 +3560,7 @@ function referenceExists(repoRoot, docText) {
     if (ref === "" || seen.has(ref))
       continue;
     seen.add(ref);
-    if (SCHEME_RE.test(ref) || ref.startsWith("{") || ref.startsWith("#") || ref.includes("*") || ref.includes("?") || ref.startsWith("~") || isAbsolute5(ref)) {
+    if (SCHEME_RE.test(ref) || ref.startsWith("{") || ref.startsWith("#") || ref.includes("*") || ref.includes("?") || ref.startsWith("~") || isAbsolute7(ref)) {
       continue;
     }
     if (ref.includes("/") || REF_EXT_RE.test(ref)) {
@@ -3221,7 +3579,7 @@ function referenceExists(repoRoot, docText) {
       const dir = stack.pop();
       let entries;
       try {
-        entries = readdirSync5(dir, { withFileTypes: true });
+        entries = readdirSync8(dir, { withFileTypes: true });
       } catch {
         continue;
       }
@@ -3230,7 +3588,7 @@ function referenceExists(repoRoot, docText) {
           break;
         if (entry.isDirectory()) {
           if (!WALK_SKIP_DIRS.has(entry.name))
-            stack.push(join8(dir, entry.name));
+            stack.push(join12(dir, entry.name));
         } else if (!entry.isSymbolicLink()) {
           const base = entry.name.replace(/\.(?:ts|tsx|js|jsx|mjs|cjs)$/, "");
           if (moduleNames.has(base))
@@ -3242,15 +3600,15 @@ function referenceExists(repoRoot, docText) {
   for (const { ref, isSymbol, module } of refs) {
     if (!isSymbol || module === undefined) {
       const candidate = ref.replace(LINE_SUFFIX_RE, "").replace(ANCHOR_RE, "");
-      if (existsSync5(resolve8(repoRoot, candidate))) {
+      if (existsSync6(resolve10(repoRoot, candidate))) {
         checked++;
       } else {
-        violations.push(violation8("medium", "compound.reference.missing-file", `referenced path \`${ref}\` does not exist under ${repoRoot} (compound-refresh Phase 2: referenced code still exists?)`, "update the doc to reference an existing path, or delete the stale reference"));
+        violations.push(violation10("medium", "compound.reference.missing-file", `referenced path \`${ref}\` does not exist under ${repoRoot} (compound-refresh Phase 2: referenced code still exists?)`, "update the doc to reference an existing path, or delete the stale reference"));
       }
     } else if (foundModules.has(module)) {
       checked++;
     } else {
-      violations.push(violation8("low", "compound.reference.module-missing", `symbol ref \`${ref}\` — heuristic: no ${module}.ts|tsx|js|jsx|mjs|cjs module file found under ${repoRoot} (compound-refresh Phase 2)`, "verify the module file exists, or update the reference"));
+      violations.push(violation10("low", "compound.reference.module-missing", `symbol ref \`${ref}\` — heuristic: no ${module}.ts|tsx|js|jsx|mjs|cjs module file found under ${repoRoot} (compound-refresh Phase 2)`, "verify the module file exists, or update the reference"));
     }
   }
   return { ok: violations.length === 0, violations, checked };
@@ -3262,18 +3620,18 @@ function collectKnowledgeDocs(dir) {
     const current = stack.pop();
     let entries;
     try {
-      entries = readdirSync5(current, { withFileTypes: true });
+      entries = readdirSync8(current, { withFileTypes: true });
     } catch {
       continue;
     }
     for (const entry of entries) {
       if (entry.isSymbolicLink())
         continue;
-      const full = join8(current, entry.name);
+      const full = join12(current, entry.name);
       if (entry.isDirectory()) {
         stack.push(full);
       } else if (entry.name.endsWith(".md") && entry.name !== "README.md" && entry.name !== "index.md") {
-        docs.push(relative2(dir, full).split(sep).join("/"));
+        docs.push(relative4(dir, full).split(sep3).join("/"));
       }
     }
   }
@@ -3289,14 +3647,14 @@ function normalizeIndexRef(cell) {
 }
 function assertIndexRows(knowledgeDir) {
   const violations = [];
-  const readmePath = join8(knowledgeDir, "README.md");
-  if (!existsSync5(readmePath)) {
-    violations.push(violation8("medium", "compound.index.missing-readme", `missing ${readmePath} — the knowledge index is required (mstar-compound Phase 6: every doc gets a README.md row)`, "create knowledge/README.md with a Document / Source Plan / Description / Status table"));
+  const readmePath = join12(knowledgeDir, "README.md");
+  if (!existsSync6(readmePath)) {
+    violations.push(violation10("medium", "compound.index.missing-readme", `missing ${readmePath} — the knowledge index is required (mstar-compound Phase 6: every doc gets a README.md row)`, "create knowledge/README.md with a Document / Source Plan / Description / Status table"));
     return { ok: false, violations };
   }
   const docs = collectKnowledgeDocs(knowledgeDir);
   const rows = new Set;
-  for (const line of readFileSync7(readmePath, "utf8").split(/\r?\n/)) {
+  for (const line of readFileSync10(readmePath, "utf8").split(/\r?\n/)) {
     if (!line.trim().startsWith("|"))
       continue;
     const cells = line.split("|").map((c) => c.trim());
@@ -3308,7 +3666,7 @@ function assertIndexRows(knowledgeDir) {
   }
   for (const doc of docs) {
     if (!rows.has(doc)) {
-      violations.push(violation8("medium", "compound.index.missing-row", `knowledge doc "${doc}" has no row in knowledge/README.md index (mstar-compound Phase 6 index obligations)`, `add a row \`| [<title>](${doc}) | <source plan> | <description> | <status> |\` to knowledge/README.md`));
+      violations.push(violation10("medium", "compound.index.missing-row", `knowledge doc "${doc}" has no row in knowledge/README.md index (mstar-compound Phase 6 index obligations)`, `add a row \`| [<title>](${doc}) | <source plan> | <description> | <status> |\` to knowledge/README.md`));
     }
   }
   return { ok: violations.length === 0, violations };
@@ -3317,24 +3675,24 @@ function isFileLikeRoot(root) {
   return /^[^.]*\.[A-Za-z0-9]{1,10}$/.test(basename4(root));
 }
 function scopeGuard(path, allowedRoots) {
-  const resolved = resolve8(path);
+  const resolved = resolve10(path);
   for (const root of allowedRoots) {
-    const r = resolve8(root);
+    const r = resolve10(root);
     if (isFileLikeRoot(r)) {
       if (resolved === r)
         return { ok: true, violations: [] };
-    } else if (resolved === r || resolved.startsWith(r + sep)) {
+    } else if (resolved === r || resolved.startsWith(r + sep3)) {
       return { ok: true, violations: [] };
     }
   }
   return {
     ok: false,
     violations: [
-      violation8("medium", "compound.scope.outside", `path "${path}" is outside the compound-refresh scope (allowed: ${allowedRoots.join(", ")}) — compound-refresh operates only on {HARNESS_DIR}/knowledge/**, {HARNESS_DIR}/knowledge/README.md, <repo-root>/CONCEPTS.md, {HARNESS_DIR}/status.json (mstar-compound-refresh SKILL.md § 产物与操作路径)`, "point the operation at one of the allowed paths")
+      violation10("medium", "compound.scope.outside", `path "${path}" is outside the compound-refresh scope (allowed: ${allowedRoots.join(", ")}) — compound-refresh operates only on {HARNESS_DIR}/knowledge/**, {HARNESS_DIR}/knowledge/README.md, <repo-root>/CONCEPTS.md, {HARNESS_DIR}/status.json (mstar-compound-refresh SKILL.md § 产物与操作路径)`, "point the operation at one of the allowed paths")
     ]
   };
 }
-function violation9(severity, code, message, fix) {
+function violation11(severity, code, message, fix) {
   return { ok: false, severity, code, message, fix };
 }
 var TASK_ARTIFACT_RE = /\btask-\d+(?:-(?:brief|report|fix-report|diff)|\.diff)\b/g;
@@ -3364,18 +3722,18 @@ function lintSkillFrontmatter(frontmatterText) {
   const violations = [];
   const fm = parseFrontmatter(frontmatterText);
   if (fm === null) {
-    violations.push(violation9("medium", "lint.frontmatter.missing", "no YAML frontmatter block found — a skill file must open with a `---` fenced frontmatter (mstar-skill-authoring § Frontmatter Contract)", "add a frontmatter block with `name` and `description` at the top of the file"));
+    violations.push(violation11("medium", "lint.frontmatter.missing", "no YAML frontmatter block found — a skill file must open with a `---` fenced frontmatter (mstar-skill-authoring § Frontmatter Contract)", "add a frontmatter block with `name` and `description` at the top of the file"));
     return { ok: false, violations };
   }
   const name = fm.name ?? "";
   if (name === "") {
-    violations.push(violation9("medium", "lint.frontmatter.name.missing", "frontmatter `name` is missing — required (mstar-skill-authoring § Frontmatter Contract)", "add `name: <lowercase-hyphen-id>` to the frontmatter"));
+    violations.push(violation11("medium", "lint.frontmatter.name.missing", "frontmatter `name` is missing — required (mstar-skill-authoring § Frontmatter Contract)", "add `name: <lowercase-hyphen-id>` to the frontmatter"));
   } else if (!/^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(name)) {
-    violations.push(violation9("medium", "lint.frontmatter.name.format", `frontmatter \`name\` must be lowercase-hyphen ("${name}") — e.g. example-skill (mstar-skill-authoring § Frontmatter Contract)`, "rename to a stable lowercase-hyphen id, e.g. `name: example-skill`"));
+    violations.push(violation11("medium", "lint.frontmatter.name.format", `frontmatter \`name\` must be lowercase-hyphen ("${name}") — e.g. example-skill (mstar-skill-authoring § Frontmatter Contract)`, "rename to a stable lowercase-hyphen id, e.g. `name: example-skill`"));
   }
   const description = fm.description ?? "";
   if (description === "") {
-    violations.push(violation9("medium", "lint.frontmatter.description.missing", "frontmatter `description` is missing — the trigger contract is required (mstar-skill-authoring § Frontmatter Contract)", "add a `description:` that states when the skill loads (symptoms, context, roles, exclusions)"));
+    violations.push(violation11("medium", "lint.frontmatter.description.missing", "frontmatter `description` is missing — the trigger contract is required (mstar-skill-authoring § Frontmatter Contract)", "add a `description:` that states when the skill loads (symptoms, context, roles, exclusions)"));
   } else {
     const stripped = description.replace(/`[^`]*`/g, " ").replace(/'[^']*'/g, " ").replace(/"[^"]*"/g, " ");
     let pronoun = null;
@@ -3386,15 +3744,15 @@ function lintSkillFrontmatter(frontmatterText) {
       break;
     }
     if (pronoun !== null) {
-      violations.push(violation9("low", "lint.frontmatter.description.person", `description uses first/second-person pronoun "${pronoun[0]}" — keep the trigger contract third person (mstar-skill-authoring § Frontmatter Contract)`, 'rewrite without I/we/you/my/our/your/us, e.g. "Use when the user asks …"'));
+      violations.push(violation11("low", "lint.frontmatter.description.person", `description uses first/second-person pronoun "${pronoun[0]}" — keep the trigger contract third person (mstar-skill-authoring § Frontmatter Contract)`, 'rewrite without I/we/you/my/our/your/us, e.g. "Use when the user asks …"'));
     }
     const start = description.trim().replace(/^[*_#>]+/, "").replace(/^["'`]+/, "").trim();
     if (WORKFLOW_VERB_START_RE.test(start)) {
-      violations.push(violation9("low", "lint.frontmatter.description.workflow", 'description reads as a workflow summary ("Explains/Describes/Covers …") — the description is the trigger contract, not a summary of steps (mstar-skill-authoring § Frontmatter Contract)', "describe when to load the skill (symptoms, context, roles, exclusions) instead of summarizing its steps"));
+      violations.push(violation11("low", "lint.frontmatter.description.workflow", 'description reads as a workflow summary ("Explains/Describes/Covers …") — the description is the trigger contract, not a summary of steps (mstar-skill-authoring § Frontmatter Contract)', "describe when to load the skill (symptoms, context, roles, exclusions) instead of summarizing its steps"));
     } else {
       const words = description.trim().split(/\s+/).filter(Boolean).length;
       if (words > DESCRIPTION_MAX_WORDS) {
-        violations.push(violation9("low", "lint.frontmatter.description.workflow", `description is ${words} words — paragraph-length summaries bury the trigger contract (threshold ${DESCRIPTION_MAX_WORDS}, above the longest corpus description at 114 words, mstar-design-md; mstar-skill-authoring § Frontmatter Contract)`, "trim the description to a scannable trigger contract and move detail into the body"));
+        violations.push(violation11("low", "lint.frontmatter.description.workflow", `description is ${words} words — paragraph-length summaries bury the trigger contract (threshold ${DESCRIPTION_MAX_WORDS}, above the longest corpus description at 114 words, mstar-design-md; mstar-skill-authoring § Frontmatter Contract)`, "trim the description to a scannable trigger contract and move detail into the body"));
       }
     }
   }
@@ -3422,7 +3780,7 @@ function parseFrontmatter(text) {
     return null;
   return fields;
 }
-function violation10(severity, code, message, fix) {
+function violation12(severity, code, message, fix) {
   return { ok: false, severity, code, message, fix };
 }
 var ROLE_MAPPING = [
@@ -3477,19 +3835,19 @@ function validateRoleMapping(rolesDir, options = {}) {
   const violations = [];
   const referenceById = new Map(mapping.map((m) => [m.agentId, m.reference]));
   for (const { agentId, reference } of mapping) {
-    if (!existsSync6(join9(rolesDir, reference))) {
-      violations.push(violation10("medium", "roles.mapping.reference.missing", `role "${agentId}" maps to ${reference} which does not exist under ${rolesDir} (mstar-roles § Role Reference Mapping)`, `create ${join9(rolesDir, reference)} or fix the mapping row`));
+    if (!existsSync7(join13(rolesDir, reference))) {
+      violations.push(violation12("medium", "roles.mapping.reference.missing", `role "${agentId}" maps to ${reference} which does not exist under ${rolesDir} (mstar-roles § Role Reference Mapping)`, `create ${join13(rolesDir, reference)} or fix the mapping row`));
     }
   }
