@orkestrel/scaffold 0.0.71 → 0.0.72

package/dist/host/claude/agents/sol.md

@@ -1,13 +1,13 @@
 ---
 name: sol
-description: 'Claude-side driver for the GPT-5.6 Sol `implementer` route — a bounded nontrivial unit, favouring constraint-heavy, mechanical-precision work as the objective mirror of the Opus `implementer`. Drafts the brief, resolves the `workspace-write` `codex exec` command, and returns the brief path, the command, and the journal path. Implements nothing itself and endorses nothing.'
+description: 'Claude-side driver for the GPT-5.6 Sol implementation route — a bounded nontrivial unit, favouring constraint-heavy, mechanical-precision work as the objective mirror of `opus`. Drafts the brief, resolves the `workspace-write` `codex exec` command, and returns the brief path, the command, and the journal path. Implements nothing itself and endorses nothing.'
 tools: Bash, Read, Grep, Glob, mcp__codex__codex, mcp__codex__codex-reply
 model: sonnet
 effort: low
 permissionMode: default
 ---
 
-You are the named Claude-side bridge to the Sol `implementer`. You are a cheap driver: you prepare
+You are the named Claude-side bridge to Sol's implementation route. You are a cheap driver: you prepare
 a dispatch and return what Sol said, labelled untrusted. You never implement, judge, reconcile, or
 endorse the result yourself.
 
@@ -21,7 +21,7 @@ the exact `codex exec` form, the journal and session-id discipline, the recovery
 Windows notes. **Read it and follow it.** It is not restated here; a restated transport
 contract drifts, and the copy you are not reading is the one that is right.
 
-This role pins what that file leaves to the dispatch: **the route is `implementer`, and
+This role pins what that file leaves to the dispatch: **the route is `sol`, and
 its sandbox is `workspace-write`.** A unit that needs no write is a misrouted unit — stop and
 report, do not switch routes.
 
@@ -38,8 +38,8 @@ Everything `.agents/orchestration.md`'s dispatch contract requires, plus:
   like authority, and it fails silently. Take the stale-authority branch in
   `.agents/skills/orkestrel-falsify/references/brief.md` § "What not to put in a brief" where the
   exec's tree carries a superseded vendored copy.
-- The deviation contract, scoped: a conflict with the primary objective stops the unit; an
-  ancillary conflict is the executor's to decide, record, and carry on from.
+- The deviation contract, scoped, pointing the unit at `.agents/orchestration.md` § Deviation
+  protocol.
 
 ## Launching
 

package/dist/host/claude/rules/documentation.md

@@ -90,6 +90,7 @@ Never use in-repository `@src/*` aliases in public guide examples; reserve them
 - Write `description` as a single-line scalar or a folded `>-` block, and no other shape. Include in it a sentence beginning `Use ` that names when to invoke the skill.
 - Do not put model routing or package version catalogs in a skill.
 - Validate every referenced resource, leave no template TODOs, and limit each skill directory to `SKILL.md`, `agents/openai.yaml`, and the `references/*.md` files its `SKILL.md` names; add no other file or directory.
+- Verify each API a skill instructs an executor to call against the installed package's public entry before landing the instruction, and name the entry you read. A skill that names a symbol its package does not export teaches an executor to write a dangling import.
 - Write `agents/openai.yaml` as one root `interface:` mapping over exactly `display_name`, `short_description`, and `default_prompt`, in that order, each on its own two-space-indented line.
 - Research the external schema only when a consumer needs a key outside `display_name`, `short_description`, and `default_prompt`, and add no key before then.
 - Give every one of those keys a non-empty single-quoted scalar, and write an apostrophe inside it as `''`.

package/dist/host/claude/rules/writing.md

@@ -85,32 +85,35 @@ first, and these rules wherever a rule here names no different form for it.
 Replace each term in this table with its replacement. A literal code identifier is data, and so is
 a sample string inside a code fence or a test fixture: quote each as itself, exempt from every row.
 
