@planu/cli 5.3.15 → 5.3.16

package/CHANGELOG.md

@@ -1,3 +1,13 @@
+## [5.3.16] - 2026-08-11
+
+### Bug Fixes
+- fix(spec-1477): bound publication-window wait per implementation-review arbitration
+- fix(spec-1477): publication window blocks same-identity lease supersession mid-receipt
+
+### Chores
+- chore(specs): record SPEC-1477 done transition and file SPEC-1487 dogfood bug
+
+
 ## [5.3.15] - 2026-08-11
 
 ### Bug Fixes

package/dist/engine/execution/validate-job-executor.js

@@ -11,7 +11,7 @@ import { resolveStorageLayout } from '../../storage/storage-layout.js';
 import { reportClassifiedDegradation } from '../../errors/classified-degradation.js';
 import { createValidationReceiptAuthority, ensureValidationIssuerKey, issueValidationReceipt, LOCAL_VALIDATION_RECEIPT_ISSUER, preflightValidationReceiptSigner, } from '../validation/validation-receipt.js';
 import { appendArtifact, readArtifact } from '../handoff-artifacts/io.js';
-import { assertValidationFreshnessBarrier, beginValidationFreshnessBarrier, bindValidationFreshnessLease, closeValidationFreshnessLease, rebaselineValidationFreshnessLeaseAfterRecompute, } from '../validation/validation-freshness.js';
+import { assertValidationFreshnessBarrier, beginValidationFreshnessBarrier, beginValidationFreshnessPublicationWindow, bindValidationFreshnessLease, closeValidationFreshnessLease, rebaselineValidationFreshnessLeaseAfterRecompute, } from '../validation/validation-freshness.js';
 import { recoverValidateJobs } from './validate-job-recovery.js';
 import { getRuntimePolicy } from '../runtime-policy.js';
 import { isValidateJob, parseValidatePayload, rehydrateValidationPayload, } from './validate-job-payload.js';
@@ -664,62 +664,69 @@ export class ValidateJobExecutor {
                 policy.receiptCheckpointResultMaxBytes,
         };
     }
+    // eslint-disable-next-line max-lines-per-function -- publication window and the double freshness assert share one auditable receipt-issuance boundary
     async issueReceipt(identity, payload, checkpoint, publicationLease, fencingToken, signal) {
         const receiptBindings = checkpoint.receiptInput.bindings;
-        if (executionAborted(signal)) {
-            signal.throwIfAborted();
-        }
-        if (!(await assertValidationFreshnessBarrier(publicationLease, receiptBindings))) {
-            throw new Error('[Planu] Validation inputs changed before receipt publication');
-        }
-        const database = new RuntimeDatabase({ path: resolveStorageLayout().runtimeDatabase });
+        const endPublicationWindow = beginValidationFreshnessPublicationWindow(publicationLease);
         try {
-            const signingKeyReference = await ensureValidationIssuerKey({
-                projectId: identity.projectId,
-                issuerId: LOCAL_VALIDATION_RECEIPT_ISSUER,
-            });
-            signal.throwIfAborted();
-            const { store } = createValidationReceiptAuthority({
-                database,
-                workspaceId: identity.workspaceId,
-                projectId: identity.projectId,
-                issuerId: LOCAL_VALIDATION_RECEIPT_ISSUER,
-                authorizePersistence: (persistenceDatabase) => {
-                    persistenceDatabase.assertActiveJobLease({
-                        id: identity.operationId,
-                        projectId: identity.projectId,
-                        workspaceId: identity.workspaceId,
-                        workerId: this.workerId,
-                        fencingToken,
-                        leaseMs: this.workerTimingPolicy().workerLeaseMs,
-                        now: new Date().toISOString(),
-                    });
-                },
-            });
-            const receipt = await issueValidationReceipt(checkpoint.receiptInput, {
-                issuerId: LOCAL_VALIDATION_RECEIPT_ISSUER,
-                signingKeyReference,
-                store,
-            });
             if (executionAborted(signal)) {
                 signal.throwIfAborted();
             }
             if (!(await assertValidationFreshnessBarrier(publicationLease, receiptBindings))) {
-                await store.invalidateCurrentBindings(identity.projectId, payload.bindings.specId);
-                throw new Error('[Planu] Validation inputs changed during receipt publication');
+                throw new Error('[Planu] Validation inputs changed before receipt publication');
             }
-            const receiptKey = `validation-receipt:${receipt.receiptId.slice('sha256:'.length)}`;
-            let enrichedReportSha;
+            const database = new RuntimeDatabase({ path: resolveStorageLayout().runtimeDatabase });
             try {
-                enrichedReportSha = await this.persistReceiptArtifacts(identity, payload, receipt.receiptId, receiptKey);
+                const signingKeyReference = await ensureValidationIssuerKey({
+                    projectId: identity.projectId,
+                    issuerId: LOCAL_VALIDATION_RECEIPT_ISSUER,
+                });
+                signal.throwIfAborted();
+                const { store } = createValidationReceiptAuthority({
+                    database,
+                    workspaceId: identity.workspaceId,
+                    projectId: identity.projectId,
+                    issuerId: LOCAL_VALIDATION_RECEIPT_ISSUER,
+                    authorizePersistence: (persistenceDatabase) => {
+                        persistenceDatabase.assertActiveJobLease({
+                            id: identity.operationId,
+                            projectId: identity.projectId,
+                            workspaceId: identity.workspaceId,
+                            workerId: this.workerId,
+                            fencingToken,
+                            leaseMs: this.workerTimingPolicy().workerLeaseMs,
+                            now: new Date().toISOString(),
+                        });
+                    },
+                });
+                const receipt = await issueValidationReceipt(checkpoint.receiptInput, {
+                    issuerId: LOCAL_VALIDATION_RECEIPT_ISSUER,
+                    signingKeyReference,
+                    store,
+                });
+                if (executionAborted(signal)) {
+                    signal.throwIfAborted();
+                }
+                if (!(await assertValidationFreshnessBarrier(publicationLease, receiptBindings))) {
+                    await store.invalidateCurrentBindings(identity.projectId, payload.bindings.specId);
+                    throw new Error('[Planu] Validation inputs changed during receipt publication');
+                }
+                const receiptKey = `validation-receipt:${receipt.receiptId.slice('sha256:'.length)}`;
+                let enrichedReportSha;
+                try {
+                    enrichedReportSha = await this.persistReceiptArtifacts(identity, payload, receipt.receiptId, receiptKey);
+                }
+                catch (error) {
+                    throw new ReceiptPublicationInterruptedError({ cause: error });
+                }
+                return buildReceiptResult(checkpoint.result, receipt.receiptId, receiptKey, enrichedReportSha);
             }
-            catch (error) {
-                throw new ReceiptPublicationInterruptedError({ cause: error });
+            finally {
+                database.close();
             }
-            return buildReceiptResult(checkpoint.result, receipt.receiptId, receiptKey, enrichedReportSha);
         }
         finally {
-            database.close();
+            endPublicationWindow();
         }
     }
     async preparePublicationLease(payload, expectedBindings) {