   for (const { family, memberIds } of families) {
     const absent = memberIds.filter((id) => !referenceById.has(id));
     for (const id of absent) {
-      violations.push(violation10("medium", "roles.mapping.family.member.missing", `shared family "${family}" member "${id}" is absent from the role mapping (mstar-roles § Role Reference Mapping)`, `add "${id}" to the mapping`));
+      violations.push(violation12("medium", "roles.mapping.family.member.missing", `shared family "${family}" member "${id}" is absent from the role mapping (mstar-roles § Role Reference Mapping)`, `add "${id}" to the mapping`));
     }
     if (absent.length === 0) {
       const refs = new Set(memberIds.map((id) => referenceById.get(id)));
       if (refs.size !== 1) {
-        violations.push(violation10("medium", "roles.mapping.family.shared", `shared family "${family}" (${memberIds.join(", ")}) must resolve to ONE shared reference file — got ${[...refs].join(", ")} (mstar-roles § Maintenance Rules: "Keep shared-family roles on one shared reference file")`, `point every "${family}" member at the same references/<role>-shared.md`));
+        violations.push(violation12("medium", "roles.mapping.family.shared", `shared family "${family}" (${memberIds.join(", ")}) must resolve to ONE shared reference file — got ${[...refs].join(", ")} (mstar-roles § Maintenance Rules: "Keep shared-family roles on one shared reference file")`, `point every "${family}" member at the same references/<role>-shared.md`));
       }
     }
   }
@@ -3498,12 +3856,12 @@ function validateRoleMapping(rolesDir, options = {}) {
     for (const row of rows) {
       const existing = tableByRole.get(row.roleId);
       if (existing !== undefined) {
-        violations.push(violation10("medium", "roles.param.role.duplicate", `role "${row.roleId}" appears in both the ${existing} and ${table} parameter rows (mstar-roles § Parameter Table (SSOT))`, "remove the duplicate row"));
+        violations.push(violation12("medium", "roles.param.role.duplicate", `role "${row.roleId}" appears in both the ${existing} and ${table} parameter rows (mstar-roles § Parameter Table (SSOT))`, "remove the duplicate row"));
       } else {
         tableByRole.set(row.roleId, table);
       }
       if (!referenceById.has(row.roleId)) {
-        violations.push(violation10("medium", "roles.param.role.missing", `${table} parameter row references unknown role "${row.roleId}" (mstar-roles § Parameter Table (SSOT))`, `add "${row.roleId}" to the role mapping or drop the row`));
+        violations.push(violation12("medium", "roles.param.role.missing", `${table} parameter row references unknown role "${row.roleId}" (mstar-roles § Parameter Table (SSOT))`, `add "${row.roleId}" to the role mapping or drop the row`));
       }
     }
   };
@@ -3511,20 +3869,20 @@ function validateRoleMapping(rolesDir, options = {}) {
   checkParamRoles(qcReviewers, "QC reviewer");
   for (const row of devTrack) {
     if (row.track !== "primary" && row.track !== "parallel_secondary") {
-      violations.push(violation10("medium", "roles.param.track", `dev track for "${row.roleId}" is "${String(row.track)}" — must be primary or parallel_secondary (mstar-roles § Parameter Table (SSOT))`, 'set track to "primary" or "parallel_secondary"'));
+      violations.push(violation12("medium", "roles.param.track", `dev track for "${row.roleId}" is "${String(row.track)}" — must be primary or parallel_secondary (mstar-roles § Parameter Table (SSOT))`, 'set track to "primary" or "parallel_secondary"'));
     }
   }
   const indices = qcReviewers.map((r) => r.reviewerIndex).sort((a, b) => a - b);
   const unique = new Set(indices);
   if (indices.length !== 3 || unique.size !== 3 || indices[0] !== 1 || indices[1] !== 2 || indices[2] !== 3) {
-    violations.push(violation10("high", "roles.param.qc.index.set", `QC reviewer_index must be exactly {1, 2, 3} across the three qc-specialist* seats — got [${indices.join(", ")}] (mstar-roles § Parameter Table (SSOT))`, "assign reviewer_index 1/2/3 to qc-specialist / qc-specialist-2 / qc-specialist-3"));
+    violations.push(violation12("high", "roles.param.qc.index.set", `QC reviewer_index must be exactly {1, 2, 3} across the three qc-specialist* seats — got [${indices.join(", ")}] (mstar-roles § Parameter Table (SSOT))`, "assign reviewer_index 1/2/3 to qc-specialist / qc-specialist-2 / qc-specialist-3"));
   }
   for (const row of qcReviewers) {
     if (row.focus.trim() === "") {
-      violations.push(violation10("medium", "roles.param.qc.focus.missing", `QC seat "${row.roleId}" (reviewer_index ${row.reviewerIndex}) has an empty focus (mstar-roles § Parameter Table (SSOT))`, "add the review focus"));
+      violations.push(violation12("medium", "roles.param.qc.focus.missing", `QC seat "${row.roleId}" (reviewer_index ${row.reviewerIndex}) has an empty focus (mstar-roles § Parameter Table (SSOT))`, "add the review focus"));
     }
     if (row.reportSuffix !== `qc${row.reviewerIndex}`) {
-      violations.push(violation10("medium", "roles.param.qc.suffix", `QC seat "${row.roleId}" report_suffix "${row.reportSuffix}" must equal qc${row.reviewerIndex} — tri reports land at {SDD_DIR}/review/qc1.md…qc3.md (mstar-roles § Parameter Table (SSOT))`, `set report_suffix to qc${row.reviewerIndex}`));
+      violations.push(violation12("medium", "roles.param.qc.suffix", `QC seat "${row.roleId}" report_suffix "${row.reportSuffix}" must equal qc${row.reviewerIndex} — tri reports land at {SDD_DIR}/review/qc1.md…qc3.md (mstar-roles § Parameter Table (SSOT))`, `set report_suffix to qc${row.reviewerIndex}`));
     }
   }
   return { ok: violations.length === 0, violations };
@@ -3563,11 +3921,11 @@ function lintLoadOrder(skillTexts) {
       continue;
     const section = extractLoadOrderSection(text);
     if (section === null) {
-      violations.push(violation10("medium", "roles.loadorder.section.missing", `skill "${name}" has no Load Order / First action section — every mstar-* topic skill must declare its first read (mstar-harness-core § 加载约定; mstar-roles § Load Order (Required))`, `add a "## Load Order" section naming mstar-harness-core as the first read`));
+      violations.push(violation12("medium", "roles.loadorder.section.missing", `skill "${name}" has no Load Order / First action section — every mstar-* topic skill must declare its first read (mstar-harness-core § 加载约定; mstar-roles § Load Order (Required))`, `add a "## Load Order" section naming mstar-harness-core as the first read`));
       continue;
     }
     if (!section.includes("mstar-harness-core")) {
-      violations.push(violation10("medium", "roles.loadorder.core.missing", `skill "${name}" Load Order section does not declare mstar-harness-core as its first dependency (mstar-harness-core § 加载约定: 凡 mstar-*（name ≠ mstar-harness-core）假定读者已 Read 本 skill)`, "name mstar-harness-core first in the Load Order section"));
+      violations.push(violation12("medium", "roles.loadorder.core.missing", `skill "${name}" Load Order section does not declare mstar-harness-core as its first dependency (mstar-harness-core § 加载约定: 凡 mstar-*（name ≠ mstar-harness-core）假定读者已 Read 本 skill)`, "name mstar-harness-core first in the Load Order section"));
     }
   }
   return { ok: violations.length === 0, violations };
@@ -3593,7 +3951,7 @@ function resolveSkillRoot(host, paths) {
       return `deferred: pi has no plugin API in v1 — skill-root resolution lands with its adapter (roadmap §8.4)`;
   }
 }
-function violation11(severity, code, message, fix) {
+function violation13(severity, code, message, fix) {
   return { ok: false, severity, code, message, fix };
 }
 var FIVE_QUESTION_SECTIONS = [
@@ -3643,7 +4001,7 @@ function lintFiveQuestion(bodyText, mode = "authoring") {
     const aliases = mode === "runtime" ? RUNTIME_HEADING_ALIASES[section.key] ?? [] : [];
     const covered = headings.some((heading) => heading.includes(label) || aliases.some((alias) => heading.includes(alias)));
     if (!covered) {
-      violations.push(violation11("low", `skill-authoring.five-question.${section.key}`, `body does not answer "${section.question}" — no "${section.label}" section (mstar-skill-authoring § Body 必须回答的 5 问 / § 默认 Body 结构)`, `add a "## ${section.label}" section covering ${section.question}`));
+      violations.push(violation13("low", `skill-authoring.five-question.${section.key}`, `body does not answer "${section.question}" — no "${section.label}" section (mstar-skill-authoring § Body 必须回答的 5 问 / § 默认 Body 结构)`, `add a "## ${section.label}" section covering ${section.question}`));
     }
   }
   return { ok: violations.length === 0, violations };
@@ -3669,8 +4027,8 @@ class DshMstar extends Service {
   validateResidual(entry) {
     return validateResidual(entry);
   }
-  findingsCleanupGate(doc, planId, opts) {
-    return findingsCleanupGate(doc, planId, opts);
+  findingsCleanupGate(register, planId, opts) {
+    return findingsCleanupGate(register, planId, opts);
   }
   resolveCompassEnforcement(harnessDir) {
     return resolveCompassEnforcement(harnessDir);
@@ -3688,8 +4046,8 @@ class DshMstar extends Service {
 
 // src/gates/_shared.ts
 var import_schemastery = __toESM(require_lib2(), 1);
-import { existsSync as existsSync7 } from "node:fs";
-import { resolve as resolve7 } from "node:path";
+import { existsSync as existsSync5 } from "node:fs";
+import { resolve as resolve8 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 var STATUS_FILE = "status.json";
 var PERSONA_INTERPOLATION_HAZARD = /\{\{[\s\S]*\}\}/;
@@ -3726,8 +4084,8 @@ var Config = import_schemastery.default.object({
   workflowNames: import_schemastery.default.array(import_schemastery.default.string()).default(undefined),
   maxGoalRounds: import_schemastery.default.number().default(undefined)
 });
-function formatViolation(violation12) {
-  return `[${violation12.severity}] ${violation12.code}: ${violation12.message}${violation12.fix !== undefined ? ` (fix: ${violation12.fix})` : ""}`;
+function formatViolation(violation14) {
+  return `[${violation14.severity}] ${violation14.code}: ${violation14.message}${violation14.fix !== undefined ? ` (fix: ${violation14.fix})` : ""}`;
 }
 function asRecord(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value) ? value : undefined;
@@ -3737,13 +4095,13 @@ function resolveSeamHard(harnessDir, config) {
     return true;
   if (config.enforcement === "soft")
     return false;
-  return harnessDir !== null && resolveCompassEnforcement(harnessDir).hard;
+  return harnessDir !== null && resolveRepoEnforcement(harnessDir).hard;
 }
 function resolvePackagedSkillsDir(fileUrl) {
   for (const rel of ["../harness-skills", "../../harness-skills"]) {
     try {
       const dir = fileURLToPath2(new URL(rel, fileUrl));
-      if (existsSync7(dir))
+      if (existsSync5(dir))
         return dir;
     } catch {}
   }
@@ -3762,7 +4120,7 @@ function resolvePackagedAgentsDir(fileUrl) {
   for (const rel of ["../harness-agents", "../../harness-agents"]) {
     try {
       const dir = fileURLToPath2(new URL(rel, fileUrl));
-      if (existsSync7(dir))
+      if (existsSync5(dir))
         return dir;
     } catch {}
   }
@@ -3782,14 +4140,14 @@ class HarnessResolver {
   explicit;
   cache = new Map;
   constructor(explicit) {
-    this.explicit = explicit !== undefined && explicit.trim() !== "" ? resolve7(process.cwd(), explicit) : null;
+    this.explicit = explicit !== undefined && explicit.trim() !== "" ? resolve8(process.cwd(), explicit) : null;
   }
   forWorkspace(cwd) {
     if (this.explicit !== null)
       return this.explicit;
     if (cwd === undefined || cwd.trim() === "")
       return null;
-    const abs = resolve7(cwd);
+    const abs = resolve8(cwd);
     const hit = this.cache.get(abs);
     if (hit !== undefined)
       return hit;
@@ -3821,27 +4179,161 @@ function skillLocalConfig(config) {
   if ((customSkillDirs === undefined || customSkillDirs.length === 0) && bundledSkillDir === undefined) {
     return;
   }
-  return {
-    providerName: "mstar",
-    includeDefaultRoots: false,
-    ...customSkillDirs !== undefined && customSkillDirs.length > 0 ? { customSkillDirs } : {},
-    ...bundledSkillDir !== undefined ? { bundledSkillDir } : {}
-  };
+  return {
+    providerName: "mstar",
+    includeDefaultRoots: false,
+    ...customSkillDirs !== undefined && customSkillDirs.length > 0 ? { customSkillDirs } : {},
+    ...bundledSkillDir !== undefined ? { bundledSkillDir } : {}
+  };
+}
+
+// src/gates/catalog.ts
+import { existsSync as existsSync12, readFileSync as readFileSync9, readdirSync as readdirSync7 } from "node:fs";
+import { join as join11 } from "node:path";
+import { createUserMessage } from "@deepseek-ai/dsh-llm";
+
+// src/gates/agent-flow.ts
+import { appendFileSync, closeSync, existsSync as existsSync11, mkdirSync as mkdirSync3, openSync, readFileSync as readFileSync7, readSync, renameSync as renameSync2, rmdirSync, statSync as statSync5, unlinkSync as unlinkSync2, writeFileSync as writeFileSync2 } from "node:fs";
+import { join as join10 } from "node:path";
+
+// src/gates/dispatch.ts
+import { existsSync as existsSync10 } from "node:fs";
+import { basename as basename5, join as join8, resolve as resolve11 } from "node:path";
+
+// src/gates/workflow-selection.ts
+import { existsSync as existsSync8, readdirSync as readdirSync5, statSync as statSync3 } from "node:fs";
+import { join as join5, relative as relative3 } from "node:path";
+var TERMINAL_STATUS_CACHE_MAX = 64;
+var terminalStatusCache = new Map;
+function terminalStatusOf(snapshotPath) {
+  let mtimeMs;
+  try {
+    mtimeMs = statSync3(snapshotPath).mtimeMs;
+  } catch {
+    return;
+  }
+  const cached = terminalStatusCache.get(snapshotPath);
+  if (cached !== undefined && cached.mtimeMs === mtimeMs)
+    return cached;
+  let terminal = false;
+  try {
+    const snapshot = readJson(snapshotPath);
+    const status = snapshot.status;
+    terminal = typeof status === "string" && WORKFLOW_TERMINAL_STATUSES.includes(status);
+  } catch {
+    return;
+  }
+  const verdict = { mtimeMs, terminal };