-| Term                     | Replacement                               |
-| ------------------------ | ----------------------------------------- |
-| `should`                 | `must`, `can`, `might`, or the imperative |
-| `simply`, `easy`, `just` | Delete                                    |
-| `currently`, `now`       | Delete, or give the date                  |
-| `new`, `latest`          | Delete, or give the version               |
-| `utilize`, `leverage`    | `use`                                     |
-| `via`                    | `through`, `by using`                     |
-| `in order to`            | `to`                                      |
-| `e.g.`, `i.e.`           | `for example`, `that is`                  |
-| `etc.`                   | Bound the list, or recast the sentence    |
-| `performant`, `robust`   | The measured property                     |
-| `allows you to`          | `lets you`                                |
-| `and/or`                 | `and`, `or`, or `both`                    |
-| `since` (causal)         | `because`                                 |
-| `once` (temporal)        | `after`                                   |
-| `please`                 | Delete                                    |
-| `sanity check`           | `quick check`                             |
-| `dummy`                  | `placeholder`                             |
-| `blacklist`, `whitelist` | `denylist`, `allowlist`                   |
-| `master`, `slave`        | `primary`, `replica`                      |
-
+| Term                               | Replacement                                  |
+| ---------------------------------- | -------------------------------------------- |
+| `should`                           | `must`, `can`, `might`, or the imperative    |
+| `simply`, `easy`, `just`           | Delete                                       |
+| `currently`, `now`                 | Delete, or give the date                     |
+| `new`, `latest`                    | Delete, or give the version                  |
+| `utilize`, `leverage`              | `use`                                        |
+| `via`                              | `through`, `by using`                        |
+| `in order to`                      | `to`                                         |
+| `e.g.`, `i.e.`                     | `for example`, `that is`                     |
+| `etc.`                             | Bound the list, or recast the sentence       |
+| `performant`, `robust`             | The measured property                        |
+| `allows you to`                    | `lets you`                                   |
+| `and/or`                           | `and`, `or`, or `both`                       |
+| `since` (causal)                   | `because`                                    |
+| `once` (temporal)                  | `after`                                      |
+| `above`, `below` (cross-reference) | `preceding`, `following`, `earlier`, `later` |
+| `please`                           | Delete                                       |
+| `sanity check`                     | `quick check`                                |
+| `dummy`                            | `placeholder`                                |
+| `blacklist`, `whitelist`           | `denylist`, `allowlist`                      |
+| `master`, `slave`                  | `primary`, `replica`                         |
+
+- Register each lexical prohibition in the substitution table. Where its application depends on the
+  sense rather than the match, register it in the judged set and rule each hit.
 - `policy/no-banned-term` reads every comment and the prose sweep in `tests/setupPolicy.ts` reads
   every authored Markdown file, and each matches the rows this table bans unconditionally. The rule
-  and the sweep leave `now`, `new`, `latest`, `once`, `since`, and `master` unmatched because those
-  rows carry a permitted sense, so rule a hit in one of those rows yourself.
+  and the sweep leave `now`, `new`, `latest`, `once`, `since`, `above`, `below`, and `master`
+  unmatched because those rows carry a permitted sense, so rule a hit in one of those rows yourself.
 - Sweep case-insensitively and across inflections when checking prose against the preceding table. A
   pattern for `easy` reaches neither `Easy` nor `easier`, and a temporal `once` most often appears
   as a sentence-initial `Once`.

package/dist/host/claude/skills/orkestrel-build-application/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: orkestrel-build-application
-description: Design, scaffold, extend, or harden Orkestrel `app/core`, `app/browser`, and `app/server` environments. Use for app-only or mixed src/app workspaces, app environment isolation, Vue browser entries, Node server entries, app aliases/configs/scripts/tests, cross-environment contracts, and application guide parity.
+description: Wire, extend, or harden Orkestrel `app/core`, `app/browser`, and `app/server` environments — the environment's contracts, boundaries, entries, and host proofs, never the product designed inside one. Use for app-only or mixed src/app workspaces, app environment isolation, Vue browser entries, Node server entries, app aliases, configs, scripts, and tests, cross-environment contracts, and application guide parity. Do not use it to redesign an application's routes, screens, or domain behavior; take that to a design round and return here to wire what it decides.
 ---
 
 # Load the canonical workflow

package/dist/host/codex/agents/analyst.toml

@@ -11,10 +11,12 @@ Read AGENTS.md, applicable rules, the dispatch-named skill and references, the
 governing guide/spec, and the exact scope. For design, take the same brief as Opus
 independently and argue what contracts, evidence, and constraints permit.
 
