@planu/cli 5.3.15 → 5.3.17

package/CHANGELOG.md

@@ -1,3 +1,24 @@
+## [5.3.17] - 2026-08-11
+
+### Bug Fixes
+- fix(spec-1487): normalize spec paths in toRepoRelativePath per implementation-review arbitration
+- fix(spec-1487): exclude Planu bookkeeping paths from traceability autofill and done drift gate
+
+### Chores
+- chore(specs): record SPEC-1487 done transition
+- chore(spec-1487): record implementation-review round and approved scope amendment
+
+
+## [5.3.16] - 2026-08-11
+
+### Bug Fixes
+- fix(spec-1477): bound publication-window wait per implementation-review arbitration
+- fix(spec-1477): publication window blocks same-identity lease supersession mid-receipt
+
+### Chores
+- chore(specs): record SPEC-1477 done transition and file SPEC-1487 dogfood bug
+
+
 ## [5.3.15] - 2026-08-11
 
 ### Bug Fixes

package/dist/engine/evidence-gates/evidence-autofill.d.ts

@@ -1,4 +1,9 @@
 import type { AutofillTraceabilityMatrixArgs, AutofillTraceabilityMatrixResult } from '../../types/evidence-autofill.js';
+/** Exact Planu lifecycle files every spec branch mutates; never counted as implementation drift. */
+export declare const PLANU_BOOKKEEPING_FILES: readonly ['planu/context.md', 'planu/session-context.md', 'planu/session.json', 'planu/status.json', 'planu/releases/pending.json', 'planu/conventions.json'];
+/** Normalizes a spec.md path (absolute or already repo-relative) to a repo-relative,
+ * forward-slash path so it can be compared against `git diff` output. */
+export declare function toRepoRelativePath(specPath: string, projectPath?: string): string;
 /**
  * Generate `traceability-matrix.json` in the handoff evidence store when it does
  * not already exist. Never overwrites an existing file — if one is present this

package/dist/engine/evidence-gates/evidence-autofill.js

@@ -19,7 +19,7 @@
 // legacy harnesses, etc.).
 import { execFile } from 'node:child_process';
 import { existsSync } from 'node:fs';
-import { isAbsolute, join, resolve } from 'node:path';
+import { isAbsolute, join, relative, resolve } from 'node:path';
 import { promisify } from 'node:util';
 import { extractAcceptanceCriteriaTexts } from '../spec-format/acceptance-criteria.js';
 import { parseFrontmatterScenarios } from '../validator/spec-compliance-runner.js';
@@ -35,7 +35,28 @@ const defaultExec = async (command, args, options) => {
     const { stdout } = await execFileAsync(command, args, { cwd: options.cwd, encoding: 'utf-8' });
     return stdout;
 };
-/** Best-effort `git diff --name-only <mergeBase>...HEAD`; never throws. */
+/** Exact Planu lifecycle files every spec branch mutates; never counted as implementation drift. */
+export const PLANU_BOOKKEEPING_FILES = [
+    'planu/context.md',
+    'planu/session-context.md',
+    'planu/session.json',
+    'planu/status.json',
+    'planu/releases/pending.json',
+    'planu/conventions.json',
+];
+const OTHER_SPEC_MD_PATTERN = /^planu\/specs\/[^/]+\/spec\.md$/;
+/** Normalizes a spec.md path (absolute or already repo-relative) to a repo-relative,
+ * forward-slash path so it can be compared against `git diff` output. */
+export function toRepoRelativePath(specPath, projectPath) {
+    if (isAbsolute(specPath) && !projectPath) {
+        const normalized = specPath.replace(/\\/g, '/');
+        const specsIndex = normalized.lastIndexOf('planu/specs/');
+        return specsIndex === -1 ? normalized : normalized.slice(specsIndex);
+    }
+    const relativePath = isAbsolute(specPath) && projectPath ? relative(projectPath, specPath) : specPath;
+    return relativePath.replace(/\\/g, '/').replace(/^(\.\/)+/, '');
+}
+/** Best-effort `git diff --name-status <mergeBase>...HEAD`; never throws. */
 async function computeChangedFilesFromGit(projectPath, exec, baseBranch) {
     try {
         const mergeBaseOut = await exec('git', ['merge-base', 'HEAD', baseBranch], {
@@ -45,13 +66,20 @@ async function computeChangedFilesFromGit(projectPath, exec, baseBranch) {
         if (!mergeBase) {
             return [];
         }
-        const diffOut = await exec('git', ['diff', '--name-only', `${mergeBase}...HEAD`], {
+        const diffOut = await exec('git', ['diff', '--name-status', `${mergeBase}...HEAD`], {
             cwd: projectPath,
         });
         return diffOut
             .split('\n')
             .map((line) => line.trim())
-            .filter((line) => line.length > 0);
+            .filter((line) => line.length > 0)
+            .map((line) => {
+            const fields = line.split('\t');
+            const path = fields[fields.length - 1] ?? '';
+            const status = (fields[0] ?? '').startsWith('A') ? 'Added' : 'Other';
+            return { status, path };
+        })
+            .filter((entry) => entry.path.length > 0);
     }
     catch (error) {
         /* reliability-optional: EVIDENCE_AUTOFILL_GIT_DIFF — falls back to ## Files ownership */
@@ -59,6 +87,18 @@ async function computeChangedFilesFromGit(projectPath, exec, baseBranch) {
         return [];
     }
 }
+/** Drops Planu bookkeeping paths, this spec's own spec.md, and newly Added other-spec
+ * spec.md files — the diff still surfaces unowned src/ paths and Modified other-spec
+ * contracts so the done drift gate can flag genuine scope drift. */
+function excludeBookkeepingChanges(entries, ownSpecMdPath) {
+    const bookkeeping = new Set(PLANU_BOOKKEEPING_FILES);
+    const kept = entries
+        .filter((entry) => !bookkeeping.has(entry.path))
+        .filter((entry) => entry.path !== ownSpecMdPath)
+        .filter((entry) => !(entry.status === 'Added' && OTHER_SPEC_MD_PATTERN.test(entry.path)))
+        .map((entry) => entry.path);
+    return [...new Set(kept)];
+}
 function filterExistingRepoFiles(projectPath, paths) {
     return paths.filter((path) => {
         if (isAbsolute(path)) {
@@ -111,15 +151,18 @@ export async function autofillTraceabilityMatrix(args) {
         const scenarios = parseFrontmatterScenarios(args.specBody);
         const exec = args.exec ?? defaultExec;
         const baseBranch = args.baseBranch ?? 'main';
-        const gitChangedFiles = args.projectPath
+        const gitEntries = args.projectPath
             ? await computeChangedFilesFromGit(args.projectPath, exec, baseBranch)
             : [];
+        const gitChangedFiles = excludeBookkeepingChanges(gitEntries, args.ownSpecMdPath);
         const ownership = extractCanonicalFileOwnership(args.specBody);
         const ownershipFiles = [...ownership.toCreate, ...ownership.toModify, ...ownership.toTest];
         const rawChangedFiles = gitChangedFiles.length > 0 ? gitChangedFiles : ownershipFiles;
-        const changedFiles = args.projectPath
-            ? filterExistingRepoFiles(args.projectPath, rawChangedFiles)
-            : rawChangedFiles;
+        const changedFiles = [
+            ...new Set(args.projectPath
+                ? filterExistingRepoFiles(args.projectPath, rawChangedFiles)
+                : rawChangedFiles),
+        ];
         const { validationEvidence, reviewerEvidence } = await readValidationReportSummary(args.projectId, args.specId);
         const rows = criteria.map((acceptanceCriterion, index) => {
             const testPaths = scenarios[index]?.tests?.map((test) => test.path) ?? [];