+  terminalStatusCache.set(snapshotPath, verdict);
+  while (terminalStatusCache.size > TERMINAL_STATUS_CACHE_MAX) {
+    const oldest = terminalStatusCache.keys().next().value;
+    if (oldest === undefined)
+      break;
+    terminalStatusCache.delete(oldest);
+  }
+  return verdict;
+}
+function resolveActiveWorkflow(harnessDir) {
+  const statusPath = join5(harnessDir, STATUS_FILE);
+  if (!existsSync8(statusPath)) {
+    return {
+      kind: "error",
+      code: "status.missing",
+      message: `no ${STATUS_FILE} at ${harnessDir} — the root v2 document is required`
+    };
+  }
+  let doc;
+  try {
+    doc = readJson(statusPath);
+  } catch {
+    return { kind: "error", code: "status.unreadable", message: `cannot read ${statusPath}` };
+  }
+  if (doc.version !== 2) {
+    return {
+      kind: "error",
+      code: "status.migration-required",
+      message: `status.json schema version 2 required — got ${JSON.stringify(doc.version)} (v1 or unknown version); run \`mstar migrate\` to convert the tree`
+    };
+  }
+  if (!Array.isArray(doc.workflows) || doc.workflows.length === 0) {
+    return {
+      kind: "error",
+      code: "workflow.selection.no-active",
+      message: "no active lifecycle in status.json workflows[] — the agent-flow writer appends only to an active lifecycle"
+    };
+  }
+  const first = doc.workflows[0];
+  const entry = asRecord(first);
+  const workflowId = typeof entry?.id === "string" ? entry.id : undefined;
+  const dir = typeof entry?.dir === "string" ? entry.dir : undefined;
+  if (workflowId === undefined || dir === undefined) {
+    return {
+      kind: "error",
+      code: "workflow.selection.invalid-entry",
+      message: `workflows[] first entry is missing id/dir: ${JSON.stringify(first)}`
+    };
+  }
+  if (doc.workflows.length > 1) {
+    return {
+      kind: "active",
+      workflowId,
+      dir,
+      warning: {
+        code: "workflow.selection.multi-active",
+        message: `${doc.workflows.length} active lifecycles in status.json workflows[] — selected the first (${workflowId}); no silent pick`
+      }
+    };
+  }
+  return { kind: "active", workflowId, dir };
+}
+function resolveReadWorkflow(harnessDir) {
+  const active = resolveActiveWorkflow(harnessDir);
+  if (active.kind === "active")
+    return active;
+  if (active.kind === "error" && active.code !== "workflow.selection.no-active")
+    return active;
+  const workflowsDir = resolveWorkflowDir(harnessDir, { harnessDir });
+  if (!existsSync8(workflowsDir)) {
+    return {
+      kind: "error",
+      code: "workflow.selection.no-snapshot",
+      message: `no workflow snapshots under ${workflowsDir} — run \`mstar migrate\` or start a lifecycle`
+    };
+  }
+  let entries;
+  try {
+    entries = readdirSync5(workflowsDir, { withFileTypes: true });
+  } catch {
+    return {
+      kind: "error",
+      code: "workflow.selection.no-snapshot",
+      message: `cannot read ${workflowsDir} — no workflow snapshot selected`
+    };
+  }
+  let best;
+  for (const entry of entries) {
+    if (!entry.isDirectory())
+      continue;
+    const snapshotPath = join5(workflowsDir, entry.name, WORKFLOW_SNAPSHOT_FILE);
+    if (!existsSync8(snapshotPath))
+      continue;
+    const verdict = terminalStatusOf(snapshotPath);
+    if (verdict === undefined || !verdict.terminal)
+      continue;
+    if (best === undefined || verdict.mtimeMs > best.mtimeMs) {
+      best = { workflowId: entry.name, dir: join5(relative3(harnessDir, workflowsDir), entry.name), mtimeMs: verdict.mtimeMs };
+    }
+  }
+  if (best === undefined) {
+    return {
+      kind: "error",
+      code: "workflow.selection.no-snapshot",
+      message: `no terminal workflow snapshot under ${workflowsDir} — run \`mstar migrate\` or start a lifecycle`
+    };
+  }
+  return { kind: "terminal", workflowId: best.workflowId, dir: best.dir };
 }
 
-// src/gates/catalog.ts
-import { existsSync as existsSync11, readFileSync as readFileSync8, readdirSync as readdirSync4 } from "node:fs";
-import { join as join12 } from "node:path";
-import { createUserMessage } from "@deepseek-ai/dsh-llm";
-
-// src/gates/agent-flow.ts
-import { appendFileSync, existsSync as existsSync10, readFileSync as readFileSync6, renameSync as renameSync2, statSync as statSync2, writeFileSync as writeFileSync2 } from "node:fs";
-import { join as join10 } from "node:path";
-
-// src/gates/dispatch.ts
-import { existsSync as existsSync9 } from "node:fs";
-import { basename as basename5, join as join6, resolve as resolve9 } from "node:path";
-
 // src/gates/workflow-policy.ts
 var WORKFLOW_NAME_UNKNOWN_CODE = "workflow.name.unknown";
 var WORKFLOW_LEASE_UNCOVERED_CODE = "workflow.lease.uncovered";
@@ -3946,7 +4438,7 @@ function resolveDispatchHard(harnessDir, config, assignmentText) {
     return false;
   if (parseEnforcementFlag(assignmentHeaderRegion(assignmentText)).hard)
     return true;
-  return harnessDir !== null && resolveCompassEnforcement(harnessDir).hard;
+  return harnessDir !== null && resolveRepoEnforcement(harnessDir).hard;
 }
 function denyReason(tool, verdict) {
   return [
@@ -4016,25 +4508,34 @@ function leaseGateViolations(harnessDir, exec, writable, prompt) {
   const planId = planIdOf(header);
   if (planId === undefined || planId === "")
     return [];
-  const statusPath = join6(harnessDir, STATUS_FILE);
-  if (!existsSync9(statusPath)) {
+  const selection = resolveActiveWorkflow(harnessDir);
+  if (selection.kind !== "active") {
     if (!sdd)
       return [];
-    return [leaseViolation("lease.dispatch.unverifiable", `${statusPath} is missing — the plan's execution_lease state is unverifiable; STOP before writable dispatch`, "create a valid status.json registering the plan row (first implement dispatch requires a plan row)")];
+    if (selection.kind === "error" && selection.code === "status.unreadable") {
+      return [leaseViolation("lease.dispatch.unreadable", `cannot read ${join8(harnessDir, STATUS_FILE)}: the plan's execution_lease state is unverifiable; STOP before writable dispatch`, "restore a valid status.json (the status gate refuses invalid writes)")];
+    }
+    return [leaseViolation("lease.dispatch.unverifiable", `${join8(harnessDir, STATUS_FILE)}: ${selection.kind === "error" ? selection.message : "no active workflow"} — the plan's execution_lease state is unverifiable; STOP before writable dispatch`, "create a valid v2 status.json registering an active workflow (first implement dispatch requires a plan row + lease)")];
   }
-  let doc;
+  const snapshotPath = join8(harnessDir, selection.dir, WORKFLOW_SNAPSHOT_FILE);
+  if (!existsSync10(snapshotPath)) {
+    if (!sdd)
+      return [];
+    return [leaseViolation("lease.dispatch.unverifiable", `${snapshotPath} is missing — the plan's execution_lease state is unverifiable; STOP before writable dispatch`, "create a valid workflow snapshot registering the plan row (first implement dispatch requires a plan row)")];
+  }
+  let snapshot;
   try {
-    doc = readJson(statusPath);
+    snapshot = readJson(snapshotPath);
   } catch (error) {
     if (!sdd)
       return [];
-    return [leaseViolation("lease.dispatch.unreadable", `cannot read ${statusPath}: ${error.message} — the plan's execution_lease state is unverifiable; STOP before writable dispatch`, "restore a valid status.json (the status gate refuses invalid writes)")];
+    return [leaseViolation("lease.dispatch.unreadable", `cannot read ${snapshotPath}: ${error.message} — the plan's execution_lease state is unverifiable; STOP before writable dispatch`, "restore a valid workflow snapshot (the status gate refuses invalid writes)")];
   }
-  const row = Array.isArray(doc.plans) ? doc.plans.map(asRecord).find((r) => r?.id === planId || r?.plan_id === planId) : undefined;
+  const row = Array.isArray(snapshot.plans) ? snapshot.plans.map(asRecord).find((r) => r?.id === planId || r?.plan_id === planId) : undefined;
   if (row === undefined) {
     if (!sdd)
       return [];
-    return [leaseViolation("lease.dispatch.plan-not-found", `plan ${planId} is not registered in ${STATUS_FILE} — cannot verify its execution_lease before writable dispatch`, "register the plan row in status.json (first implement dispatch requires a plan row)")];
+    return [leaseViolation("lease.dispatch.plan-not-found", `plan ${planId} is not registered in ${snapshotPath} — cannot verify its execution_lease before writable dispatch`, "register the plan row in the workflow snapshot (first implement dispatch requires a plan row)")];
   }
   if (!sdd && row.status !== "InProgress")
     return [];
@@ -4050,7 +4551,7 @@ function leaseGateViolations(harnessDir, exec, writable, prompt) {
     const wt = worktree === undefined ? undefined : firstToken(worktree);
     if (isNaValue(wt)) {
       violations.push(leaseViolation("lease.dispatch.worktree-mismatch", "Assignment declares no Worktree path — cannot confirm this dispatch matches execution_lease.worktree_path", "add the absolute Worktree path to the Assignment (must equal the lease worktree_path)"));
-    } else if (resolve9(wt) !== resolve9(String(lease.worktree_path ?? ""))) {
+    } else if (resolve11(wt) !== resolve11(String(lease.worktree_path ?? ""))) {
       violations.push(leaseViolation("lease.dispatch.worktree-mismatch", `Assignment Worktree path "${wt}" differs from execution_lease.worktree_path "${String(lease.worktree_path)}"`, "align the Assignment with the lease worktree path (or update the lease)"));
     }
     const forms = parseAssignmentBranchForms(header);
@@ -4090,26 +4591,45 @@ function worktreeL2Violations(header) {
   violations.push(...l2PreDispatchCheck({ tracks }).violations);
   return violations;
 }
+function activeSnapshotRows(harnessDir) {
+  if (!existsSync10(join8(harnessDir, STATUS_FILE)))
+    return { rows: null, controlWorktreePath: undefined, unreadable: false };
+  const selection = resolveActiveWorkflow(harnessDir);
+  if (selection.kind !== "active") {
+    return {
+      rows: null,
+      controlWorktreePath: undefined,
+      unreadable: selection.kind === "error" && selection.code !== "workflow.selection.no-active"
+    };
+  }
+  const snapshotPath = join8(harnessDir, selection.dir, WORKFLOW_SNAPSHOT_FILE);
+  if (!existsSync10(snapshotPath))
+    return { rows: null, controlWorktreePath: undefined, unreadable: true };
+  let doc;
+  try {
+    doc = readJson(snapshotPath);
+  } catch {
+    return { rows: null, controlWorktreePath: undefined, unreadable: true };
+  }
+  if (!Array.isArray(doc.plans))
+    return { rows: null, controlWorktreePath: undefined, unreadable: true };
+  const controlWorktreePath = typeof doc.control_worktree_path === "string" ? doc.control_worktree_path : undefined;
+  const rows = doc.plans.map((row) => asRecord(row)).filter((row) => row !== undefined);
+  return { rows, controlWorktreePath, unreadable: false };
+}
 function worktreeL1Violations(harnessDir, header) {
   if (harnessDir === null)
     return [];
   const planId = planIdOf(header);
   if (planId === undefined || planId === "")
     return [];
-  const statusPath = join6(harnessDir, STATUS_FILE);
-  if (!existsSync9(statusPath))
-    return [];
-  let doc;
-  try {
-    doc = readJson(statusPath);
-  } catch {
+  const read = activeSnapshotRows(harnessDir);
+  if (read.rows === null)
     return [];
-  }
-  const metadata = asRecord(doc.metadata);
-  const controlWorktreePath = typeof metadata?.control_worktree_path === "string" ? metadata.control_worktree_path : undefined;
+  const controlWorktreePath = read.controlWorktreePath;
   if (controlWorktreePath === undefined || controlWorktreePath.trim() === "")
     return [];
-  const row = Array.isArray(doc.plans) ? doc.plans.map(asRecord).find((r) => r?.id === planId || r?.plan_id === planId) : undefined;
+  const row = read.rows.find((r) => r?.id === planId || r?.plan_id === planId);
   const lease = asRecord(row?.execution_lease);
   const leaseWorktreePath = typeof lease?.worktree_path === "string" ? lease.worktree_path : undefined;
   const leaseWorkingBranch = typeof lease?.working_branch === "string" ? lease.working_branch : undefined;
@@ -4121,19 +4641,10 @@ function worktreeL1Violations(harnessDir, header) {
 function writableFanOutUncovered(harnessDir) {
   if (harnessDir === null)
     return { unreadable: false };
-  const statusPath = join6(harnessDir, STATUS_FILE);
-  if (!existsSync9(statusPath))
-    return { unreadable: false };
-  let doc;
-  try {
-    doc = readJson(statusPath);
-  } catch {
-    return { unreadable: true };
-  }
-  if (!Array.isArray(doc.plans))
-    return { unreadable: true };
-  for (const raw of doc.plans) {
-    const row = asRecord(raw);
+  const read = activeSnapshotRows(harnessDir);
+  if (read.rows === null)
+    return { unreadable: read.unreadable };
+  for (const row of read.rows) {
     if (row === undefined || row.status !== "InProgress")
       continue;
     const planId = typeof row.id === "string" && row.id !== "" ? row.id : typeof row.plan_id === "string" && row.plan_id !== "" ? row.plan_id : "in-progress-plan";
@@ -4182,7 +4693,7 @@ function gateWorkflow(ctx, harnessDir, config, adapter, exec) {
   }
   const pb = writableFanOutUncovered(harnessDir);
   if (pb.unreadable) {
-    const statusLabel = harnessDir === null ? STATUS_FILE : join6(harnessDir, STATUS_FILE);
+    const statusLabel = harnessDir === null ? STATUS_FILE : join8(harnessDir, STATUS_FILE);
     ctx.logger(DISPATCH_LOGGER).warn(`workflow gate (${toolName}) (fail-open): cannot read ${statusLabel} — P-b lease attribution degraded; call allowed`);
   }
   const verdict = workflowPolicy(config, adapter.workflowAskCache, {
@@ -4301,6 +4812,7 @@ var AGENT_FLOW_FILE = "agent-flow.jsonl";
 var AGENT_FLOW_MAX_EVENTS = 500;
 var AGENT_FLOW_DEFAULT_LIMIT = 50;
 var AGENT_FLOW_SIZE_GATE_BYTES = 64 * 1024;
+var AGENT_FLOW_TAIL_READ_THRESHOLD_BYTES = 64 * 1024;
 var WORKFLOW_LEDGER_MAX_ID_LENGTH = 512;
 var WORKFLOW_LEDGER_MAX_LABEL_LENGTH = 512;
 var WORKFLOW_LEDGER_MAX_NAME_LENGTH = 1024;