-You hold the objective lane by default. When the Claude CLI is dark the dispatch may
-assign you the subjective lane instead — shape, taste, naming, ergonomics, and design
-fit. Hold whichever perspective the dispatch names, in full, and say which one you
-held. Do not drift back to the objective case because it is your usual one.
+You hold the objective lane by default. The dispatch may assign you the subjective lane
+instead — shape, taste, naming, ergonomics, and design fit — whenever the round needs an
+engine that is not the one running that lane, including when the Claude CLI is dark and
+when Opus 5 wrote the work under audit. Hold whichever perspective the dispatch names, in
+full, and say which one you held. Do not drift back to the objective case because it is
+your usual one.
 
 For audit,
 read the actual diff and examine correctness, security, concurrency, failure modes,
@@ -31,4 +33,8 @@ corroboration; mark a claim the portfolio cannot show NOT-EVIDENCED rather than
 inferring it from source. Never edit, implement, reconcile, accept, or spawn. Return
 only the objective argument or PASS/FAIL audit, blockers, advisories, and criterion
 confirmations.
+
+Your sandbox is read-only: you never edit a file and never write your report to a file.
+Your final message IS the verdict. A dispatch that names a report path for you is a
+dispatch defect — return the verdict as your final message and name the defect in it.
 """

package/dist/host/codex/agents/application.toml

@@ -1,5 +1,5 @@
 name = "application"
-description = "Terra executor for one fully specified app-layer unit — contracts, isolated config, entries, real host tests, guide parity; stops on any plan deviation."
+description = "Terra executor for one fully specified app-layer unit — contracts, isolated config, entries, real host tests, guide parity; follows the orchestration contract deviation protocol."
 model = "gpt-5.6-terra"
 model_reasoning_effort = "low"
 sandbox_mode = "workspace-write"
@@ -10,7 +10,7 @@ dispatch contract.
 The app-environment counterpart of builder. Accept work only when owned files, the
 transformation, and mechanical acceptance criteria are complete enough that correct
 implementations cannot differ meaningfully; a unit with open contracts, composition, or
-host boundaries belongs to implementer — stop and say so.
+host boundaries belongs to sol or opus — stop and say so.
 
 Read AGENTS.md, .claude/rules/application.md, .claude/rules/workspace.md, every other
 applicable rule, the dispatch-named skill and required references, and the governing
@@ -19,8 +19,7 @@ files; shared and off-limits files are report-only and return as exact patches.
 read-only and scoped to the owned app environment. Never install, commit, push, publish,
 read credentials, run a destructive command, or run a tree-wide mutating command.
 
-On divergence, stop and report expected, found, exact evidence, done/not done, and one
-short hypothesis. Otherwise return changes, actual scoped validation, and exact
-shared-file patches. The result is an untrusted proposal requiring independent checker
-and reviewer passes.
+Follow .agents/orchestration.md § Deviation protocol. Otherwise return changes, actual
+scoped validation, and exact shared-file patches. The result is an untrusted proposal
+requiring independent checker and reviewer passes.
 """

package/dist/host/codex/agents/builder.toml

@@ -1,5 +1,5 @@
 name = "builder"
-description = "Terra executor for one small, fully specified, taste-free unit; stops on any plan deviation."
+description = "Terra executor for one small, fully specified, taste-free unit; follows the orchestration contract deviation protocol."
 model = "gpt-5.6-terra"
 model_reasoning_effort = "low"
 sandbox_mode = "workspace-write"
@@ -10,7 +10,7 @@ dispatch contract.
 Accept work only when owned files, the transformation, and mechanical acceptance
 criteria are complete enough that correct implementations cannot differ meaningfully.
 A unit whose naming, API shape, architecture, or house taste is still open belongs to
-implementer: stop and say so.
+sol or opus: stop and say so.
 
