@sellable/mcp 0.1.434 → 0.1.435

package/dist/tools/prompts.js

@@ -373,7 +373,7 @@ export function getPostFindLeadsScoutRegistry() {
             codex: 'After confirm_lead_list copies source rows and the initial campaign-table execution slice exists, ask the filter-choice question immediately. Do not spawn anything before that question. After the answer, launch only Message Drafting. The filter-choice answer is the post-import user gate for this single worker; do not ask another question about starting it in step-wise or YOLO mode. The registry lookup is not a launch: after get_post_find_leads_scout_registry, immediately invoke Task/spawn_agent or the host background-agent mechanism before loading filter-leads.md, before saving rubrics, and before treating skip-filters as ready for message review. Both choices route through this kickoff; do not let filters_skipped jump straight from filter-choice to message-generation. If filters are chosen, the parent stays on Filter Rules and drafts/saves rubrics with MCP tools while Message Drafting runs in the background. If filters are skipped, move to Messages/message review only after Message Drafting has started or is ready; update_campaign(currentStep=messages) is not proof of launch. If the named Message Drafting custom agent is unavailable, spawn a generic gpt-5.5 xhigh Message Drafting background agent with the same lean campaign/table basis. When the background worker starts, persist workerDetails.messageDraftBuilder with statusSource "branch", status "branch-running", runId, startedAt, updatedAt, basisToken when known, and basis containing campaignId, selectedLeadListId, workflowTableId, filterChoice, and reviewBatchRowHash or reviewBatchRowIds; workerStatuses.messageDraftBuilder may be "running" as a simple badge only. Never put rich proof under workerStatuses and never use workerStatuses.messageDrafting. If no background-agent tool is callable, start the same full message branch inline before filter drafting or before skip-filter message review, record workerDetails.messageDraftBuilder with statusSource "parent-thread-fallback" and status "fallback-active", and require the same live context, prompt, assets, and validation gate before message review; do not wait until filters are saved and then call the registry.',
             claude: "After confirm_lead_list copies source rows and the initial campaign-table execution slice exists, ask the filter-choice question immediately. Do not invoke any Task/Agent before that question. After the answer, invoke only Message Drafting. If filters are chosen, parent drafts/saves rubrics with MCP tools while Message Drafting runs, asks filter approval, then joins Message Drafting. If filters are skipped, invoke only Message Drafting and move to Messages/message review.",
             parentThreadRule: 'Named agents are optional acceleration, but message drafting is not optional. The only normal background worker is Message Drafting. The filter-choice answer is the campaign-scoped go-ahead for this single post-import worker; do not ask another question to start it in step-wise or YOLO mode. If a named agent is unavailable, use a generic gpt-5.5 xhigh Message Drafting background agent. source work and filter work stay in the parent thread with MCP tools. If post-find-leads-message-scout is available, run it as the background Message Draft Builder after the filter-choice answer. The registry lookup is not a launch: get_post_find_leads_scout_registry only identifies the worker, and Message Drafting counts as started only after Task/spawn_agent or the host background-agent tool is invoked, or after the parent begins the same full message branch inline because no background-agent tool is callable. This launch must happen before loading filter-leads.md, save_rubrics, filter approval, or skip-filter message review; currentStep=messages is not proof of launch. If post-find-leads-message-scout is absent, do not customer-surface install status. Do not silently treat message drafting as started; the main thread must either launch the background worker or execute the same message branch from CampaignOffer state, selected source state, workflowTableId, and initial campaign-table execution slice rows. For a spawned worker, record workerDetails.messageDraftBuilder with statusSource branch / status branch-running, runId, startedAt, updatedAt, and basis containing campaignId, selectedLeadListId, workflowTableId, filterChoice, and reviewBatchRowHash or reviewBatchRowIds. workerStatuses.messageDraftBuilder is optional simple badge text only ("running", "ready", "blocked", "idle"); never put runId/statusSource/basis under workerStatuses and never use workerStatuses.messageDrafting. If no background-agent tool is callable, start that same full message branch inline before filter drafting or before skip-filter message review, record workerDetails.messageDraftBuilder with statusSource parent-thread-fallback / status fallback-active then ready, and require the same live context, prompt, assets, and validation gate before message review; do not report that as a background worker failure. If neither branch nor inline fallback can run, return blocked/retry-needed; do not wait until filters are saved and then call the registry. The Message Drafting handoff must be lean. Do not paste copied row counts, brief hashes, review-batch hashes, full reviewBatchRowIds, broad row data, or local debug artifacts into the spawn prompt. Local markdown/json files are not normal-path inputs. The filter-choice question is the first post-import user gate; do not load post-lead registries or filter references before it. Message drafting starts after the filter-choice answer, must load get_subskill_prompt({ subskillName: "generate-messages" }), and must load every required message asset named by generate-messages Mode 0 through get_subskill_asset before drafting. Reference Asset Loading means loading the required pre-draft reference pack before drafting; return blocked/retry-needed if required assets cannot be loaded; load ai-tells.md because it is never optional. The branch or parent-thread fallback loads the full generate-messages prompt and every referenced asset through get_subskill_asset. After generating/revising the candidate and before returning ready, must load get_subskill_prompt({ subskillName: "create-campaign-v2-validation" }) as the final internal validation gate, must read live campaign table state through scoped MCP/product tools, and must reject mismatched selectedLeadListId/workflowTableId/campaign/workspace input. Do not block when filters were chosen but leadScoringRubrics are not yet visible in the branch read; the parent owns save_rubrics and filter approval in parallel, so Message Drafting should return status ready with basisStatus usable_initial when campaign/list/table identity and the non-empty execution slice match. Do not use any alternate, local-artifact, or examples-only message prompt. User copy feedback, message QA, or rewrite requests before approve-message must be routed back to Message Drafting with the current recommendation, lean campaign/table basis, and latest user text; the parent must not rewrite or QA the template from memory and must not call update_campaign_brief before approve-message. The worker validates internally and returns only templateRecommendation, tokenFillRules, renderedGoodSample, status, approveOrReviseRecommendation, validationStatus, outputAt, outputHash, and blocked/retry detail. Do not render renderedFallbackSample, risk notes, or a qaReceipt on the normal happy path. On the filter path, save_rubrics keeps the browser on Filter Rules after save_rubrics so the user can approve the saved criteria; after saved-filter approval, move to Filter Leads with currentStep=apply-icp-rubric whether Message Drafting is ready or still running. Wait there for message approval. Enrichment, filtering, Generate Message cells, sender setup, sequence attach, and launch wait for template approval on the Use Template path. On the skip path, move to Messages/message review after Message Drafting has started or is ready and wait for message approval before enrichment or Settings. Do not render message review from checklist or shortcut instructions; message review requires a messageDraftRecommendation whose basis proves the generate-messages prompt, required message assets, and validation gate ran for the current campaign/table execution slice. Do not automatically rerun Message Drafting after filters/enrichment finish; show the initial draft by default and offer an enriched rewrite only with explicit user opt-in. Handoff and recommendation output are Markdown with labeled fields, not raw JSON.',
