@sema-agent/core 7.52.0 → 7.54.0

package/wire-changes/core@7.54.0.json

@@ -0,0 +1,2870 @@
+{
+  "repo": "core",
+  "version": "7.54.0",
+  "from": "d1d7d4b6712ddedd92e0d6457be34e4ff2a97dd6",
+  "to": "dc4ca90776e56a0912052ef806c75d56427bd812",
+  "added": [
+    {
+      "name": "APPROVAL_STATION_MEMBERS",
+      "kind": "variable",
+      "tier": "advanced",
+      "at": [
+        "src/core/approval-object.ts:81",
+        "src/index.ts:1178"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "APPROVAL_TARGET_ROLES",
+      "kind": "variable",
+      "tier": "advanced",
+      "at": [
+        "src/core/approval-object.ts:26",
+        "src/index.ts:1178"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "ApprovalDisposition",
+      "kind": "type",
+      "tier": "advanced",
+      "at": [
+        "src/core/approval-object.ts:89",
+        "src/index.ts:1178"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "ApprovalMember",
+      "kind": "type",
+      "tier": "advanced",
+      "at": [
+        "src/core/approval-object.ts:79",
+        "src/index.ts:1178"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "ApprovalMismatch",
+      "kind": "interface",
+      "tier": "advanced",
+      "at": [
+        "src/core/approval-object.ts:90",
+        "src/index.ts:1178"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "ApprovalObject",
+      "kind": "interface",
+      "tier": "advanced",
+      "at": [
+        "src/core/approval-object.ts:44",
+        "src/index.ts:1178"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "ApprovalStation",
+      "kind": "type",
+      "tier": "advanced",
+      "at": [
+        "src/core/approval-object.ts:78",
+        "src/index.ts:1178"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "ApprovalTargets",
+      "kind": "type",
+      "tier": "advanced",
+      "at": [
+        "src/core/approval-object.ts:32",
+        "src/index.ts:1178"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "BOUNDARY_LEGS",
+      "kind": "variable",
+      "tier": "advanced",
+      "at": [
+        "src/core/cross-boundary-taint.ts:50",
+        "src/index.ts:1496"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "BoundaryLeg",
+      "kind": "type",
+      "tier": "advanced",
+      "at": [
+        "src/core/cross-boundary-taint.ts:51",
+        "src/index.ts:1496"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "BoundaryLegList",
+      "kind": "type",
+      "tier": "advanced",
+      "at": [
+        "src/core/cross-boundary-taint.ts:57",
+        "src/index.ts:1496"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "BoundaryLegsDeclaration",
+      "kind": "type",
+      "tier": "advanced",
+      "at": [
+        "src/core/cross-boundary-taint.ts:55",
+        "src/index.ts:1496"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "BoundaryLegsFor",
+      "kind": "type",
+      "tier": "advanced",
+      "at": [
+        "src/core/cross-boundary-taint.ts:81",
+        "src/index.ts:1496"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "BoundaryLegsGiven",
+      "kind": "interface",
+      "tier": "advanced",
+      "at": [
+        "src/core/cross-boundary-taint.ts:68",
+        "src/index.ts:1496"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "CROSS_BOUNDARY_POSTURES",
+      "kind": "variable",
+      "tier": "advanced",
+      "at": [
+        "src/core/cross-boundary-taint.ts:37",
+        "src/index.ts:1496"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "CROSS_BOUNDARY_RECORD_TYPE",
+      "kind": "variable",
+      "tier": "advanced",
+      "at": [
+        "src/core/cross-boundary-taint.ts:198",
+        "src/index.ts:1496"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "CROSS_BOUNDARY_TAINT_BITS",
+      "kind": "variable",
+      "tier": "advanced",
+      "at": [
+        "src/core/cross-boundary-taint.ts:21",
+        "src/index.ts:1496"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "CompactionRestoreAsk",
+      "kind": "interface",
+      "tier": "advanced",
+      "at": [
+        "src/core/auto-compaction.ts:326",
+        "src/index.ts:973"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "CrossBoundaryCall",
+      "kind": "interface",
+      "tier": "advanced",
+      "at": [
+        "src/core/cross-boundary-taint.ts:92",
+        "src/index.ts:1496"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "CrossBoundaryCheck",
+      "kind": "interface",
+      "tier": "advanced",
+      "at": [
+        "src/core/cross-boundary-taint.ts:99",
+        "src/index.ts:1496"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "CrossBoundaryExitRefusal",
