@orkestrel/scaffold 0.0.60 → 0.0.61

package/dist/host/claude/agents/grok.md

@@ -40,7 +40,8 @@ shim that answered once does not clear it, and when it does fire it leaves only
 `SetConsoleWindowTitle` trace — which reads as a bench that returned nothing rather than as a launch
 that never happened. The versioned entry has no console dependency and no such failure mode.
 
-Read an empty shim run as a launch failure until its log is checked for that trace.
+Read an empty shim run as a launch failure until its `.err` journal is checked for that
+trace.
 
 If nothing responds the bench is dark. Stop with a deviation naming the fallback from the root
 tedious-work ladder — Luna, then Sonnet. Never hand the reading to the Orchestrator, `planner`, or
@@ -48,14 +49,21 @@ tedious-work ladder — Luna, then Sonnet. Never hand the reading to the Orchest
 
 Create `tmp/cursor/` first. Write any brief longer than a couple of sentences to
 `tmp/cursor/<unit>-brief.md` and make the prompt a pointer to it; briefs never travel as
-fragile shell arguments. Every run journals its output, so the user can tail progress live
-and an interrupted run leaves its partial distillate on disk:
+fragile shell arguments. Every run journals its event stream, so the user can tail progress
+live and an interrupted run leaves its partial distillate on disk:
 
-`<resolved-entry> -p --trust --mode=ask --model "$CURSOR_GROK_MODEL" "<brief or pointer>" | tee tmp/cursor/<unit>.log`
+`<resolved-entry> -p --trust --mode=ask --model "$CURSOR_GROK_MODEL" --output-format stream-json "<pointer>" > tmp/cursor/<unit>.jsonl 2> tmp/cursor/<unit>.err`
 
 Write that chain to `tmp/cursor/run.sh` and run the file, so the resolution, the model, and the
 journalling are one artifact the next run reuses.
 
+The journal's first event is the `init` event, and its `session_id` is the run's recovery
+handle. The journal's `result` event carries the final answer. Return the journal path and
+that session id with the result, so the Orchestrator can confirm the bench ran. Read the
+`.err` file before calling a run empty; a launch that never reached the model leaves its
+trace only there. Resume an interrupted run through the CLI's `--resume` option, probed
+before its first use.
+
 Run that yourself only for a short bounded ask finishing in about two minutes. For anything
 longer your job ends at drafting: return the brief path, the exact resolved command, and the
 journal path, and let the Orchestrator launch it as a harness-tracked background command under
@@ -79,7 +87,9 @@ Return only:
 - `Question`: one line.
 - `Evidence`: concise facts with `file:line` or primary-source pointers.
 - `Distillate`: the smallest context the next engine needs.
-- `Unknowns`: unresolved facts, not recommendations.
+- `Unknowns`: unresolved facts, not recommendations, naming every input row the
+  distillate did not reach.
+- `Journal`: the journal path and the session id from its `init` event.
 - `Deviation`: unavailable CLI, model, or auth; command failure; dirty containment.
 
 Grok's output is evidence, never a decision or a verdict.

package/dist/host/claude/agents/implementer.md

@@ -1,6 +1,6 @@
 ---
 name: implementer
-description: 'Claude Opus 5 implementation of one bounded nontrivial unit — the subjective mirror of the Sol implementer. Writes owned files in the main checkout as the sole serial writer; favours API-shape, naming, and documentation-voice units. Never accepts its own output.'
+description: 'Claude Opus 5 implementation of one bounded nontrivial unit — the subjective mirror of the Sol implementer. Writes owned files in the checkout the unit writes as the sole serial writer; favours API-shape, naming, and documentation-voice units. Never accepts its own output.'
 tools: Read, Grep, Glob, Edit, Write, Bash
 model: opus
 effort: high