@@ -4319,6 +4831,7 @@ var SETTLE_SEAM = "tools/post-execute";
 var SETTLE_SEAM_PAIRING_NOTE = `settle seam "${SETTLE_SEAM}" IS part of the verified dsh-tools registry surface (runPostExecute dispatches it for every tool call) — foreground dispatch calls settle here, background subagents settle via ctx.jobs.onJobDone pairing; only UNPAIRED payloads (non-dispatch tools, calls outside the apply-scoped pairing window) stay dispatch-only — never a fabricated settle`;
 var logSink;
 var settleNoteLogged = false;
+var noActiveWarned = false;
 var invalidator;
 function setAgentFlowInvalidator(invalidate) {
   const prior = invalidator;
@@ -4329,6 +4842,7 @@ function setAgentFlowLogger(sink) {
   const prior = logSink;
   logSink = sink;
   settleNoteLogged = false;
+  noActiveWarned = false;
   return prior;
 }
 function log(level, message) {
@@ -4366,25 +4880,92 @@ function callPairingKey(exec) {
     return;
   return `${sessionIdOf(exec) ?? ""}\x00${callId}`;
 }
-function appendEvent(harnessDir, event) {
-  const file = join10(harnessDir, AGENT_FLOW_FILE);
-  appendFileSync(file, `${JSON.stringify(event)}
+function resolveAgentFlowWriteDir(harnessDir) {
+  const selection = resolveActiveWorkflow(harnessDir);
+  if (selection.kind === "active")
+    return join10(harnessDir, selection.dir);
+  const message = selection.kind === "error" ? selection.message : "no active lifecycle (unexpected terminal selection — the active-set resolver has no history view)";
+  if (!noActiveWarned) {
+    noActiveWarned = true;
+    log("warn", `agent-flow record skipped — ${message}`);
+  }
+  return null;
+}
+var WORKFLOW_LEDGER_LOCKDIR = ".ledger-write.lockdir";
+var WORKFLOW_LOCKER_TIMEOUT_MS = 30000;
+var WORKFLOW_LOCKER_POLL_MS = 10;
+var WORKFLOW_LOCKER_HOLDER_PID = "holder.pid";
+var heldWorkflowLocks = new Set;
+function sleepSync(ms) {
+  Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
+}
+function withWorkflowDirLock(workflowDir, fn, opts = {}) {
+  const lockDir = join10(workflowDir, WORKFLOW_LEDGER_LOCKDIR);
+  if (heldWorkflowLocks.has(lockDir)) {
+    throw new Error(`${lockDir} is already held by this process — withWorkflowDirLock is not reentrant; a nested acquisition on the same workflow dir is a bug`);
+  }
+  const timeoutMs = opts.timeoutMs ?? WORKFLOW_LOCKER_TIMEOUT_MS;
+  const pollMs = opts.pollMs ?? WORKFLOW_LOCKER_POLL_MS;
+  const deadline = Date.now() + timeoutMs;
+  let acquired = null;
+  for (;; ) {
+    try {
+      mkdirSync3(lockDir);
+      const st = statSync5(lockDir);
+      acquired = { dev: st.dev, ino: st.ino };
+      break;
+    } catch (error) {
+      if (error.code !== "EEXIST")
+        throw error;
+      if (Date.now() >= deadline) {
+        throw new Error(`${lockDir} already exists — another writer holds the workflow write lock; Blocked (same-host exclusive lock; same pattern as the engine's withStatusWriteLock). ` + `Recovery: remove ${lockDir} if no writer is alive (holder.pid inside names the acquiring process)`);
+      }
+      sleepSync(pollMs);
+    }
+  }
+  heldWorkflowLocks.add(lockDir);
+  try {
+    try {
+      writeFileSync2(join10(lockDir, WORKFLOW_LOCKER_HOLDER_PID), String(process.pid), "utf8");
+    } catch {}
+    return fn();
+  } finally {
+    heldWorkflowLocks.delete(lockDir);
+    try {
+      const current = statSync5(lockDir);
+      if (acquired !== null && current.dev === acquired.dev && current.ino === acquired.ino) {
+        try {
+          unlinkSync2(join10(lockDir, WORKFLOW_LOCKER_HOLDER_PID));
+        } catch {}
+        rmdirSync(lockDir);
+      }
+    } catch {}
+  }
+}
+function appendEvent(workflowDir, event) {
+  const file = join10(workflowDir, AGENT_FLOW_FILE);
+  withWorkflowDirLock(workflowDir, () => {
+    appendFileSync(file, `${JSON.stringify(event)}
 `);
-  if (statSync2(file).size <= AGENT_FLOW_SIZE_GATE_BYTES)
-    return;
-  const content = readFileSync6(file, "utf8");
-  const lines = content.replace(/\n$/, "").split(`
+    if (statSync5(file).size <= AGENT_FLOW_SIZE_GATE_BYTES)
+      return;
+    const content = readFileSync7(file, "utf8");
+    const lines = content.replace(/\n$/, "").split(`
 `);
-  if (lines.length > AGENT_FLOW_MAX_EVENTS) {
-    const tmp = `${file}.tmp`;
-    writeFileSync2(tmp, `${lines.slice(-AGENT_FLOW_MAX_EVENTS).join(`
+    if (lines.length > AGENT_FLOW_MAX_EVENTS) {
+      const tmp = `${file}.tmp`;
+      writeFileSync2(tmp, `${lines.slice(-AGENT_FLOW_MAX_EVENTS).join(`
 `)}
 `);
-    renameSync2(tmp, file);
-  }
+      renameSync2(tmp, file);
+    }
+  });
 }
 function recordDispatch(input) {
   try {
+    const workflowDir = resolveAgentFlowWriteDir(input.harnessDir);
+    if (workflowDir === null)
+      return;
     const header = assignmentHeaderRegion(input.prompt);
     const fields = parseAssignmentFields(header);
     const planId = planIdOf(header);
@@ -4403,7 +4984,7 @@ function recordDispatch(input) {
       verdict: verdictOf(input.violations, input.hard),
       hard: input.hard
     };
-    appendEvent(input.harnessDir, event);
+    appendEvent(workflowDir, event);
     try {
       invalidator?.(input.harnessDir);
     } catch (error) {
@@ -4415,6 +4996,7 @@ function recordDispatch(input) {
         if (key !== undefined) {
           input.pairing.dispatchByCallId.set(key, {
             harnessDir: input.harnessDir,
+            workflowDir,
             ...agent !== undefined ? { agent } : {},
             role: fields.executeAs ?? "",
             ...planId !== undefined && !isNaValue(planId) ? { planId } : {},
@@ -4431,6 +5013,9 @@ function recordDispatch(input) {
 }
 function recordSettle(input) {
   try {
+    const workflowDir = input.workflowDir ?? resolveAgentFlowWriteDir(input.harnessDir);
+    if (workflowDir === null)
+      return;
     const event = {
       v: 1,
       ts: Date.now(),
@@ -4442,7 +5027,7 @@ function recordSettle(input) {
       ...input.planId !== undefined && input.planId !== "" ? { planId: input.planId } : {},
       ...input.taskId !== undefined && input.taskId !== "" ? { taskId: input.taskId } : {}
     };
-    appendEvent(input.harnessDir, event);
+    appendEvent(workflowDir, event);
     try {
       invalidator?.(input.harnessDir);
     } catch (error) {
@@ -4454,7 +5039,10 @@ function recordSettle(input) {
 }
 function recordWorkflowEvent(input) {
   try {
-    appendEvent(input.harnessDir, input.event);
+    const workflowDir = input.workflowDir ?? resolveAgentFlowWriteDir(input.harnessDir);
+    if (workflowDir === null)
+      return false;
+    appendEvent(workflowDir, input.event);
     try {
       invalidator?.(input.harnessDir);
     } catch (error) {
@@ -4468,6 +5056,9 @@ function recordWorkflowEvent(input) {
 }
 function recordWorkflowVerdict(input) {
   try {
+    const workflowDir = resolveAgentFlowWriteDir(input.harnessDir);
+    if (workflowDir === null)
+      return;
     const agent = input.exec !== undefined ? agentOfExec(input.exec) : undefined;
     const event = {
       v: 1,
@@ -4481,7 +5072,7 @@ function recordWorkflowVerdict(input) {
       verdict: input.verdict,
       ...input.code !== undefined && input.code !== "" ? { code: input.code } : {}
     };
-    appendEvent(input.harnessDir, event);
+    appendEvent(workflowDir, event);
     try {
       invalidator?.(input.harnessDir);
     } catch (error) {
@@ -4706,14 +5297,49 @@ function summaryOf(events) {
     return { role, outcome, count };
   }).sort((a, b) => b.count - a.count || a.role.localeCompare(b.role) || a.outcome.localeCompare(b.outcome));
 }
-function readAgentFlow(harnessDir, limit) {
-  const file = join10(harnessDir, AGENT_FLOW_FILE);
-  if (!existsSync10(file)) {
+function ledgerContent(file, n) {
+  const size = statSync5(file).size;
+  if (size <= AGENT_FLOW_TAIL_READ_THRESHOLD_BYTES) {
+    return readFileSync7(file, "utf8");
+  }
+  let windowBytes = AGENT_FLOW_TAIL_READ_THRESHOLD_BYTES;
+  const fd = openSync(file, "r");
+  try {
+    for (;; ) {
+      const start = Math.max(0, size - windowBytes);
+      const buffer = Buffer.alloc(size - start);
+      let read = 0;
+      while (read < buffer.length) {
+        const got = readSync(fd, buffer, read, buffer.length - read, start + read);
+        if (got === 0)
+          break;
+        read += got;
+      }
+      let content = buffer.toString("utf8");
+      if (start > 0) {
+        const firstNewline = content.indexOf(`
+`);
+        content = firstNewline >= 0 ? content.slice(firstNewline + 1) : "";
+      }
+      const completeLines = content.split(`
+`).length - 1;
+      if (start === 0 || completeLines >= n)
+        return content;
+      windowBytes *= 2;
+    }
+  } finally {
+    closeSync(fd);
+  }
+}
+function readAgentFlow(workflowDir, limit) {
+  const file = join10(workflowDir, AGENT_FLOW_FILE);
+  if (!existsSync11(file)) {
     return { events: [], summary: [] };
   }
+  const n = limit === undefined ? AGENT_FLOW_DEFAULT_LIMIT : Math.max(0, Math.floor(limit));
   let content;
   try {
-    content = readFileSync6(file, "utf8");
+    content = ledgerContent(file, n);
   } catch {
     return null;
   }
@@ -4730,7 +5356,6 @@ function readAgentFlow(harnessDir, limit) {
       continue;
     }
   }
-  const n = limit === undefined ? AGENT_FLOW_DEFAULT_LIMIT : Math.max(0, Math.floor(limit));
   const latestFirst = events.reverse().slice(0, n);
   return {
     events: latestFirst.map(eventView),
@@ -4740,6 +5365,7 @@ function readAgentFlow(harnessDir, limit) {
 function recordSettleWithRef(ref, outcome, durationMs) {
   recordSettle({
     harnessDir: ref.harnessDir,
+    workflowDir: ref.workflowDir,
     ...ref.agent !== undefined && ref.agent.trim() !== "" ? { agent: ref.agent } : {},
     outcome,
     ...durationMs !== undefined && Number.isFinite(durationMs) ? { durationMs } : {},
@@ -4832,7 +5458,7 @@ function residualSeverityIndex(severity) {
 function pluginVersion() {
   for (const rel of ["../package.json", "../../package.json"]) {
     try {
-      const pkg = JSON.parse(readFileSync8(new URL(rel, import.meta.url), "utf8"));
+      const pkg = JSON.parse(readFileSync9(new URL(rel, import.meta.url), "utf8"));
       if (typeof pkg.version === "string" && pkg.version !== "")
         return pkg.version;
     } catch {}
@@ -4846,7 +5472,7 @@ function engineStatusSource(harnessDir) {
     form: "catalog",
     version: pluginVersion(),
     harnessDir,
-    enforcement: harnessDir !== null ? resolveCompassEnforcement(harnessDir) : { hard: false, source: "none" },
+    enforcement: harnessDir !== null ? resolveRepoEnforcement(harnessDir) : { hard: false, source: "none" },
     ...iteration !== undefined ? { iteration } : {},
     state: harnessDir !== null ? harnessStateSource(harnessDir) : null
   };
@@ -4904,28 +5530,36 @@ function renderEngineStatusCatalog(source) {
   }
   const state = source.state;
   if (state !== null) {
-    lines.push(`plans: ${state.plans.length === 0 ? "none registered" : state.plans.map((p) => `${p.id}(${p.status})`).join(" ")}`);
-    lines.push(`residuals: ${state.residuals.length === 0 ? "none open" : state.residuals.map((r) => `${r.severity} ${r.count}`).join(", ")}`);
-    if (state.iterationBaseBranch !== null && state.targetBranch !== null) {
-      const integration = state.specIntegrationBranch !== null ? ` (spec integration: ${state.specIntegrationBranch})` : "";
-      lines.push(`branch: ${state.iterationBaseBranch} → ${state.targetBranch}${integration}`);
-    }
-    const policy = [
-      state.pushPolicy !== null ? `push ${state.pushPolicy}` : null,
-      state.worktreeMode !== null ? `worktree ${state.worktreeMode}` : null,
-      state.controlWorktreePath !== null ? `control ${state.controlWorktreePath}` : null
-    ].filter((part) => part !== null).join("; ");
-    if (policy !== "")
-      lines.push(`policy: ${policy}`);
-    lines.push(`leases: ${state.leases.length === 0 ? "none active" : state.leases.map((l) => `${l.planId} → ${l.holder}${l.worktreePath !== null ? ` (${l.worktreePath})` : ""}`).join("; ")}`);
-    if (state.knowledge !== null) {
-      lines.push(`knowledge: ${state.knowledge.docCount} doc${state.knowledge.docCount === 1 ? "" : "s"} (${state.knowledge.categories.join(", ")})`);
-    }
-    if (state.direction !== null)
-      lines.push(`direction: ${state.direction}`);
-    const flow = state.agentFlow;
-    if (flow !== null && flow.events.length > 0) {
-      lines.push(renderAgentFlowLine(flow));
+    if (state.selection.kind === "error") {
+      lines.push(`workflow selection: ERROR (${state.selection.code}) ${state.selection.message}`);
+    } else {
+      lines.push(`workflow: ${state.selection.workflowId} (${state.selection.kind})`);
+      if (state.selection.kind === "active" && state.selection.warning !== undefined) {
+        lines.push(`workflow warning: ${state.selection.warning.code} ${state.selection.warning.message}`);
+      }
+      lines.push(`plans: ${state.plans.length === 0 ? "none registered" : state.plans.map((p) => `${p.id}(${p.status})`).join(" ")}`);
+      lines.push(`residuals: ${state.residuals.length === 0 ? "none open" : state.residuals.map((r) => `${r.severity} ${r.count}`).join(", ")}`);
+      if (state.iterationBaseBranch !== null && state.targetBranch !== null) {
+        const integration = state.specIntegrationBranch !== null ? ` (spec integration: ${state.specIntegrationBranch})` : "";
+        lines.push(`branch: ${state.iterationBaseBranch} → ${state.targetBranch}${integration}`);
+      }
+      const policy = [
+        state.pushPolicy !== null ? `push ${state.pushPolicy}` : null,
+        state.worktreeMode !== null ? `worktree ${state.worktreeMode}` : null,
+        state.controlWorktreePath !== null ? `control ${state.controlWorktreePath}` : null
+      ].filter((part) => part !== null).join("; ");
+      if (policy !== "")
+        lines.push(`policy: ${policy}`);
+      lines.push(`leases: ${state.leases.length === 0 ? "none active" : state.leases.map((l) => `${l.planId} → ${l.holder}${l.worktreePath !== null ? ` (${l.worktreePath})` : ""}`).join("; ")}`);