-            prepareMessagesRule: `Default create-campaign stays on the existing reviewBatchLimit:15 first campaign-table execution slice. For plain post-mint fill/load/refill requests, load get_subskill_prompt({ subskillName: "refill-sends-workflow" }), then call resolve_campaign_fill_route({ intent:"plain" }), list_senders, and get_campaign_refill_state for enough candidate campaigns to identify the campaign that most recently had scheduler-owned sends for the relevant sender set before any mutation. Route outcomes are route:"evergreen_horizon", route:"active_campaigns", and route:"ask_create"; stay in the same campaignOfferId/campaignId context after minting. Plain fill is not an alias for fill_campaign_horizon or campaign creation. fill_campaign_horizon is evergreen-only and is not the generic regular-campaign fill path. Campaign creation is allowed only after route:"ask_create" and explicit user selection; it is never the default response to plain fill. Treat "fill up/load sends" as capacity-fill preparation, and treat "refill senders", "fill senders", "max out senders", and "load everyone up" as sender-scoped capacity-fill preparation. For sender-scoped requests with no named senders, --yolo means all eligible healthy senders enrolled in active campaign-backed sequence campaigns in the active workspace; without --yolo, ask which eligible enrolled senders to refill before choosing campaigns or mutating. In non-yolo interactive Codex or Claude Code sessions, the sender/campaign/action approval packet must be asked through request_user_input/AskUserQuestion with exactly Accept and Decline; do not use plain chat approval. The approval question body must show workspace, sender scope, a campaign-by-campaign table, exact ids/caps/dates, side effects, forbidden actions, and stop condition before mutation. Default --yolo horizon is a two-send-day horizon: two sender-local send days, skipping no-send-hour days. For campaign-scoped fill/refill, select the best recent-send campaign and calculate the bounded gap from healthy sender daily capacity minus future scheduler-owned scheduled sends and ready-to-schedule rows, then prepare only that gap. For sender-scoped fill/refill, calculate the bounded gap per eligible sender across active enrolled campaigns, counting future scheduled and ready-to-schedule rows across those campaigns, then choose the best same-sender campaign to fill each sender gap: prefer recent/future scheduler-owned sends for that sender, then strongest recent result evidence, then source health. Do not stop after filling only one sender when the request was sender-scoped. Use the refill workflow to decide whether to enrich/prep more rows in that same recent-send/best-result campaign, add/import more rows to that same campaign/source path, use a different existing campaign only when the selected same-sender lane is blocked/exhausted/already loaded while the sender still has a gap, or ask what to create. Do not create warm-post-engager side campaigns. Surface sender-health blockers separately from prepared/approved/scheduled counts. User-facing refill decisions must be campaign-name-first and sender-name-first, with ids as proof/execution targets only. For already-running regular campaigns that need Signal Discovery source replenishment, use the guarded currentStep clear with clearCurrentStepIfMatches:"running", campaign-scoped provider prompt/search/select, and import_leads with the existing sourceLeadListId when a newly approved selected-post scrape would otherwise return reusedExistingSourceList. After confirm_lead_list copies rows into an existing table, avoid fixed maxRowsToCheck:100; if confirm_lead_list returns USER_ADDED_ROWS_LIMIT_EXCEEDED, create a bounded same-source split from selectedLeadListId with get_rows_minimal/load_csv_linkedin_leads, confirm that smaller source list into the same campaign, and operate on the reviewBatch first; inspect reviewBatch/table selectors or use adaptive/wider bounded prep so appended rows are included. Do not interpret checkedRows as enriched rows; it is only the table cursor. Prepared, approved, and ready_to_schedule rows are intermediate states; never call them scheduled unless a re-read proves scheduler-owned scheduled cells with non-null scheduledFor. Before source import, prep, approval, or selected paused campaign start, require exact visible approval or --yolo packet auto-accept and a fresh get_campaign_refill_state reread; stop if freshness.stateHash or exact ids changed. For "approve X messages", use approvalMode:approve only when explicitly requested. For "schedule X sends" or "fill sender sends", approve only when explicitly requested, then re-read campaign/table scheduled counts; if scheduler-owned scheduledFor cells are not present, report prepared/approved/ready - awaiting scheduler instead of success. start_campaign is allowed in refill only for exact selected PAUSED, dashboard-active, campaign-backed sequence targets named in the bounded packet, and the packet must state that starting can let the product scheduler schedule/send approved eligible sequence actions. Never start unrelated, archived, completed, draft, direct, or non-selected campaigns, never broad approve-all, and never use direct scheduler writes. campaignId is CampaignOffer.id. If the user asks to stop preparation, the target is wrong, or status shows the wrong campaign/table, use cancel_campaign_message_preparation only for the exact active job. Low-level selectors are diagnostics and recovery only for this lane.`,
+            prepareMessagesRule: `Default create-campaign stays on the existing reviewBatchLimit:15 first campaign-table execution slice. For plain post-mint fill/load/refill requests, load get_subskill_prompt({ subskillName: "refill-sends-workflow" }), then call resolve_campaign_fill_route({ intent:"plain" }), list_senders, and get_campaign_refill_state for enough candidate campaigns to identify the campaign that most recently had scheduler-owned sends for the relevant sender set before any mutation. Route outcomes are route:"evergreen_horizon", route:"active_campaigns", and route:"ask_create"; stay in the same campaignOfferId/campaignId context after minting. Plain fill is not an alias for fill_campaign_horizon or campaign creation. fill_campaign_horizon is evergreen-only and is not the generic regular-campaign fill path. Campaign creation is allowed only after route:"ask_create" and explicit user selection; it is never the default response to plain fill. Treat "fill up/load sends" as capacity-fill preparation, and treat "refill senders", "fill senders", "max out senders", and "load everyone up" as sender-scoped capacity-fill preparation. For sender-scoped requests with no named senders, --yolo means all eligible healthy senders enrolled in active campaign-backed sequence campaigns in the active workspace; without --yolo, ask which eligible enrolled senders to refill before choosing campaigns or mutating. In non-yolo interactive Codex or Claude Code sessions, the sender/campaign/action approval packet must be asked through request_user_input/AskUserQuestion with exactly Accept and Decline; do not use plain chat approval. The approval question body must show workspace, sender scope, a campaign-by-campaign table, exact ids/caps/dates, side effects, forbidden actions, and stop condition before mutation. Default --yolo horizon is a two-send-day horizon: two sender-local send days, skipping no-send-hour days. For campaign-scoped fill/refill, select the best recent-send campaign and calculate the bounded gap from healthy sender daily capacity minus future scheduler-owned scheduled sends and ready-to-schedule rows, then prepare only that gap. For sender-scoped fill/refill, calculate the bounded gap per eligible sender across active enrolled campaigns, counting future scheduled and ready-to-schedule rows across those campaigns, then choose the best same-sender campaign to fill each sender gap: prefer recent/future scheduler-owned sends for that sender, then strongest recent result evidence, then source health. Do not stop after filling only one sender when the request was sender-scoped. Use the refill workflow to decide whether to enrich/prep more rows in that same recent-send/best-result campaign, add/import more rows to that same campaign/source path, use a different existing campaign only when the selected same-sender lane is blocked/exhausted/already loaded while the sender still has a gap, or ask what to create. Do not create warm-post-engager side campaigns. Surface sender-health blockers separately from prepared/approved/scheduled counts. User-facing refill decisions must be campaign-name-first and sender-name-first, with ids as proof/execution targets only. For already-running regular campaigns that need Signal Discovery source replenishment, use the guarded currentStep clear with clearCurrentStepIfMatches:"running", campaign-scoped provider prompt/search/select, and import_leads with the existing sourceLeadListId when a newly approved selected-post scrape would otherwise return reusedExistingSourceList. After confirm_lead_list copies rows into an existing table, avoid fixed maxRowsToCheck:100; if confirm_lead_list returns USER_ADDED_ROWS_LIMIT_EXCEEDED, create a bounded same-source split from selectedLeadListId with get_rows_minimal/load_csv_linkedin_leads, confirm that smaller source list into the same campaign, and operate on the reviewBatch first; inspect reviewBatch/table selectors or use adaptive/wider bounded prep so appended rows are included. Do not interpret checkedRows as enriched rows; it is only the table cursor. Prepared, approved, and ready_to_schedule rows are intermediate states; never call them scheduled unless a re-read proves scheduler-owned scheduled cells with non-null scheduledFor. Before source import, prep, or approval, require exact visible approval and a fresh get_campaign_refill_state reread; stop if freshness.stateHash or exact ids changed. For "approve X messages", use approvalMode:approve only when explicitly requested, but still do not launch. For "schedule X sends" or "fill sender sends", approve only when explicitly requested, then re-read campaign/table scheduled counts; if scheduler-owned scheduledFor cells are not present, report prepared/approved/ready - awaiting scheduler instead of success. Do not call start_campaign as part of fill/schedule horizon. Do not call start_campaign as part of refill sends. Launch/start is a separate explicit human action after the operator intentionally wants sends to go out, and it must still verify that the bounded cohort is the only approved cohort and must not broad approve-all. campaignId is CampaignOffer.id. If the user asks to stop preparation, the target is wrong, or status shows the wrong campaign/table, use cancel_campaign_message_preparation only for the exact active job. Low-level selectors are diagnostics and recovery only for this lane. start_campaign remains forbidden until explicit launch/start approval outside refill sends.`,
         },
     };
 }