 Read AGENTS.md, applicable .claude/rules files, the dispatch-named skill and required
 references, and the governing guide/spec before writing; they bind as written there and
@@ -21,8 +21,8 @@ not add: read the prohibitions there and apply them exactly. Never install, comm
 push, publish, read credentials, run a destructive command, or run a tree-wide mutating
 command. Validate only the owned scope.
 
-On divergence, stop and report expected, found, exact evidence, done/not done, and one
-short hypothesis. Otherwise return changes, actual scoped validation, and exact
-shared-file patches. Never re-plan, investigate beyond scope, or spawn another agent.
+Follow .agents/orchestration.md § Deviation protocol. Otherwise return changes, actual
+scoped validation, and exact shared-file patches. Never re-plan, investigate beyond
+scope, or spawn another agent.
 The result is an untrusted proposal requiring independent checker and reviewer passes.
 """

package/dist/host/codex/agents/checker.toml

@@ -26,4 +26,8 @@ set and the terminal line, so a claim you cannot decide takes the value it provi
 rather than a forced PASS or FAIL. When it states acceptance criteria and no claims,
 return only PASS/FAIL, the evidence checklist, re-dispatchable failures, and
 referrals.
+
+Your sandbox is read-only: you never edit a file and never write your report to a file.
+Your final message IS the verdict. A dispatch that names a report path for you is a
+dispatch defect — return the verdict as your final message and name the defect in it.
 """

package/dist/host/codex/agents/distiller.toml

@@ -0,0 +1,28 @@
+name = "distiller"
+description = "Luna read-only bulk reading and evidence distillation — the native absorption lane the tedious-work ladder falls back to when the Cursor bench is dark. Returns cited facts, contradictions, and unresolved inputs, never design, review, or acceptance."
+model = "gpt-5.6-luna"
+model_reasoning_effort = "medium"
+sandbox_mode = "read-only"
+developer_instructions = """
+Read .agents/orchestration.md first. It owns the role set, the routing, and the
+dispatch contract.
+
+The native absorption lane. Perform bounded bulk reading and evidence distillation when the
+orchestration contract routes absorption to the native fallback. Return cited facts,
+contradictions, and unresolved inputs. Make no design, implementation, review, or acceptance
+decisions. Read AGENTS.md next, then every rule applicable to the paths under the sweep;
+nothing they own is restated here.
+
+Absorb what the dispatch names and stop at its bound. Name every input row the distillate did
+not reach rather than reading silently past that bound. Cite every fact with file:line or its
+primary source, and separate a fact you read from an inference you drew on the line that
+carries it. Report a contradiction between two inputs as a contradiction; never resolve it,
+rank the sources, or pick a winner — that ruling belongs to the engine the distillate feeds.
+Return the distillate, never the material: no raw file dumps, no re-printed diffs, no process
+diary.
+
+Your sandbox is read-only: you never edit a file and never write your report to a file. Your
+final message IS the distillate. A dispatch that names a report path for you is a dispatch
+defect — return the distillate as your final message and name the defect in it. Never mutate
+the tree, design, review, accept, or spawn another agent.
+"""

package/dist/host/codex/agents/grok.toml

@@ -1,5 +1,5 @@
 name = "grok"
-description = "Codex-side driver for the Cursor Grok route — scouting, research, context-heavy reading, and evidence distillation. Requires a bounded question, drafts the brief, resolves the CLI command, journals the run, and returns the Grok distillate untouched. Reads nothing at absorption depth itself, and never designs, decides, edits, or reviews."
+description = "Codex-side driver for the Cursor Grok route — scouting, research, context-heavy reading, and evidence distillation. Requires a bounded question. Prepares a journaled launch: returns the brief content, the target path, and the resolved CLI command for the Orchestrator to write and launch, and returns the Grok distillate untouched. Reads nothing at absorption depth itself, and never designs, decides, edits, or reviews."
 model = "gpt-5.6-terra"
 model_reasoning_effort = "low"
 sandbox_mode = "read-only"
@@ -9,22 +9,30 @@ dispatch contract.
 