package/dist/engine/planu-core.darwin-arm64.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.15",
-  "engineVersion": "5.3.15",
-  "buildId": "1-5.3.15-aarch64-apple-darwin",
+  "cliVersion": "5.3.16",
+  "engineVersion": "5.3.16",
+  "buildId": "1-5.3.16-aarch64-apple-darwin",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -17,15 +17,15 @@
   "platform": "darwin",
   "arch": "arm64",
   "libc": null,
-  "artifactSha256": "0fbd8c0babdbfb88cae442db9cc57521f67ee345aa1872ed0cd04f464f992584",
+  "artifactSha256": "2a6db4c53e8d2e492a44dc8c276b3f1ec9e00f20056225221aa142752a9dfb4b",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.darwin-arm64.node.sbom.json",
-    "sha256": "41999cac08a7c64a9c899eac628df8e4bc10d70dc1b1923d5951a89f5ac8e878"
+    "sha256": "6bfb518a006ae80f0a94328c6fc0be1fa7d86b9a5bab2d7476a80fc8171dfd71"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "14948c630bfb7a355391c10563934cc79e8bb167",
+    "sourceCommit": "0cde0ff71b6b07e6bb7c059c7f03a7a58910e221",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -34,6 +34,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "bTat4AK64vTOtmTHrAf9w8z5d8GbFuxJZizc1YuZm05VpDaKzSaHkztZ5Hrb+sKu0lppYebpOGwYqTcFmfUMDQ=="
+    "value": "6QDQPYqy6xJ4RHk+SGv1DdPTxgQDQCG63NMTaK2Kk72npIDR7g6h/mCKNLhFDXPALcS7kjqKRijf/PzRqnmCBQ=="
   }
 }