package/dist/engine/evidence-index/done-drift.d.ts

@@ -2,5 +2,6 @@ import type { EvidenceGateIssue, SpecEvidenceIndex } from '../../types/index.js'
 export declare function checkDoneDriftContract(args: {
     index: SpecEvidenceIndex;
     approvedScopePaths: readonly string[];
+    ownSpecMdPath?: string;
 }): EvidenceGateIssue[];
 //# sourceMappingURL=done-drift.d.ts.map

package/dist/engine/evidence-index/done-drift.js

@@ -1,8 +1,38 @@
 import { normalizeChangedFilePath } from '../handoff-packager.js';
+import { PLANU_BOOKKEEPING_FILES } from '../evidence-gates/evidence-autofill.js';
 function normalizedChangedFile(value) {
     const normalized = normalizeChangedFilePath(value);
     return normalized.status === 'valid' ? normalized.path : null;
 }
+function buildNeverDriftPaths(ownSpecMdPath) {
+    const neverDriftPaths = new Set(PLANU_BOOKKEEPING_FILES);
+    const normalizedOwnSpecMdPath = ownSpecMdPath ? normalizedChangedFile(ownSpecMdPath) : null;
+    if (normalizedOwnSpecMdPath) {
+        neverDriftPaths.add(normalizedOwnSpecMdPath);
+    }
+    return neverDriftPaths;
+}
+function findUnapprovedChangedFiles(index, approved, neverDriftPaths) {
+    return index.criteria.flatMap((entry) => {
+        const hasScopeAmendment = entry.evidence.some((record) => record.kind === 'reviewer' && /scope amendment|approved scope/i.test(record.value));
+        if (hasScopeAmendment) {
+            return [];
+        }
+        return entry.evidence.flatMap((record) => {
+            if (record.kind !== 'changed-file' ||
+                (record.status !== 'valid' && record.status !== 'missing')) {
+                return [];
+            }
+            const normalized = normalizedChangedFile(record.value);
+            if (normalized && neverDriftPaths.has(normalized)) {
+                return [];
+            }
+            return normalized && approved.has(normalized)
+                ? []
+                : [`${entry.criterion}: ${normalized ?? 'invalid changed-file path'}`];
+        });
+    });
+}
 export function checkDoneDriftContract(args) {
     const issues = [];
     const uncovered = args.index.criteria.filter((entry) => {
@@ -39,22 +69,8 @@ export function checkDoneDriftContract(args) {
         return normalized ? [normalized] : [];
     });
     const approved = new Set(approvedScopePaths);
-    const unapproved = args.index.criteria.flatMap((entry) => {
-        const hasScopeAmendment = entry.evidence.some((record) => record.kind === 'reviewer' && /scope amendment|approved scope/i.test(record.value));
-        if (hasScopeAmendment) {
-            return [];
-        }
-        return entry.evidence.flatMap((record) => {
-            if (record.kind !== 'changed-file' ||
-                (record.status !== 'valid' && record.status !== 'missing')) {
-                return [];
-            }
-            const normalized = normalizedChangedFile(record.value);
-            return normalized && approved.has(normalized)
-                ? []
-                : [`${entry.criterion}: ${normalized ?? 'invalid changed-file path'}`];
-        });
-    });
+    const neverDriftPaths = buildNeverDriftPaths(args.ownSpecMdPath);
+    const unapproved = findUnapprovedChangedFiles(args.index, approved, neverDriftPaths);
     if (unapproved.length > 0) {
         const approvedHint = approvedScopePaths.length > 0
             ? ` Approved canonical paths: ${approvedScopePaths.join(', ')}.`

