@orkestrel/scaffold 0.0.60 → 0.0.61

package/dist/host/CLAUDE.md

@@ -9,7 +9,8 @@ follows it. This file adds only what Claude Code does differently, and cannot we
 ## Dispatch mechanism
 
 - Use the Agent tool for a single dispatch, including when later control flow depends on its result.
-- Use a Workflow for a deterministic fan-out, staged pipeline, or loop. Serialize writing nodes.
+- Use a Workflow for a deterministic fan-out, staged pipeline, or loop. Serialize writing nodes, and
+  name each node's model alias per § Models.
 - Recover an interrupted Workflow with `resumeFromRunId`.
 - Foreground Bash is hard-capped at 10 minutes regardless of its timeout parameter. Launch anything
   that can exceed it as a harness-tracked background command.
@@ -20,6 +21,9 @@ follows it. This file adds only what Claude Code does differently, and cannot we
 
 - Use the aliases `opus` and `sonnet`. Never use a fixed Claude model ID and never use `inherit`.
 - Never set `CLAUDE_CODE_SUBAGENT_MODEL`. It flattens the engine split.
+- Every Workflow `agent()` node names its model alias explicitly. The Workflow custom-agent path
+  does not apply a role file's `model:` pin, so a node that omits the alias runs on the session
+  model and the lane reads normal on the wrong engine.
 - Run the main session on `opus` at high effort, set by `/model opus` or `"model": "opus"`. Opus 5
   is the Orchestrator in this harness. Its Orchestrator duties are unchanged if it is configured
   otherwise.

package/dist/host/agents/orchestration.md

@@ -35,8 +35,7 @@ One workflow runs across all providers. Each engine has one job and never takes
 - Route each nontrivial implementation unit to Opus or Sol. Objective, constraint-heavy,
   mechanical-precision work goes to Sol. API-shape, naming, and documentation-voice work goes to
   Opus. Cursor Composer is not an implementation route, and no `composer` role exists.
-- Design runs the adversarial pass. An audit runs the lanes its round names, with at least one whose
-  engine did not write the work.
+- Design runs the adversarial pass. § Execution loop's audit step fixes which lanes an audit runs.
 
 ## Orchestration by harness
 
@@ -64,12 +63,15 @@ the execution loop's audit step names, on the same clean-context terms.
 
 | Lane           | Argues                                                                      |
 | -------------- | --------------------------------------------------------------------------- |
-| **Subjective** | Shape, taste, naming, ergonomics, design fit, what the API should feel like |
+| **Subjective** | Shape, taste, naming, ergonomics, design fit, the feel the API must present |
 | **Objective**  | Correctness, constraints, and what the code and contracts actually permit   |
 
 **A required lane always runs.** Never collapse required lanes into one. Never let an engine's
 absence stand in for a required lane.
 
+Call a lane the round did not dispatch **not run**. `dark` names a bench that cannot round-trip and
+names nothing else, so never write it of a lane. A verdict file's recorded reason uses those words.
+
 ### Clean contexts
 
 - Dispatch each lane as a fresh subagent. Never run a lane inside the Orchestrator's own context.
@@ -134,6 +136,9 @@ Fall back in this order and record the substitution:
   nothing, and returns the required distillate.
 - Work directly on a typo, a one-line fix, or a single lookup. Orchestrate when isolation,
   parallelism, independent review, or substantial context justifies it.
+- Dispatch staging, packing, gate-chain invocation, and instrument authorship as units — `builder`
+  for a fully specified script, `verifier` for its evidence — each with a brief and an audit like
+  any other unit. Only the commit and the push stay with the Orchestrator.
 
 ## Roles
 
@@ -196,8 +201,8 @@ Every role honours this floor. No dispatch may widen it.
   those roles cannot inspect the tree by writing to it, the Orchestrator supplies the actual diff
   and status evidence in every review dispatch.
 - `verifier` has no edit or write tools and never fixes a failure.
-- Run writing roles in the main checkout, strictly serialized: one writer at a time, dispatched
-  from a clean committed baseline, each owning disjoint files.
+- Run one writing role per checkout, on disjoint checkouts, each dispatched from a clean committed
+  baseline and each owning disjoint files. In a single checkout that is one writer at a time.
 - Treat every shared file as report-only.
 - No role commits, pushes, tags, publishes, installs dependencies, or runs a destructive command.
 - No role runs `git checkout`, `git restore`, `git stash`, `git reset`, or `git clean`. Each discards
@@ -249,8 +254,8 @@ Every role honours this floor. No dispatch may widen it.
 Concurrent executors share a filesystem unless isolated. Follow these rules to prevent clobbered
 edits, formatter and build races, cache phantoms, and validation cross-talk.
 