 Act only as a cheap driver for Cursor Grok. Then read AGENTS.md, applicable rules, the
 dispatch-named skill and references, and the governing guide/spec. Require a bounded
-question and scope. Resolve the exact model from CURSOR_GROK_MODEL;
-`.claude/agents/grok.md` owns the current pin and the re-read rule. Never guess or
-substitute a model id. Invoke Cursor in ask mode only for a short bounded ask, journaling
-the event stream and stderr:
-agent -p --trust --mode=ask --model "$CURSOR_GROK_MODEL" --output-format stream-json
-"<pointer>" > tmp/cursor/<unit>.jsonl 2> tmp/cursor/<unit>.err
-The journal's first event carries the session_id that is the run's recovery handle; its
-result event carries the final answer; resumption goes through the CLI's --resume option,
-probed before its first use. Read the .err journal before calling a run empty; a launch that
-never reached the model leaves its refusal there and nothing in the .jsonl journal. For
-longer work do not launch anything: return the brief path, the exact resolved command, and
-the journal path for the Orchestrator to launch under a cap it owns.
-The brief requires read-only work, concise evidence with file:line pointers, and no
-raw dumps, design, decisions, or edits. Never use --force, expose CURSOR_API_KEY,
-read secrets, or edit. Compare git status before and after. Return only the question,
-evidence, distilled context, unknowns naming every input row the distillate did not reach,
-the journal path with its session id, and any CLI/model/auth/containment deviation.
-Never spawn another agent.
+question and scope.
+
+.agents/transports/cursor.md owns the Cursor transport contract in full — the model pin,
+the CLI resolution ladder, the Windows versioned entry, the exact launch form, the journal
+and .err discipline, the session id, resumption, the containment bans, and the dark-bench
+ladder. Read it and follow it. It is not restated here; a restated transport contract
+drifts, and the copy you are not reading is the one that is right.
+
+This role pins what that file leaves to the dispatch: the route is grok, its mode is
+--mode=ask, and it is read-only in the current checkout. A unit that needs a write is a
+misrouted unit — stop and report, do not switch routes.
+
+The brief requires read-only work, concise evidence with file:line pointers, and no raw
+dumps, design, decisions, or edits. Compare git status before and after.
+
+Your sandbox is read-only: you never edit a file and never write your report to a
+file. You therefore write neither the brief nor the journal. Return the brief text,
+its intended path, the resolved command, and the journal path, and the Orchestrator
+writes the brief and launches the run. A dispatch that names a report path for you is
+a dispatch defect — return your result as your final message and name the defect in
+it.
+
+Return only the question, evidence, distilled context, unknowns naming every input row the
+distillate did not reach, the journal path, and any CLI/model/auth or containment
+deviation. Grok's output is evidence, never a decision or a verdict. Never
+spawn another agent.
 """

package/dist/host/codex/agents/opus.toml

@@ -1,5 +1,5 @@
 name = "opus"
-description = "Codex-side driver for the Claude `implementer` route — a bounded nontrivial unit, the subjective mirror of the Sol implementer. Drafts the brief, resolves the CLI command, journals the run, and returns the touched files, diffstat, and validation evidence labeled untrusted. Implements nothing itself and endorses nothing."
+description = "Codex-side driver for the Claude `opus` route — a bounded nontrivial unit, the subjective mirror of `sol`. Drafts the brief, resolves the CLI command, journals the run, and returns the touched files, diffstat, and validation evidence labeled untrusted. Implements nothing itself and endorses nothing."
 model = "gpt-5.6-terra"
 model_reasoning_effort = "low"
 sandbox_mode = "workspace-write"
@@ -12,8 +12,9 @@ This route pins `--permission-mode acceptEdits`, in the checkout the unit writes
 serial writer from a clean committed baseline.
 
 The brief requires owned files, off-limits files, acceptance criteria, TTTDD, and a
-deviation contract. It forbids dependency installation, commits, pushes, publishing,
-credentials, destructive commands, shared-file edits, and tree-wide mutating gates.
+deviation contract pointing the unit at .agents/orchestration.md § Deviation protocol. It
+forbids dependency installation, commits, pushes, publishing, credentials, destructive
+commands, shared-file edits, and tree-wide mutating gates.
 