package/dist/engine/execution/validate-job-executor.js

@@ -11,7 +11,7 @@ import { resolveStorageLayout } from '../../storage/storage-layout.js';
 import { reportClassifiedDegradation } from '../../errors/classified-degradation.js';
 import { createValidationReceiptAuthority, ensureValidationIssuerKey, issueValidationReceipt, LOCAL_VALIDATION_RECEIPT_ISSUER, preflightValidationReceiptSigner, } from '../validation/validation-receipt.js';
 import { appendArtifact, readArtifact } from '../handoff-artifacts/io.js';
-import { assertValidationFreshnessBarrier, beginValidationFreshnessBarrier, bindValidationFreshnessLease, closeValidationFreshnessLease, rebaselineValidationFreshnessLeaseAfterRecompute, } from '../validation/validation-freshness.js';
+import { assertValidationFreshnessBarrier, beginValidationFreshnessBarrier, beginValidationFreshnessPublicationWindow, bindValidationFreshnessLease, closeValidationFreshnessLease, rebaselineValidationFreshnessLeaseAfterRecompute, } from '../validation/validation-freshness.js';
 import { recoverValidateJobs } from './validate-job-recovery.js';
 import { getRuntimePolicy } from '../runtime-policy.js';
 import { isValidateJob, parseValidatePayload, rehydrateValidationPayload, } from './validate-job-payload.js';
@@ -664,62 +664,69 @@ export class ValidateJobExecutor {
                 policy.receiptCheckpointResultMaxBytes,
         };
     }
+    // eslint-disable-next-line max-lines-per-function -- publication window and the double freshness assert share one auditable receipt-issuance boundary
     async issueReceipt(identity, payload, checkpoint, publicationLease, fencingToken, signal) {
         const receiptBindings = checkpoint.receiptInput.bindings;
-        if (executionAborted(signal)) {
-            signal.throwIfAborted();
-        }
-        if (!(await assertValidationFreshnessBarrier(publicationLease, receiptBindings))) {
-            throw new Error('[Planu] Validation inputs changed before receipt publication');
-        }
-        const database = new RuntimeDatabase({ path: resolveStorageLayout().runtimeDatabase });
+        const endPublicationWindow = beginValidationFreshnessPublicationWindow(publicationLease);
         try {
-            const signingKeyReference = await ensureValidationIssuerKey({
-                projectId: identity.projectId,
-                issuerId: LOCAL_VALIDATION_RECEIPT_ISSUER,
-            });
-            signal.throwIfAborted();
-            const { store } = createValidationReceiptAuthority({
-                database,
-                workspaceId: identity.workspaceId,
-                projectId: identity.projectId,
-                issuerId: LOCAL_VALIDATION_RECEIPT_ISSUER,
-                authorizePersistence: (persistenceDatabase) => {
-                    persistenceDatabase.assertActiveJobLease({
-                        id: identity.operationId,
-                        projectId: identity.projectId,
-                        workspaceId: identity.workspaceId,
-                        workerId: this.workerId,
-                        fencingToken,
-                        leaseMs: this.workerTimingPolicy().workerLeaseMs,
-                        now: new Date().toISOString(),
-                    });
-                },
-            });
-            const receipt = await issueValidationReceipt(checkpoint.receiptInput, {
-                issuerId: LOCAL_VALIDATION_RECEIPT_ISSUER,
-                signingKeyReference,
-                store,
-            });
             if (executionAborted(signal)) {
                 signal.throwIfAborted();
             }
             if (!(await assertValidationFreshnessBarrier(publicationLease, receiptBindings))) {
-                await store.invalidateCurrentBindings(identity.projectId, payload.bindings.specId);
-                throw new Error('[Planu] Validation inputs changed during receipt publication');
+                throw new Error('[Planu] Validation inputs changed before receipt publication');
             }
-            const receiptKey = `validation-receipt:${receipt.receiptId.slice('sha256:'.length)}`;
-            let enrichedReportSha;
+            const database = new RuntimeDatabase({ path: resolveStorageLayout().runtimeDatabase });
             try {
-                enrichedReportSha = await this.persistReceiptArtifacts(identity, payload, receipt.receiptId, receiptKey);
+                const signingKeyReference = await ensureValidationIssuerKey({
+                    projectId: identity.projectId,
+                    issuerId: LOCAL_VALIDATION_RECEIPT_ISSUER,
+                });
+                signal.throwIfAborted();
+                const { store } = createValidationReceiptAuthority({
+                    database,
+                    workspaceId: identity.workspaceId,
+                    projectId: identity.projectId,
+                    issuerId: LOCAL_VALIDATION_RECEIPT_ISSUER,
+                    authorizePersistence: (persistenceDatabase) => {
+                        persistenceDatabase.assertActiveJobLease({
+                            id: identity.operationId,
+                            projectId: identity.projectId,
+                            workspaceId: identity.workspaceId,
+                            workerId: this.workerId,
+                            fencingToken,
+                            leaseMs: this.workerTimingPolicy().workerLeaseMs,
+                            now: new Date().toISOString(),
+                        });
+                    },
+                });
+                const receipt = await issueValidationReceipt(checkpoint.receiptInput, {
+                    issuerId: LOCAL_VALIDATION_RECEIPT_ISSUER,
+                    signingKeyReference,
+                    store,
+                });
+                if (executionAborted(signal)) {
+                    signal.throwIfAborted();
+                }
+                if (!(await assertValidationFreshnessBarrier(publicationLease, receiptBindings))) {
+                    await store.invalidateCurrentBindings(identity.projectId, payload.bindings.specId);
+                    throw new Error('[Planu] Validation inputs changed during receipt publication');
+                }
+                const receiptKey = `validation-receipt:${receipt.receiptId.slice('sha256:'.length)}`;
+                let enrichedReportSha;
+                try {
+                    enrichedReportSha = await this.persistReceiptArtifacts(identity, payload, receipt.receiptId, receiptKey);
+                }
+                catch (error) {
+                    throw new ReceiptPublicationInterruptedError({ cause: error });
+                }
+                return buildReceiptResult(checkpoint.result, receipt.receiptId, receiptKey, enrichedReportSha);
             }
-            catch (error) {
-                throw new ReceiptPublicationInterruptedError({ cause: error });
+            finally {
+                database.close();
             }
-            return buildReceiptResult(checkpoint.result, receipt.receiptId, receiptKey, enrichedReportSha);
         }
         finally {
-            database.close();
+            endPublicationWindow();
         }
     }
     async preparePublicationLease(payload, expectedBindings) {