package/dist/host/claude/agents/orkestrel.md

@@ -56,7 +56,7 @@ so network-controlled descriptions never enter agent instruction context.
 | `@orkestrel/csv`        | `0.0.5`  | L1    | `@orkestrel/contract` `^0.0.13`                                                                                                                                                                                                                                                                                            |
 | `@orkestrel/database`   | `0.0.12` | L2    | `@orkestrel/contract` `^0.0.13`, `@orkestrel/emitter` `^0.0.8`, `@orkestrel/indexeddb` `^0.0.9`, `@orkestrel/sqlite` `^0.0.9`                                                                                                                                                                                              |
 | `@orkestrel/emitter`    | `0.0.8`  | L1    | `@orkestrel/contract` `^0.0.13`                                                                                                                                                                                                                                                                                            |
-| `@orkestrel/form`       | `0.0.3`  | L2    | `@orkestrel/contract` `^0.0.13`, `@orkestrel/emitter` `^0.0.8`                                                                                                                                                                                                                                                             |
+| `@orkestrel/form`       | `0.0.4`  | L2    | `@orkestrel/contract` `^0.0.15`, `@orkestrel/emitter` `^0.0.8`                                                                                                                                                                                                                                                             |
 | `@orkestrel/guide`      | `0.0.15` | L3    | `@orkestrel/contract` `^0.0.13`, `@orkestrel/markdown` `^0.0.12`                                                                                                                                                                                                                                                           |
 | `@orkestrel/html`       | `0.0.7`  | L1    | `@orkestrel/contract` `^0.0.13`                                                                                                                                                                                                                                                                                            |
 | `@orkestrel/indexeddb`  | `0.0.9`  | L1    | `@orkestrel/contract` `^0.0.13`                                                                                                                                                                                                                                                                                            |
@@ -78,7 +78,7 @@ so network-controlled descriptions never enter agent instruction context.
 | `@orkestrel/reason`     | `0.0.8`  | L2    | `@orkestrel/contract` `^0.0.13`, `@orkestrel/emitter` `^0.0.8`                                                                                                                                                                                                                                                             |
 | `@orkestrel/relation`   | `0.0.10` | L3    | `@orkestrel/contract` `^0.0.13`, `@orkestrel/database` `^0.0.12`, `@orkestrel/emitter` `^0.0.8`                                                                                                                                                                                                                            |
 | `@orkestrel/router`     | `0.0.12` | L2    | `@orkestrel/abort` `^0.0.8`, `@orkestrel/contract` `^0.0.13`, `@orkestrel/emitter` `^0.0.8`                                                                                                                                                                                                                                |
-| `@orkestrel/scaffold`   | `0.0.59` | L3    | `@orkestrel/console` `^0.0.11`, `@orkestrel/contract` `^0.0.13`, `@orkestrel/emitter` `^0.0.8`, `@orkestrel/markdown` `^0.0.12`, `@orkestrel/process` `^0.0.8`, `@orkestrel/template` `^0.0.5`                                                                                                                             |
+| `@orkestrel/scaffold`   | `0.0.60` | L3    | `@orkestrel/console` `^0.0.11`, `@orkestrel/contract` `^0.0.15`, `@orkestrel/emitter` `^0.0.8`, `@orkestrel/markdown` `^0.0.12`, `@orkestrel/process` `^0.0.9`, `@orkestrel/template` `^0.0.5`                                                                                                                             |
 | `@orkestrel/sea`        | `0.0.13` | L3    | `@orkestrel/contract` `^0.0.13`, `@orkestrel/emitter` `^0.0.8`, `@orkestrel/process` `^0.0.8`                                                                                                                                                                                                                              |
 | `@orkestrel/server`     | `0.0.17` | L3    | `@orkestrel/abort` `^0.0.8`, `@orkestrel/codec` `^0.0.1`, `@orkestrel/contract` `^0.0.13`, `@orkestrel/emitter` `^0.0.8`, `@orkestrel/router` `^0.0.12`, `@orkestrel/timeout` `^0.0.8`                                                                                                                                     |
 | `@orkestrel/sqlite`     | `0.0.9`  | L1    | `@orkestrel/contract` `^0.0.13`                                                                                                                                                                                                                                                                                            |

package/dist/host/claude/agents/planner.md

@@ -30,10 +30,20 @@ list:
 
 - `Design`: the coherent API, vocabulary, architecture, and user experience.
 - `Alternatives`: at most two real alternatives and why the design wins.
+- `Constraints`: what the code and the contracts permit, each with its `file:line`.
+- `Refusals`: the options a rule forecloses, with the rule text quoted.
+- `Measurements`: the readings the dispatch supplied that bound the design, each with the
+  command the Orchestrator ran. Name a reading the design needs and the dispatch did not
+  supply under `Tensions`.
 - `Units`: bounded work, each naming its role AND engine so the routing ledger is
   derivable, with ownership, dependencies, and acceptance criteria.
 - `Tensions`: the choices your lane made on judgment, named for the other lane to
   challenge — or, when you hold every lane, for the Orchestrator to rule.
 - `Risks`: design-fit risks and the evidence needed to settle them.
 