-1. Serialize writing executors in the main checkout. Commit a checkpoint before each writing
-   dispatch so git is the rollback mechanism.
+1. Serialize writers as § Permission floor states: one per checkout, checkouts disjoint. Commit a
+   checkpoint before each writing dispatch so git is the rollback mechanism.
 2. Assign disjoint owned files plus explicit shared and off-limits files.
 3. Keep shared files report-only. Executors return exact patches for serial integration.
 4. Restrict concurrent executors to read-only, scoped validation. A tree-wide result may contain a
@@ -272,8 +277,8 @@ edits, formatter and build races, cache phantoms, and validation cross-talk.
    and a flake makes that look like it worked. Refuse the failed row, name it, and re-run it alone
    before deciding what it was.
 9. Run a fleet pass in slices that report as they finish, never as one block. A block hides its first
-   failure behind every target that follows, so the failure surfaces after the work it should have
-   stopped. A slice hands control back while most of the fleet is still unstarted.
+   failure behind every target that follows, so the failure surfaces after the work it exists to
+   stop. A slice hands control back while most of the fleet is still unstarted.
 10. Re-run a timing or resource failure alone before believing it. Concurrent slices, builds, and
     suites make a container miss deadlines it meets when idle, so a red result under load is a
     question rather than an answer. A unit re-running the file alone is not alone: its own exec,
@@ -326,21 +331,21 @@ longer holds.
      ends the campaign, each to end implemented, repaired, retained, or intentionally excluded on
      evidence. A plan that names work but not its end can only be abandoned, never finished.
 3. **Implement.** Route each nontrivial objective unit to the Sol `implementer` and each nontrivial
-   subjective unit to the Opus `implementer`, in the main checkout, one writer at a time. Route a
-   fully specified taste-free unit to `builder`. Never route implementation to an engine the unit's
-   judgment load exceeds.
+   subjective unit to the Opus `implementer`, in the checkout the unit writes, one writer per
+   checkout. Route a fully specified taste-free unit to `builder`. Never route implementation to an
+   engine the unit's judgment load exceeds.
 4. **Integrate.** Evaluate each distillate against its acceptance criteria, apply shared-file
    patches serially, and route cross-cutting findings. Integration applies exact returned patches
    and mechanical conflict resolution only. A new type, mechanism, behavior, or acceptance
    criterion discovered at integration is a successor brief routed to a writer, never an
    integration edit.
-5. **Audit adversarially.** Audit every nontrivial implementation with at least one lane whose
-   engine did not write it: `reviewer` for the subjective lane and `analyst` for the objective lane,
-   the way step 2 names its lanes. Run the second lane when the first returns FAIL, when the subject
-   is a rendered or externally driven surface, or when the unit's claims span both correctness and
-   shape. Dispatch `checker` in addition when the acceptance criteria are mechanical — counts,
-   paths, parity rows, scope honesty — never in place of a lane. Record in the round's verdict file
-   when a lane or the checker did not run.
+5. **Audit adversarially.** Audit every nontrivial implementation with the objective lane and the
+   subjective lane — `analyst` and `reviewer`, the way the design step names its lanes — at least
+   one of them on an engine that did not write the work. Dispatch `checker` in addition when the
+   acceptance criteria are mechanical — counts, paths, parity rows, scope honesty — never in place
+   of a lane. A round that runs fewer lanes than its brief names, or omits the checker its criteria
+   call for, records the deviation in its verdict file with that round's own reason, never a
+   template sentence.
    - State the audit's subject as numbered falsifiable claims and require per-claim verdicts with
      evidence, per the Falsification law in `.claude/rules/quality.md` and the `orkestrel-falsify`
      value set, unless the dispatch names a different skill that fixes another.
@@ -447,6 +452,8 @@ The harness bridge names the concrete mechanism for each of these.
   the record transcribes them, because the committed instrument re-produces the film. The **Bench
   laws** rule "Ephemeral streams, durable records" owns journals and points here for everything
   durable.
+- Name a retained log with the `<unit>.log.txt` pattern, never with a bare `.log` suffix, which the
+  root `.gitignore` file ignores.
 - Promote anything that must outlive the campaign into a durable artifact before the sweep — a
   commit message, a guide, a rule, a retrospective. What is only in a swept file did not survive,
   and a debrief that must quote the record verbatim has nothing to quote.
@@ -461,6 +468,11 @@ The harness bridge names the concrete mechanism for each of these.
   wave's plan, routing ledger, and verdicts sit together rather than split across the packages they
   rule on.
 - Never put them in the package they are about. A published package's tree is its product.
+- Where the orchestrator's repository is itself a subject package, keep `.orkestrel/` as the
+  artifact home and stage every landing chain by path, never with `git add -A`. Run that
+  checkout's own CLI through the built `node dist/bin/main.js` entry, never through the `npx`
+  launcher, and record its audit reading beside the landing instead of gating the landing on it.
+  Commit the records before the landing's commit step, never during it.
 - Claim nothing outside `.orkestrel/` unless Orkestrel scaffold mandates it. Everything Orkestrel
   owns in a consumer's tree lives beneath that folder, so a convention can be settled there without
   colliding with a convention that is not Orkestrel's.
@@ -537,6 +549,9 @@ each check. Then run this checklist against what you filled.
   derived from it, and a template change with the materialized copy the package generates from it.
 - Read each criterion against the off-limits list, line by line. Grant the file a criterion needs or
   strike that criterion. A file the change will break that appears in neither list is unscoped.
+- Where a scope line names the `tests/**` or `src/**` glob, name the paths the `scaffold repair`
+  command restores as off-limits in the same sentence. Bound a criterion wider than its Sites by
+  the brief's scope.
 - Scope a unit that changes a mechanism to own the prose describing it. Where a brief scopes that
   prose out, name the carrier and dispatch it before the change ships.
 - Give a small unrelated obligation its own unit.
@@ -747,6 +762,8 @@ transport.
 