package/dist/engine/planu-core.darwin-arm64.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.15",
-  "engineVersion": "5.3.15",
-  "buildId": "1-5.3.15-aarch64-apple-darwin",
+  "cliVersion": "5.3.17",
+  "engineVersion": "5.3.17",
+  "buildId": "1-5.3.17-aarch64-apple-darwin",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -17,15 +17,15 @@
   "platform": "darwin",
   "arch": "arm64",
   "libc": null,
-  "artifactSha256": "0fbd8c0babdbfb88cae442db9cc57521f67ee345aa1872ed0cd04f464f992584",
+  "artifactSha256": "bdc99fce3b870c27eafdd54b37d2822c37255eb3694c425ad6b651c6f5b97ac8",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.darwin-arm64.node.sbom.json",
-    "sha256": "41999cac08a7c64a9c899eac628df8e4bc10d70dc1b1923d5951a89f5ac8e878"
+    "sha256": "11343948562c3b7f3bd3c819a0656a2fa9321431e1022850cda9e9ba5320f90c"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "14948c630bfb7a355391c10563934cc79e8bb167",
+    "sourceCommit": "903b141393635e71607722637a08977e153b8b56",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -34,6 +34,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "bTat4AK64vTOtmTHrAf9w8z5d8GbFuxJZizc1YuZm05VpDaKzSaHkztZ5Hrb+sKu0lppYebpOGwYqTcFmfUMDQ=="
+    "value": "VfCh5vWrZxDxMM6pCO1dpKf/FxS8hZDqFZlvpwtTd6GweAYf2mzdaWMZkNA/a6r0y7gzGfUVuzplXQ64t2w3Cg=="
   }
 }

package/dist/engine/planu-core.darwin-arm64.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.15",
+      "bom-ref": "pkg:cargo/planu-core@5.3.17",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.15",
+      "version": "5.3.17",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "0fbd8c0babdbfb88cae442db9cc57521f67ee345aa1872ed0cd04f464f992584"
+          "content": "bdc99fce3b870c27eafdd54b37d2822c37255eb3694c425ad6b651c6f5b97ac8"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.15",
+      "ref": "pkg:cargo/planu-core@5.3.17",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.darwin-x64.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.15",
-  "engineVersion": "5.3.15",
-  "buildId": "1-5.3.15-x86_64-apple-darwin",
+  "cliVersion": "5.3.17",
+  "engineVersion": "5.3.17",
+  "buildId": "1-5.3.17-x86_64-apple-darwin",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -17,15 +17,15 @@
   "platform": "darwin",
   "arch": "x64",
   "libc": null,
-  "artifactSha256": "f2b7904e0e93116b6042e9f67e33ca60f2f054a48ae9f365327209473010a38a",
+  "artifactSha256": "bae60566a531f74f27a61531acb737a62c0b4d2c5d748cd8619421452c355d5e",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.darwin-x64.node.sbom.json",
-    "sha256": "40bb12bea402c3d433ca284cbb80c122ffcacb68defa17409da65583f9fe0b73"
+    "sha256": "817d459d6609a5434eb192614d137f2fa63e3fd9908587d05207b584eba246eb"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "14948c630bfb7a355391c10563934cc79e8bb167",
+    "sourceCommit": "903b141393635e71607722637a08977e153b8b56",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -34,6 +34,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "wDC/VmuwtNH7DIZHFeD9JAuHp08V8yDMSOgopr83IQIBnQkWBsqS9lQ2Zchxh7JNiTEfICvSQF7lMxA9Dk6UAQ=="
+    "value": "HYqjCJjOvAVvkaW7hxI5rJ57eE+48Dd58M+y2/+RU+Qt+ddPDofOh1syhVCQmAHb/1IqORN+/sHSFy/bLK/bAg=="
   }
 }