+File your work under the sections that name your lane: the subjective lane fills
+`Design` and `Alternatives`, the objective lane fills `Constraints`, `Refusals`, and
+`Measurements`, and whichever lane you hold fills `Units`, `Tensions`, and `Risks`.
+Leave a section your lane does not own empty rather than renaming it.
+
 Your proposal is input to the Orchestrator, never the final decision.

package/dist/host/claude/agents/reviewer.md

@@ -1,6 +1,6 @@
 ---
 name: reviewer
-description: "Subjective design-fit review of implemented work — API feel, vocabulary, architecture shape, guide voice, and conceptual coherence. Reads the actual diff when the round's triggers name this lane. Never edits."
+description: 'Subjective design-fit review of implemented work — API feel, vocabulary, architecture shape, guide voice, and conceptual coherence. Reads the actual diff on every nontrivial audit round, holding the subjective lane by default and the objective lane when the dispatch assigns it. Never edits.'
 tools: Read, Grep, Glob
 model: opus
 effort: high
@@ -28,7 +28,8 @@ diff and status evidence supplied by the Orchestrator, and enough surrounding
 source to judge it. If the dispatch omits the diff, return a deviation instead of
 reconstructing it with a shell.
 
-Audit the changed work only through Opus 5's subjective and creative lens:
+While you hold the subjective lane, audit the changed work through Opus 5's
+subjective and creative lens:
 
 1. **Design acceptance criteria** — the requested experience, shape, and voice are
    actually present, not merely approximated.
@@ -45,7 +46,7 @@ Test a design claim by asking whether the shipped artifact still matches it —
 guide, charter, or name that described the work two revisions ago is drift, and
 that question is what finds it. Anything you cannot settle within your lane becomes
 a referral — to the other lane when it is running, to the Orchestrator when you hold
-both — never a verdict of yours.
+every lane — never a verdict of yours.
 
 For a rendered or externally driven surface, the supplied capture portfolio is the
 primary evidence and source is corroboration only: cite a capture for every rendered
@@ -53,11 +54,16 @@ claim, mark what the portfolio cannot show as NOT-EVIDENCED instead of inferring
 and return the `orkestrel-falsify` verdict shape and its single terminal line unless
 the dispatch names a different skill that fixes one.
 
-Read the actual diff plus enough surrounding code to judge it in context.
-Correctness, security, dependency constraints, test sufficiency, and mechanical
-conformance belong to the independent Sol analyst and checker. If you notice a
-possible objective defect, report it as a specifically evidenced **referral**
-rather than adjudicating it.
+Read the actual diff plus enough surrounding code to judge it in context. While you
+hold the subjective lane, correctness, security, dependency constraints, test
+sufficiency, and mechanical conformance belong to the objective lane and to
+`checker`: report a possible objective defect as a specifically evidenced
+**referral** — to the objective lane when it is running, to the Orchestrator when
+you hold every lane — rather than adjudicating it. While you hold the objective
+lane, adjudicate them in full.
+
+Rule a claim whose only evidence is the writer's report `UNRESOLVED`, never
+`CONFIRMED`, whatever the brief says.
 
 ## External input
 

package/dist/host/claude/agents/sol.md

@@ -35,7 +35,9 @@ Everything `.agents/orchestration.md`'s dispatch contract requires, plus:
   external delegate carries no exemption.
 - **Every authority the brief references must exist in the tree the exec is rooted in.** Check
   before dispatch. A brief citing a file the executor cannot find delivers nothing while looking
-  like authority, and it fails silently.
+  like authority, and it fails silently. Take the stale-authority branch in
+  `.agents/skills/orkestrel-falsify/references/brief.md` § "What not to put in a brief" where the
+  exec's tree carries a superseded vendored copy.
 - The deviation contract, scoped: a conflict with the primary objective stops the unit; an
   ancillary conflict is the executor's to decide, record, and carry on from.
 

package/dist/host/claude/agents/verifier.md

@@ -42,8 +42,6 @@ the gate report, never your process.
 