package/dist/engine/planu-core.darwin-arm64.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.15",
+      "bom-ref": "pkg:cargo/planu-core@5.3.16",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.15",
+      "version": "5.3.16",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "0fbd8c0babdbfb88cae442db9cc57521f67ee345aa1872ed0cd04f464f992584"
+          "content": "2a6db4c53e8d2e492a44dc8c276b3f1ec9e00f20056225221aa142752a9dfb4b"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.15",
+      "ref": "pkg:cargo/planu-core@5.3.16",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.darwin-x64.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.15",
-  "engineVersion": "5.3.15",
-  "buildId": "1-5.3.15-x86_64-apple-darwin",
+  "cliVersion": "5.3.16",
+  "engineVersion": "5.3.16",
+  "buildId": "1-5.3.16-x86_64-apple-darwin",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -17,15 +17,15 @@
   "platform": "darwin",
   "arch": "x64",
   "libc": null,
-  "artifactSha256": "f2b7904e0e93116b6042e9f67e33ca60f2f054a48ae9f365327209473010a38a",
+  "artifactSha256": "be5de1bbcd0f9b4989aa82c5b51f0a7425c3eb1fa9dfd772cc362f476db433f5",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.darwin-x64.node.sbom.json",
-    "sha256": "40bb12bea402c3d433ca284cbb80c122ffcacb68defa17409da65583f9fe0b73"
+    "sha256": "38a7cc4b3d77c4414c58fd23af446914e84db52dd937e13b763da35b1962ab1e"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "14948c630bfb7a355391c10563934cc79e8bb167",
+    "sourceCommit": "0cde0ff71b6b07e6bb7c059c7f03a7a58910e221",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -34,6 +34,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "wDC/VmuwtNH7DIZHFeD9JAuHp08V8yDMSOgopr83IQIBnQkWBsqS9lQ2Zchxh7JNiTEfICvSQF7lMxA9Dk6UAQ=="
+    "value": "7X8ph1LL1pB4hXlWcXD109sTeHzyRTa94ozW52TdCg6y1LIH1kNwuz4rU0g0KK4CLpnanRpeLpu7NODRGiP2AQ=="
   }
 }

package/dist/engine/planu-core.darwin-x64.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.15",
+      "bom-ref": "pkg:cargo/planu-core@5.3.16",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.15",
+      "version": "5.3.16",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "f2b7904e0e93116b6042e9f67e33ca60f2f054a48ae9f365327209473010a38a"
+          "content": "be5de1bbcd0f9b4989aa82c5b51f0a7425c3eb1fa9dfd772cc362f476db433f5"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.15",
+      "ref": "pkg:cargo/planu-core@5.3.16",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.linux-arm64-gnu.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.15",
-  "engineVersion": "5.3.15",
-  "buildId": "1-5.3.15-aarch64-unknown-linux-gnu",
+  "cliVersion": "5.3.16",
+  "engineVersion": "5.3.16",
+  "buildId": "1-5.3.16-aarch64-unknown-linux-gnu",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
   "platform": "linux",
   "arch": "arm64",
   "libc": "glibc",
-  "artifactSha256": "01ea24db6f97e97faeef630279a6ee999acb4a7562771459a2423a7598304253",
+  "artifactSha256": "01d8ce2cb696744dc58095e8ff7fb2be6afcbccf467b0cd0eb538b6be530e210",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.linux-arm64-gnu.node.sbom.json",
-    "sha256": "02f9bcacd4b15056f3b945e103ed330d231fc9ac0f1a377dd1ec326e60b2b1dc"
+    "sha256": "5eb69bed870789d764c02f63f0371c51872314e22a888c60af9842c35f536a4b"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "14948c630bfb7a355391c10563934cc79e8bb167",
+    "sourceCommit": "0cde0ff71b6b07e6bb7c059c7f03a7a58910e221",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "LwJ+lJNVWcGsacrsWvGRbBS6WQTC7iMOAg3yfb0AZtdsHLBvAyG1700kh/1E1CbKEUR73CbUmU2TzEzVkesUAw=="
+    "value": "EJcdFkXbSIapzhu002fZ/X4QRUCpbJjwj4AYsg0G2BiERBQjMavAeiXqVNLr75Jt84NRmcOqXhidCvaEV0snCQ=="
   }
 }