 ### Recovering a dark bench
 
+- A probe that finds no bench binary records the bench dark and, in the same turn, names to the user
+  the install command and the bench it unblocks. Re-probe when the user answers.
 - A probe that finds a bench binary present but authentication unavailable starts recovery in the
   same turn. Do not record the bench dark and wait.
 - Background the login command with its output captured under `tmp/<bench>/`, surface the
@@ -775,6 +792,9 @@ five-minute upload window in `references/window.md`. Load the skill when the use
 release, and follow it there rather than reconstructing the procedure here. What remains in this
 section binds an executor who is not publishing.
 
+A wave over unpublished tips derives its order per run from the graph and records only the round
+each package landed in, never the order itself.
+
 ### Fixing a dependency before it publishes
 
 A defect a consumer meets sometimes lives in a package the consumer only has from the registry.
@@ -793,6 +813,11 @@ Build the dependency from source, pack it, and **install the tarball** into the
 - **Rebuild and repack whenever the source moves.** A stale tarball is the same defect as a stale
   `dist/`, and it is worse for being invisible: the consumer's gates go green against a fix that no
   longer exists in the dependency's tree.
+- **Run one unit per checkout, at that checkout's catalog layer.** Give a checkout with no rows an
+  adopt unit only when its typecheck against the staged closure reddens.
+- **Fetch and merge the dependency's default branch before packing it**, wherever another session
+  can move that branch. A pack from a stale tip ships the consumer a dependency the dependency's own
+  repository no longer has.
 - **Restore the registry copy before any gate that must prove the published artifact, and before
   publishing anything.** A distribution proof run against a local tarball proves the local tarball.
   The release still follows layer order: the dependency publishes first, then the consumer re-pins to

package/dist/host/agents/skills/enterprise-bootstrap/references/components.md

@@ -625,7 +625,7 @@ Real switchable tab panels (JS-driven — buttons, not scroll anchors):
 </div>
 ```
 
-**Responsive offcanvas** — the canonical sidebar-that-becomes-a-drawer: replace `.offcanvas` with `.offcanvas-{sm|md|lg|xl|xxl}`. Content renders **inline above** that breakpoint and as an **offcanvas below** it. Close buttons inside a responsive offcanvas need an explicit `data-bs-target`. Always set `aria-labelledby` (it is conceptually a dialog; `role="dialog"` is added by JS). Width/height via `--bs-offcanvas-width` (400px) / `--bs-offcanvas-height` (30vh). Full app-shell pattern: [bootstrap-reference.md](bootstrap-reference.md) → App shell.
+**Responsive offcanvas** — the canonical sidebar-that-becomes-a-drawer: replace `.offcanvas` with `.offcanvas-{sm|md|lg|xl|xxl}`. Content renders **inline above** that breakpoint and as an **offcanvas below** it. Close buttons inside a responsive offcanvas need an explicit `data-bs-target`. Always set `aria-labelledby` (it is conceptually a dialog; `role="dialog"` is added by JS). Width/height through `--bs-offcanvas-width` (400px) / `--bs-offcanvas-height` (30vh). Full app-shell pattern: [bootstrap-reference.md](bootstrap-reference.md) → App shell.
 
 ### Pagination
 
@@ -802,7 +802,7 @@ Popovers are **opt-in**: they do nothing until initialized in JS (see [JavaScrip
 </div>
 ```
 
-Gotcha: the spied element must be a scroll container (height/overflow, or focusable via `tabindex="0"`), and heading IDs must match the nav `href`s exactly. Scrollspy highlights position in one long page — it is not a substitute for real tabs.
+Gotcha: the spied element must be a scroll container (height/overflow, or focusable through `tabindex="0"`), and heading IDs must match the nav `href`s exactly. Scrollspy highlights position in one long page — it is not a substitute for real tabs.
 