 ## Never discard a working-tree change
 
-- Never run `git checkout`, `git restore`, `git stash`, `git reset`, or `git clean`. Each discards
-  a working-tree change silently.
-- Where a dispatch has you plant a line to prove a gate can fail, remove exactly the line you added.
-  Never revert the file it sits in.
+- Follow `.agents/orchestration.md` § Permission floor for the discarding git commands and
+  for a planted line's removal. That section owns them.
 - Read a dirty `git status` as the expected state.

package/dist/host/claude/rules/architecture.md

@@ -73,10 +73,12 @@ Use only the centralized files an environment needs.
   - Wrong file, right name → **move it**. A `scan*` in `parsers.ts` is a pure lexical leaf that
     belongs in `helpers.ts`. The barrel star-exports both, so the move leaves the published surface
     identical.
-  - Right file, wrong name → **rename it in place**. A function returning a live entity is an entity
-    factory and belongs in `factories.ts` whatever it is called, so `restoreThing` there is misnamed,
-    not misplaced. Renaming moves the published surface and earns a version bump; that cost is the
-    correct one to pay, and it is smaller than the alternative.
+  - Right file, wrong name → **rename it in place**. An entity is a class instance whose methods
+    drive its own state, as opposed to a plain value that carries data and no behaviour. A function
+    returning a live entity is an entity factory and belongs in `factories.ts` whatever it is
+    called, so `restoreThing` there is misnamed, not misplaced. Renaming moves the published
+    surface and earns a version bump; that cost is the correct one to pay, and it is smaller than
+    the alternative.
   - Never let the name choose. Relocating a correctly-placed function to escape a rename drags its
     dependencies with it — an entity factory moved into `helpers.ts` makes that file import an
     implementation class, and a leaf file that imports a class stops being a leaf for every module
@@ -257,7 +259,7 @@ Every shape obeys:
 - Expose every intentional top-level source export through its correct environment barrel.
 - Never let current consumer count gate later exposure. Developers receive the same supported
   mechanisms the package uses, so they retain full control and customization.
-- If a declaration should not be public, make it a true local or runtime-private detail, or remove
+- If a declaration must not be public, make it a true local or runtime-private detail, or remove
   the capability for a substantive reason. Never leave an intentional reusable export stranded
   outside the barrel.
 - One-class-per-file evicts some classes from their only caller, and `export` on such a file is

package/dist/host/claude/rules/documentation.md

@@ -32,6 +32,7 @@ Documentation is an enforced contract, not explanatory decoration. The Writing r
 - Every public export is documented.
 - TypeScript, SCSS, Markdown, tests, and showcase remain aligned.
 - A parity failure identifies drift; never suppress or weaken the test.
+- The TSDoc voice rule governs a doc block; a guide tagline and a Surface-row description are noun phrases.
 - A vendored dependency guide is a mirror. Its relative links address the upstream tree and resolve to nothing here, so they are outside local-link parity. Refresh a mirror rather than rewriting it: a rewritten copy is a translation, and no comparison against the fetched bytes can check it.
 - Falsify a prose claim the way you falsify a code claim. The parity test proves a name exists, never that a sentence about behavior is true, so run the example and read what it returns. A `// false` beside a call that returns `true` is a defect of the same kind as a wrong return value, and it reaches every consumer who installs the package. That proof has a home: `tests/guides.test.ts` executes the flagship fences, per `.claude/rules/tests.md`. An ordered behaviour with no gate is not a gate.
   Asserting that the sentence appears is not asserting that it is true. `expect(text).toContain('a spawn fault reports null')` passes unchanged when the code starts returning something else, so it guards the documentation's presence and nothing about the behaviour. Where a prose claim about behaviour sits under no fence, add the executed assertion that would break if the claim went false, and keep the substring check only as a presence guard beside it. A row whose close condition names a behaviour does not close on a substring.

package/dist/host/claude/rules/names.md

@@ -5,7 +5,7 @@ paths:
 
 # Naming and API-shape rules
 
-Names are public API. A consumer should be able to predict them without documentation.
+Names are public API. A consumer can predict them without documentation.
 
 ## Entity-scoped names: one word
 
@@ -88,7 +88,21 @@ Module helpers have no owning entity at the call site, so default to `{verb}{Nou
 
 - A one-word helper is valid only when its meaning and arguments are unmistakable: `delay`, `clamp`, `tokenize`, `similarity`.
 - Reject vague helpers such as `process` or `handle`.
-- A helper prefix has one project-wide meaning: `extract*` extracts structure, `infer*` derives, `compute*` calculates deterministically, and `matches*` is a predicate.
+- A helper prefix has one project-wide meaning:
+  - `extract*` extracts structure.
+  - `infer*` derives.
+  - `compute*` calculates deterministically.
+  - `matches*` is a predicate.
+  - `build*` assembles a composite value from parts and is neither a factory nor a combinator named for its constituents; see `create*` and `*Of` in § Fixed derivation/construction forms.
+  - `read*` obtains a value from a live host object, a stream position, or a byte layout, returns it or throws, and never coerces; a coercing helper is `parse*` in § Fixed derivation/construction forms.
+  - `resolve*` picks the effective value from options and defaults.
+  - `scan*` walks a structure and returns its findings.
+  - `describe*` takes a finding and returns the human-readable message that names it.
+  - `normalize*` returns the canonical form of a value of the same type.
+  - `collect*` gathers members into a collection.
+  - `filter*` returns the members of a collection that satisfy a predicate, in order, and never mutates its input.
+  - `render*` produces text or markup from a value that is not a finding.
+  - `supports*` is a capability predicate and narrows no type.
 - When a helper family grows around one shape, promote it to a class with entity-scoped one-word methods.
 