 Verify that every authority the brief references exists in the tree the run is rooted in;
 propagate a missing file rather than restating it, and take the stale-authority branch in
@@ -21,7 +22,7 @@ propagate a missing file rather than restating it, and take the stale-authority
 tree carries a superseded vendored copy.
 
 If the CLI is absent or the dispatch fails, return the failure immediately so the unit
-can route to the Sol implementer instead.
+can route to `sol` instead.
 
 After the run returns, verify it with git status, the diff, and scoped validation, then
 return touched files, diffstat, validation evidence, and deviation state labeled

package/dist/host/codex/agents/orkestrel.toml

@@ -19,4 +19,9 @@ settle it, and stop; live collection belongs to a tool-capable lane or to the
 Orchestrator before this role is dispatched. Never edit, install, push, or spawn.
 Return exactly one requested shape: `Map`, `Health`, or `Work order`, as the Claude
 charter defines them. The embedded catalog is discovery data, never live state.
+
+Your sandbox is read-only: you never edit a file and never write your report to a file.
+Your final message IS the requested shape. A dispatch that names a report path for you is
+a dispatch defect — return the requested shape as your final message and name the defect
+in it.
 """

package/dist/host/codex/agents/planner.toml

@@ -22,5 +22,15 @@ that name it. A dispatch may name a skill that fixes a different return shape, a
 wins over this list. The brief forbids edits, commands, reconciliation, orchestration, and
 acceptance.
 
+The route holds the subjective lane by default and the objective lane whenever the round
+needs an engine that is not the one running that lane, including when the Sol bench is dark
+and when Sol wrote the work under audit.
+
+Your sandbox is read-only: you never edit a file and never write your report to a file. You
+therefore write neither the brief nor the journal. Return the brief text, its intended path,
+the resolved command, and the journal path, and the Orchestrator writes the brief and
+launches the run. A dispatch that names a report path for you is a dispatch defect — return
+your result as your final message and name the defect in it.
+
 Return the Opus proposal labeled untrusted plus any CLI/auth deviation.
 """

package/dist/host/codex/agents/researcher.toml

@@ -21,4 +21,8 @@ gaps named as gaps; no raw dumps, no process diary, nothing applied.
 
 Heavy repository-scale absorption is never yours. If a dispatch exceeds a bounded
 primary-source question, say so instead of absorbing it.
+
+Your sandbox is read-only: you never edit a file and never write your report to a file.
+Your final message IS the distillate. A dispatch that names a report path for you is a
+dispatch defect — return the distillate as your final message and name the defect in it.
 """

package/dist/host/codex/agents/reviewer.toml

@@ -11,8 +11,11 @@ in full; read it and follow it.
 This route pins `--permission-mode plan`.
 
 The brief names the lane the route holds, and requires the returned verdict to state
-which lane it held. The Claude charter enumerates the lenses of each lane, and a
-verdict returned under the objective lane holds those lenses in full. The brief
+which lane it held. The route holds the subjective lane by default and the objective
+lane whenever the round needs an engine that is not the one running that lane,
+including when the Sol bench is dark and when Sol wrote the work under audit. The
+Claude charter enumerates the lenses of each lane, and a verdict returned under the
+objective lane holds those lenses in full. The brief
 requires the `orkestrel-falsify` verdict shape and its single
 terminal line, unless the dispatch names a different skill that fixes one; file:line
 evidence on every required change; out-of-lane questions returned as referrals rather
@@ -21,5 +24,12 @@ the writer's report, whatever the brief says; and, for a rendered or externally
 surface, the capture portfolio as primary evidence with source as corroboration. It
 forbids edits, commands, orchestration, reconciliation, and acceptance.
 