+      "kind": "interface",
+      "tier": "advanced",
+      "at": [
+        "src/core/cross-boundary-taint.ts:86",
+        "src/index.ts:1496"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "CrossBoundaryObligation",
+      "kind": "interface",
+      "tier": "advanced",
+      "at": [
+        "src/core/cross-boundary-taint.ts:60",
+        "src/index.ts:1496"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "CrossBoundaryPosture",
+      "kind": "type",
+      "tier": "advanced",
+      "at": [
+        "src/core/cross-boundary-taint.ts:38",
+        "src/index.ts:1496"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "CrossBoundaryRecordData",
+      "kind": "interface",
+      "tier": "advanced",
+      "at": [
+        "src/core/cross-boundary-taint.ts:201",
+        "src/index.ts:1496"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "CrossBoundaryRecordEntry",
+      "kind": "interface",
+      "tier": "advanced",
+      "at": [
+        "src/core/cross-boundary-taint.ts:224",
+        "src/index.ts:1496"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "CrossBoundaryRecordRead",
+      "kind": "type",
+      "tier": "advanced",
+      "at": [
+        "src/core/cross-boundary-taint.ts:218",
+        "src/index.ts:1496"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "CrossBoundaryTaintBit",
+      "kind": "type",
+      "tier": "advanced",
+      "at": [
+        "src/core/cross-boundary-taint.ts:22",
+        "src/index.ts:1496"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "CrossBoundaryTree",
+      "kind": "interface",
+      "tier": "advanced",
+      "at": [
+        "src/core/cross-boundary-taint.ts:29",
+        "src/index.ts:1496"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "CrossBoundaryTreeToken",
+      "kind": "interface",
+      "tier": "advanced",
+      "at": [
+        "src/core/cross-boundary-taint.ts:76",
+        "src/index.ts:1496"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "DECLARATION_PATH_RULES",
+      "kind": "variable",
+      "tier": "advanced",
+      "at": [
+        "src/core/mcp-server-spec.ts:313",
+        "src/core/types.ts:33",
+        "src/index.ts:3653"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "DeclarationFault",
+      "kind": "interface",
+      "tier": "advanced",
+      "at": [
+        "src/core/mcp-server-spec.ts:267",
+        "src/core/types.ts:32",
+        "src/index.ts:3654"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "DeclarationPathRule",
+      "kind": "interface",
+      "tier": "advanced",
+      "at": [
+        "src/core/mcp-server-spec.ts:300",
+        "src/core/types.ts:32",
+        "src/index.ts:3654"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "DeclarationRead",
+      "kind": "type",
+      "tier": "advanced",
+      "at": [
+        "src/core/mcp-server-spec.ts:273",
+        "src/core/types.ts:32",
+        "src/index.ts:3654"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "EDITED_RULE_BREADTH_WARNING_CODES",
+      "kind": "variable",
+      "tier": "advanced",
+      "at": [
+        "src/core/permission-rule-model.ts:2056",
+        "src/index.ts:1733"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "EngineStorageBackend",
+      "kind": "interface",
+      "tier": "advanced",
+      "at": [
+        "src/core/engine-storage-backend.ts:34",
+        "src/index.ts:3660"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "FILE_HISTORY_ERROR_CODES",
+      "kind": "variable",
+      "tier": "advanced",
+      "at": [
+        "src/core/file-history-store.ts:173",
+        "src/index.ts:868"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "IMPORTED_SETTINGS_LAYERS",
+      "kind": "variable",
+      "tier": "advanced",
+      "at": [
+        "src/core/permission-rule-consent.ts:1574",
+        "src/index.ts:1950"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "LiveApprovalObject",
+      "kind": "interface",
+      "tier": "advanced",
+      "at": [
+        "src/core/approval-object.ts:100",
+        "src/index.ts:1178"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "MintedAttachmentFrame",
+      "kind": "interface",
+      "tier": "advanced",
+      "at": [
+        "src/core/user-attachment.ts:418",
+        "src/index.ts:975"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "PERSISTED_RULE_MATCHES",
+      "kind": "variable",
+      "tier": "advanced",
+      "at": [
+        "src/core/permission-rule-model.ts:332",
+        "src/index.ts:1730"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "ParkedApprovalCardReading",
+      "kind": "type",
+      "tier": "advanced",