package/dist/engine/planu-core.darwin-x64.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.15",
+      "bom-ref": "pkg:cargo/planu-core@5.3.17",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.15",
+      "version": "5.3.17",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "f2b7904e0e93116b6042e9f67e33ca60f2f054a48ae9f365327209473010a38a"
+          "content": "bae60566a531f74f27a61531acb737a62c0b4d2c5d748cd8619421452c355d5e"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.15",
+      "ref": "pkg:cargo/planu-core@5.3.17",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.linux-arm64-gnu.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.15",
-  "engineVersion": "5.3.15",
-  "buildId": "1-5.3.15-aarch64-unknown-linux-gnu",
+  "cliVersion": "5.3.17",
+  "engineVersion": "5.3.17",
+  "buildId": "1-5.3.17-aarch64-unknown-linux-gnu",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
   "platform": "linux",
   "arch": "arm64",
   "libc": "glibc",
-  "artifactSha256": "01ea24db6f97e97faeef630279a6ee999acb4a7562771459a2423a7598304253",
+  "artifactSha256": "6079ee86b8ee1e650cfd2602f039eb28d3d91e15d8377e712eb851b3ec4746c4",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.linux-arm64-gnu.node.sbom.json",
-    "sha256": "02f9bcacd4b15056f3b945e103ed330d231fc9ac0f1a377dd1ec326e60b2b1dc"
+    "sha256": "c0fd691552bdaa6095d5c8220a3d7e5679d6f38ddc22919a552c0e98ad53d734"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "14948c630bfb7a355391c10563934cc79e8bb167",
+    "sourceCommit": "903b141393635e71607722637a08977e153b8b56",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "LwJ+lJNVWcGsacrsWvGRbBS6WQTC7iMOAg3yfb0AZtdsHLBvAyG1700kh/1E1CbKEUR73CbUmU2TzEzVkesUAw=="
+    "value": "85bAzK82CMXtjrkBbdc3D8X+9wN4/tsyeTzr/MZ5BmyWAe1D4jikLwJ4SW+ioyS+dDshLRCUgrUXSIUsjj0PAg=="
   }
 }

package/dist/engine/planu-core.linux-arm64-gnu.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.15",
+      "bom-ref": "pkg:cargo/planu-core@5.3.17",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.15",
+      "version": "5.3.17",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "01ea24db6f97e97faeef630279a6ee999acb4a7562771459a2423a7598304253"
+          "content": "6079ee86b8ee1e650cfd2602f039eb28d3d91e15d8377e712eb851b3ec4746c4"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.15",
+      "ref": "pkg:cargo/planu-core@5.3.17",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.linux-arm64-musl.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.15",
-  "engineVersion": "5.3.15",
-  "buildId": "1-5.3.15-aarch64-unknown-linux-musl",
+  "cliVersion": "5.3.17",
+  "engineVersion": "5.3.17",
+  "buildId": "1-5.3.17-aarch64-unknown-linux-musl",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
   "platform": "linux",
   "arch": "arm64",
   "libc": "musl",
-  "artifactSha256": "77906aaa7ef35468fae4f48928d7fe427f6b42134f6ba27b7b10852a904a9063",
+  "artifactSha256": "e6ee0ad20445313dbed5b14cbd5333a49ae08197ba4fa642e7292ff23bcbb2cf",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.linux-arm64-musl.node.sbom.json",
-    "sha256": "03b4827b05fb040843d38ede98208022adce12d8c584a6f4a909eab71d18b439"
+    "sha256": "e2a76a395f0d058a97fd17388b74530059c4c80800515463480c73849b01659a"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "14948c630bfb7a355391c10563934cc79e8bb167",
+    "sourceCommit": "903b141393635e71607722637a08977e153b8b56",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "cK02P++x9IPGghpCbgzJx1roAidXZtDiELr8LDUtD6JfRGvOf6l3VwX+Lvd+cSz/dLK1cosRIjoeZFovhbTnDg=="
+    "value": "LUWtVfzWce5DbAtjGkmxVudiKCoD8sqcxuzz7wG1uUCyrZ8rMN7foWoytKdNdID7if12WlSVvFDME63D9Ls/BA=="
   }
 }

package/dist/engine/planu-core.linux-arm64-musl.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.15",
+      "bom-ref": "pkg:cargo/planu-core@5.3.17",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.15",
+      "version": "5.3.17",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "77906aaa7ef35468fae4f48928d7fe427f6b42134f6ba27b7b10852a904a9063"
+          "content": "e6ee0ad20445313dbed5b14cbd5333a49ae08197ba4fa642e7292ff23bcbb2cf"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.15",
+      "ref": "pkg:cargo/planu-core@5.3.17",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.linux-x64-gnu.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.15",
-  "engineVersion": "5.3.15",
-  "buildId": "1-5.3.15-x86_64-unknown-linux-gnu",
+  "cliVersion": "5.3.17",
+  "engineVersion": "5.3.17",
+  "buildId": "1-5.3.17-x86_64-unknown-linux-gnu",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
   "platform": "linux",
   "arch": "x64",
   "libc": "glibc",
-  "artifactSha256": "ef2493926703d865ea8673d8357a238058a32a64325050d3880518d8884f25f2",
+  "artifactSha256": "b10b9708c07c07e43b9acc098dc7887b4940bedad5e4e85ac4062b554100cd59",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.linux-x64-gnu.node.sbom.json",
-    "sha256": "c9934e8615cac53687cc3de64ba400212a12aa8653cb320f9435c131fde66026"
+    "sha256": "b05d18430dca3a6fb1ba1c2e493326d2cd2f6072d469721c31088811efb6274d"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "14948c630bfb7a355391c10563934cc79e8bb167",
+    "sourceCommit": "903b141393635e71607722637a08977e153b8b56",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "AfBRj+G23Cdv1PqCjbZHpYdDXB5LW1JcgIbwcMstlFPhrv8ln9HTsyVOCE1PVl1ZeKMGP2YsTqgQj+XJb7tfBw=="
+    "value": "1R1IPcr3P53ndUQe0CtgdHIKbrMFWNMDTNiPjcabQavBBnisW6crL1EcueYHY+1hiMMcRRX8j3OXCrzteE/wAw=="
   }
 }