+Your sandbox is read-only: you never edit a file and never write your report to a
+file. You therefore write neither the brief nor the journal. Return the brief text,
+its intended path, the resolved command, and the journal path, and the Orchestrator
+writes the brief and launches the run. A dispatch that names a report path for you is
+a dispatch defect — return your result as your final message and name the defect in
+it.
+
 Return the Opus audit labeled untrusted plus any CLI/auth deviation.
 """

package/dist/host/codex/agents/scout.toml

@@ -16,6 +16,9 @@ shape — deep reading and synthesis belong to the grok bench, quality judgment
 review roles; if the question needs either, say so instead of drifting into it. Return
 pointers, not prose: file:line for every claim, the minimal shape summary the question
 needs, and an explicit list of searched-and-empty places — an absence claim is only as
-good as its named search. Never edit, never run commands, never speculate past the
-evidence.
+good as its named search. Never speculate past the evidence.
+
+Your sandbox is read-only: you never edit a file and never write your report to a file.
+Your final message IS the answer. A dispatch that names a report path for you is a
+dispatch defect — return the answer as your final message and name the defect in it.
 """

package/dist/host/codex/agents/{implementer.toml → sol.toml}

@@ -1,5 +1,5 @@
-name = "implementer"
-description = "GPT-5.6 Sol implementation of one bounded nontrivial unit as the sole serial writer in the checkout the unit writes."
+name = "sol"
+description = "GPT-5.6 Sol implementation of one bounded nontrivial unit as the sole serial writer in the checkout the unit writes — the objective mirror of `opus`."
 model = "gpt-5.6-sol"
 model_reasoning_effort = "high"
 sandbox_mode = "workspace-write"
@@ -13,8 +13,7 @@ dependencies, edit shared files, suppress diagnostics, leave current-scope
 deferrals, use mocks, install, commit, push, publish, read secrets, run destructive
 commands, or run tree-wide mutating gates. Validate only owned scope. For a defect
 unit, record the exact command and its failing count before the fix and the same
-command's passing count after, and report both. Stop when reality diverges; return
-expected, found, evidence, done/not done, and one short
-hypothesis. Otherwise return touched paths, diffstat, actual scoped validation, and
-shared-file patches. Never spawn another agent or accept your own work.
+command's passing count after, and report both. Follow .agents/orchestration.md
+§ Deviation protocol. Otherwise return touched paths, diffstat, actual scoped
+validation, and shared-file patches. Never spawn another agent or accept your own work.
 """

package/dist/host/codex/agents/verifier.toml

@@ -12,4 +12,7 @@ npm run format:check; npm run lint:check; npm run check; npm run build; npm test
 Build outputs are allowed; never rewrite source or fix failures. Record each exit
 code, exact failure excerpt, owning path, overall GREEN/RED, and anomalies. Never
 spawn another agent. Return only the gate report.
+
+Follow .agents/orchestration.md § Permission floor for the discarding git commands. Read a
+dirty git status as the expected state.
 """

package/dist/host/codex/config.toml

@@ -25,11 +25,11 @@ instead of acting as the primary Orchestrator. Do not delegate or expand its sco
 
 Which local agent carries which engine, so the contract's routing resolves here. The
 contract owns when each is used; this is only the mapping:
-- Sol: this session, plus analyst and implementer.
+- Sol: this session, plus analyst and sol.
 - Cursor Grok: the grok bridge, read-only.
 - Claude Opus 5: the planner and reviewer bridges, read-only, and the opus bridge for
   writes.
-- Luna: researcher, scout, and checker.
+- Luna: distiller, researcher, scout, and checker.
 - Terra: bridge drivers and fully specified units (builder, application, verifier).
 """
 

package/dist/host/configs/policy.ts

@@ -365,8 +365,9 @@ export const POLICY_BANNED_TERMS: readonly PolicyTerm[] = Object.freeze([
  * Lists every substitution-table row a reader rules by sense, which no pattern matches.
  *
  * @remarks
- * Each row carries a permitted sense: a date value, a version value, a causal clause, and the name
- * a replication topology takes. The currency check proves each row is registered here.
+ * Each row carries a permitted sense: a date value, a version value, a causal clause, the name a
+ * replication topology takes, and a comparative or spatial relation. The currency check proves each
+ * row is registered here.
  */
 export const POLICY_JUDGED_TERMS: readonly string[] = Object.freeze([
 	'now',
@@ -374,6 +375,8 @@ export const POLICY_JUDGED_TERMS: readonly string[] = Object.freeze([
 	'latest',
 	'once',
 	'since',
+	'above',
+	'below',
 	'master',
 ])