+      "at": [
+        "src/core/pause-registry.ts:64",
+        "src/index.ts:3672"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "RULE_ADD_ORIGINS",
+      "kind": "variable",
+      "tier": "advanced",
+      "at": [
+        "src/core/permission-rule-model.ts:407",
+        "src/index.ts:1734"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "RULE_APPROVAL_KINDS",
+      "kind": "variable",
+      "tier": "advanced",
+      "at": [
+        "src/core/permission-rule-consent.ts:78",
+        "src/index.ts:1948"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "RULE_APPROVAL_RECORD_SCHEMA",
+      "kind": "variable",
+      "tier": "advanced",
+      "at": [
+        "src/core/permission-rule-consent.ts:131",
+        "src/index.ts:1953"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "RULE_APPROVAL_STATES",
+      "kind": "variable",
+      "tier": "advanced",
+      "at": [
+        "src/core/permission-rule-consent.ts:84",
+        "src/index.ts:1949"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "RULE_OFFER_BATCH_MEMBER_KINDS",
+      "kind": "variable",
+      "tier": "advanced",
+      "at": [
+        "src/core/permission-rule-model.ts:2922",
+        "src/index.ts:1731"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "RULE_OWNER_KINDS",
+      "kind": "variable",
+      "tier": "advanced",
+      "at": [
+        "src/core/permission-rule-store.ts:102",
+        "src/index.ts:1800"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "RuleApprovalState",
+      "kind": "type",
+      "tier": "advanced",
+      "at": [
+        "src/core/permission-rule-consent.ts:88",
+        "src/index.ts:1946"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "SessionStoreContractHooks",
+      "kind": "interface",
+      "tier": "advanced",
+      "at": [
+        "src/core/store-contracts/session-store-contract.ts:31",
+        "src/index.ts:3665"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "UNCOVERED_SEGMENT_REASONS",
+      "kind": "variable",
+      "tier": "advanced",
+      "at": [
+        "src/core/permission-rule-model.ts:3026",
+        "src/index.ts:1732"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "admitSessionPlacement",
+      "kind": "function",
+      "tier": "advanced",
+      "at": [
+        "src/core/session-store.ts:113",
+        "src/index.ts:3673"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "approvalObjectOf",
+      "kind": "function",
+      "tier": "advanced",
+      "at": [
+        "src/core/approval-object.ts:53",
+        "src/index.ts:1178"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "assertForkTarget",
+      "kind": "function",
+      "tier": "internal",
+      "at": [
+        "src/engine/session/repo-utils.ts:37",
+        "src/index.ts:3674",
+        "src/internal/harness.ts:50"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "canonicalJsonStringify",
+      "kind": "function",
+      "tier": "advanced",
+      "at": [
+        "src/core/canonical-json.ts:575",
+        "src/index.ts:3671"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "crossBoundaryObligation",
+      "kind": "function",
+      "tier": "advanced",
+      "at": [
+        "src/core/cross-boundary-taint.ts:147",
+        "src/index.ts:1496"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "forkRowCells",
+      "kind": "function",
+      "tier": "internal",
+      "at": [
+        "src/engine/session/repo-utils.ts:42",
+        "src/index.ts:3674",
+        "src/internal/harness.ts:50"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "incarnationCell",
+      "kind": "function",
+      "tier": "internal",
+      "at": [
+        "src/engine/session/repo-utils.ts:19",
+        "src/index.ts:3674",
+        "src/internal/harness.ts:50"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "isHostRole",
+      "kind": "function",
+      "tier": "advanced",
+      "at": [
+        "src/index.ts:2629",
+        "src/prompt-assembly/catalog/schema.ts:45"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "judgeApprovalObject",
+      "kind": "function",
+      "tier": "advanced",
+      "at": [
+        "src/core/approval-object.ts:171",
+        "src/index.ts:1178"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "mcpStartupTimeoutMs",
+      "kind": "function",
+      "tier": "advanced",
+      "at": [
+        "src/core/mcp.ts:761",
+        "src/index.ts:333"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "parkedApprovalCardOf",
+      "kind": "function",
+      "tier": "advanced",
+      "at": [
+        "src/core/pause-registry.ts:81",