package/dist/engine/planu-core.linux-x64-gnu.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.15",
+      "bom-ref": "pkg:cargo/planu-core@5.3.17",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.15",
+      "version": "5.3.17",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "ef2493926703d865ea8673d8357a238058a32a64325050d3880518d8884f25f2"
+          "content": "b10b9708c07c07e43b9acc098dc7887b4940bedad5e4e85ac4062b554100cd59"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.15",
+      "ref": "pkg:cargo/planu-core@5.3.17",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.linux-x64-musl.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.15",
-  "engineVersion": "5.3.15",
-  "buildId": "1-5.3.15-x86_64-unknown-linux-musl",
+  "cliVersion": "5.3.17",
+  "engineVersion": "5.3.17",
+  "buildId": "1-5.3.17-x86_64-unknown-linux-musl",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
   "platform": "linux",
   "arch": "x64",
   "libc": "musl",
-  "artifactSha256": "be770ad8fff0c70d1adf1599af7b60a9e0055e133890476e08e04c88c3f28c69",
+  "artifactSha256": "e32cde49858959e41c0df273dcb2e7c49412c4432ae983f358c19c6f8f705796",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.linux-x64-musl.node.sbom.json",
-    "sha256": "efd3cf900ecd753f0bee1eba0c6ecc8bd21d4f405e5d346f0fbe58972cf65da4"
+    "sha256": "2d4f452d04f8d5e536ae26d5e0321d0bc3d61a87b62b4833edd80ed2a6a5e98f"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "14948c630bfb7a355391c10563934cc79e8bb167",
+    "sourceCommit": "903b141393635e71607722637a08977e153b8b56",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "tiDSdVl5hTKNRg88FbcmEwUh4rXFh7OGfMzb9fV3BqwBAwSA/XktD4rXe4YZyBy75Kebo11zW+gp3DMnf+KECA=="
+    "value": "hl7v/J/DAlDB3yKZ6KPCBz78JEXS6/Y77mT7dM3Q5xABC13P6gTFl4/ts6HFQBC/ILPBJAIe+M2jjNVXPTJRAg=="
   }
 }

package/dist/engine/planu-core.linux-x64-musl.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.15",
+      "bom-ref": "pkg:cargo/planu-core@5.3.17",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.15",
+      "version": "5.3.17",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "be770ad8fff0c70d1adf1599af7b60a9e0055e133890476e08e04c88c3f28c69"
+          "content": "e32cde49858959e41c0df273dcb2e7c49412c4432ae983f358c19c6f8f705796"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.15",
+      "ref": "pkg:cargo/planu-core@5.3.17",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.win32-arm64-msvc.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.15",
-  "engineVersion": "5.3.15",
-  "buildId": "1-5.3.15-aarch64-pc-windows-msvc",
+  "cliVersion": "5.3.17",
+  "engineVersion": "5.3.17",
+  "buildId": "1-5.3.17-aarch64-pc-windows-msvc",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
   "platform": "win32",
   "arch": "arm64",
   "libc": null,
-  "artifactSha256": "583b397fb748d8ce083c4b7d412800789e8b08d6cfcdf51dbb00ca8f16b790c3",
+  "artifactSha256": "abe713832d59d280780993de17bfe271501f3c6e368cc7660fd73cfe448f855b",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.win32-arm64-msvc.node.sbom.json",
-    "sha256": "ed94ce39f49489d682bc80cce95eb3ef04bafd64ed7fd7d8ea6def8b12c9a458"
+    "sha256": "fedb07ccec7d0db216ee7cf665995024312f4222579437d1b2f4dd99f024f6d9"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "14948c630bfb7a355391c10563934cc79e8bb167",
+    "sourceCommit": "903b141393635e71607722637a08977e153b8b56",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "gaOwCaYMRwh0TEujBu7Rabl255fJETQEAo4i+NFVpamCPo5YWa2sknnxsbm/ZM4iX9YLD1W5S1MeYFUcwVrIAg=="
+    "value": "cvRigJR42Bz/XnqcHBVMdkfCDTUK3468XFQxFJfwA+dgdffXXne/hZYvu2+Qtc5VDPh+VI/gDgy4S+JjNjXIAw=="
   }
 }