package/dist/tools/refill-sends.js

@@ -151,13 +151,13 @@ export function refillSendsCommand(input = {}) {
             "Fresh reread get_campaign_refill_state immediately before any import, prep, approval, or horizon-fill mutation.",
         ],
         approvalContract: yolo
-            ? "Auto-accept only the rendered bounded refill packet after fresh reread. This may include start_campaign only for exact selected PAUSED campaign-backed sequence refill targets named in the packet. Stop if sender set, route, ids, caps, dates, blockers, or side-effect class drift."
+            ? "Auto-accept only the rendered bounded refill packet after fresh reread. Stop if sender set, route, ids, caps, dates, blockers, or side-effect class drift."
             : hasSenderSelectors
                 ? "Ask the final Accept/Decline structured approval question before mutation, including workspace, sender scope, campaign table, exact ids, caps/dates, side effects, forbidden actions, and stop condition."
                 : "Ask which eligible enrolled senders to refill first, then ask the final Accept/Decline structured approval question before mutation.",
         forbiddenActions: [
-            "start_campaign outside an exact selected PAUSED campaign-backed refill packet",
-            "manual launch/send or direct sending outside product scheduler side effects",
+            "start_campaign",
+            "launch or send",
             "archive or delete cleanup",
             "direct scheduler writes",
             "sender reassignment",

package/dist/tools/setup-evergreen-campaigns.d.ts

@@ -1,7 +1,6 @@
 type SetupEvergreenCampaignsInput = {
     mode?: "plan" | "verify";
     depth?: "structure_only" | "customer_visible";
-    handoffMode?: "create_campaign_goals";
     yolo?: boolean;
     allConnectedSenders?: boolean;
     selectedSenderIds?: string[];
@@ -32,11 +31,6 @@ export declare const setupEvergreenCampaignsToolDefinitions: {
                 enum: string[];
                 description: string;
             };
-            handoffMode: {
-                type: string;
-                enum: string[];
-                description: string;
-            };
             yolo: {
                 type: string;
                 description: string;

package/dist/tools/setup-evergreen-campaigns.js

@@ -20,11 +20,6 @@ export const setupEvergreenCampaignsToolDefinitions = [
                     enum: ["structure_only", "customer_visible"],
                     description: 'Use "customer_visible" for full setup proof or "structure_only" when only ensuring lane shells/config.',
                 },
-                handoffMode: {
-                    type: "string",
-                    enum: ["create_campaign_goals"],
-                    description: 'plan mode only. When set to "create_campaign_goals", returns concise per-lane `$sellable:create-campaign` goal prompts and required inputs for simplified worker handoffs without changing verification behavior.',
-                },
                 yolo: {
                     type: "boolean",
                     description: "plan mode only. Requests auto-executable lane packets when state is safe; never authorizes cleanup, launch, scheduling, sending, or ambiguous target choice.",
@@ -93,7 +88,6 @@ export function setupEvergreenCampaigns(input) {
         mode: input.mode,
         yolo: input.mode === "verify" ? undefined : input.yolo,
         depth: input.depth,
-        handoffMode: input.mode === "verify" ? undefined : input.handoffMode,
         allConnectedSenders: input.allConnectedSenders,
         selectedSenderIds: input.selectedSenderIds,
         postEngagerSenderIds: input.postEngagerSenderIds,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sellable/mcp",
-  "version": "0.1.434",
+  "version": "0.1.435",
   "type": "module",
   "description": "Sellable MCP server for Claude Code and Codex campaign workflows",
   "main": "dist/index.js",

package/skills/create-campaign-v2/references/ai-tells.md

@@ -57,9 +57,10 @@ explicit lead-magnet comment, reply, or opt-in.
 
 Shared evergreen exception: for Shared Signal Discovery and other shared
 evergreen lanes, `hope this is relevant` is allowed when it stays topic-level
-and does not pretend engagement. Reject `might be interested` and `saw you in a
-few conversations` as openers; require a concrete signal/problem bridge or omit
-the source line.
+and does not pretend engagement. `Saw you in a few conversations around X, so
+hope this is relevant` is allowed for Shared Signal Discovery when the source is
+truly third-party and topic-level. Reject `might be interested` as an opener
+because it assumes intent.
 