+        "src/index.ts:3672"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "readCrossBoundaryRecord",
+      "kind": "function",
+      "tier": "advanced",
+      "at": [
+        "src/core/cross-boundary-taint.ts:272",
+        "src/index.ts:1496"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "readDenyRowAnchor",
+      "kind": "function",
+      "tier": "advanced",
+      "at": [
+        "src/index.ts:645",
+        "src/tools/fs/read-deny.ts:1086"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "readIncarnationCell",
+      "kind": "function",
+      "tier": "internal",
+      "at": [
+        "src/engine/session/repo-utils.ts:28",
+        "src/index.ts:3674"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "readToolFaces",
+      "kind": "function",
+      "tier": "advanced",
+      "at": [
+        "src/core/tool-face-reader.ts:130",
+        "src/index.ts:1175"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "receiveDeclaration",
+      "kind": "function",
+      "tier": "advanced",
+      "at": [
+        "src/core/mcp-server-spec.ts:426",
+        "src/core/types.ts:33",
+        "src/index.ts:3653"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "sameOrgPolicyContent",
+      "kind": "function",
+      "tier": "advanced",
+      "at": [
+        "src/core/permission-rule-org.ts:526",
+        "src/index.ts:1902"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "sessionStoreContract",
+      "kind": "function",
+      "tier": "advanced",
+      "at": [
+        "src/core/store-contracts/session-store-contract.ts:209",
+        "src/index.ts:3665"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    }
+  ],
+  "removed": [
+    {
+      "name": "judgeParkedToolIdentity",
+      "kind": "function",
+      "tier": "advanced",
+      "at": [
+        "src/core/tool-roster.ts:951",
+        "src/index.ts:1107"
+      ],
+      "breaking": true
+    }
+  ],
+  "changed": [],
+  "narrowed": [
+    {
+      "id": "F2",
+      "source": "behaviorFlips.summary",
+      "text": "#1581 (behavior narrowing, open to veto): a written `feedback` on a deny, on a decide a machine made, as a non-string, or carrying a `<system-reminder>` tag is refused before the claim."
+    },
+    {
+      "id": "F4",
+      "source": "behaviorFlips.summary",
+      "text": "#1329 C1a (behavior narrowing for a host's own `runToolGate` input only, open to veto): the `egress` mark is the operator's class on every seat."
+    },
+    {
+      "id": "F6",
+      "source": "behaviorFlips.summary",
+      "text": "#1359 (behavior narrowing, hard-breaking for the name-list factories, ruled: clay C-R638): a name-list hit or a policy's reason word is no consent for a server's tool nobody granted."
+    },
+    {
+      "id": "F8",
+      "source": "behaviorFlips.summary",
+      "text": "#1359 (behavior narrowing, two shapes that ran unasked before, ruled: clay C-R638): an inherited screening allow, an inherited classifier allow and the write gate's session exemption no longer clear a passthrough tool's question."
+    },
+    {
+      "id": "F12",
+      "source": "behaviorFlips.summary",
+      "text": "#2111 / #1391 (behavior narrowing, ruled: clay C-R646): a call whose arguments are not a record of plain JSON data nested at most 256 levels deep (nesting past 256 levels, a cyclic object graph, a bigint, a number that is not finite, a hole / a named member / an `undefined` element in a list, one object met twice, a getter, a class instance, a list of a subclass or of another realm, a symbol-keyed or non-enumerable member, a list, `undefined` or a bare scalar as the arguments) is refused before anyone is asked; a person's edit into such a shape (from the engine's resolver, from a host's own `resolveAsk`, or in a durable decide) is refused where it would be adopted."
+    },
+    {
+      "id": "F13",
+      "source": "behaviorFlips.summary",
+      "text": "#2111 (behavior narrowing, ruled: clay C-R646): `createApprovalPolicy` refuses arguments no approval can be bound to before its approver is asked, in the same sentence — including a `Date` / `Map` / binary value it used to clone and judge."
+    },
+    {
+      "id": "F14",
+      "source": "behaviorFlips.summary",
+      "text": "#1680 (behavior narrowing, ruled: clay C-R638): a caller tool under an engine-tool name the engine does not mount on this leg is read by its own declaration."
+    },
+    {
+      "id": "F15",
+      "source": "behaviorFlips.summary",
+      "text": "#2105 (safety narrowing, ruled: clay C-R646): a caller alias of an engine tool's name no longer lends its irreversibility tier or reversibility probe to the engine shell."