+      if (state.knowledge !== null) {
+        lines.push(`knowledge: ${state.knowledge.docCount} doc${state.knowledge.docCount === 1 ? "" : "s"} (${state.knowledge.categories.join(", ")})`);
+      }
+      if (state.direction !== null)
+        lines.push(`direction: ${state.direction}`);
+      const flow = state.agentFlow;
+      if (flow !== null && flow.events.length > 0) {
+        lines.push(renderAgentFlowLine(flow));
+      }
     }
   }
   lines.push("</mstar_engine_status>");
@@ -4953,28 +5587,59 @@ function hhmm(ts) {
 function harnessStateSource(harnessDir) {
   if (harnessDir === null)
     return null;
-  const statusPath = join12(harnessDir, STATUS_FILE);
-  if (!existsSync11(statusPath))
+  const statusPath = join11(harnessDir, STATUS_FILE);
+  if (!existsSync12(statusPath))
     return null;
   try {
-    const doc = readJson(statusPath);
+    const selection = resolveReadWorkflow(harnessDir);
+    const rollup = residualRollup(harnessDir);
     const str = (value) => typeof value === "string" && value.trim() !== "" ? value.trim() : null;
     const iterationRefsOf = (value) => Array.isArray(value) ? value.filter((v) => typeof v === "string" && v.trim() !== "") : [];
+    const compass = steeringCompassPath(harnessDir);
+    let compassFields;
+    if (compass !== undefined) {
+      try {
+        compassFields = parseCompassFrontmatter(compass.compassPath);
+      } catch {
+        compassFields = undefined;
+      }
+    }
+    if (selection.kind === "error") {
+      return selectionErrorState(selection, rollup, harnessDir, compass);
+    }
+    const snapshotPath = join11(harnessDir, selection.dir, WORKFLOW_SNAPSHOT_FILE);
+    let snapshot;
+    if (!existsSync12(snapshotPath)) {
+      return selectionErrorState({
+        kind: "error",
+        code: "workflow.selection.snapshot-unreadable",
+        message: `cannot read the selected workflow snapshot ${snapshotPath}`
+      }, rollup, harnessDir, compass);
+    }
+    try {
+      snapshot = readJson(snapshotPath);
+    } catch {
+      return selectionErrorState({
+        kind: "error",
+        code: "workflow.selection.snapshot-unreadable",
+        message: `cannot read the selected workflow snapshot ${snapshotPath}`
+      }, rollup, harnessDir, compass);
+    }
     const plans = [];
     const leases = [];
-    if (Array.isArray(doc.plans)) {
-      for (const row of doc.plans.map(asRecord)) {
+    if (Array.isArray(snapshot.plans)) {
+      for (const row of snapshot.plans.map(asRecord)) {
         if (row === undefined)
           continue;
         const id = typeof row.plan_id === "string" ? row.plan_id : typeof row.id === "string" ? row.id : undefined;
         if (id === undefined)
           continue;
-        const metadata2 = asRecord(row.metadata);
+        const metadata = asRecord(row.metadata);
         plans.push({
           id,
           status: typeof row.status === "string" ? row.status : "",
           doneAt: str(row.done_at),
-          iterationRefs: iterationRefsOf(metadata2?.iteration_refs)
+          iterationRefs: iterationRefsOf(metadata?.iteration_refs)
         });
         const lease = asRecord(row.execution_lease);
         if (lease !== undefined && typeof lease.holder === "string") {
@@ -4986,39 +5651,105 @@ function harnessStateSource(harnessDir) {
         }
       }
     }
-    const residuals = [];
-    const residualMap = asRecord(doc.residual_findings);
-    if (residualMap !== undefined) {
-      const counts = new Map;
-      for (const planId of Object.keys(residualMap)) {
-        const findings = residualMap[planId];
-        if (!Array.isArray(findings))
-          continue;
-        for (const finding of findings) {
-          const severity = asRecord(finding)?.severity;
-          if (typeof severity === "string" && RESIDUAL_SEVERITIES.includes(severity)) {
-            counts.set(severity, (counts.get(severity) ?? 0) + 1);
+    const { residuals, residualFindings } = rollup;
+    const branch = asRecord(snapshot.branch);
+    const executionPolicy = asRecord(snapshot.execution_policy);
+    return {
+      selection,
+      plans,
+      residuals,
+      residualFindings,
+      project: projectRollupSource(harnessDir, residuals),
+      iterationBaseBranch: str(branch?.base) ?? str(compassFields?.iteration_base_branch) ?? null,
+      targetBranch: str(branch?.target) ?? str(compassFields?.target_branch) ?? null,
+      specIntegrationBranch: str(branch?.integration),
+      pushPolicy: str(executionPolicy?.push_policy),
+      worktreeMode: str(executionPolicy?.worktree_mode),
+      controlWorktreePath: str(snapshot.control_worktree_path),
+      leases,
+      knowledge: knowledgeDigest(harnessDir),
+      direction: compass !== undefined ? compassDirection(compass.compassPath) : null,
+      agentFlow: readAgentFlow(join11(harnessDir, selection.dir), 50)
+    };
+  } catch {
+    return null;
+  }
+}
+function selectionErrorState(selection, rollup, harnessDir, compass) {
+  return {
+    selection,
+    plans: [],
+    residuals: [],
+    residualFindings: null,
+    project: projectRollupSource(harnessDir, rollup.residuals),
+    iterationBaseBranch: null,
+    targetBranch: null,
+    specIntegrationBranch: null,
+    pushPolicy: null,
+    worktreeMode: null,
+    controlWorktreePath: null,
+    leases: [],
+    knowledge: knowledgeDigest(harnessDir),
+    direction: compass !== undefined ? compassDirection(compass.compassPath) : null,
+    agentFlow: null
+  };
+}
+function projectRollupSource(harnessDir, residuals) {
+  const milestones = [];
+  const projectsDir = resolveProjectDir(harnessDir, { harnessDir });
+  if (existsSync12(projectsDir)) {
+    let entries;
+    try {
+      entries = readdirSync7(projectsDir, { withFileTypes: true });
+    } catch {
+      entries = [];
+    }
+    for (const entry of entries) {
+      if (!entry.isDirectory())
+        continue;
+      const roadmapPath = join11(projectsDir, entry.name, PROJECT_ROADMAP_FILE);
+      if (!existsSync12(roadmapPath))
+        continue;
+      try {
+        const doc = parseCompassFrontmatterText(readFileSync9(roadmapPath, "utf8"), roadmapPath);
+        if (Array.isArray(doc.milestones)) {
+          for (const milestone of doc.milestones) {
+            if (typeof milestone === "string" && milestone.trim() !== "")
+              milestones.push(milestone);
           }
         }
-      }
-      for (const severity of RESIDUAL_SEVERITIES) {
-        const count = counts.get(severity);
-        if (count !== undefined && count > 0)
-          residuals.push({ severity, count });
+      } catch {
+        continue;
       }
     }
-    let residualFindings = null;
-    if (residualMap !== undefined) {
-      residualFindings = [];
-      for (const planId of Object.keys(residualMap)) {
-        const findings = residualMap[planId];
+  }
+  return { milestones, openResiduals: residuals };
+}
+function residualRollup(harnessDir) {
+  const registers = projectRegisters(harnessDir);
+  const residuals = [];
+  const counts = new Map;
+  let residualFindings = null;
+  if (registers.length > 0) {
+    residualFindings = [];
+    for (const register of registers) {
+      const entries = asRecord(register.doc.entries);
+      if (entries === undefined)
+        continue;
+      for (const planId of Object.keys(entries)) {
+        const findings = entries[planId];
         if (!Array.isArray(findings))
           continue;
         for (const finding of findings) {
           const entry = asRecord(finding);
-          if (entry === undefined || !isOpenResidualParity(entry))
+          if (entry === undefined)
+            continue;
+          if (!isOpenResidualParity(entry))
             continue;
           const severity = entry.severity;
+          if (typeof severity === "string" && RESIDUAL_SEVERITIES.includes(severity)) {
+            counts.set(severity, (counts.get(severity) ?? 0) + 1);
+          }
           if (typeof severity !== "string" || residualSeverityIndex(severity) === -1)
             continue;
           residualFindings.push({
@@ -5029,46 +5760,50 @@ function harnessStateSource(harnessDir) {
           });
         }
       }
-      residualFindings.sort((a, b) => residualSeverityIndex(a.severity) - residualSeverityIndex(b.severity));
-      residualFindings = residualFindings.slice(0, 10);
     }
-    const metadata = asRecord(doc.metadata);
-    const compass = steeringCompassPath(harnessDir);
-    let compassFields;
-    if (compass !== undefined) {
-      try {
-        compassFields = parseCompassFrontmatter(compass.compassPath);
-      } catch {
-        compassFields = undefined;
-      }
+    for (const severity of RESIDUAL_SEVERITIES) {
+      const count = counts.get(severity);
+      if (count !== undefined && count > 0)
+        residuals.push({ severity, count });
     }
-    return {
-      plans,
-      residuals,
-      residualFindings,
-      iterationBaseBranch: str(metadata?.iteration_base_branch) ?? str(compassFields?.iteration_base_branch) ?? null,
-      targetBranch: str(metadata?.target_branch) ?? str(compassFields?.target_branch) ?? null,
-      specIntegrationBranch: str(metadata?.spec_integration_branch),
-      pushPolicy: str(metadata?.push_policy),
-      worktreeMode: str(metadata?.worktree_mode),
-      controlWorktreePath: str(metadata?.control_worktree_path),
-      leases,
-      knowledge: knowledgeDigest(harnessDir),
-      direction: compass !== undefined ? compassDirection(compass.compassPath) : null,
-      agentFlow: readAgentFlow(harnessDir, 50)
-    };
+    residualFindings.sort((a, b) => residualSeverityIndex(a.severity) - residualSeverityIndex(b.severity));
+    residualFindings = residualFindings.slice(0, 10);
+  }
+  return { residuals, residualFindings };
+}
+function projectRegisters(harnessDir) {
+  const projectsDir = resolveProjectDir(harnessDir, { harnessDir });
+  if (!existsSync12(projectsDir))
+    return [];
+  let entries;
+  try {
+    entries = readdirSync7(projectsDir, { withFileTypes: true });
   } catch {
-    return null;
+    return [];
+  }
+  const registers = [];
+  for (const entry of entries) {
+    if (!entry.isDirectory())
+      continue;
+    const registerPath = join11(projectsDir, entry.name, PROJECT_REGISTER_FILE);
+    if (!existsSync12(registerPath))
+      continue;
+    try {
+      registers.push({ projectId: entry.name, doc: readJson(registerPath) });
+    } catch {
+      continue;
+    }
   }
+  return registers;
 }
 function knowledgeDigest(harnessDir) {
-  const indexPath = join12(harnessDir, "knowledge", "README.md");
-  if (!existsSync11(indexPath))
+  const indexPath = join11(harnessDir, "knowledge", "README.md");
+  if (!existsSync12(indexPath))
     return null;
   try {
     const categories = new Set;
     let docCount = 0;
-    for (const line of readFileSync8(indexPath, "utf8").split(/\r?\n/)) {
+    for (const line of readFileSync9(indexPath, "utf8").split(/\r?\n/)) {
       const row = line.trim().match(/^\|(.+)\|$/);
       if (row === null)
         continue;
@@ -5091,7 +5826,7 @@ function knowledgeDigest(harnessDir) {
 }
 function compassDirection(compassPath) {
   try {
-    const content = readFileSync8(compassPath, "utf8");
+    const content = readFileSync9(compassPath, "utf8");
     const section = content.match(/^## Direction lock[^\n]*\n+([\s\S]*?)(?=\n## |$)/m);
     if (section === null)
       return null;
@@ -5108,23 +5843,23 @@ function compassDirection(compassPath) {
 }
 function steeringCompassPath(harnessDir) {
   const iterationsDir = resolveIterationDir(harnessDir);
-  if (!existsSync11(iterationsDir))
+  if (!existsSync12(iterationsDir))
     return;
   let entries;
   try {
-    entries = readdirSync4(iterationsDir, { withFileTypes: true });
+    entries = readdirSync7(iterationsDir, { withFileTypes: true });
   } catch {
     return;
   }
   for (const entry of entries) {
     if (!entry.isDirectory())
       continue;
-    const compassPath = join12(iterationsDir, entry.name, "delivery-compass.md");
-    if (!existsSync11(compassPath))
+    const compassPath = join11(iterationsDir, entry.name, "delivery-compass.md");
+    if (!existsSync12(compassPath))
       continue;
     let content;
     try {
-      content = readFileSync8(compassPath, "utf8");
+      content = readFileSync9(compassPath, "utf8");
     } catch {
       continue;
     }
@@ -5138,16 +5873,20 @@ function steeringCompassPath(harnessDir) {
 function iterationGateSource(harnessDir) {
   if (harnessDir === null)
     return;
-  const statusPath = join12(harnessDir, STATUS_FILE);
-  if (!existsSync11(statusPath))
+  const statusPath = join11(harnessDir, STATUS_FILE);
+  if (!existsSync12(statusPath))
     return;
   const compass = steeringCompassPath(harnessDir);
   if (compass === undefined)
     return;
+  const selection = resolveReadWorkflow(harnessDir);
+  if (selection.kind === "error")
+    return;
+  const snapshotPath = join11(harnessDir, selection.dir, WORKFLOW_SNAPSHOT_FILE);
   try {
-    const statusDoc = readJson(statusPath);
+    const snapshotDoc = readJson(snapshotPath);
     const compassDoc = parseCompassFrontmatter(compass.compassPath);
-    const result = evaluatePhaseGate(statusDoc, compassDoc);
+    const result = evaluatePhaseGate(snapshotDoc, compassDoc);
     const gate2 = {
       transition: result.transition,
       all_plans_done: result.allPlansDone,
@@ -5159,7 +5898,7 @@ function iterationGateSource(harnessDir) {
     const compassStatus = compassDoc.status === "active" || compassDoc.status === "locked" ? compassDoc.status : undefined;
     return {
       iterationId: compass.iterationId,
-      statusPath,
+      statusPath: snapshotPath,
       compassPath: compass.compassPath,
       gate: gate2,
       ...compassStatus !== undefined ? { compassStatus } : {}
@@ -5197,44 +5936,103 @@ function agentDigestKey(agent, cwd) {
 }
 
 // src/gates/status.ts
-import { basename as basename7, dirname as dirname5, join as join13, resolve as resolve10 } from "node:path";