 **Severity:** REJECT
 

package/skills/create-campaign-v2/references/gold-standard-message-examples.md

@@ -203,7 +203,7 @@ Why it works:
 **Proof ranks used:** rank 1 (mechanism - 1,000+ conditions from one blood
 draw), rank 3 (risk before claims).
 
-Do not use the Superpower weak-signal hedge pattern for Shared Evergreen Signal Discovery when it opens with `might be interested` or `saw you in a few conversations`. `Hope this is relevant` is allowed when it stays topic-level and does not pretend engagement. Use the safe pattern below when a concrete signal/problem bridge is stronger.
+Do not use the Superpower weak-signal hedge pattern for Shared Evergreen Signal Discovery when it opens with `might be interested`; that assumes intent. `Hope this is relevant` and topic-level `saw you in a few conversations around [topic], so hope this is relevant` are allowed when they do not pretend engagement. Use the safe pattern below when a concrete signal/problem bridge is stronger.
 
 ### Shared Evergreen Signal Discovery Safe Pattern
 

package/skills/create-campaign-v2/references/sellable-cleanup-rules.md

@@ -74,7 +74,7 @@ Revise or reject the sample when any of these happen.
 - **actions are implied, not stated** — e.g. "runs that chain as AI agents" when a clearer version would name the specific actions (verb + object, one per line)
 - **category-level opener used when a per-lead signal exists** — if `lead-sample.json` carries any per-lead signal (post, hire, visible tool, topic engagement), the opener must reference it. Category-level openers of shape `"Most [category] teams still do X by hand"` are only acceptable when zero per-lead signal is in the sample. When a category-level opener is used as fallback, Findings must flag it explicitly
 - **mind-reading from engagement signals** — a topic engagement, post, public activity, role, company, or hiring trigger does not prove buyer intent. Reject phrases like `"AI-GTM stack is clearly on your mind"`, `"you're clearly focused on..."`, `"obviously relevant"`, or `"already thinking about..."` unless that exact priority is explicitly present in `lead-sample.json`. Translate to low-certainty buyer context or omit the signal from copy.
-- **source-y signal narration** — reject `"saw you on..."`, `"saw you engaging with..."`, `"you commented on..."`, `"your LinkedIn activity..."`, `"you might not remember the thread..."`, `"found you through [source] and your role looked close..."`, or any line that makes the recipient feel watched unless the chosen archived motion is intentionally self-aware about the signal. For sender-owned LinkedIn post sources, a light first-person acknowledgment is allowed when row data proves a reaction/comment: `"appreciate you showing some love on my post about [topic]"` or `"thanks for showing support on my [topic] post"`. Do not name a comment unless comment text is present. Follow the acknowledgment with a soft relevance bridge before broad pain/product copy, e.g. `"figured this might be relevant if LinkedIn is becoming more of a GTM channel for [company]"`. For third-party LinkedIn-post-sourced campaigns, a topic-level bridge is allowed when it explains why the note exists and stays apologetically uncertain: `"saw you in a few conversations about [topic], so may be off, but this seemed relevant."`, `"saw you in a few conversations around [topic], so hope this is relevant."`, or `"found you in a thread about [topic], so may be off, but this seemed relevant."` Shared evergreen signal exception: `hope this is relevant` is allowed when it stays topic-level and avoids false warm engagement, but `might be interested` and `saw you in a few conversations` are blocked for Shared Signal Discovery and other shared evergreen lanes; use a concrete signal/problem bridge or omit the source line. Reserve `"raise your hand"` language for explicit lead-magnet comments, replies, or opt-ins. Translate the signal into natural buyer context or omit it.
+- **source-y signal narration** — reject `"saw you on..."`, `"saw you engaging with..."`, `"you commented on..."`, `"your LinkedIn activity..."`, `"you might not remember the thread..."`, `"found you through [source] and your role looked close..."`, or any line that makes the recipient feel watched unless the chosen archived motion is intentionally self-aware about the signal. For sender-owned LinkedIn post sources, a light first-person acknowledgment is allowed when row data proves a reaction/comment: `"appreciate you showing some love on my post about [topic]"` or `"thanks for showing support on my [topic] post"`. Do not name a comment unless comment text is present. Follow the acknowledgment with a soft relevance bridge before broad pain/product copy, e.g. `"figured this might be relevant if LinkedIn is becoming more of a GTM channel for [company]"`. For third-party LinkedIn-post-sourced campaigns, a topic-level bridge is allowed when it explains why the note exists and stays apologetically uncertain: `"saw you in a few conversations about [topic], so may be off, but this seemed relevant."`, `"saw you in a few conversations around [topic], so hope this is relevant."`, or `"found you in a thread about [topic], so may be off, but this seemed relevant."` Shared evergreen signal exception: `hope this is relevant` and `saw you in a few conversations around [topic], so hope this is relevant` are allowed for Shared Signal Discovery when they stay topic-level and avoid false warm engagement, but `might be interested` is blocked because it assumes intent. Use a concrete signal/problem bridge when it is stronger, or omit the source line. Reserve `"raise your hand"` language for explicit lead-magnet comments, replies, or opt-ins. Translate the signal into natural buyer context or omit it.
 - **sender-owned source rendered as third-party** — hard fail when the source post is sender-owned and the draft says `"found you in a thread"`, `"saw you in a thread"`, `"saw you in conversations"`, or `"saw you in a few conversations"` as if the post were third-party. For sender-owned sources, the copy must either use a light first-person acknowledgment plus a soft relevance bridge, or omit the source line. If multiple senders may send the campaign, or the final sender/source-owner match is ambiguous, do not assume a specific `my post` voice or name a specific sender; omit the sender-owned source line until row-level sender ownership is proven. Neutral low-certainty thread/source language is only for truly third-party sources.
 - **fake line-to-line continuity** — reject line stacks where the source acknowledgment, relevance bridge, product line, and CTA do not actually build on each other. Each line must make the next line feel earned. If two adjacent lines could be swapped, deleted, or joined with `"anyway"` without changing the meaning, the transition is fake. In sender-owned post campaigns, the chain should be: support on my post -> why this topic may matter for the company -> what the product/problem does about that same topic -> low-friction next step.
 - **assumptive title-fit opener** — reject `"Your [role] role at [company] looked close to this problem"` or `"looked close to this outbound campaign problem"`. This asserts fit from title/company. Keep the apologetic uncertainty instead: `"may be off, but if [workflow] is relevant to what you're working on..."`.

package/skills/create-evergreen-campaigns/SKILL.md

@@ -43,8 +43,7 @@ In automation or `--yolo` customer-visible setup, use this path before the
 long-form contract below:
 