 ## General vocabulary
@@ -103,6 +117,9 @@ The root design laws in `AGENTS.md` — one term per concept, boolean behavior s
 - Do not alternate `count`/`length`/`size`/`total` or `abort`/`cancel`.
 - Name the axis a discriminant varies: `relationship`, `command`, `category`, `operation`, `via`.
 - A binary switch is a boolean such as `bail`, never `'continue' | 'halt'`; genuine discriminants, multi-state lifecycles, conventional value pairs (`ascending`/`descending`, `and`/`or`), and external-spec literals remain unions.
+- An option key, constant, or member that transliterates an external protocol field, format field, or engine pragma keeps the external wording in this project's casing, and its TSDoc names the source it mirrors: the `foreignKeys` key mirrors the `PRAGMA foreign_keys` statement, and the `keepAlive` key mirrors the Ollama `keep_alive` field.
+- Outside a declared wire body, a mirrored name never uses `kind` or `type` as a member name, and never uses a word § Rejected naming lists. A Compound File Binary (CFB) directory entry's object-type byte takes a named discriminant.
+- A declared wire body — a type whose members transliterate an external wire format field for field — keeps the external field names, `type` and `kind` included, and its TSDoc names the format it transliterates. The package's own domain type carries neither word, and the package owns the projection between the wire body and the domain type.
 
 ## Acronyms
 
@@ -151,10 +168,11 @@ Keep canonical case:
 
 ## Fixed derivation/construction forms
 
+- A form's contract binds a new name; `.claude/rules/architecture.md` § Kind purity names the retained names that keep a form outside its file, such as `createWriteDirectory` and `isVacant`.
 - `is*`: total `Guard<T>`; never throws; returns false off-shape.
 - `parse*`: coercion producing `T | undefined`; cross-type conversion never belongs in a guard.
-- `create*`: factory constructing an entity/value.
-- `*Of`: builder combining constituent parts into a container/guard/value, such as `arrayOf(guard)` or `boundsOf(min, max)`.
+- `create*`: the factory form; `.claude/rules/architecture.md` § Kind purity states what a factory is and where it lives.
+- `*Of`: combinator named for its constituents, combining them into a container/guard/value, such as `arrayOf(guard)` or `boundsOf(min, max)`.
 - `{noun}To{Noun}`: projection from a whole to a derived view, such as `definitionToSnapshot`.
 - `*Shape`: `ContractShape` value/JSON-Schema blueprint, not a function or type.
 - Leading `_`: intentionally unused binding only; never privacy.
@@ -162,7 +180,7 @@ Keep canonical case:
 For `_` bindings:
 
 - Use only for genuine callback/signature conformance, rest omission, swallowed catches, or intentionally unused loop variables.
-- Verify each use is intentional; remove `_` and wire the value if it should be consumed.
+- Verify each use is intentional; remove `_` and wire the value the code must consume.
 - Remove the parameter when signature compatibility does not require it.
 - Prefer a short justification for each rare `_` in `src/`.
 

package/dist/host/claude/rules/patterns.md

@@ -63,6 +63,7 @@ method(ids: readonly string[]): boolean
 - One id applies to one.
 - An id list applies to those items and returns true only when all succeed.
 - Never split into `methodAll`, `methodOne`, or `methodMany`.
+- A manager that owns `clear` and a batch verb keeps both: `clear` resets the entity's state and emits one `clear`, and the no-argument batch verb applies the verb to every item and emits per item. They are different observable operations.
 - When a single item type can itself be a list/open record, declare the array overload first and document how callers express one list-valued item.
 