+import { existsSync as existsSync13, readdirSync as readdirSync9 } from "node:fs";
+import { basename as basename7, join as join14, relative as relative5, resolve as resolve13 } from "node:path";
 var LOGGER_NAME = "mstar/status-gate";
-function isStatusTarget(harnessDir, target) {
-  return basename7(target.displayPath) === STATUS_FILE && resolve10(dirname5(target.displayPath)) === resolve10(harnessDir);
+function harnessDocKindOfTarget(harnessDir, targetPath) {
+  const resolved = resolve13(targetPath);
+  const name = basename7(resolved);
+  if (name !== STATUS_FILE && name !== WORKFLOW_SNAPSHOT_FILE && name !== PROJECT_REGISTER_FILE)
+    return null;
+  const rel = relative5(harnessDir, resolved);
+  if (name === STATUS_FILE && rel === STATUS_FILE)
+    return "status";
+  let workflowDir;
+  let projectDir;
+  try {
+    workflowDir = resolveWorkflowDir(harnessDir, { harnessDir });
+    projectDir = resolveProjectDir(harnessDir, { harnessDir });
+  } catch {
+    workflowDir = join14(harnessDir, "workflows");
+    projectDir = join14(harnessDir, "projects");
+  }
+  if (name === WORKFLOW_SNAPSHOT_FILE && /^[^/]+\/snapshot\.json$/.test(relative5(workflowDir, resolved)))
+    return "snapshot";
+  if (name === PROJECT_REGISTER_FILE && /^[^/]+\/residuals\.json$/.test(relative5(projectDir, resolved)))
+    return "register";
+  return null;
 }
 function resolveHard(harnessDir, config) {
   if (config.enforcement === "hard")
     return true;
   if (config.enforcement === "soft")
     return false;
-  return resolveCompassEnforcement(harnessDir).hard;
+  return resolveRepoEnforcement(harnessDir).hard;
+}
+function validateStatusValue(doc, kind, harnessDir) {
+  if (kind === "snapshot") {
+    const base = validateWorkflowSnapshot(doc);
+    if (!base.ok)
+      return base;
+    if (harnessDir === null || harnessDir === undefined)
+      return base;
+    const violations = snapshotFindingsCleanupViolations(doc, harnessDir);
+    if (violations.length === 0)
+      return base;
+    return { ok: false, violations };
+  }
+  if (kind === "register")
+    return validateProjectRegister(doc);
+  return validateStatus(doc);
 }
-function validateStatusValue(doc) {
-  const base = validateStatus(doc);
-  if (!base.ok)
-    return base;
+function snapshotFindingsCleanupViolations(doc, harnessDir) {
   const record = asRecord(doc);
   if (record === undefined)
-    return base;
+    return [];
   const violations = [];
+  const registers = projectRegisterDocs(harnessDir);
   for (const row of Array.isArray(record.plans) ? record.plans : []) {
-    const metadata = asRecord(row.metadata);
+    const planRow = asRecord(row);
+    const metadata = planRow === undefined ? undefined : asRecord(planRow.metadata);
     const mode = metadata?.["findings_cleanup"];
     if (mode !== "zero-residual" && mode !== "allow-residual")
       continue;
-    const planId = typeof row.id === "string" ? row.id : typeof row.plan_id === "string" ? row.plan_id : undefined;
+    const planId = typeof planRow?.id === "string" ? planRow.id : typeof planRow?.plan_id === "string" ? planRow.plan_id : undefined;
     if (planId === undefined)
       continue;
-    violations.push(...findingsCleanupGate(record, planId, { mode }).violations);
+    for (const register of registers) {
+      violations.push(...findingsCleanupGate(register.doc, planId, { mode }).violations);
+    }
   }
-  if (violations.length === 0)
-    return base;
-  return { ok: false, violations };
+  return violations;
+}
+function projectRegisterDocs(harnessDir) {
+  const projectsDir = resolveProjectDir(harnessDir, { harnessDir });
+  let entries;
+  try {
+    entries = readdirSync9(projectsDir, { withFileTypes: true });
+  } catch {
+    return [];
+  }
+  const registers = [];
+  for (const entry of entries) {
+    if (!entry.isDirectory())
+      continue;
+    const registerPath = join14(projectsDir, entry.name, PROJECT_REGISTER_FILE);
+    if (!existsSync13(registerPath))
+      continue;
+    try {
+      registers.push({ projectId: entry.name, doc: readJson(registerPath) });
+    } catch {
+      continue;
+    }
+  }
+  return registers;
 }
-function validateStatusDoc(statusPath) {
+function validateStatusDoc(path, kind, harnessDir) {
   let doc;
   try {
-    doc = readJson(statusPath);
+    doc = readJson(path);
   } catch (error) {
     return {
       ok: false,
@@ -5246,16 +6044,16 @@ function validateStatusDoc(statusPath) {
       }]
     };
   }
-  return validateStatusValue(doc);
+  return validateStatusValue(doc, kind, harnessDir);
 }
 function gateStatusIntent(ctx, harnessDir, config, adapter, operation, target) {
   try {
     if (harnessDir === null)
       return;
-    if (!isStatusTarget(harnessDir, target))
+    const kind = harnessDocKindOfTarget(harnessDir, target.displayPath);
+    if (kind === null)
       return;
-    const statusPath = join13(harnessDir, STATUS_FILE);
-    const result = adapter.statusGate(statusPath);
+    const result = adapter.statusGate(target.displayPath, kind, harnessDir);
     const hard = resolveHard(harnessDir, config);
     const verdict = applyEnforcement(result, { hard });
     if (!verdict.ok) {
@@ -5290,8 +6088,8 @@ async function editIntentListener(ctx, resolver, config, adapter, target, actor,
 }
 
 // src/gates/skill-lint.ts
-import { existsSync as existsSync12, readFileSync as readFileSync9 } from "node:fs";
-import { basename as basename8, dirname as dirname7, resolve as resolve11, sep as sep2 } from "node:path";
+import { existsSync as existsSync14, readFileSync as readFileSync11 } from "node:fs";
+import { basename as basename8, dirname as dirname7, resolve as resolve14, sep as sep2 } from "node:path";
 var SKILL_LINT_LOGGER = "mstar/skill-lint";
 
 class SkillLintVetoError extends Error {
@@ -5354,8 +6152,8 @@ function skillRootsOf(config) {
 function isSkillTarget(roots, target) {
   if (basename8(target.displayPath) !== "SKILL.md")
     return false;
-  const resolvedPath = resolve11(target.displayPath);
-  return roots.some((root) => resolvedPath.startsWith(resolve11(root) + sep2));
+  const resolvedPath = resolve14(target.displayPath);
+  return roots.some((root) => resolvedPath.startsWith(resolve14(root) + sep2));
 }
 function skillNameOf(target) {
   return basename8(dirname7(target.displayPath));
@@ -5370,12 +6168,12 @@ function gateSkillIntent(ctx, harnessDir, config, target) {
       return;
     if (!isSkillTarget(roots, target))
       return;
-    const skillPath = resolve11(target.displayPath);
-    if (!existsSync12(skillPath))
+    const skillPath = resolve14(target.displayPath);
+    if (!existsSync14(skillPath))
       return;
     let doc;
     try {
-      doc = readFileSync9(skillPath, "utf8");
+      doc = readFileSync11(skillPath, "utf8");
     } catch (error) {
       ctx.logger(SKILL_LINT_LOGGER).error(`skill lint degraded to allow (cannot read ${skillPath}): ${error.message}`);
       ctx.emit("mstar/skill-lint", {
@@ -5422,8 +6220,8 @@ async function skillWriteIntentListener(ctx, resolver, config, target, actor, ne
 }
 
 // src/gates/seams.ts
-import { existsSync as existsSync13, readFileSync as readFileSync10, readdirSync as readdirSync6 } from "node:fs";
-import { basename as basename9, dirname as dirname8, join as join14, resolve as resolve12, sep as sep3 } from "node:path";
+import { existsSync as existsSync15, readFileSync as readFileSync13, readdirSync as readdirSync11 } from "node:fs";
+import { basename as basename9, dirname as dirname9, join as join16, resolve as resolve15, sep as sep4 } from "node:path";
 var SEAM_LOGGERS = {
   "design-md": "mstar/design-md-lint",
   audit: "mstar/audit-lint",
@@ -5440,7 +6238,7 @@ function isMarkdownDoc(path) {
 function isAuditPlanTarget(path) {
   if (!isMarkdownDoc(path))
     return false;
-  const segments = resolve12(path).split(sep3);
+  const segments = resolve15(path).split(sep4);
   for (let i = 0;i < segments.length; i++) {
     if (segments[i] !== "plans")
       continue;
@@ -5451,7 +6249,7 @@ function isAuditPlanTarget(path) {
   return false;
 }
 function isRolesTarget(path) {
-  const segments = resolve12(path).split(sep3);
+  const segments = resolve15(path).split(sep4);
   const idx = segments.indexOf("mstar-roles");
   if (idx === -1)
     return false;
@@ -5461,14 +6259,14 @@ function isRolesTarget(path) {
   return rest[0] === "SKILL.md" || rest[0] === "references" && rest[rest.length - 1].endsWith(".md");
 }
 function rolesDirOf(path) {
-  const segments = resolve12(path).split(sep3);
+  const segments = resolve15(path).split(sep4);
   const idx = segments.indexOf("mstar-roles");
   if (idx === -1)
-    return dirname8(path);
-  return idx === 0 ? sep3 : join14(sep3, ...segments.slice(1, idx + 1));
+    return dirname9(path);
+  return idx === 0 ? sep4 : join16(sep4, ...segments.slice(1, idx + 1));
 }
 function isSeamTarget(seam, harnessDir, target) {
-  const path = resolve12(target.displayPath);
+  const path = resolve15(target.displayPath);
   switch (seam) {
     case "design-md": {
       const base = basename9(path);
@@ -5479,7 +6277,7 @@ function isSeamTarget(seam, harnessDir, target) {
     case "compound": {
       if (harnessDir === null)
         return false;
-      return path.startsWith(resolve12(join14(harnessDir, "knowledge")) + sep3) && isMarkdownDoc(path);
+      return path.startsWith(resolve15(join16(harnessDir, "knowledge")) + sep4) && isMarkdownDoc(path);
     }
     case "roles":
       return isRolesTarget(path);
@@ -5497,10 +6295,10 @@ function auditSecretsViolations(findings, file) {
 function validateDesignDoc(doc, path) {
   const violations = [...validateDesignTokenFrontmatter(doc).violations];
   const isDark = basename9(path) === "DESIGN.dark.md";
-  const sibling = join14(dirname8(path), isDark ? "DESIGN.md" : "DESIGN.dark.md");
-  if (existsSync13(sibling)) {
-    const light = isDark ? readFileSync10(sibling, "utf8") : doc;
-    const dark = isDark ? doc : readFileSync10(sibling, "utf8");
+  const sibling = join16(dirname9(path), isDark ? "DESIGN.md" : "DESIGN.dark.md");
+  if (existsSync15(sibling)) {
+    const light = isDark ? readFileSync13(sibling, "utf8") : doc;
+    const dark = isDark ? doc : readFileSync13(sibling, "utf8");
     violations.push(...assertLightDarkParity(light, dark).violations);
   }
   return violations.length === 0 ? { ok: true, violations } : { ok: false, violations };
@@ -5514,21 +6312,21 @@ function validateAuditDoc(doc, path) {
 function validateCompoundDoc(doc, _path, harnessDir) {
   const violations = [...validateSchemaYaml(doc).violations];
   if (harnessDir !== null) {
-    violations.push(...referenceExists(dirname8(harnessDir), doc).violations);
+    violations.push(...referenceExists(dirname9(harnessDir), doc).violations);
   }
   return violations.length === 0 ? { ok: true, violations } : { ok: false, violations };
 }
-function validateRolesState(rolesDir, skillsRoot = dirname8(rolesDir)) {
+function validateRolesState(rolesDir, skillsRoot = dirname9(rolesDir)) {
   const violations = [...validateRoleMapping(rolesDir).violations];
   const skillTexts = {};
-  for (const entry of readdirSync6(skillsRoot, { withFileTypes: true })) {
+  for (const entry of readdirSync11(skillsRoot, { withFileTypes: true })) {
     if (!entry.isDirectory() || !entry.name.startsWith("mstar-"))
       continue;
-    const skillFile = join14(skillsRoot, entry.name, "SKILL.md");
-    if (!existsSync13(skillFile))
+    const skillFile = join16(skillsRoot, entry.name, "SKILL.md");
+    if (!existsSync15(skillFile))
       continue;
     try {
-      skillTexts[entry.name] = readFileSync10(skillFile, "utf8");
+      skillTexts[entry.name] = readFileSync13(skillFile, "utf8");
     } catch {}
   }
   violations.push(...lintLoadOrder(skillTexts).violations);
@@ -5558,12 +6356,12 @@ function gateSeamIntent(ctx, harnessDir, config, seam, target) {
   try {
     if (!isSeamTarget(seam, harnessDir, target))
       return;
-    const path = resolve12(target.displayPath);
-    if (!existsSync13(path))
+    const path = resolve15(target.displayPath);
+    if (!existsSync15(path))
       return;
     let doc;
     try {
-      doc = readFileSync10(path, "utf8");
+      doc = readFileSync13(path, "utf8");
     } catch (error) {
       logger.error(`seam lint degraded to allow (cannot read ${path}): ${error.message}`);
       emitSeamAdvisory(ctx, seam, target.displayPath, { ok: true, violations: [] }, false, { degraded: true });
@@ -5629,8 +6427,8 @@ function lintRolesWrite(doc, options) {
 }
 
 // src/gates/tools.ts
-import { existsSync as existsSync14, readFileSync as readFileSync11 } from "node:fs";
-import { join as join15, resolve as resolve13 } from "node:path";
+import { existsSync as existsSync16, readFileSync as readFileSync14 } from "node:fs";
+import { join as join17, resolve as resolve16 } from "node:path";
 import { defineTool } from "@deepseek-ai/dsh-tools";
 var ITERATION_VIOLATION_SCHEMA = {
   type: "object",
@@ -5727,12 +6525,12 @@ function registerSddIterationTools(ctx, resolver) {
     }));
     toolsCtx.tools.register(defineTool({
       name: "mstar_iteration_gate",
-      description: "Evaluate the iteration phase-transition gate against a status.json and a delivery-compass.md " + "(engine evaluatePhaseGate, mirror of `mstar iteration gate`): returns the transition " + "(phase-2-execute / phase-3-close / phase-4-pr-delivery), the pass/fail verdict, and the " + "§3.1 entry / §3.5 exit checklists with violation codes.",
+      description: "Evaluate the iteration phase-transition gate against a workflow snapshot and a delivery-compass.md " + "(engine evaluatePhaseGate, mirror of `mstar iteration gate --workflow <id>`): returns the transition " + "(phase-2-execute / phase-3-close / phase-4-pr-delivery), the pass/fail verdict, and the " + "§3.1 entry / §3.5 exit checklists with violation codes.",
       parameters: {
-        status_path: {
+        snapshot_path: {
           type: "string",
           required: true,
-          description: "Path to {HARNESS_DIR}/status.json."