package/dist/engine/planu-core.linux-arm64-gnu.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.15",
+      "bom-ref": "pkg:cargo/planu-core@5.3.16",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.15",
+      "version": "5.3.16",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "01ea24db6f97e97faeef630279a6ee999acb4a7562771459a2423a7598304253"
+          "content": "01d8ce2cb696744dc58095e8ff7fb2be6afcbccf467b0cd0eb538b6be530e210"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.15",
+      "ref": "pkg:cargo/planu-core@5.3.16",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.linux-arm64-musl.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.15",
-  "engineVersion": "5.3.15",
-  "buildId": "1-5.3.15-aarch64-unknown-linux-musl",
+  "cliVersion": "5.3.16",
+  "engineVersion": "5.3.16",
+  "buildId": "1-5.3.16-aarch64-unknown-linux-musl",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
   "platform": "linux",
   "arch": "arm64",
   "libc": "musl",
-  "artifactSha256": "77906aaa7ef35468fae4f48928d7fe427f6b42134f6ba27b7b10852a904a9063",
+  "artifactSha256": "9b0683851a369169cda5c0e4141df24a59f94da03fdf7b8fc1230da65e38eb36",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.linux-arm64-musl.node.sbom.json",
-    "sha256": "03b4827b05fb040843d38ede98208022adce12d8c584a6f4a909eab71d18b439"
+    "sha256": "463cb73768477635328836a2a13d34038a2c7aeb83de4d17212274135af77e9e"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "14948c630bfb7a355391c10563934cc79e8bb167",
+    "sourceCommit": "0cde0ff71b6b07e6bb7c059c7f03a7a58910e221",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "cK02P++x9IPGghpCbgzJx1roAidXZtDiELr8LDUtD6JfRGvOf6l3VwX+Lvd+cSz/dLK1cosRIjoeZFovhbTnDg=="
+    "value": "LGOiA63xus7b3/9w0/8qTyrKDhkRV0y3EMRV7F5NHxj8oDGqLz81viGJvBU+iri4Xhh0Ku03hxoD377vhE4TBQ=="
   }
 }

package/dist/engine/planu-core.linux-arm64-musl.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.15",
+      "bom-ref": "pkg:cargo/planu-core@5.3.16",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.15",
+      "version": "5.3.16",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "77906aaa7ef35468fae4f48928d7fe427f6b42134f6ba27b7b10852a904a9063"
+          "content": "9b0683851a369169cda5c0e4141df24a59f94da03fdf7b8fc1230da65e38eb36"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.15",
+      "ref": "pkg:cargo/planu-core@5.3.16",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.linux-x64-gnu.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.15",
-  "engineVersion": "5.3.15",
-  "buildId": "1-5.3.15-x86_64-unknown-linux-gnu",
+  "cliVersion": "5.3.16",
+  "engineVersion": "5.3.16",
+  "buildId": "1-5.3.16-x86_64-unknown-linux-gnu",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
   "platform": "linux",
   "arch": "x64",
   "libc": "glibc",
-  "artifactSha256": "ef2493926703d865ea8673d8357a238058a32a64325050d3880518d8884f25f2",
+  "artifactSha256": "2d8c9186e43c03eb451a9772c3dac7931039e5326997364bc2bcc5aa38726b48",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.linux-x64-gnu.node.sbom.json",
-    "sha256": "c9934e8615cac53687cc3de64ba400212a12aa8653cb320f9435c131fde66026"
+    "sha256": "a27023f31bf2290b52d4e344d1859f3bbb49f5a19ce9998800987440ce834964"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "14948c630bfb7a355391c10563934cc79e8bb167",
+    "sourceCommit": "0cde0ff71b6b07e6bb7c059c7f03a7a58910e221",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "AfBRj+G23Cdv1PqCjbZHpYdDXB5LW1JcgIbwcMstlFPhrv8ln9HTsyVOCE1PVl1ZeKMGP2YsTqgQj+XJb7tfBw=="
+    "value": "FEn6GiPlQVBmOEc8zw6SxFzCxNF9OfYAakAa36oR0r5fbCQBFBgfbuuKGdLar7rdnaU3vcgiexCzHJIuYdwFCg=="
   }
 }