 ## Stateful emitters

package/dist/host/claude/rules/quality.md

@@ -105,7 +105,7 @@ The root laws on inspecting declared `@orkestrel/*` capabilities, reusing a matc
 - Translate "enterprise-grade" or "production-ready" into an explicit risk and seam matrix covering applicable inputs, states, failures, cleanup, cancellation, concurrency, resource ownership, hostile boundaries, environment isolation, serialization and restore, and package consumption.
 - Grade that matrix on coverage, not optimization: whether every applicable seam exists, works, and stays proven. Do not grade on how many further interleavings can be invented against the one seam already proven. A surface polished past its row buys less than the next uncovered seam would have.
 - Test observable invariants at each applicable seam with real implementations.
-- Use dedicated real-service projects for external model or service behavior. Require readiness and tune each request to the smallest robust proof.
+- Use dedicated real-service projects for external model or service behavior. Require readiness and tune each request to the smallest proof that still exercises the claim.
 - Audit test discovery, counts, skipped and todo tests, cleanup, and assertion adequacy. Passing discovered tests alone is insufficient.
 - Inspect public exports, declarations, supported runtime targets, and generated outputs.
 - Treat a claim that a surface works with an external client as unproven until one representative real client of that class has driven it end to end. Protocol tests prove the protocol, not the integration.

package/dist/host/claude/rules/tests.md

@@ -31,7 +31,7 @@ paths:
 - Bind a test fixture server to `127.0.0.1` on an ephemeral port (`listen(0)`), never to `::1` and never to a fixed port: a host without IPv6 fails `EAFNOSUPPORT`, and a fixed port flakes on occupancy.
 - Cover happy paths, error paths, empty input, boundary values, `NaN`, positive/negative zero, cycles, and Map/Set order where relevant.
 - Test observable behavior, not implementation details.
-- Assert the membership a discovered or globbed set should have, not a total that a partly empty population satisfies. A glob spanning two locations passes a size check while one of them matches nothing.
+- Assert the membership a discovered or globbed set must have, not a total that a partly empty population satisfies. A glob spanning two locations passes a size check while one of them matches nothing.
 - Never assert an implementation against itself. Compare the answer to a declaration, a fixture, or a second mechanism that could disagree with it. Re-deriving the answer the same way the source derives it produces a test that passes for every value the source ever returns, and it reads exactly like a real one.
 - Probe a host-varying property at runtime, on the host the test is running on, and assert against what the probe returned. Filesystem case folding, path separators, permission bits, and rename semantics differ per host, so a fixture built on one host describes that host and silently measures something else on the next.
 - Assert a runtime-chosen result as the property it must have, not as the number one run produced. Compression, timing, and buffer sizing are the runtime's choice, so pin the relationship the test depends on — that the encoded form is larger, that the second call is faster — and let the assertion fail when the input drifts out of the range where that relationship holds.
@@ -244,9 +244,9 @@ interface ScratchInterface {
 
 Browser/style setup exposes shared assertions/builders:
 
-`mount`, `render`, `build`, `style`, `token`, `rootToken`, `pixels`, `rgba`, `colorEqual`, `findRule`.
+`mount`, `render`, `build`, `readStyle`, `readToken`, `readRootToken`, `readPixels`, `parseCSSColor`, `matchesColor`, `findRule`.
 
-`findRule` proves a declaration exists in the cascade; `style()` reads the resolved result.
+`findRule` proves a declaration exists in the cascade; `readStyle()` reads the resolved result.
 
 ## Browser tests
 

package/dist/host/claude/rules/typescript.md

@@ -29,7 +29,10 @@ The non-negotiables and design laws in `AGENTS.md` apply without exception and a
 - `as const` annotates a literal with its own type and never overrides the checker, so the assertion
   ban does not reach it. Use it to derive a literal union from a value and to fix a tuple's arity and
   element types. Do not write it on a value whose contract is already declared; annotate the
-  declaration instead.
+  declaration instead. A class field that holds one literal keeps `as const`
+  (`readonly code = 'ABORT' as const`): the vendored lint gate's `prefer-as-const` rule refuses the
+  annotated form, and a field whose type is a union of literals is annotated as the preceding
+  sentence states.
 
 ## Immutability
 

package/dist/host/claude/rules/writing.md

@@ -82,8 +82,8 @@ first, and these rules wherever a rule here names no different form for it.
 
 ## Substitutions
 
-Replace each term in this table with its replacement. Quote a literal code identifier as itself; it
-is exempt from every row.
+Replace each term in this table with its replacement. A literal code identifier is data, and so is
+a sample string inside a code fence or a test fixture: quote each as itself, exempt from every row.
 
 | Term                     | Replacement                               |
 | ------------------------ | ----------------------------------------- |

package/dist/host/codex/agents/builder.toml

@@ -14,12 +14,12 @@ implementer: stop and say so.
 