 ### Spinners
 
@@ -899,7 +899,7 @@ Modifiers (combine freely):
 </div>
 ```
 
-Toasts are **opt-in** — hidden until `.show()` is called (or shown via a trigger). Keep the container in the DOM before showing so the live region announces. Use `role="status"`/`aria-live="polite"` for confirmations; reserve `role="alert"`/`assertive` for urgent messages. Errors requiring action are never toasts — see [bootstrap-reference.md](bootstrap-reference.md) → Feedback discipline.
+Toasts are **opt-in** — hidden until `.show()` is called (or shown through a trigger). Keep the container in the DOM before showing so the live region announces. Use `role="status"`/`aria-live="polite"` for confirmations; reserve `role="alert"`/`assertive` for urgent messages. Errors requiring action are never toasts — see [bootstrap-reference.md](bootstrap-reference.md) → Feedback discipline.
 
 ### Tooltip (Requires Popper.js)
 
@@ -926,7 +926,7 @@ Toasts are **opt-in** — hidden until `.show()` is called (or shown via a trigg
 </button>
 ```
 
-Tooltips are **opt-in** (JS init required, below). Only attach to focusable elements so keyboard users can trigger them; never put essential information _only_ in a tooltip, and never report form errors via tooltip. `data-bs-html` with untrusted content is an XSS vector.
+Tooltips are **opt-in** (JS init required, below). Only attach to focusable elements so keyboard users can trigger them; never put essential information _only_ in a tooltip, and never report form errors through a tooltip. `data-bs-html` with untrusted content is an XSS vector.
 