 1. Resolve the active workspace and explicit sender scopes, then call
-   `setup_evergreen_campaigns({ mode:"plan", yolo:true,
-   handoffMode:"create_campaign_goals", postEngagerSenderIds,
+   `setup_evergreen_campaigns({ mode:"plan", yolo:true, postEngagerSenderIds,
    sharedSenderIds })`. If the user did not name senders but
    `get_campaign_waterfall` returns an active managed evergreen/prod waterfall
    for the workspace, derive exact sender scopes from the waterfall `senderRefs`
@@ -61,23 +60,12 @@ long-form contract below:
    If shell execution is unavailable and no visible/durable thread surface is
    callable, return `blocked: missing_visible_or_durable_lane_worker_runtime`
    before mutation.
-4. Write one compact prompt file per selected lane using the matching
-   `createCampaignGoals[].goalPrompt`, plus only the receipt path and canonical
-   receipt requirement. Do not paste the full evergreen skill, lane packet,
-   receipt schema, repair history, or verifier checklist into the worker prompt.
-   The worker goal is simple: run `$sellable:create-campaign` normally for that
-   campaign goal, use the evergreen-selected provider/source only as internal
-   sourcing metadata, and write the receipt. The parent does not create campaign
-   shells.
+4. Write one compact prompt file per selected lane packet, create the receipt
+   directory, and launch all lane workers in parallel with the literal Codex CLI
+   worker command shape below. The parent does not create campaign shells.
 5. Collect fresh durable receipts, verify with the original planRevision and
    selectedActionIds, then run the idempotency plan and show sample messages.
 
-Critical separation: evergreen owns lane/source selection; `$sellable:create-campaign`
-owns the customer-visible campaign brief and message strategy. Provider names
-such as Signal Discovery, lane keys, source lists, receipt fields, workflow
-mechanics, repair notes, hard-block checklists, and approved-message scaffolding
-must never be pasted into `campaignBrief` or generated customer-facing messages.
-
 Do not keep reasoning, re-reading prompts, or restating this workflow instead of
 dispatching workers. If the first worker cannot be launched after at most one
 short planning pass, return `blocked: worker_dispatch_deadline_exceeded` before
@@ -1232,7 +1220,7 @@ Message, and verify current-revision sample messages before final completion.
      Short form: Do not pass the warm template into Shared Signal Discovery or Shared Cold Fallback.
      Short form: Shared lanes must reject generic product-summary samples.
      Short form: Shared lanes must reject three nearly identical samples.
-     Short form: Shared lanes must reject low-confidence relevance hedges except "hope this is relevant".
+     Short form: Shared lanes must reject intent-assumptive hedges such as "might be interested"; Shared Signal Discovery may use "saw you in a few conversations ... hope this is relevant".
      Short form: Shared lanes must reject internal workflow vocabulary.
      Short form: revise or rerun the packaged create-campaign/generate-messages path.
    - **Post Engagers** first-message style: short, casual, references the
@@ -1271,11 +1259,12 @@ Message, and verify current-revision sample messages before final completion.
      product summaries, or repeated structure are bad. If the first generated
      batch violates these rules, rerun, but record that as a repaired UAT path
      rather than the desired zero-shot path.
-     Do not use low-confidence relevance hedges such as "might be interested"
-     or "saw you in a few conversations" in Shared Signal Discovery samples.
-     "Hope this is relevant" is allowed when it stays topic-level and does not
-     pretend engagement. Translate source/tool terms into prospect-facing
-     business language; do not put internal workflow
+     Do not use intent-assumptive hedges such as "might be interested" in
+     Shared Signal Discovery samples. "Hope this is relevant" and topic-level
+     bridges such as "saw you in a few conversations around [topic], so hope
+     this is relevant" are allowed when they do not pretend engagement.
+     Translate source/tool terms into prospect-facing business language; do not
+     put internal workflow
      vocabulary such as "Codex-style workflow", "MCP", "agent workflows",
      "Claude Code", or "Claude-style agent workflows" in customer-facing
      message one. Also avoid generic product-process nouns such as "dashboard",
@@ -1287,7 +1276,7 @@ Message, and verify current-revision sample messages before final completion.
      Short form: Shared Signal Discovery uses no self-intro such as "I'm building Sellable".
      Short form: Shared Signal Discovery uses no self-intro such as "We're building Sellable".
      Short form: Shared Signal Discovery uses no "I've put together".
-     Short form: no low-confidence relevance hedge such as "might be interested" or "saw you in a few conversations"; "hope this is relevant" is allowed.
+     Short form: no "might be interested"; "hope this is relevant" and topic-level "saw you in a few conversations ... hope this is relevant" are allowed.
      Short form: no internal workflow vocabulary such as "Codex-style workflow", "MCP", "agent workflows", "Claude Code", or "Claude-style agent workflows".
    - **Shared Cold Fallback** first-message style: cold, direct, and cohesive.
      It must not pretend there was engagement, must not say "saw you pop up",
@@ -1305,7 +1294,8 @@ Message, and verify current-revision sample messages before final completion.
      create-campaign message workflow proves a better delivery format.
      "Hope this is relevant" is allowed when it does not pretend engagement and
      immediately ties to a concrete buyer problem. Do not open with "might be
-     interested" or "saw you in a few conversations". Do not use a repeated
+     interested" or "saw you in a few conversations" in Shared Cold Fallback.
+     Do not use a repeated
      product-definition paragraph such as "Sellable is a GTM system" across
      samples; every reviewed cold sample should be specific enough to the role,
      company, or problem that the three sample messages do not share the same
@@ -1326,7 +1316,7 @@ Message, and verify current-revision sample messages before final completion.
      Short form: Shared Cold Fallback uses no "I've put together".
      Short form: Shared Cold Fallback uses no opt-out shrug such as "If this isn't relevant, ignore me".
      Short form: Shared Cold Fallback uses no product-stack dump.
-     Short form: "hope this is relevant" is allowed; "might be interested" and "saw you in a few conversations" are not.
+     Short form: "hope this is relevant" is allowed; "might be interested" is not.
      Short form: no repeated product-definition paragraph such as "Sellable is a GTM system".
     - Customer-visible evergreen lanes must enable ICP filtering before Message
       Drafting. This applies to Post Engagers, Shared Signal Discovery, and
@@ -1415,11 +1405,12 @@ Message, and verify current-revision sample messages before final completion.
       or a product-stack dump that repeats the same
       Sellable/Codex/Claude-Code feature summary across prospects. For all
       shared lanes, reject generic product-summary samples, repeated
-      near-identical samples, low-confidence relevance hedges such as "might be
-      interested" or "saw you in a few conversations", internal workflow
-      vocabulary, any sample with non-empty `issues`, and any preserved Post
-      Engagers opener; revise or rerun the packaged create-campaign/generate-messages
-      path before reporting completion. Do not approve or final-report samples
+      near-identical samples, intent-assumptive hedges such as "might be
+      interested", source-context mismatches such as "saw you in a few
+      conversations" in Shared Cold Fallback, internal workflow vocabulary, any
+      sample with non-empty `issues`, and any preserved Post Engagers opener;
+      revise or rerun the packaged create-campaign/generate-messages path before
+      reporting completion. Do not approve or final-report samples
       with `verdict:"passed"` and non-empty `issues`.
    - The first review batch exists and at least 3 review rows have generated
      messages from the approved brief. If fewer than 3 usable rows exist, report

package/skills/generate-messages/SKILL.md

@@ -269,7 +269,7 @@ must be safer than the legacy weak-signal examples. These lanes are reused by
 multiple senders, so the first line cannot sound like a scraped-activity excuse
 or a founder self-intro.
 