package/dist/engine/planu-core.win32-arm64-msvc.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.15",
+      "bom-ref": "pkg:cargo/planu-core@5.3.17",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.15",
+      "version": "5.3.17",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "583b397fb748d8ce083c4b7d412800789e8b08d6cfcdf51dbb00ca8f16b790c3"
+          "content": "abe713832d59d280780993de17bfe271501f3c6e368cc7660fd73cfe448f855b"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.15",
+      "ref": "pkg:cargo/planu-core@5.3.17",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.win32-x64-msvc.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.15",
-  "engineVersion": "5.3.15",
-  "buildId": "1-5.3.15-x86_64-pc-windows-msvc",
+  "cliVersion": "5.3.17",
+  "engineVersion": "5.3.17",
+  "buildId": "1-5.3.17-x86_64-pc-windows-msvc",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
   "platform": "win32",
   "arch": "x64",
   "libc": null,
-  "artifactSha256": "612e2d929b12f1011da69ddcc598cbd251123294b52cfe7c04cd921e18d46ad7",
+  "artifactSha256": "142bcb2e061e280bf04929920bd88189ad37b14913f39bdd499bf45e287a53eb",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.win32-x64-msvc.node.sbom.json",
-    "sha256": "b6f3af124aeadba537605434bc406ac76f0bd798244edfbe31566b5011989207"
+    "sha256": "e2345850af3b261c8eac493694d218e9b770c1deeac3131bf62e55655054b29f"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "14948c630bfb7a355391c10563934cc79e8bb167",
+    "sourceCommit": "903b141393635e71607722637a08977e153b8b56",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "2W3TfOtk1zUPWqx2o2a9DmJPT1rSEBL0kLVOrZfggV/B/hEWC5KgLZs0Cy9w6kE5QeWTeGQZ1spl12XVCdAZDQ=="
+    "value": "IQNeo8h8MLaX/wTJMVV3zdR1F1gX7oV9gLw58botIZo4c/OKtyXpiTQ3iRhXu/hpNQ1rs+hSb7C0AWCt+u6nAA=="
   }
 }

package/dist/engine/planu-core.win32-x64-msvc.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.15",
+      "bom-ref": "pkg:cargo/planu-core@5.3.17",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.15",
+      "version": "5.3.17",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "612e2d929b12f1011da69ddcc598cbd251123294b52cfe7c04cd921e18d46ad7"
+          "content": "142bcb2e061e280bf04929920bd88189ad37b14913f39bdd499bf45e287a53eb"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.15",
+      "ref": "pkg:cargo/planu-core@5.3.17",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/validation/validation-freshness.d.ts

@@ -29,6 +29,13 @@ export declare function injectValidationWatchEventForTests(input: {
 }): ValidationWatchEventClassification | undefined;
 /** Pause or observe authoritative verification turns without changing watcher topology. */
 export declare function setValidationFreshnessVerificationHookForTests(hook: (() => Promise<void>) | undefined): void;
+/**
+ * Mark one exact epoch's receipt publication as in flight. A same-identity
+ * resubmission that arrives while the window is open waits for the returned
+ * closer before superseding this epoch, instead of closing it mid-publication.
+ * Returns a no-op closer once the epoch is no longer the active one.
+ */
+export declare function beginValidationFreshnessPublicationWindow(lease: Pick<ValidationFreshnessLease, 'projectId' | 'specId' | 'epoch'>): () => void;
 /** Start both watchers before snapshotting and invalidate any older receipt immediately. */
 export declare function beginValidationFreshnessBarrier(input: {
     projectId: string;

package/dist/engine/validation/validation-freshness.js

@@ -71,6 +71,19 @@ let verificationHookForTests;
 function key(projectId, specId) {
     return `${projectId}:${specId}`;
 }
+function noop() {
+    /* no-op */
+}
+function raceWithTimeout(promise, timeoutMs) {
+    return new Promise((resolve) => {
+        const timer = setTimeout(resolve, timeoutMs);
+        timer.unref();
+        void promise.finally(() => {
+            clearTimeout(timer);
+            resolve();
+        });
+    });
+}
 async function invalidateDurably(projectId, specId) {
     const env_1 = { stack: [], error: void 0, hasError: false };
     try {
@@ -380,6 +393,29 @@ async function evidenceFingerprint(path) {
     }
     return hash.digest('hex');
 }
+/**
+ * Mark one exact epoch's receipt publication as in flight. A same-identity
+ * resubmission that arrives while the window is open waits for the returned
+ * closer before superseding this epoch, instead of closing it mid-publication.
+ * Returns a no-op closer once the epoch is no longer the active one.
+ */
+export function beginValidationFreshnessPublicationWindow(lease) {
+    const state = active.get(key(lease.projectId, lease.specId));
+    if (state?.epoch !== lease.epoch) {
+        return noop;
+    }
+    let release;
+    const window = new Promise((resolve) => {
+        release = resolve;
+    });
+    state.publicationInFlight = window;
+    return () => {
+        release();
+        if (state.publicationInFlight === window) {
+            state.publicationInFlight = undefined;
+        }
+    };
+}
 /** Start both watchers before snapshotting and invalidate any older receipt immediately. */
 // eslint-disable-next-line max-lines-per-function -- serialized setup and rollback form one auditable ownership boundary
 export async function beginValidationFreshnessBarrier(input) {
@@ -395,11 +431,16 @@ export async function beginValidationFreshnessBarrier(input) {
     try {
         const previous = active.get(identity);
         if (previous) {
-            await closeValidationFreshnessLease({
-                projectId: input.projectId,
-                specId: input.specId,
-                epoch: previous.epoch,
-            });
+            if (previous.publicationInFlight) {
+                await raceWithTimeout(previous.publicationInFlight, getRuntimePolicy().validation.receiptPublicationDeadlineMs + 1000);
+            }
+            if (active.get(identity) === previous) {
+                await closeValidationFreshnessLease({
+                    projectId: input.projectId,
+                    specId: input.specId,
+                    epoch: previous.epoch,
+                });
+            }
         }
         await mkdir(input.handoffPath, { recursive: true, mode: 0o700 });
         const initialEvidenceFingerprint = await evidenceFingerprint(input.handoffPath);