+          description: "Path to {HARNESS_DIR}/workflows/<id>/snapshot.json (the selected workflow snapshot — v3 input, mirrors the CLI `iteration gate --workflow <id>`)."
         },
         compass_path: {
           type: "string",
@@ -5795,13 +6593,13 @@ function registerSddIterationTools(ctx, resolver) {
       presentResult: (_args, _result) => ({ card: "generic", title: "Iteration gate evaluation" }),
       isConcurrencySafe: () => false,
       async execute(args) {
-        if (!existsSync14(args.status_path))
-          throw new Error(`status file not found: ${args.status_path}`);
-        if (!existsSync14(args.compass_path))
+        if (!existsSync16(args.snapshot_path))
+          throw new Error(`workflow snapshot not found: ${args.snapshot_path}`);
+        if (!existsSync16(args.compass_path))
           throw new Error(`compass file not found: ${args.compass_path}`);
-        const statusDoc = readJson(args.status_path);
+        const snapshotDoc = readJson(args.snapshot_path);
         const compassDoc = parseCompassFrontmatter(args.compass_path);
-        const result = evaluatePhaseGate(statusDoc, compassDoc, {
+        const result = evaluatePhaseGate(snapshotDoc, compassDoc, {
           currentBranch: args.branch,
           specIntegrationBranch: args.integration,
           prBaseBranch: args.target
@@ -5850,11 +6648,11 @@ function registerSeamTools(ctx, resolver) {
       presentCall: (args) => ({ card: "generic", title: "Validate DESIGN.md", kind: "other", rawInput: args.dir }),
       isConcurrencySafe: () => false,
       async execute(args) {
-        const abs = resolve13(args.dir);
-        const lightPath = join15(abs, "DESIGN.md");
-        if (!existsSync14(lightPath))
+        const abs = resolve16(args.dir);
+        const lightPath = join17(abs, "DESIGN.md");
+        if (!existsSync16(lightPath))
           throw new Error(`design file not found: ${lightPath}`);
-        const light = readFileSync11(lightPath, "utf8");
+        const light = readFileSync14(lightPath, "utf8");
         const result = validateDesignDoc(light, lightPath);
         const level = completenessLevel(light);
         return {
@@ -5904,10 +6702,10 @@ function registerSeamTools(ctx, resolver) {
       presentCall: (args) => ({ card: "generic", title: "Validate audit plan", kind: "other", rawInput: args.plan_path }),
       isConcurrencySafe: () => false,
       async execute(args) {
-        const abs = resolve13(args.plan_path);
-        if (!existsSync14(abs))
+        const abs = resolve16(args.plan_path);
+        if (!existsSync16(abs))
           throw new Error(`plan file not found: ${abs}`);
-        const text = readFileSync11(abs, "utf8");
+        const text = readFileSync14(abs, "utf8");
         const result = validateAuditDoc(text, abs);
         return { ok: result.ok, violations: result.violations.map(iterationViolationView), secrets: result.findings };
       }
@@ -5944,17 +6742,17 @@ function registerSeamTools(ctx, resolver) {
       presentCall: (args) => ({ card: "generic", title: "Validate knowledge doc", kind: "other", rawInput: args.doc_path }),
       isConcurrencySafe: () => false,
       async execute(args, exec) {
-        const abs = resolve13(args.doc_path);
-        if (!existsSync14(abs))
+        const abs = resolve16(args.doc_path);
+        if (!existsSync16(abs))
           throw new Error(`knowledge doc not found: ${abs}`);
-        const text = readFileSync11(abs, "utf8");
+        const text = readFileSync14(abs, "utf8");
         const base = validateCompoundDoc(text, abs, args.repo_root !== undefined ? null : resolver.forAgent(exec.agent));
         const violations = [...base.violations];
         if (args.repo_root !== undefined) {
-          violations.push(...referenceExists(resolve13(args.repo_root), text).violations);
+          violations.push(...referenceExists(resolve16(args.repo_root), text).violations);
         }
         if (args.knowledge_dir !== undefined) {
-          const knowledgeDir = resolve13(args.knowledge_dir);
+          const knowledgeDir = resolve16(args.knowledge_dir);
           violations.push(...assertIndexRows(knowledgeDir).violations);
           violations.push(...scopeGuard(abs, [knowledgeDir]).violations);
         }
@@ -5989,10 +6787,10 @@ function registerSeamTools(ctx, resolver) {
       presentCall: (args) => ({ card: "generic", title: "Validate roles mapping", kind: "other", rawInput: args.roles_dir }),
       isConcurrencySafe: () => false,
       async execute(args) {
-        const rolesDir = resolve13(args.roles_dir);
-        if (!existsSync14(join15(rolesDir, "SKILL.md")))
+        const rolesDir = resolve16(args.roles_dir);
+        if (!existsSync16(join17(rolesDir, "SKILL.md")))
           throw new Error(`roles dir not found: ${rolesDir}`);
-        const result = validateRolesState(rolesDir, args.skills_root !== undefined ? resolve13(args.skills_root) : undefined);
+        const result = validateRolesState(rolesDir, args.skills_root !== undefined ? resolve16(args.skills_root) : undefined);
         return { ok: result.ok, violations: result.violations.map(iterationViolationView) };
       }
     }));
@@ -6000,9 +6798,15 @@ function registerSeamTools(ctx, resolver) {
 }
 
 // src/gates/adapter.ts
-import { existsSync as existsSync15 } from "node:fs";
+import { existsSync as existsSync17 } from "node:fs";
+import { join as join18 } from "node:path";
 import { Service as Service2 } from "@deepseek-ai/cordis";
 var HOST_LOGGER = "mstar/host-adapter";
+function mergeLeasesMatch(left, right) {
+  const a = left ?? {};
+  const b = right ?? {};
+  return ["holder", "claimed_at", "plan_id", "source_branch", "target_branch"].every((key) => a[key] === b[key]);
+}
 
 class DshHostAdapter extends Service2 {
   host = "dsh";
@@ -6030,10 +6834,10 @@ class DshHostAdapter extends Service2 {
   log(level, msg) {
     this.logSink(level, msg);
   }
-  statusGate(statusPath) {
-    if (!existsSync15(statusPath))
+  statusGate(path, kind, harnessDir) {
+    if (!existsSync17(path))
       return { ok: true, violations: [] };
-    return validateStatusDoc(statusPath);
+    return validateStatusDoc(path, kind, harnessDir);
   }
   dispatchGate(prompt, exec, hard) {
     const harnessDir = this.resolver.forAgent(exec?.agent);
@@ -6061,7 +6865,12 @@ class DshHostAdapter extends Service2 {
     recordWorkflowVerdict(input);
   }
   async beforeStatusWrite(path, doc) {
-    const gate2 = doc !== undefined ? validateStatusValue(doc) : this.statusGate(path);
+    const harnessDir = this.resolver.forWorkspace(undefined);
+    const kind = harnessDir === null ? null : harnessDocKindOfTarget(harnessDir, path);
+    if (kind === null) {
+      return { ok: true, severity: "low", code: "host.beforeStatusWrite.ok", message: `status write to ${path} validated` };
+    }
+    const gate2 = doc !== undefined ? validateStatusValue(doc, kind, harnessDir) : this.statusGate(path, kind, harnessDir);
     if (!gate2.ok) {
       const first = gate2.violations[0];
       return { ok: false, severity: first.severity, code: first.code, message: first.message, fix: first.fix, aliases: first.aliases };
@@ -6076,13 +6885,39 @@ class DshHostAdapter extends Service2 {
     return applyEnforcement(gate2, { hard });
   }
   async beforeMerge(lease) {
-    return validateIntegrationMergeLease(lease);
+    const violations = [...validateIntegrationMergeLease(lease).violations];
+    const harnessDir = this.resolver.forWorkspace(undefined);
+    if (harnessDir !== null) {
+      const selection = resolveActiveWorkflow(harnessDir);
+      if (selection.kind === "active") {
+        const snapshotPath = join18(harnessDir, selection.dir, WORKFLOW_SNAPSHOT_FILE);
+        try {
+          const snapshot = readJson(snapshotPath);
+          const stored = snapshot?.integration_merge_lease;
+          if (stored !== undefined) {
+            violations.push(...validateIntegrationMergeLease(stored).violations);
+            if (!mergeLeasesMatch(lease, stored)) {
+              violations.push({
+                ok: false,
+                severity: "high",
+                code: "lease.merge.snapshot-mismatch",
+                message: `snapshot integration_merge_lease (${snapshotPath}) differs from the lease being reserved — the active merge belongs to another holder/plan`,
+                fix: "merge only under the snapshot-recorded integration_merge_lease (or release the lease with user authorization + audit note)"
+              });
+            }
+          }
+        } catch (error) {
+          this.ctx.logger(HOST_LOGGER).warn(`beforeMerge snapshot lease read failed (contained — the passed-lease shape gate stands): ${error.message}`);
+        }
+      }
+    }
+    return { ok: violations.length === 0, violations };
   }
 }
 
 // src/gates/agent-personas.ts
-import { readFileSync as readFileSync12, readdirSync as readdirSync7, statSync as statSync4 } from "node:fs";
-import { join as join16, resolve as resolve14, sep as sep4 } from "node:path";
+import { readFileSync as readFileSync15, readdirSync as readdirSync12, statSync as statSync6 } from "node:fs";
+import { join as join19, resolve as resolve17, sep as sep6 } from "node:path";
 var ROLE_ID_PATTERN = /^[a-z0-9-]{1,32}$/;
 var defaultCache = new Map;
 function personaFor(roleId, lookup, warn) {
@@ -6099,7 +6934,7 @@ function personaFor(roleId, lookup, warn) {
 function subagentRoleIds(agentsDir) {
   let names;
   try {
-    names = readdirSync7(agentsDir);
+    names = readdirSync12(agentsDir);
   } catch {
     return [];
   }
@@ -6110,7 +6945,7 @@ function subagentRoleIds(agentsDir) {
     const roleId = name.slice(0, -3);
     let content;
     try {
-      content = readFileSync12(join16(agentsDir, name), "utf8");
+      content = readFileSync15(join19(agentsDir, name), "utf8");
     } catch {
       continue;
     }
@@ -6123,13 +6958,13 @@ function subagentRoleIds(agentsDir) {
 function defaultFromMirror(agentsDir, roleId, warn) {
   if (!ROLE_ID_PATTERN.test(roleId))
     return;
-  const root = resolve14(agentsDir);
-  const file = resolve14(agentsDir, `${roleId}.md`);
-  if (!file.startsWith(root + sep4))
+  const root = resolve17(agentsDir);
+  const file = resolve17(agentsDir, `${roleId}.md`);
+  if (!file.startsWith(root + sep6))
     return;
   let stat;
   try {
-    stat = statSync4(file);
+    stat = statSync6(file);
   } catch {
     return;
   }
@@ -6140,7 +6975,7 @@ function defaultFromMirror(agentsDir, roleId, warn) {
     return hit.text;
   let content;
   try {
-    content = readFileSync12(file, "utf8");
+    content = readFileSync15(file, "utf8");
   } catch {
     return;
   }
@@ -6328,8 +7163,8 @@ function log2(level, message) {
 }
 
 // src/gates/workflow-ledger.ts
-import { readFileSync as readFileSync13, renameSync as renameSync3, writeFileSync as writeFileSync4 } from "node:fs";
-import { join as join17 } from "node:path";
+import { readFileSync as readFileSync16, renameSync as renameSync3, writeFileSync as writeFileSync4 } from "node:fs";
+import { join as join20 } from "node:path";
 var WORKFLOW_LEDGER_LOGGER = "mstar/workflow-ledger";
 var TOOL_WORKFLOW_RUN_START = "tool-workflow/run-start";
 var TOOL_WORKFLOW_AGENT_START = "tool-workflow/agent-start";
@@ -6338,6 +7173,7 @@ var TOOL_WORKFLOW_RUN_END = "tool-workflow/run-end";
 var DEPTH_ADVISORY_THRESHOLD = 2;
 var WORKFLOW_LEDGER_WATERMARK_FILE = "workflow-ledger-cursors.json";
 var WORKFLOW_LEDGER_WATERMARK_MAX_SESSIONS = 256;
+var WORKFLOW_LEDGER_WATERMARK_MAX_DIRS = 64;
 var workflowLedgerLogSink = () => {};
 function setWorkflowLedgerLogger(sink) {
   const prior = workflowLedgerLogSink;
@@ -6357,13 +7193,22 @@ function sessionIdOf2(session) {
   return typeof id === "string" && id !== "" ? id : undefined;
 }
 var watermarkCache = new Map;
-function loadWatermark(harnessDir) {
-  const cached = watermarkCache.get(harnessDir);
-  if (cached !== undefined)
+function cacheWatermark(workflowDir, watermark) {
+  watermarkCache.set(workflowDir, watermark);
+  while (watermarkCache.size > WORKFLOW_LEDGER_WATERMARK_MAX_DIRS) {
+    const oldest = watermarkCache.keys().next().value;
+    if (oldest === undefined)
+      break;
+    watermarkCache.delete(oldest);
+  }
+}
+function loadWatermark(workflowDir, fresh = false) {
+  const cached = watermarkCache.get(workflowDir);
+  if (cached !== undefined && !fresh)
     return cached;
   const watermark = new Map;
   try {
-    const raw = readFileSync13(join17(harnessDir, WORKFLOW_LEDGER_WATERMARK_FILE), "utf8");
+    const raw = readFileSync16(join20(workflowDir, WORKFLOW_LEDGER_WATERMARK_FILE), "utf8");
     const record = asRecord(JSON.parse(raw));
     const cursors = asRecord(record?.cursors);
     if (cursors !== undefined) {