-- `might be interested` and `saw you in a few conversations` are blocked openers for shared evergreen lanes. `hope this is relevant` is allowed when it stays topic-level and does not pretend engagement.
+- `might be interested` is blocked for shared evergreen lanes because it assumes intent. `hope this is relevant` and Shared Signal Discovery bridges like `saw you in a few conversations around [topic], so hope this is relevant` are allowed when they stay topic-level and do not pretend engagement.
 - do not write first-person singular founder language such as `I'm building`,
   `I've mapped`, `my company`, or `my team` unless exactly one sender can
   credibly say it and the lane is not shared.
@@ -292,7 +292,7 @@ or a founder self-intro.
 
 Short form: shared evergreen copy may use `hope this is relevant` when it avoids false engagement claims.
 Short form: shared evergreen copy cannot use `might be interested`.
-Short form: shared evergreen copy cannot use `saw you in a few conversations`.
+Short form: Shared Signal Discovery may use `saw you in a few conversations ... hope this is relevant` when it is topic-level and evidence-backed.
 Short form: shared evergreen copy cannot use `I'm building`.
 Short form: write a concrete signal/problem bridge instead of a rejected relevance hedge.
 
@@ -314,13 +314,14 @@ conditional good/bad fill reference.
   `[PERSONALIZATION_LINE — Intent: write one short sentence that anchors the
 note to why this might matter now. DO: connect one observable role/company/
 activity signal to the buyer problem or offer with a permissioned bridge. For
-shared evergreen lanes, do not use `might be interested` or `saw you in a few
-conversations`; `hope this is relevant` is allowed when it stays topic-level and
-avoids false engagement claims. Use a concrete signal/problem bridge instead of
-rejected relevance hedges. Low-certainty language like "hope this is relevant
-if..." or "so may be off, but this seemed relevant" can be considered when the
-source is otherwise awkward. DON'T: recap their resume, list companies,
-compliment their
+shared evergreen lanes, do not use `might be interested`; `hope this is
+relevant` and Shared Signal Discovery bridges like `saw you in a few
+conversations around [topic], so hope this is relevant` are allowed when they
+stay topic-level and avoid false engagement claims. Use a concrete
+signal/problem bridge instead of rejected relevance hedges when it is stronger.
+Low-certainty language like "hope this is relevant if..." or "so may be off,
+but this seemed relevant" can be considered when the source is otherwise
+awkward. DON'T: recap their resume, list companies, compliment their
 background, name a product their company sells, use source-citation phrasing, or
 use generic nouns like "your work".
 FALLBACK: if unsupported, omit the entire line.]`
@@ -483,7 +484,7 @@ artifact.**
 
    - `hope this is relevant if {{signal_topic}} is part of the plan`
    - `saw you might be interested in {{signal_topic}}, so hope this is relevant` for non-evergreen weak-signal campaigns only
-   - `saw you in a few conversations around {{signal_topic}}, so hope this is relevant` for non-evergreen weak-signal campaigns only
+   - `saw you in a few conversations around {{signal_topic}}, so hope this is relevant` for Shared Signal Discovery and non-evergreen weak-signal campaigns only
    - `saw you in a few conversations about {{signal_topic}}, so may be off, but this seemed relevant`
    - `appreciate you showing some love on my post about {{signal_topic}}` only when the sender/client authored the source post and the row proves a reaction or comment
    - `thanks for showing support on my {{signal_topic}} post` only when the sender/client authored the source post and the row proves a reaction or comment
@@ -547,14 +548,14 @@ artifact.**
    magnet replies, or scraped conversations), it is acceptable to reference the
    conversation when it explains why the note exists. Keep it topic-level, not
    activity-log-level: `saw you in a few conversations around
-   {{signal_topic}}, so hope this is relevant` is acceptable only for
-   non-evergreen weak-signal campaigns; it is blocked for Shared Evergreen
-   Signal Discovery. `saw you commented on {{post_context}}` and `your LinkedIn
+   {{signal_topic}}, so hope this is relevant` is acceptable for Shared Signal
+   Discovery and non-evergreen weak-signal campaigns when the source is truly
+   third-party. `saw you commented on {{post_context}}` and `your LinkedIn
    activity around...` are not acceptable. Reserve `raise your hand` phrasing
    for explicit lead-magnet comments, replies, or opt-ins. For ordinary shared
-   evergreen thread discovery, either use `hope this is relevant` without
-   source-mechanics narration, translate the topic into a concrete buyer/problem
-   bridge, or omit the source line.
+   evergreen thread discovery, use the topic-level bridge above, use `hope this
+   is relevant` without source-mechanics narration, translate the topic into a
+   concrete buyer/problem bridge, or omit the source line.
 
    Keep the apologetic nature, but aim it at uncertainty, not surveillance.
    Good for non-evergreen weak-signal campaigns: `saw you in a few
@@ -562,10 +563,11 @@ artifact.**
    be off, but if outbound is relevant to what you're working on...`, or `hope
    this is relevant if...`. For shared evergreen lanes, `hope this is relevant`
    is allowed when it stays topic-level and avoids false engagement claims, but
-   `might be interested` and `saw you in a few conversations` are not enough;
-   use a concrete signal/problem bridge or omit the source line. Bad: `your role
-   at {{company}} looked close...`, because it asserts fit from a title and
-   tells the buyer about themselves.
+   `might be interested` is blocked because it assumes intent; `saw you in a
+   few conversations ... hope this is relevant` is allowed for Shared Signal
+   Discovery when it stays topic-level. Use a concrete signal/problem bridge
+   when it is stronger. Bad: `your role at {{company}} looked close...`, because
+   it asserts fit from a title and tells the buyer about themselves.
 