 ## JavaScript Initialization
 
@@ -949,7 +949,7 @@ const myToast = bootstrap.Toast.getOrCreateInstance('#myToast')
 myToast.show()
 ```
 
-Constructors accept elements or CSS selector strings. Full lifecycle — `getInstance`, `dispose()` on unmount, event pairs (`show.bs.*` / `shown.bs.*`), async behavior, and why SPAs should prefer framework wrappers: [bootstrap-reference.md](bootstrap-reference.md) → JavaScript lifecycle.
+Constructors accept elements or CSS selector strings. Full lifecycle — `getInstance`, `dispose()` on unmount, event pairs (`show.bs.*` / `shown.bs.*`), async behavior, and why an SPA prefers a framework wrapper: [bootstrap-reference.md](bootstrap-reference.md) → JavaScript lifecycle.
 
 ## Icons
 

package/dist/host/agents/skills/orkestrel-debrief/SKILL.md

@@ -71,8 +71,8 @@ a practice that worked so it repeats.
 4. **Process retrospective.** Walk the campaign record for both failure and success:
    dispatches that deviated and why; recoveries that worked (codify the mechanism that
    saved them); estimates versus observed durations; audit rounds that caught real
-   defects versus rounds that churned; anything the orchestrator absorbed that should
-   have been dispatched or dispatched that it should have owned.
+   defects versus rounds that churned; anything the orchestrator absorbed that a dispatch
+   owned, or dispatched that the orchestrator owned.
 5. **Instruction-set audit.** Audit the agents, rules, skills, and orchestration
    contract themselves against the campaign record, using the adversarial method in
    [instruction-audit.md](references/instruction-audit.md). What confused an executor is

package/dist/host/agents/skills/orkestrel-debrief/references/instruction-audit.md

@@ -7,11 +7,12 @@ evidence-first treatment as any surface.
 ## Blind passes, one brief
 
 Run the subjective lane and the objective lane on the SAME brief, in parallel, neither
-seeing the other's answer before both return. `reviewer` holds the subjective lane and
-`analyst` holds the objective lane.
+seeing the other's answer before both return. `.agents/orchestration.md` § Engine
+assignment decides which engine and which role holds each lane, including under a dark
+bench; read the assignment there and name it in the dispatch.
 
 Each lane returns numbered findings, most severe first, and exactly one terminal line:
-`INSTRAUDIT <LANE>: <n> findings`. Each charter defaults to the `orkestrel-falsify`
+`INSTRAUDIT <LANE>: <finding ids, or none>`. Each charter defaults to the `orkestrel-falsify`
 verdict shape and takes a different shape the dispatch names, so name `orkestrel-debrief`
 in the dispatch and this shape binds.
 
@@ -25,9 +26,9 @@ record.
 
 ## The subjective lens list
 
-Held by `reviewer`. It judges coherence of the role model, charter voice, whether each
-role's job is one job, and whether the skill family reads as one system. This section is
-the lens list's only normative home, and the lane states its coverage against it.
+Held by the subjective lane. It judges coherence of the role model, charter voice, whether
+each role's job is one job, and whether the skill family reads as one system. This section
+is the lens list's only normative home, and the lane states its coverage against it.
 
 - **Role-job singularity.** Is each charter's work cohesive? A charter describing bundled
   jobs is either a role to split or a bundle no dispatch sends whole.
@@ -48,9 +49,9 @@ the lens list's only normative home, and the lane states its coverage against it
 
 ## The objective lens list
 
-Held by `analyst`. It runs evidence-only sweeps of the actual files and the campaign
-record. This section is the lens list's only normative home, and the lane states its coverage
-against it.
+Held by the objective lane. It runs evidence-only sweeps of the actual files and the
+campaign record. This section is the lens list's only normative home, and the lane states
+its coverage against it.
 
 - **Duplication diff.** Whole-line and obligation-level comparison across charters, rules,
   and skills. A charter that restates a rule drifts from it; a rule restated elsewhere has

package/dist/host/agents/skills/orkestrel-falsify/SKILL.md

@@ -72,13 +72,15 @@ nobody claimed.
   brief that points at a rule file, section, or guide the executor cannot find delivers nothing while
   looking like authority — and it fails silently, because an auditor does not report a heading it
   never saw. Check before dispatch; propagate the missing file rather than restating its contents in
-  the brief. This is the reason restatement felt necessary, and it is the wrong cure.
+  the brief. This is the reason restatement felt necessary, and it is the wrong cure. Where the
+  executor's tree carries a superseded vendored copy of an authority, take the stale-authority
+  branch in `references/brief.md` § "What not to put in a brief".
 - Run the **adversarial pass** on one identical brief: a subjective lane and an objective
   lane, each a fresh subagent with a clean context, blind to each other. Reconcile them yourself.
   `.agents/orchestration.md` owns lane definitions, engine assignment, and what happens when an
   engine is dark; do not restate them here.
-- A round run with one lane is a deviation. Record it rather than glossing it. If an engine is
-  unavailable, the remaining engine runs every lane — it never drops one.
+- `.agents/orchestration.md` § Execution loop owns which lanes a round runs and the deviation a
+  short round records; § Engine assignment owns the substitution.
 - **Pair every finder with an independent refuter when the round fans out past the subjective and
   objective lanes.** The
   refuter receives one slice's findings, never that finder's work, and is briefed to BREAK them
@@ -135,27 +137,35 @@ comparable; a round that invents its own cannot be read against the last one.
    | --------------- | -------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------- |
    | `CONFIRMED`     | attacked and it held                                                                   | as the Falsification law requires                                                                                                                             |
    | `BROKEN`        | falsified                                                                              | as the Falsification law requires — note it says _input, **state, or interleaving**_, so a concurrency claim is falsified by an interleaving, not by an input |