package/dist/engine/planu-core.linux-x64-gnu.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.15",
+      "bom-ref": "pkg:cargo/planu-core@5.3.16",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.15",
+      "version": "5.3.16",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "ef2493926703d865ea8673d8357a238058a32a64325050d3880518d8884f25f2"
+          "content": "2d8c9186e43c03eb451a9772c3dac7931039e5326997364bc2bcc5aa38726b48"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.15",
+      "ref": "pkg:cargo/planu-core@5.3.16",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.linux-x64-musl.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.15",
-  "engineVersion": "5.3.15",
-  "buildId": "1-5.3.15-x86_64-unknown-linux-musl",
+  "cliVersion": "5.3.16",
+  "engineVersion": "5.3.16",
+  "buildId": "1-5.3.16-x86_64-unknown-linux-musl",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
   "platform": "linux",
   "arch": "x64",
   "libc": "musl",
-  "artifactSha256": "be770ad8fff0c70d1adf1599af7b60a9e0055e133890476e08e04c88c3f28c69",
+  "artifactSha256": "50547de5b23c0671447358eebc95d3841a2ce278236f5000655182ffb998d547",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.linux-x64-musl.node.sbom.json",
-    "sha256": "efd3cf900ecd753f0bee1eba0c6ecc8bd21d4f405e5d346f0fbe58972cf65da4"
+    "sha256": "a074e28e92546729d7347be57236bd8a0678ea1396fd756770915db6efecfa18"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "14948c630bfb7a355391c10563934cc79e8bb167",
+    "sourceCommit": "0cde0ff71b6b07e6bb7c059c7f03a7a58910e221",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "tiDSdVl5hTKNRg88FbcmEwUh4rXFh7OGfMzb9fV3BqwBAwSA/XktD4rXe4YZyBy75Kebo11zW+gp3DMnf+KECA=="
+    "value": "qvTXfNiZUTxm+mdb2A7/P6wjxEhdCr9WIVZkzDDOoxu4k4NgFeBmrSGKdRays0RSEivQ9f23gnvhS1myJ+DIAQ=="
   }
 }

package/dist/engine/planu-core.linux-x64-musl.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.15",
+      "bom-ref": "pkg:cargo/planu-core@5.3.16",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.15",
+      "version": "5.3.16",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "be770ad8fff0c70d1adf1599af7b60a9e0055e133890476e08e04c88c3f28c69"
+          "content": "50547de5b23c0671447358eebc95d3841a2ce278236f5000655182ffb998d547"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.15",
+      "ref": "pkg:cargo/planu-core@5.3.16",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.win32-arm64-msvc.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.15",
-  "engineVersion": "5.3.15",
-  "buildId": "1-5.3.15-aarch64-pc-windows-msvc",
+  "cliVersion": "5.3.16",
+  "engineVersion": "5.3.16",
+  "buildId": "1-5.3.16-aarch64-pc-windows-msvc",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
   "platform": "win32",
   "arch": "arm64",
   "libc": null,
-  "artifactSha256": "583b397fb748d8ce083c4b7d412800789e8b08d6cfcdf51dbb00ca8f16b790c3",
+  "artifactSha256": "151f0906eac861f554ce19ede7347d8267048f67aeb71b5f2521c7eaf8fbc034",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.win32-arm64-msvc.node.sbom.json",
-    "sha256": "ed94ce39f49489d682bc80cce95eb3ef04bafd64ed7fd7d8ea6def8b12c9a458"
+    "sha256": "2acb3f0615fee3f77ca7be0110f41c245b760d81811c0299a57aac2f7aa15fc9"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "14948c630bfb7a355391c10563934cc79e8bb167",
+    "sourceCommit": "0cde0ff71b6b07e6bb7c059c7f03a7a58910e221",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "gaOwCaYMRwh0TEujBu7Rabl255fJETQEAo4i+NFVpamCPo5YWa2sknnxsbm/ZM4iX9YLD1W5S1MeYFUcwVrIAg=="
+    "value": "qMuwIDaEU/3JJj3BuHx/uv8ZCDScOhZGUSHuIKSS64I31OESsH7QuSd6+7QYT9THm5hb0nxuol3BtyyQ3AX3Dg=="
   }
 }