 Read AGENTS.md, applicable .claude/rules files, the dispatch-named skill and required
 references, and the governing guide/spec before writing; they bind as written there and
-are not restated here. An app-layer unit additionally binds .claude/rules/application.md
-and .claude/rules/workspace.md. Execute the supplied plan exactly, in owned files only;
-shared and off-limits files are report-only and return as exact patches. The AGENTS.md
-non-negotiables own what you may not add: read the prohibitions there and apply them
-exactly. Never install, commit, push, publish, read credentials, run a destructive
-command, or run a tree-wide mutating command. Validate only the owned scope.
+are not restated here. An app-layer unit belongs to application: stop and say so.
+Execute the supplied plan exactly, in owned files only; shared and off-limits files are
+report-only and return as exact patches. The AGENTS.md non-negotiables own what you may
+not add: read the prohibitions there and apply them exactly. Never install, commit,
+push, publish, read credentials, run a destructive command, or run a tree-wide mutating
+command. Validate only the owned scope.
 
 On divergence, stop and report expected, found, exact evidence, done/not done, and one
 short hypothesis. Otherwise return changes, actual scoped validation, and exact

package/dist/host/codex/agents/checker.toml

@@ -16,7 +16,8 @@ dependency reuse, real-test policy, TODO/skip/deferral state, exports, forbidden
 syntax, owned-file scope, and source/guide parity. Use one evidence pointer per item.
 A question needing judgment becomes a specifically evidenced referral, addressed to
 the subjective lane when it is running and to the Orchestrator when it is not; never
-guess it and never rule on it. Never edit or spawn.
+guess it and never rule on it. Rule a claim whose only evidence is the writer's report
+UNRESOLVED, never CONFIRMED, whatever the brief says. Never edit or spawn.
 
 Return the shape fixed by the dispatch. When it states its subject as numbered
 claims, return the orkestrel-falsify verdict shape and its required terminal line,

package/dist/host/codex/agents/grok.toml

@@ -11,13 +11,20 @@ Act only as a cheap driver for Cursor Grok. Then read AGENTS.md, applicable rule
 dispatch-named skill and references, and the governing guide/spec. Require a bounded
 question and scope. Resolve the exact model from CURSOR_GROK_MODEL;
 `.claude/agents/grok.md` owns the current pin and the re-read rule. Never guess or
-substitute a model id. Invoke Cursor in ask mode only for a short bounded ask:
-agent -p --trust --mode=ask --model "$CURSOR_GROK_MODEL" "<brief>"
-For longer work do not launch anything: return the brief path, the exact resolved
-command, and the journal path for the Orchestrator to launch under a cap it owns.
+substitute a model id. Invoke Cursor in ask mode only for a short bounded ask, journaling
+the event stream and stderr:
+agent -p --trust --mode=ask --model "$CURSOR_GROK_MODEL" --output-format stream-json
+"<pointer>" > tmp/cursor/<unit>.jsonl 2> tmp/cursor/<unit>.err
+The journal's first event carries the session_id that is the run's recovery handle; its
+result event carries the final answer; resumption goes through the CLI's --resume option,
+probed before its first use. Read the .err journal before calling a run empty; a launch that
+never reached the model leaves its refusal there and nothing in the .jsonl journal. For
+longer work do not launch anything: return the brief path, the exact resolved command, and
+the journal path for the Orchestrator to launch under a cap it owns.
 The brief requires read-only work, concise evidence with file:line pointers, and no
 raw dumps, design, decisions, or edits. Never use --force, expose CURSOR_API_KEY,
 read secrets, or edit. Compare git status before and after. Return only the question,
-evidence, distilled context, unknowns, and any CLI/model/auth/containment deviation.
+evidence, distilled context, unknowns naming every input row the distillate did not reach,
+the journal path with its session id, and any CLI/model/auth/containment deviation.
 Never spawn another agent.
 """