-   | `UNRESOLVED`    | cannot be decided from the evidence available                                          | what would settle it                                                                                                                                          |
+   | `UNRESOLVED`    | cannot be decided from the evidence available                                          | what would settle it; a claim whose only evidence is the writer's own report takes this value                                                                 |
    | `NOT-EVIDENCED` | a claim about a rendered or externally driven surface the supplied capture cannot show | which capture is missing                                                                                                                                      |
 
    `CONFIRMED` and `BROKEN` defer; only `UNRESOLVED` and `NOT-EVIDENCED` are this skill's, because
    the law does not name them. `BROKEN` and `UNRESOLVED` are **separate**: a claim nobody could
    decide has not been falsified, and it cannot supply the fields falsification requires.
-   `NOT-EVIDENCED` is the token the `analyst` and `reviewer` charters already require; it is kept,
-   not re-invented.
+   `NOT-EVIDENCED` is the auditing lanes' own token; it is kept, not re-invented.
 
 2. **Findings fitting no claim**, if any, each substantiated to the same standard as `BROKEN`.
 
-3. **One terminal line**, and only one:
+3. **Attacked and held**: the claims this round attacked and could not break, each with the attack
+   that failed, and the adjacent behaviour that looks like the defect and is correct. This is where
+   the next round reads what has already been tried, so a claim listed here without its attack is
+   worth nothing to it. A claim's own `CONFIRMED` line already carries the evidence that convinced
+   the auditor, so list here only the attacks no verdict line carries and the adjacent behaviour.
+
+4. **One terminal line**, and only one:
 
    ```text
-   VERDICT: PASS — <m> of <m> confirmed, no findings outside the claims
-   VERDICT: FAIL — <n> broken, <u> unresolved, <e> not-evidenced, <x> findings outside the claims
+   VERDICT: PASS
+   VERDICT: FAIL <claim numbers>; outside the claims: <finding ids>
    ```
 
-   **`PASS` requires every one of these to be true**: every claim `CONFIRMED`, nothing `UNRESOLVED`, nothing
+   The claim numbers are every claim that is not `CONFIRMED`. Write `none` in a slot the round
+   leaves empty, so a `FAIL` driven only by a finding outside the claims still names both.
+
+   **`PASS` requires all of this**: every claim `CONFIRMED`, nothing `UNRESOLVED`, nothing
    `NOT-EVIDENCED`, and no substantiated finding outside the claims. A single substantiated finding
-   forces `FAIL` no matter how the numbered claims landed — otherwise a round can report a real
+   forces `FAIL` however the numbered claims landed — otherwise a round can report a real
    defect and still emit the word that authorises the release.
 
 No process diary. No summary of what was read.

package/dist/host/agents/skills/orkestrel-falsify/references/brief.md

@@ -36,6 +36,21 @@ an executor inventing an answer and building on it silently.
 **The threshold.** State that a finding is worth more than a clean pass, and why: the alternative is
 a consumer finding it after publication, when the version is already spent.
 
+## The read-only audit lane's brief
+
+An audit lane writes nothing and runs nothing, so its brief carries fewer rows than a writing
+unit's. Give a lane every row § Anatomy names — the subject with the evidence
+§ "Evidence, by subject type" requires of each row it occupies, what the round decides, already
+established, the numbered falsifiable claims, the unknowns, and the threshold — plus its own
+**Role and lane** row (the role, its engine, and which lane it holds) and **Output** row (the
+verdict shape and its single terminal line). Review evidence folds into the subject.
+
+Omit the rows a writer needs and a lane cannot use: owned, shared, and off-limits files; the
+Execution line's writer form, keeping the sentence that the lane performs the assignment directly
+and spawns nothing; and acceptance criteria stated as gate commands. A lane that holds no shell
+cannot close a gate criterion, so a brief handing it one is asking for a ruling on the writer's
+report.
+
 ## The successor rule
 
 A re-run **amends**; it never restates. Rewriting a brief from scratch loses the shape of what has
@@ -71,7 +86,7 @@ repair to carry the next defect; a round that finds them is converging, not fail
   accumulated damage no single diff shows.
 - **"The self-declared sound-and-unchanged verdicts are sound."** A writer's table saying a site
   needed no change is a claim like any other, made by the party least able to test it. Require the
-  auditor to pick the ones it considers most likely wrong and actually attack them, and say how many.
+  auditor to pick the ones it considers most likely wrong and actually attack them.
 
 ## Instructions that change auditor behaviour
 
@@ -92,7 +107,10 @@ the brief, by the orchestrator.
 ## What not to put in a brief
 
 - Laws already binding from `AGENTS.md` and the rule files. Reference them; restating invites drift
-  between the copy and the original.
+  between the copy and the original. Where the executor's tree carries a vendored copy of an
+  authority the canon has since superseded, quote the landed text with its canonical path and mark
+  the quotation as superseding the vendored copy, because a bare reference resolves to the stale
+  copy the executor holds.
 - Any hint of what the other auditor is finding, or has found.
 - Your own hypothesis about where the defect is, beyond what the claims state. An auditor handed a
   suspect investigates the suspect and stops.

package/dist/host/agents/skills/orkestrel-harden-package/SKILL.md

@@ -47,7 +47,7 @@ Load [hardening.md](references/hardening.md) for the hardening lane and for any
 6. **Prove each defect before repairing it.** A repair begins with a test that fails for that defect: record the exact command and its failing count before the fix and the same command's passing count after. A repair with no red-then-green record is unproven.