package/dist/engine/planu-core.win32-arm64-msvc.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.15",
+      "bom-ref": "pkg:cargo/planu-core@5.3.16",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.15",
+      "version": "5.3.16",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "583b397fb748d8ce083c4b7d412800789e8b08d6cfcdf51dbb00ca8f16b790c3"
+          "content": "151f0906eac861f554ce19ede7347d8267048f67aeb71b5f2521c7eaf8fbc034"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.15",
+      "ref": "pkg:cargo/planu-core@5.3.16",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.win32-x64-msvc.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.15",
-  "engineVersion": "5.3.15",
-  "buildId": "1-5.3.15-x86_64-pc-windows-msvc",
+  "cliVersion": "5.3.16",
+  "engineVersion": "5.3.16",
+  "buildId": "1-5.3.16-x86_64-pc-windows-msvc",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
   "platform": "win32",
   "arch": "x64",
   "libc": null,
-  "artifactSha256": "612e2d929b12f1011da69ddcc598cbd251123294b52cfe7c04cd921e18d46ad7",
+  "artifactSha256": "b002099edf523c6aa0ca6f658a19514ff0a20ccf154bd88e4e205d49d9135590",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.win32-x64-msvc.node.sbom.json",
-    "sha256": "b6f3af124aeadba537605434bc406ac76f0bd798244edfbe31566b5011989207"
+    "sha256": "c1b0d2ac50e19c7133dccb297d19f3a317125bfd88e87508ae0743acba413c5f"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "14948c630bfb7a355391c10563934cc79e8bb167",
+    "sourceCommit": "0cde0ff71b6b07e6bb7c059c7f03a7a58910e221",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "2W3TfOtk1zUPWqx2o2a9DmJPT1rSEBL0kLVOrZfggV/B/hEWC5KgLZs0Cy9w6kE5QeWTeGQZ1spl12XVCdAZDQ=="
+    "value": "wQa0ygTquWBg4jFcHX8+sVqOETbJGfViThB7wyshllPFfdCF8s8chApggB+dgjCJd6qz2JaI1aJyifFFsIF9BQ=="
   }
 }

package/dist/engine/planu-core.win32-x64-msvc.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.15",
+      "bom-ref": "pkg:cargo/planu-core@5.3.16",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.15",
+      "version": "5.3.16",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "612e2d929b12f1011da69ddcc598cbd251123294b52cfe7c04cd921e18d46ad7"
+          "content": "b002099edf523c6aa0ca6f658a19514ff0a20ccf154bd88e4e205d49d9135590"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.15",
+      "ref": "pkg:cargo/planu-core@5.3.16",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/validation/validation-freshness.d.ts

@@ -29,6 +29,13 @@ export declare function injectValidationWatchEventForTests(input: {
 }): ValidationWatchEventClassification | undefined;
 /** Pause or observe authoritative verification turns without changing watcher topology. */
 export declare function setValidationFreshnessVerificationHookForTests(hook: (() => Promise<void>) | undefined): void;
+/**
+ * Mark one exact epoch's receipt publication as in flight. A same-identity
+ * resubmission that arrives while the window is open waits for the returned
+ * closer before superseding this epoch, instead of closing it mid-publication.
+ * Returns a no-op closer once the epoch is no longer the active one.
+ */
+export declare function beginValidationFreshnessPublicationWindow(lease: Pick<ValidationFreshnessLease, 'projectId' | 'specId' | 'epoch'>): () => void;
 /** Start both watchers before snapshotting and invalidate any older receipt immediately. */
 export declare function beginValidationFreshnessBarrier(input: {
     projectId: string;