@@ -6376,40 +7221,50 @@ function loadWatermark(harnessDir) {
   } catch (error) {
     const err = error;
     if (err?.code !== "ENOENT") {
-      log3("warn", `workflow-ledger watermark unreadable for ${harnessDir} — degrading to in-memory-only (restart re-records): ${errorMessage3(error)}`);
+      log3("warn", `workflow-ledger watermark unreadable for ${workflowDir} — degrading to in-memory-only (restart re-records): ${errorMessage3(error)}`);
     }
+    if (fresh && cached !== undefined)
+      return cached;
   }
-  watermarkCache.set(harnessDir, watermark);
+  cacheWatermark(workflowDir, watermark);
   return watermark;
 }
-function saveWatermark(harnessDir, watermark) {
+function saveWatermark(workflowDir, watermark) {
   try {
-    const file = join17(harnessDir, WORKFLOW_LEDGER_WATERMARK_FILE);
+    const file = join20(workflowDir, WORKFLOW_LEDGER_WATERMARK_FILE);
     const tmp = `${file}.tmp`;
     writeFileSync4(tmp, JSON.stringify({ v: 1, cursors: Object.fromEntries(watermark) }));
     renameSync3(tmp, file);
   } catch (error) {
-    log3("warn", `workflow-ledger watermark write failed for ${harnessDir} — in-memory only (restart re-records): ${errorMessage3(error)}`);
+    log3("warn", `workflow-ledger watermark write failed for ${workflowDir} — in-memory only (restart re-records): ${errorMessage3(error)}`);
   }
 }
-function advanceWatermark(harnessDir, sid, nextSeq, isEvictable) {
-  const watermark = loadWatermark(harnessDir);
-  if (!watermark.has(sid) && watermark.size >= WORKFLOW_LEDGER_WATERMARK_MAX_SESSIONS) {
-    let victim;
-    for (const key of watermark.keys()) {
-      if (isEvictable(key)) {
-        victim = key;
-        break;
+function advanceWatermark(workflowDir, sid, nextSeq, isEvictable, lockOpts = {}) {
+  try {
+    withWorkflowDirLock(workflowDir, () => {
+      const watermark = loadWatermark(workflowDir, true);
+      if (!watermark.has(sid) && watermark.size >= WORKFLOW_LEDGER_WATERMARK_MAX_SESSIONS) {
+        let victim;
+        for (const key of watermark.keys()) {
+          if (isEvictable(key)) {
+            victim = key;
+            break;
+          }
+        }
+        victim ??= watermark.keys().next().value;
+        if (victim !== undefined) {
+          watermark.delete(victim);
+          log3("warn", `workflow-ledger watermark capped at ${WORKFLOW_LEDGER_WATERMARK_MAX_SESSIONS} sessions — evicted ${victim} (a restored evicted session re-records; bounded by the cap)`);
+        }
       }
-    }
-    victim ??= watermark.keys().next().value;
-    if (victim !== undefined) {
-      watermark.delete(victim);
-      log3("warn", `workflow-ledger watermark capped at ${WORKFLOW_LEDGER_WATERMARK_MAX_SESSIONS} sessions — evicted ${victim} (a restored evicted session re-records; bounded by the cap)`);
-    }
+      watermark.set(sid, Math.max(watermark.get(sid) ?? 0, nextSeq));
+      saveWatermark(workflowDir, watermark);
+    }, lockOpts);
+  } catch (error) {
+    const watermark = loadWatermark(workflowDir);
+    watermark.set(sid, Math.max(watermark.get(sid) ?? 0, nextSeq));
+    log3("warn", `workflow-ledger watermark durable advance failed for ${workflowDir} — in-memory cursor advanced, durable cursor NOT (restart reloads the file; outage rows re-record once — bounded duplicate): ${errorMessage3(error)}`);
   }
-  watermark.set(sid, nextSeq);
-  saveWatermark(harnessDir, watermark);
 }
 function rowOf(session, envelope) {
   const record = asRecord(envelope);
@@ -6517,15 +7372,18 @@ function registerWorkflowLedger(ctx, resolver, workflowAskCache) {
     const harnessDir = resolver.forWorkspace(typeof cwd === "string" && cwd.trim() !== "" ? cwd : undefined);
     if (harnessDir === null)
       return;
-    const watermark = loadWatermark(harnessDir);
+    const workflowDir = resolveAgentFlowWriteDir(harnessDir);
+    if (workflowDir === null)
+      return;
+    const watermark = loadWatermark(workflowDir);
     let next = watermark.get(sid) ?? 0;
     const events = session.events;
     if (Array.isArray(events) && events.length < next)
       next = 0;
     if (row.seq < next)
       return;
-    if (recordWorkflowEvent({ harnessDir, event: row.event })) {
-      advanceWatermark(harnessDir, sid, row.seq + 1, (candidate) => sessions.get(candidate) === undefined);
+    if (recordWorkflowEvent({ harnessDir, workflowDir, event: row.event })) {
+      advanceWatermark(workflowDir, sid, row.seq + 1, (candidate) => sessions.get(candidate) === undefined);
       if (workflowAskCache !== undefined && row.event.kind === "workflow-run") {
         try {
           const runName = row.runName ?? row.event.name;
@@ -6589,8 +7447,8 @@ function registerWorkflowLedger(ctx, resolver, workflowAskCache) {
 }
 
 // src/gates/goal-bridge.ts
-import { existsSync as existsSync16, readFileSync as readFileSync14, readdirSync as readdirSync8 } from "node:fs";
-import { join as join18 } from "node:path";
+import { existsSync as existsSync18, readFileSync as readFileSync17, readdirSync as readdirSync13 } from "node:fs";
+import { join as join21 } from "node:path";
 var GOAL_BRIDGE_LOGGER = "mstar/goal-bridge";
 var DEFAULT_MAX_GOAL_ROUNDS = 256;
 var FLOW_SEQUENCE = "iteration-start → per-plan cycles → iteration-close → PR delivery → merge-ready";
@@ -6611,6 +7469,19 @@ function log4(level, message) {
 function errorMessage4(error) {
   return error instanceof Error ? error.message : String(error);
 }
+function projectRegisterPointer(harnessDir) {
+  const projectsDir = resolveProjectDir(harnessDir, { harnessDir });
+  try {
+    for (const entry of readdirSync13(projectsDir, { withFileTypes: true })) {
+      if (!entry.isDirectory())
+        continue;
+      const registerPath = join21(projectsDir, entry.name, PROJECT_REGISTER_FILE);
+      if (existsSync18(registerPath))
+        return registerPath;
+    }
+  } catch {}
+  return join21(projectsDir, _DEFAULT_PROJECT, PROJECT_REGISTER_FILE);
+}
 function isRootLikeAgent(agent) {
   const header = agent?.session?.header;
   return header?.parentSession === undefined;
@@ -6620,23 +7491,23 @@ function iterationGoalObjective(iterationId) {
 }
 function steeringCompass(harnessDir) {
   const iterationsDir = resolveIterationDir(harnessDir);
-  if (!existsSync16(iterationsDir))
+  if (!existsSync18(iterationsDir))
     return;
   let entries;
   try {
-    entries = readdirSync8(iterationsDir, { withFileTypes: true });
+    entries = readdirSync13(iterationsDir, { withFileTypes: true });
   } catch {
     return;
   }
   for (const entry of entries) {
     if (!entry.isDirectory())
       continue;
-    const compassPath = join18(iterationsDir, entry.name, "delivery-compass.md");
-    if (!existsSync16(compassPath))
+    const compassPath = join21(iterationsDir, entry.name, "delivery-compass.md");
+    if (!existsSync18(compassPath))
       continue;
     let content;
     try {
-      content = readFileSync14(compassPath, "utf8");
+      content = readFileSync17(compassPath, "utf8");
     } catch {
       continue;
     }
@@ -6745,7 +7616,7 @@ function warnBlockedGoal(harnessDir, advisory) {
   const code = truncateLedgerField(advisory.code, GOAL_ADVISORY_CODE_CAP);
   const reason = truncateLedgerField(normalizeWorkflowName(advisory.message), GOAL_ADVISORY_MESSAGE_CAP);
   const objective = truncateLedgerField(normalizeWorkflowName(advisory.objective), GOAL_ADVISORY_OBJECTIVE_CAP);
-  log4("warn", `goal blocked [${code}] — ${reason}; objective: ${objective}; residuals: see ${harnessDir}/${STATUS_FILE} (residual_findings) — advisory only, zero harness writes`);
+  log4("warn", `goal blocked [${code}] — ${reason}; objective: ${objective}; residuals: see ${projectRegisterPointer(harnessDir)} — advisory only, zero harness writes`);
 }
 function rootAgentOf(agent, agents) {
   let current = agent;
@@ -6812,8 +7683,8 @@ function registerGoalBridge(ctx, resolver, config) {
 }
 
 // src/gates/plan-mode-bridge.ts
-import { existsSync as existsSync17 } from "node:fs";
-import { join as join19 } from "node:path";
+import { existsSync as existsSync19 } from "node:fs";
+import { join as join22 } from "node:path";
 var PLAN_MODE_BRIDGE_LOGGER = "mstar/plan-mode-bridge";
 var PLAN_STATUS_TODO = "Todo";
 var planModeBridgeLogSink = () => {};
@@ -6829,12 +7700,16 @@ function errorMessage5(error) {
   return error instanceof Error ? error.message : String(error);
 }
 function hasPrepareWindow(harnessDir) {
-  const statusPath = join19(harnessDir, STATUS_FILE);
-  if (!existsSync17(statusPath))
+  const statusPath = join22(harnessDir, STATUS_FILE);
+  if (!existsSync19(statusPath))
+    return false;
+  const selection = resolveReadWorkflow(harnessDir);
+  if (selection.kind === "error")
     return false;
+  const snapshotPath = join22(harnessDir, selection.dir, WORKFLOW_SNAPSHOT_FILE);
   let doc;
   try {
-    doc = readJson(statusPath);
+    doc = readJson(snapshotPath);
   } catch {
     return false;
   }
@@ -7223,7 +8098,7 @@ function registerHarnessPrompt(ctx, options) {
   return true;
 }
 function sectionEnforcement(harnessDir) {
-  return harnessDir === null ? { hard: false, source: "none" } : resolveCompassEnforcement(harnessDir);
+  return harnessDir === null ? { hard: false, source: "none" } : resolveRepoEnforcement(harnessDir);
 }
 function harnessRulesText(harnessDir, enforcement) {
   return [
@@ -7247,6 +8122,14 @@ function engineStatusProvider(ctx, resolver, bootHarnessDir) {
     return engineStatusSummary(entry.source);
   };
 }
+var DIGEST_PLAN_CAP = 8;
+var DIGEST_LEASE_CAP = 4;
+function joinCapped(items, cap, separator, render) {
+  const visible = items.slice(0, cap).map(render);
+  if (items.length > cap)
+    visible.push(`+${items.length - cap} more`);
+  return visible.join(separator);
+}
 function engineStatusSummary(source) {
   const lines = [
     `mstar engine status: v${source.version} | harness ${stripInterpolationHazard(source.harnessDir ?? "none")} | enforcement ${source.enforcement.hard ? "hard" : "soft"}`
@@ -7259,9 +8142,9 @@ function engineStatusSummary(source) {
   }
   const state = source.state;
   if (state !== null) {
-    const plans = state.plans.length === 0 ? "none" : state.plans.map((p) => `${stripInterpolationHazard(p.id)}(${stripInterpolationHazard(p.status)})`).join(" ");
+    const plans = state.plans.length === 0 ? "none" : joinCapped(state.plans, DIGEST_PLAN_CAP, " ", (p) => `${stripInterpolationHazard(p.id)}(${stripInterpolationHazard(p.status)})`);
     const residuals = state.residuals.length === 0 ? "none" : state.residuals.map((r) => `${r.severity} ${r.count}`).join(", ");
-    const leases = state.leases.length === 0 ? "none active" : state.leases.map((l) => `${stripInterpolationHazard(l.planId)} → ${stripInterpolationHazard(l.holder)}`).join("; ");
+    const leases = state.leases.length === 0 ? "none active" : joinCapped(state.leases, DIGEST_LEASE_CAP, "; ", (l) => `${stripInterpolationHazard(l.planId)} → ${stripInterpolationHazard(l.holder)}`);
     lines.push(`plans: ${plans} | residuals: ${residuals} | leases: ${leases}`);
     if (state.direction !== null)
       lines.push(`direction: ${stripInterpolationHazard(state.direction)}`);
@@ -7284,7 +8167,7 @@ var inject = ["loader"];
 function packagedCommandsDir() {
   try {
     const dir = fileURLToPath3(new URL("../harness-commands", import.meta.url));
-    return existsSync18(dir) ? dir : undefined;
+    return existsSync20(dir) ? dir : undefined;
   } catch {
     return;
   }
@@ -7329,10 +8212,10 @@ function registerMstarCommands(ctx) {
   if (dir === undefined)
     return;
   ctx.inject(["commands"], (commandsCtx) => {
-    for (const file of readdirSync9(dir).sort()) {
+    for (const file of readdirSync14(dir).sort()) {
       if (!file.endsWith(".md"))
         continue;
-      const parsed = parseCommandMarkdown(readFileSync15(join20(dir, file), "utf8"));
+      const parsed = parseCommandMarkdown(readFileSync18(join23(dir, file), "utf8"));
       if (parsed === undefined)
         continue;
       commandsCtx.commands.register({
@@ -7482,7 +8365,7 @@ function apply(ctx, config) {
   if (skillConfig !== undefined) {
     ctx.plugin({ name: skillLocalName, inject: skillLocalInject, Config: SkillLocalSchema, apply: applySkillLocal }, skillConfig);
   }
-  const effectiveHard = config.enforcement === "hard" || bootHarnessDir !== null && resolveCompassEnforcement(bootHarnessDir).hard;
+  const effectiveHard = config.enforcement === "hard" || bootHarnessDir !== null && resolveRepoEnforcement(bootHarnessDir).hard;
   if (effectiveHard && (config.dispatchBinding ?? "").trim() === "") {
     ctx.logger(DISPATCH_LOGGER).warn("Enforcement: hard is active but dispatchBinding is unset — the anti-recursion precheck is skipped (an Assignment whose Execute as equals the dispatching agent cannot be detected)");
   }