 7. **Consolidate.** Run the complete centralization and wrapper sweep. Update all call sites to the real symbol rather than leaving aliases or 1:1 delegates.
 8. **Challenge seams.** Add deterministic tests for invariants, boundaries, failures, lifecycle, cleanup, cancellation, concurrency, hostile input, and resource pressure as applicable, under the test rules' real-implementation law.
-9. **Use live services deliberately.** Put real external services/models in their dedicated project, require readiness, and make each request minimally sufficient, robust, and behaviorally meaningful. When the claim is that a foreign client can use this package, drive one representative real client end to end.
+9. **Use live services deliberately.** Put real external services/models in their dedicated project, require readiness, and make each request minimally sufficient, stable across the service's nondeterminism, and behaviorally meaningful. When the claim is that a foreign client can use this package, drive one representative real client end to end.
 10. **Document the final behavior.** Update the governing guide, examples, method tables, limitations, and parity coverage. Document architectural limits honestly.
 11. **Audit completion.** Inspect test discovery, `.todo`/`.skip`/conditional skip use, source/test helper duplication, exports, environment isolation, unexpected text corruption, and the entire diff.
 12. **Verify.** Run the repository-prescribed gates in order and inspect the generated outputs relevant to the request.

package/dist/host/agents/skills/orkestrel-harden-package/references/hardening.md

@@ -50,7 +50,7 @@ Keep live tests in a dedicated project with explicit readiness, setup, timeout,
 - For model tests, constrain temperature/seed/options when the real API supports it, but do not claim determinism the provider does not promise.
 - Increase context or workload incrementally only when the scenario requires it.
 - Test instruction precedence, long-context behavior, summarization, tool calls, scopes, and state transitions through observable outcomes.
-- Avoid redundant expensive calls; one request should prove one primary claim.
+- Avoid redundant expensive calls; one request proves one primary claim.
 
 Keep live projects outside the fast default suite when repository policy requires it, while making their explicit command authoritative for the campaign.
 

package/dist/host/agents/skills/orkestrel-harden-package/references/research.md

@@ -35,7 +35,7 @@ Include:
 
 - public and internal behavior needed by real consumers;
 - official upstream capabilities that fit the requested scope;
-- architectural limitations that cannot or should not be copied;
+- architectural limitations that cannot or must not be copied;
 - legacy features worth salvaging;
 - every `TODO`, deferred branch, placeholder, or documented omission in scope.
 

package/dist/host/agents/templates/brief.md

@@ -10,6 +10,10 @@ copy `# Unit UNIT_ID — SHORT_SUBJECT`. Delete each italic reminder as you fill
 under, and leave no row blank: fill a row you cannot close with a named unknown label, and
 describe that label under § Unknowns with how the unit reports back on it.
 
+For a read-only audit lane, fill the rows
+`.agents/skills/orkestrel-falsify/references/brief.md` § "The read-only audit lane's brief" names
+and delete the rest of this template.
+
 ## Role and engine
 
 ROLE_NAME on ENGINE_NAME, reached as TRANSPORT.
@@ -73,7 +77,7 @@ answer around._
 _Grant a behaviour with the tests that pin it, a constant with every fixture and expectation derived
 from it, a template with the materialized copy the package generates from it, and a mechanism with
 the prose describing it: the comment beside the code it edits and the guide passage stating the
-behaviour it moves._
+behaviour it moves. A unit that moves a published symbol owns the package `README.md`._
 
 **Shared (report-only).** SHARED_FILES
 
@@ -84,21 +88,25 @@ edits nothing in this row._
 
 _Name each file the unit must not touch, and read every acceptance criterion against this row line by
 line. Grant the file a criterion needs, or strike that criterion. A file the change breaks that
-appears in no row of this section is unscoped._
+appears in no row of this section is unscoped. Never list `tmp/probe/` off-limits: it is the unit's
+probe home, and `.claude/rules/tests.md` puts every runtime probe there._
 
 **What asserts the state this change ends.** FILES_THE_RESULT_MAKES_FALSE
 
 _List every file the result makes false rather than every file that declares the thing changing: the
 test asserting the reversed behaviour, the fixture carrying the raised value, the golden digest over
 generated output, the consumer script naming the removed union member. Derive the list by running the
-suite; where you cannot run it, name the search's bound so the unit re-derives the list. End each
-entry in Owned, in Shared, or with a named carrier dispatched before this change ships._
+suite; where you cannot run it, name the search's bound so the unit re-derives the list. A rename's
+search bound is a word-boundary sweep over the old name followed by a case-insensitive sweep over
+its `-s`, `-ed`, and `-ing` inflections. End each entry in Owned, in Shared, or with a named carrier
+dispatched before this change ships._
 
 **Tools and limits.** ALLOWED_TOOLS, PERMISSION_LIMITS
 
 _Check the § Output mechanism and every acceptance criterion's verification method against this
 allowlist. A read-only lane writes no report file and runs no probe, so hand it the rendered evidence
-instead._
+instead. A rename moves the file with the shell's `mv`, never `git mv`; `git add -N` is permitted
+only to render diff evidence._
 
 ## Execution
 
@@ -138,8 +146,9 @@ criterion behind it. Where the change edits a file the repository vendors or dig
 regeneration step ahead of every gate that reads the generated artifact. Ask what the change does
 to every fact you measured, and fix each criterion to the state the unit finishes in. Close each
 criterion with owned files alone, and name the property the unit must change; record a consequence
-you expect to follow as an observation, never as a criterion. A scoped run over the unit's own
-owned files stays a legitimate criterion._
+you expect to follow as an observation, never as a criterion. A criterion that closes on an
+instrument's reading names that instrument's negative control and the class the control proves the