    Block wordier source narration such as `you might not remember the thread,
    but I found you through a {{signal_topic}} discussion and your
@@ -1563,9 +1565,10 @@ Before `confirmed`, run the selected winner against these gates:
   `hope this is relevant if...`, `saw you might be interested in...`,
   `saw you in a few conversations around...`, `figured this might matter if...`,
   or `if you've ever wanted...`. Exception: for Shared Signal Discovery and
-  other shared evergreen lanes, `might be interested` and `saw you in a few
-  conversations` are blocked; `hope this is relevant` is allowed when it stays
-  topic-level and avoids false engagement claims.
+  other shared evergreen lanes, `might be interested` is blocked because it
+  assumes intent; `hope this is relevant` and Shared Signal Discovery bridges
+  like `saw you in a few conversations around...` are allowed when they stay
+  topic-level and avoid false engagement claims.
 - **Buyer-first opener:** after the greeting, the first substantive line
   should usually enter the buyer's world: a real signal, current-state
   pain, buyer-owned priority, or useful artifact. Sender-origin can come
@@ -1868,9 +1871,10 @@ about`, or `clearly relevant` are BLOCKED. Source-y phrases such as
   in a few conversations about [topic], so may be off, but this seemed
   relevant`, `figured this might matter if [workflow] is live at [company]`, or
   a similarly natural line. For shared evergreen lanes, skip the `might be
-  interested` / `saw you in a few conversations` versions and use `hope this is
-  relevant` only when it stays topic-level and avoids false engagement claims,
-  or use the concrete bridge version. Longer source-recap forms such as `you
+  interested` version and use `hope this is relevant` or `saw you in a few
+  conversations ... hope this is relevant` only when it stays topic-level and
+  avoids false engagement claims, or use the concrete bridge version. Longer
+  source-recap forms such as `you
   might not remember the thread,
   but I found you through a [topic] discussion...` are BLOCKED; they narrate
   the scrape path instead of creating buyer relevance.
@@ -2018,7 +2022,7 @@ led to it. Acceptable openers:
 - `Hey {{first_name}}, [one plain sentence about what we built].`
 - `Hey {{first_name}}, hope this is relevant if [buyer context] is still on your plate.`
 - `Hey {{first_name}}, saw you might be interested in [topic], so hope this is relevant.` Not for shared evergreen lanes.
-- `Hey {{first_name}}, saw you in a few conversations around [topic], so hope this is relevant.` Not for shared evergreen lanes.
+- `Hey {{first_name}}, saw you in a few conversations around [topic], so hope this is relevant.` For Shared Signal Discovery or non-evergreen weak-signal campaigns.
 - `Hey {{first_name}}, found you in a thread about [topic], so may be off, but this seemed relevant.`
 - `Hey {{first_name}}, saw you raise your hand for [topic], so figured this was (hopefully) worth sending.` Only use this for explicit lead-magnet comments, replies, or opt-ins.
 - `Hey {{first_name}}, saw you raise your hand for [topic] (creepy to reach out based on that, i know) - but this felt too on the nose to ignore.` Only use this for explicit lead-magnet comments, replies, or opt-ins.
@@ -2281,7 +2285,7 @@ Rules:
 - acceptable signal use by default:
   - `"Hope this is relevant if [topic] is part of the plan."`
   - `"Saw you might be interested in [topic], so hope this is relevant."` Non-evergreen weak-signal only; blocked for shared evergreen lanes.
-  - `"Saw you in a few conversations around [topic], so hope this is relevant."` Non-evergreen weak-signal only; blocked for shared evergreen lanes.
+  - `"Saw you in a few conversations around [topic], so hope this is relevant."` Shared Signal Discovery or non-evergreen weak-signal only.
   - `"Saw you in a few conversations about [topic], so may be off, but this seemed relevant."`
   - `"Found you in a thread about [topic], so may be off, but this seemed relevant."`
   - `"Thought of {{company}} because [observable signal] points at [problem]."`
@@ -2299,11 +2303,11 @@ Rules:
   - `"Saw you raise your hand for [topic], so figured this was worth sending."`
   - `"Figured this was worth sending."`
 - signal-led opener shape is a **special case**, not the default. Use it only when the archived motion truly depends on it and the line can stay natural. For LinkedIn-post-sourced campaigns, prefer `"saw you in a few conversations around [topic], so hope this is relevant"` or `"found you in a thread about [topic], so may be off, but this seemed relevant"` when referencing the source makes the outreach feel less random. Avoid activity-log phrasing such as `"you commented on..."`, `"you reacted to..."`, or `"your LinkedIn activity..."` unless the approved motion is the deliberately self-aware raise-hand line for an explicit lead-magnet comment, reply, or opt-in.
-- For Shared Evergreen Signal Discovery, do not use the `might be interested` or
-  `saw you in a few conversations` weak signal-led opener shapes above. `Hope
-  this is relevant` is allowed when it stays topic-level and avoids false
-  engagement claims. Translate the source into a concrete problem bridge when
-  that is stronger, e.g.
+- For Shared Evergreen Signal Discovery, do not use the `might be interested`
+  weak signal-led opener shape above. `Hope this is relevant` and `saw you in a
+  few conversations around [topic], so hope this is relevant` are allowed when
+  they stay topic-level and avoid false engagement claims. Translate the source
+  into a concrete problem bridge when that is stronger, e.g.
   `"The AI-assisted GTM conversations keep coming back to one problem: turning
   good LinkedIn signal into review-ready pipeline without another dashboard."`
   Then connect the product in buyer language.
@@ -2316,10 +2320,11 @@ this is relevant`, `saw you in a few conversations around [topic], so hope this
 is relevant`, `saw you in a few conversations about [topic], so may be off,
 but this seemed relevant`, or `found you in a thread about [topic], so may be
 off, but this seemed relevant`. For shared evergreen lanes, `might be
-interested` and `saw you in a few conversations` weak signal bridges are
-blocked; `hope this is relevant` is allowed when it stays topic-level and avoids
-false engagement claims. Use a concrete signal/problem bridge when it is
-stronger. Use the self-aware raise-hand shapes only when
+interested` is blocked because it assumes intent; `hope this is relevant` and
+Shared Signal Discovery `saw you in a few conversations ... hope this is
+relevant` bridges are allowed when they stay topic-level and avoid false
+engagement claims. Use a concrete signal/problem bridge when it is stronger. Use
+the self-aware raise-hand shapes only when
 the source was an explicit lead-magnet comment, reply, or opt-in: `saw you raise
 your hand for [topic], so figured this was (hopefully) worth sending` or `saw you
 raise your hand for [topic] (creepy to reach out based on that, i know) - but

package/skills/refill-sends/SKILL.md

@@ -24,7 +24,6 @@ allowed-tools:
   - mcp__sellable__get_provider_prompt
   - mcp__sellable__get_campaign_message_preparation_status
   - mcp__sellable__start_campaign_message_preparation
-  - mcp__sellable__start_campaign
   - mcp__sellable__cancel_campaign_message_preparation
   - mcp__sellable__import_leads
   - mcp__sellable__wait_for_lead_list_ready
@@ -131,16 +130,11 @@ the active workspace. Without `--yolo`, if Christian did not name senders, ask
 which eligible enrolled senders to refill before choosing campaigns or mutating.
 