package/dist/engine/validation/validation-freshness.js

@@ -71,6 +71,19 @@ let verificationHookForTests;
 function key(projectId, specId) {
     return `${projectId}:${specId}`;
 }
+function noop() {
+    /* no-op */
+}
+function raceWithTimeout(promise, timeoutMs) {
+    return new Promise((resolve) => {
+        const timer = setTimeout(resolve, timeoutMs);
+        timer.unref();
+        void promise.finally(() => {
+            clearTimeout(timer);
+            resolve();
+        });
+    });
+}
 async function invalidateDurably(projectId, specId) {
     const env_1 = { stack: [], error: void 0, hasError: false };
     try {
@@ -380,6 +393,29 @@ async function evidenceFingerprint(path) {
     }
     return hash.digest('hex');
 }
+/**
+ * Mark one exact epoch's receipt publication as in flight. A same-identity
+ * resubmission that arrives while the window is open waits for the returned
+ * closer before superseding this epoch, instead of closing it mid-publication.
+ * Returns a no-op closer once the epoch is no longer the active one.
+ */
+export function beginValidationFreshnessPublicationWindow(lease) {
+    const state = active.get(key(lease.projectId, lease.specId));
+    if (state?.epoch !== lease.epoch) {
+        return noop;
+    }
+    let release;
+    const window = new Promise((resolve) => {
+        release = resolve;
+    });
+    state.publicationInFlight = window;
+    return () => {
+        release();
+        if (state.publicationInFlight === window) {
+            state.publicationInFlight = undefined;
+        }
+    };
+}
 /** Start both watchers before snapshotting and invalidate any older receipt immediately. */
 // eslint-disable-next-line max-lines-per-function -- serialized setup and rollback form one auditable ownership boundary
 export async function beginValidationFreshnessBarrier(input) {
@@ -395,11 +431,16 @@ export async function beginValidationFreshnessBarrier(input) {
     try {
         const previous = active.get(identity);
         if (previous) {
-            await closeValidationFreshnessLease({
-                projectId: input.projectId,
-                specId: input.specId,
-                epoch: previous.epoch,
-            });
+            if (previous.publicationInFlight) {
+                await raceWithTimeout(previous.publicationInFlight, getRuntimePolicy().validation.receiptPublicationDeadlineMs + 1000);
+            }
+            if (active.get(identity) === previous) {
+                await closeValidationFreshnessLease({
+                    projectId: input.projectId,
+                    specId: input.specId,
+                    epoch: previous.epoch,
+                });
+            }
         }
         await mkdir(input.handoffPath, { recursive: true, mode: 0o700 });
         const initialEvidenceFingerprint = await evidenceFingerprint(input.handoffPath);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@planu/cli",
-  "version": "5.3.15",
+  "version": "5.3.16",
   "description": "Planu — MCP Server for Spec Driven Development with native Rust acceleration for hot paths. Cross-platform (Linux/macOS/Windows, x64/arm64, glibc/musl).",
   "type": "module",
   "main": "dist/index.js",
@@ -35,14 +35,14 @@
     "packageName": "@planu/core"
   },
   "optionalDependencies": {
-    "@planu/core-darwin-arm64": "5.3.15",
-    "@planu/core-darwin-x64": "5.3.15",
-    "@planu/core-linux-arm64-gnu": "5.3.15",
-    "@planu/core-linux-arm64-musl": "5.3.15",
-    "@planu/core-linux-x64-gnu": "5.3.15",
-    "@planu/core-linux-x64-musl": "5.3.15",
-    "@planu/core-win32-arm64-msvc": "5.3.15",
-    "@planu/core-win32-x64-msvc": "5.3.15"
+    "@planu/core-darwin-arm64": "5.3.16",
+    "@planu/core-darwin-x64": "5.3.16",
+    "@planu/core-linux-arm64-gnu": "5.3.16",
+    "@planu/core-linux-arm64-musl": "5.3.16",
+    "@planu/core-linux-x64-gnu": "5.3.16",
+    "@planu/core-linux-x64-musl": "5.3.16",
+    "@planu/core-win32-arm64-msvc": "5.3.16",
+    "@planu/core-win32-x64-msvc": "5.3.16"
   },
   "engines": {
     "node": ">=24.0.0"

package/planu-native.json

@@ -1,7 +1,7 @@
 {
   "name": "dev.planu.native",
   "displayName": "Planu Native Lightweight Surface",
-  "version": "5.3.15",
+  "version": "5.3.16",
   "packageName": "@planu/cli",
   "modes": {
     "lightweight": {

package/planu-plugin.json

@@ -2,7 +2,7 @@
   "name": "dev.planu.cli",
   "displayName": "Planu — Spec Driven Development",
   "description": "Manage software specs, estimations, and autonomous SDD workflows. Language-agnostic MCP server for Claude Code.",
-  "version": "5.3.15",
+  "version": "5.3.16",
   "icon": "assets/plugin/icon.svg",
   "command": ["npx", "@planu/cli@latest"],
   "packageName": "@planu/cli",