+instrument can see. A scoped run over the unit's own owned files stays a legitimate criterion._
 
 **Observations, not criteria.** TIMING_SENSITIVE_OR_WHOLE_SUITE_GATES
 

package/dist/host/agents/transports/claude.md

@@ -21,8 +21,10 @@ with the permission mode the route pins. Never substitute a fixed Claude model i
 
 Verify that the `claude` CLI resolves and is authenticated before first use. On either
 failure return it immediately with the fallback named, so the Sol main session records
-Opus unavailable for the round. Never install, authenticate, or substitute an API key,
-access token, or copied auth file.
+Opus unavailable for the round. Where the binary is absent, that report names the install
+command for the `claude` CLI, so the Orchestrator can put it to the user in the same turn
+it records the bench dark and re-probe when the user answers. Never install, authenticate,
+or substitute an API key, access token, or copied auth file.
 
 Journal every run: redirect --output-format stream-json to tmp/claude/<unit>.jsonl,
 which is gitignored, and record the session id. A bench unit with no journal ran on its

package/dist/host/agents/transports/codex.md

@@ -119,7 +119,7 @@ skill owns the value set and the terminal line. Point the brief at both; restate
 
 ## Implementer route
 
-Sandbox `workspace-write`, main checkout, sole serial writer from a clean committed
+Sandbox `workspace-write`, the checkout the route writes in, its sole serial writer from a clean committed
 baseline, with owned files, off-limits files, and a deviation contract. The brief forbids
 dependency installation, commits, pushes, publishing, credentials, destructive commands,
 shared-file edits, and tree-wide mutating gates.
@@ -147,6 +147,9 @@ negative tests is unaffected.
 
 - Verify `codex --version` before first use. On Windows `codex` resolves in Bash through
   the extensionless npm shim; if it does not, invoke `codex.cmd`.
+- Binary absent: report it so the Orchestrator can record the bench dark and, in the same turn,
+  name to the user the install command for `@openai/codex` and the bench it unblocks. The
+  Orchestrator re-probes when the user answers. Never install it yourself.
 - Binary present but authentication unavailable: report it so the Orchestrator can start
   device-auth recovery in the same turn. It backgrounds `codex login --device-auth` with
   output captured to `tmp/codex/login.log`, surfaces the verification URL and one-time code

package/dist/host/claude/agents/analyst.md

@@ -34,7 +34,9 @@ Everything `.agents/orchestration.md`'s dispatch contract requires, plus:
 - **Every authority the brief references must exist in the tree the exec is rooted in.** Check
   before dispatch. A brief citing a rule file or section the executor cannot find delivers nothing
   while looking like authority, and it fails silently — an auditor does not report a heading it
-  never saw. Propagate the missing file; do not restate its contents in the brief.
+  never saw. Propagate the missing file rather than restating its contents in the brief, and take
+  the stale-authority branch in `.agents/skills/orkestrel-falsify/references/brief.md` § "What not
+  to put in a brief" where the executor's tree carries a superseded vendored copy.
 - For an audit: the subject as numbered falsifiable claims, and the skill that fixes the verdict
   shape. The Falsification section of `.claude/rules/quality.md` owns the method and the evidence
   each verdict carries. The verdict shape defaults to `orkestrel-falsify`; a dispatch may name a

package/dist/host/claude/agents/application.md

@@ -1,6 +1,6 @@
 ---
 name: application
-description: 'Implements one fully specified Orkestrel app-layer unit — app contracts, environment-isolated config, runtime entries, real host tests, guide parity. Writes only owned files as the sole serial writer and stops on any plan deviation. Nontrivial app design belongs to GPT-5.6 Sol or Opus 5.'
+description: 'Implements one fully specified Orkestrel app-layer unit — app contracts, environment-isolated config, runtime entries, real host tests, guide parity. Writes only owned files in the checkout the unit writes as the sole serial writer and stops on any plan deviation. Nontrivial app design belongs to GPT-5.6 Sol or Opus 5.'
 tools: Read, Grep, Glob, Edit, Write, Bash
 model: sonnet
 effort: low

package/dist/host/claude/agents/builder.md

@@ -1,6 +1,6 @@
 ---
 name: builder
-description: 'Implements one small, fully specified, taste-free unit exactly as dispatched. Writes only owned files in the main checkout as the sole serial writer, validates narrowly, and stops on any plan deviation. Nontrivial implementation belongs to GPT-5.6 Sol or Opus 5.'
+description: 'Implements one small, fully specified, taste-free unit exactly as dispatched. Writes only owned files in the checkout the unit writes as the sole serial writer, validates narrowly, and stops on any plan deviation. Nontrivial implementation belongs to GPT-5.6 Sol or Opus 5.'
 tools: Read, Grep, Glob, Edit, Write, Bash
 model: sonnet
 effort: low
@@ -19,8 +19,8 @@ dispatch contract.
 
 - Before writing, read **AGENTS.md**, every applicable `.claude/rules/*.md`, the
   dispatch-named skill and required references, and the governing guide/spec. All bind you
-  as written there, and this charter restates none of them. An app-layer unit additionally
-  binds `.claude/rules/application.md` and `.claude/rules/workspace.md`.
+  as written there, and this charter restates none of them.
+- An app-layer unit belongs to `application`: stop and say so.
 - Write ONLY the owned files named in your dispatch. Shared or off-limits files are
   report-only: if one needs a change, RETURN the exact patch — never edit it.
 - NO tree-wide or mutating commands: never `format`, lint `--fix`, or `build`.

package/dist/host/claude/agents/checker.md

@@ -37,6 +37,11 @@ No judgment calls: a question that needs one becomes a **referral** — specific
 evidenced, addressed to the subjective lane when it is running and to the
 Orchestrator when it is not — never a guess and never a verdict of yours.
 
+Rule a claim whose only evidence is the writer's report `UNRESOLVED`, never
+`CONFIRMED`, whatever the brief says. A quoted command and exit code inside a
+report is the writer quoting itself, so it evidences nothing until a lane that ran
+the command supplies the reading.
+
 ## Output contract
 
 Return the shape fixed by the dispatch.