 `--yolo` only covers the exact sender set, per-sender target campaigns, caps,
-approval mode, and side effects in the packet. It may authorize `start_campaign`
-only for selected `PAUSED`, dashboard-active, campaign-backed sequence refill
-targets when the rendered packet names the exact campaign ids and start side
-effect. Starting a paused campaign can let the product scheduler schedule/send
-approved eligible sequence actions, so include that expected side effect in the
-packet. It does not authorize starting unrelated, archived, completed, draft, or
-direct campaigns, separate launch/send actions, archive or delete cleanup,
-direct scheduler writes, sender reassignment, or campaigns outside those
-selected for the eligible sender set. Stop and re-plan if the route, sender set,
-ids, caps, blockers, or side-effect class drift before mutation.
+approval mode, and side effects in the packet. It does not authorize
+launch/start, sending, archive or delete cleanup, direct scheduler writes, sender
+reassignment, or campaigns outside those selected for the eligible sender set.
+Stop and re-plan if the route, sender set, ids, caps, blockers, or side-effect
+class drift before mutation.
 
 In `--yolo`, the default two-day fill horizon is two send days unless
 `--until`/`untilDate` is provided. If an until date is provided, compute bounded

package/skills/refill-sends-workflow/SKILL.md

@@ -15,7 +15,6 @@ allowed-tools:
   - mcp__sellable__get_provider_prompt
   - mcp__sellable__get_campaign_message_preparation_status
   - mcp__sellable__start_campaign_message_preparation
-  - mcp__sellable__start_campaign
   - mcp__sellable__cancel_campaign_message_preparation
   - mcp__sellable__import_leads
   - mcp__sellable__wait_for_lead_list_ready
@@ -119,10 +118,9 @@ Use the refill-state response as the current facts receipt:
 - `freshness.stateHash` and exact campaign/table/workspace ids.
 
 Empty or unsafe states stop with the blocker: no fillable target, missing or deleted campaign,
-missing table, archived/completed campaign, paused campaign without an explicit
-selected-start packet, zero sender capacity, zero source candidates, zero viable
-rows, no approved/preparable rows, active prep job, awaiting scheduler, or
-unsupported direct campaign type.
+missing table, paused/archive campaign, zero sender capacity, zero source candidates,
+zero viable rows, no approved/preparable rows, active prep job, awaiting
+scheduler, or unsupported direct campaign type.
 
 ## Regular Campaign Decision
 
@@ -302,27 +300,7 @@ Approval mode:
 - default is `approvalMode:"mark_ready"`, not approve;
 - use `approvalMode:"approve"` only when the user explicitly asks to approve
   messages or schedule sends and has approved the exact bounded cohort;
-- `start_campaign` is allowed only as a bounded start/resume step for a
-  selected `PAUSED`, dashboard-active, campaign-backed sequence refill target;
-- never launch/start unrelated, archived, completed, draft, direct, or
-  non-selected campaigns from refill.
-
-Paused campaign start discipline:
-
-- `PAUSED`, dashboard-active campaign-backed sequence campaigns are existing
-  refill targets, not archived inventory.
-- If the selected refill target is `PAUSED` and has healthy senders, sequence,
-  source/list, and ready/preparable rows or a bounded source/prep packet, the
-  final packet may include `start_campaign` when starting is needed for the
-  scheduler to schedule/send approved eligible rows.
-- In non-yolo mode, the `Accept` choice must say that starting the paused
-  campaign can let the product scheduler schedule/send approved eligible
-  sequence actions.
-- In `--yolo`, `start_campaign` is auto-accepted only for the exact selected
-  paused campaign ids, sender scope, caps, approval mode, and start side effect
-  named in the packet after the final reread.
-- Do not start if the campaign is archived, completed, draft, direct, lacks a
-  sequence/senders/source, has no viable row path, or state drifts.
+- never launch/start a campaign from refill.
 
 Before prep or approval mutation, reread `get_campaign_refill_state` and compare
 `freshness.stateHash`, campaign id, table id, workspace id, source id, and caps.
@@ -368,15 +346,13 @@ same refill request, do not ask the `Accept` / `Decline` question. Instead:
    packet;
 4. execute only the exact packet.
 
-`--yolo` authorizes `start_campaign` only for selected `PAUSED` refill targets
-named in the exact packet. It never authorizes starting unrelated, archived,
-completed, draft, or direct campaigns, separate launch/send actions,
-archive/delete cleanup, raw scheduler writes, sender reassignment, extra senders
-beyond the eligible sender set, or higher caps than the packet named. In
-sender-scoped `--yolo`, a bounded packet containing all eligible enrolled
-senders and at most one best campaign per sender is covered; arbitrary expanded
-campaign sets are not. If any state or scope drifts, stop and re-plan instead of
-auto-accepting the changed action.
+`--yolo` never authorizes launch/start, sending, archive/delete cleanup, raw
+scheduler writes, sender reassignment, unrelated campaigns, extra senders beyond
+the eligible sender set, or higher caps than the packet named. In sender-scoped
+`--yolo`, a bounded packet containing all eligible enrolled senders and at most
+one best campaign per sender is covered; arbitrary expanded campaign sets are
+not. If any state or scope drifts, stop and re-plan instead of auto-accepting the
+changed action.
 Short form: all eligible enrolled senders are covered by sender-scoped `--yolo`; arbitrary expanded campaign sets are not.
 Short form: direct scheduler writes are not covered by `--yolo`.
 Short form: stop and re-plan instead of auto-accepting the changed action.
@@ -437,9 +413,7 @@ the current source or ask for more research instead of walking the ladder.
 
 ## Hard Safety Rules
 
-- Never call launch/start tools except `start_campaign` for an exact selected
-  `PAUSED`, dashboard-active, campaign-backed sequence refill target in the
-  rendered packet.
+- Never call start or launch tools.
 - Never raw-write `scheduledFor`, `scheduledAt`, scheduled status, or sender
   assignment fields.
 - Never expose internal direct campaign types as an operator refill path.
@@ -451,8 +425,8 @@ the current source or ask for more research instead of walking the ladder.
 - In interactive Codex or Claude Code, that explicit approval must be collected
   through the host-native `Accept` / `Decline` question gate.
 - `--yolo` in the current refill request is explicit auto-accept for the
-  rendered bounded refill packet only; it does not loosen the unrelated-campaign
-  start/send, scheduler-write, archive/delete, or drift rules above.
+  rendered bounded refill packet only; it does not loosen the launch/send,
+  scheduler-write, archive/delete, or drift rules above.
 
 ## Report
 
@@ -468,5 +442,4 @@ Report in campaign-name-first language:
   freshness hash used.
 
 Keep ids visible but secondary: show them under "Exact target" or "Proof", not
-as the main decision text. Say explicitly whether a selected paused campaign was
-started; otherwise say nothing was started and nothing was sent.
+as the main decision text. Say explicitly: nothing was launched and nothing was sent.