package/dist/tools/update-status/evidence-gate.js

@@ -57,6 +57,7 @@ import { readEvidenceArtifacts } from '../../engine/evidence-gates/artifact-read
 import { checkLifecycleEvidenceGate } from '../../engine/evidence-gates/lifecycle-gate.js';
 import { buildSpecEvidenceIndex } from '../../engine/evidence-index/index-builder.js';
 import { checkDoneDriftContract } from '../../engine/evidence-index/done-drift.js';
+import { toRepoRelativePath } from '../../engine/evidence-gates/evidence-autofill.js';
 import { parseGroundedTechnicalPaths } from '../../engine/spec-grounding/contract.js';
 import { extractAcceptanceCriteriaTexts } from '../../engine/spec-format/acceptance-criteria.js';
 import { formatKeyValue } from '../output-formatter.js';
@@ -168,7 +169,11 @@ export async function checkLifecycleEvidenceTransitionGate(args) {
                 message: `Approved canonical ownership is invalid: ${[...new Set(safeBlockers)].join(', ')}.`,
             });
         }
-        result.issues.push(...checkDoneDriftContract({ index, approvedScopePaths }));
+        result.issues.push(...checkDoneDriftContract({
+            index,
+            approvedScopePaths,
+            ownSpecMdPath: toRepoRelativePath(args.spec.specPath, args.projectPath),
+        }));
     }
     if (result.issues.length === 0) {
         return null;

package/dist/tools/update-status/index.js

@@ -17,7 +17,7 @@ import { withApprovalSpecLock } from '../../storage/approval-operation-lock.js';
 import { isLocked, getLock } from '../../storage/spec-lock-store.js';
 import { checkDoneGates, checkComplianceGate, checkApprovedFormatGate, checkSpecReviewGate, deriveDoneReviewDigest, } from './dod-gates.js';
 import { checkLifecycleEvidenceTransitionGate } from './evidence-gate.js';
-import { autofillTraceabilityMatrix } from '../../engine/evidence-gates/evidence-autofill.js';
+import { autofillTraceabilityMatrix, toRepoRelativePath, } from '../../engine/evidence-gates/evidence-autofill.js';
 import { buildStatusResponse, buildDryRunResponse } from './response-builder.js';
 import { recordDoneMetrics, syncSpecFiles, tryReconcile, recordTerminalTransitionEvent, } from './file-sync.js';
 import { appendEntry, getLastHash } from '../../storage/audit-trail-store.js';
@@ -165,6 +165,7 @@ async function runTraceabilityAutofillGate(args) {
             specId: args.specId,
             projectPath: args.projectPath,
             specBody,
+            ownSpecMdPath: toRepoRelativePath(args.spec.specPath, args.projectPath),
         });
         if (!result.written) {
             return null;

package/dist/types/evidence-autofill.d.ts

@@ -21,6 +21,8 @@ export interface AutofillTraceabilityMatrixArgs {
     exec?: EvidenceAutofillExec;
     /** Branch to diff against for changed-files detection. Defaults to `main`. */
     baseBranch?: string;
+    /** Repo-relative path of this spec's own spec.md, excluded from changedFiles as lifecycle bookkeeping. */
+    ownSpecMdPath?: string;
 }
 export type AutofillTraceabilityMatrixResult = {
     written: true;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@planu/cli",
-  "version": "5.3.15",
+  "version": "5.3.17",
   "description": "Planu — MCP Server for Spec Driven Development with native Rust acceleration for hot paths. Cross-platform (Linux/macOS/Windows, x64/arm64, glibc/musl).",
   "type": "module",
   "main": "dist/index.js",
@@ -35,14 +35,14 @@
     "packageName": "@planu/core"
   },
   "optionalDependencies": {
-    "@planu/core-darwin-arm64": "5.3.15",
-    "@planu/core-darwin-x64": "5.3.15",
-    "@planu/core-linux-arm64-gnu": "5.3.15",
-    "@planu/core-linux-arm64-musl": "5.3.15",
-    "@planu/core-linux-x64-gnu": "5.3.15",
-    "@planu/core-linux-x64-musl": "5.3.15",
-    "@planu/core-win32-arm64-msvc": "5.3.15",
-    "@planu/core-win32-x64-msvc": "5.3.15"
+    "@planu/core-darwin-arm64": "5.3.17",
+    "@planu/core-darwin-x64": "5.3.17",
+    "@planu/core-linux-arm64-gnu": "5.3.17",
+    "@planu/core-linux-arm64-musl": "5.3.17",
+    "@planu/core-linux-x64-gnu": "5.3.17",
+    "@planu/core-linux-x64-musl": "5.3.17",
+    "@planu/core-win32-arm64-msvc": "5.3.17",
+    "@planu/core-win32-x64-msvc": "5.3.17"
   },
   "engines": {
     "node": ">=24.0.0"

package/planu-native.json

@@ -1,7 +1,7 @@
 {
   "name": "dev.planu.native",
   "displayName": "Planu Native Lightweight Surface",
-  "version": "5.3.15",
+  "version": "5.3.17",
   "packageName": "@planu/cli",
   "modes": {
     "lightweight": {

package/planu-plugin.json

@@ -2,7 +2,7 @@
   "name": "dev.planu.cli",
   "displayName": "Planu — Spec Driven Development",
   "description": "Manage software specs, estimations, and autonomous SDD workflows. Language-agnostic MCP server for Claude Code.",
-  "version": "5.3.15",
+  "version": "5.3.17",
   "icon": "assets/plugin/icon.svg",
   "command": ["npx", "@planu/cli@latest"],
   "packageName": "@planu/cli",