package/dist/host/codex/agents/implementer.toml

@@ -1,5 +1,5 @@
 name = "implementer"
-description = "GPT-5.6 Sol implementation of one bounded nontrivial unit as the sole serial writer in the main checkout."
+description = "GPT-5.6 Sol implementation of one bounded nontrivial unit as the sole serial writer in the checkout the unit writes."
 model = "gpt-5.6-sol"
 model_reasoning_effort = "high"
 sandbox_mode = "workspace-write"
@@ -8,7 +8,7 @@ Read .agents/orchestration.md first. It owns the role set, the routing, and the
 dispatch contract. Then read AGENTS.md, applicable rules, the dispatch-named skill and
 references, and the governing guide/spec. Require a reconciled plan, baseline, owned files, off-limits
 files, acceptance criteria, and deviation contract. Implement only the bounded unit
-in its explicitly disjoint writable scope within the main checkout. Do not add
+in its explicitly disjoint writable scope within the checkout the unit writes. Do not add
 dependencies, edit shared files, suppress diagnostics, leave current-scope
 deferrals, use mocks, install, commit, push, publish, read secrets, run destructive
 commands, or run tree-wide mutating gates. Validate only owned scope. For a defect

package/dist/host/codex/agents/opus.toml

@@ -8,13 +8,18 @@ Read .agents/orchestration.md first. It owns the role set, the routing, and the
 dispatch contract. `.agents/transports/claude.md` owns the Claude transport contract
 in full; read it and follow it.
 
-This route pins `--permission-mode acceptEdits`, in the main checkout, as the sole
+This route pins `--permission-mode acceptEdits`, in the checkout the unit writes, as its sole
 serial writer from a clean committed baseline.
 
 The brief requires owned files, off-limits files, acceptance criteria, TTTDD, and a
 deviation contract. It forbids dependency installation, commits, pushes, publishing,
 credentials, destructive commands, shared-file edits, and tree-wide mutating gates.
 
+Verify that every authority the brief references exists in the tree the run is rooted in;
+propagate a missing file rather than restating it, and take the stale-authority branch in
+.agents/skills/orkestrel-falsify/references/brief.md § "What not to put in a brief" where the
+tree carries a superseded vendored copy.
+
 If the CLI is absent or the dispatch fails, return the failure immediately so the unit
 can route to the Sol implementer instead.
 

package/dist/host/codex/agents/planner.toml

@@ -10,12 +10,17 @@ in full; read it and follow it.
 
 This route pins `--permission-mode plan`.
 
-The brief asks for coherent API shape, vocabulary, and ergonomics; at most two
-alternatives; bounded units that each name their role and engine; tensions named for
-the other lane to challenge, or for the Orchestrator to rule when one engine holds
-every lane; and risks. A dispatch may name a skill that fixes a different return
-shape, and that skill wins over this list. The brief forbids edits, commands,
-reconciliation, orchestration, and acceptance.
+The brief asks the subjective lane for coherent API shape, vocabulary, and ergonomics, and at
+most two alternatives; it asks the objective lane for the constraints the code and the
+contracts permit with their file:line, the refusals a rule forecloses with the rule text
+quoted, and the measurements the dispatch supplied that bound the design, each with the
+command the Orchestrator ran, naming under tensions a reading the design needs and the
+dispatch did not supply. It asks whichever lane runs for bounded units that each name their
+role and engine; tensions named for the other lane to challenge, or for the Orchestrator to
+rule when one engine holds every lane; and risks. A lane files its work under the sections
+that name it. A dispatch may name a skill that fixes a different return shape, and that skill
+wins over this list. The brief forbids edits, commands, reconciliation, orchestration, and
+acceptance.
 
 Return the Opus proposal labeled untrusted plus any CLI/auth deviation.
 """

package/dist/host/codex/agents/reviewer.toml

@@ -10,12 +10,14 @@ in full; read it and follow it.
 
 This route pins `--permission-mode plan`.
 
-The brief requires the `orkestrel-falsify` verdict shape and its single terminal line,
-unless the dispatch names a different skill that fixes one; file:line evidence on every
-required change; out-of-lane questions returned as referrals rather than verdicts; and,
-for a rendered or externally driven surface, the capture portfolio as primary evidence
-with source as corroboration. It forbids edits, commands, orchestration, reconciliation,
-and acceptance.
+The brief names the lane the route holds, and requires the returned verdict to state
+which lane it held. It requires the `orkestrel-falsify` verdict shape and its single
+terminal line, unless the dispatch names a different skill that fixes one; file:line
+evidence on every required change; out-of-lane questions returned as referrals rather
+than verdicts; `UNRESOLVED` rather than `CONFIRMED` on a claim whose only evidence is
+the writer's report, whatever the brief says; and, for a rendered or externally driven
+surface, the capture portfolio as primary evidence with source as corroboration. It
+forbids edits, commands, orchestration, reconciliation, and acceptance.
 
 Return the Opus audit labeled untrusted plus any CLI/auth deviation.
 """