+    },
+    {
+      "id": "F17",
+      "source": "behaviorFlips.summary",
+      "text": "#1567 (behavior narrowing, ruled: clay C-R638): `tightenTaskSpec` refuses an override that turns `memory.enabled: false` back on."
+    },
+    {
+      "id": "F20",
+      "source": "behaviorFlips.summary",
+      "text": "#1973 / #2093 (behavior narrowing, open to veto): an MCP server's `toolFaces` declaration that does not fit refuses the whole entry under `config.tool_face_invalid` at the door."
+    },
+    {
+      "id": "F21",
+      "source": "behaviorFlips.summary",
+      "text": "#1973 (behavior narrowing, open to veto): an MCP face whose `resultCards` name another namespace is refused at the listing as a caller's is."
+    },
+    {
+      "id": "F23",
+      "source": "behaviorFlips.summary",
+      "text": "#2070 (behavior narrowing, ruled: clay C-R646): a teammate leg's protocol tools follow the spawner's allowlist."
+    },
+    {
+      "id": "F28",
+      "source": "behaviorFlips.summary",
+      "text": "#469 O9b S1 (behavior narrowing, open to veto; only on a tree that executes on a target device under `multi_tenant`): a call that writes beyond the device — and, once content from beyond it was let in, every call back into the device — is put to a person; a configuration's allow of such a call is refused."
+    },
+    {
+      "id": "F29",
+      "source": "behaviorFlips.summary",
+      "text": "#469 O9b S1 / C-R655 (behavior narrowing, open to veto): a session record the tree owes that cannot be written refuses the call that owes it on a governed tree, and is reported as an operator notice on a tree that is not governed; a parked row of an armed tree lists the requirement word `cross_boundary`."
+    },
+    {
+      "id": "F30",
+      "source": "behaviorFlips.summary",
+      "text": "#469 O9b S1 (behavior narrowing on every lane, open to veto): the decision receipt holds each ask-only member to the ask arm — an allow, a deny or a hook result with no `action` carrying one is denied by policy."
+    }
+  ],
+  "closedSetMembers": [
+    {
+      "set": "APPROVAL_TARGET_ROLES",
+      "at": [
+        "src/core/approval-object.ts:26"
+      ],
+      "newSet": true,
+      "added": [
+        "declared",
+        "protective"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "ASK_CLASSES",
+      "at": [
+        "src/core/ask-origin.ts:638"
+      ],
+      "newSet": false,
+      "added": [
+        "cross_boundary"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "ApprovalCarryRefusal",
+      "at": [
+        "src/core/engine-notice.ts:1169"
+      ],
+      "newSet": true,
+      "added": [
+        "steering.invalid_content",
+        "steering.queue_full"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "ApprovalDisposition",
+      "at": [
+        "src/core/approval-object.ts:89"
+      ],
+      "newSet": true,
+      "added": [
+        "refuse_pending",
+        "reopen",
+        "veto"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "ApprovalMember",
+      "at": [
+        "src/core/approval-object.ts:79"
+      ],
+      "newSet": true,
+      "added": [
+        "grants",
+        "targets",
+        "tool"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "ApprovalStation",
+      "at": [
+        "src/core/approval-object.ts:78"
+      ],
+      "newSet": true,
+      "added": [
+        "claim",
+        "execution",
+        "session"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "ApprovalTargetRole",
+      "at": [
+        "src/core/approval-object.ts:27"
+      ],
+      "newSet": true,
+      "added": [
+        "declared",
+        "protective"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "BOUNDARY_LEGS",
+      "at": [
+        "src/core/cross-boundary-taint.ts:50"
+      ],
+      "newSet": true,
+      "added": [
+        "env",
+        "outside_read",
+        "outside_write"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "BindingTop",
+      "at": [
+        "src/core/canonical-json.ts:122"
+      ],
+      "newSet": true,
+      "added": [
+        "list",
+        "record"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "BoundaryLeg",
+      "at": [
+        "src/core/cross-boundary-taint.ts:51",
+        "src/index.ts:1496"
+      ],
+      "newSet": true,
+      "added": [
+        "env",
+        "outside_read",
+        "outside_write"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "BoundaryLegsDeclaration",
+      "at": [
+        "src/core/cross-boundary-taint.ts:55"
+      ],
+      "newSet": true,
+      "added": [
+        "per_call"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "CHECKPOINT_CONFIG_REFUSAL_CODES",
+      "at": [
+        "src/core/checkpoint-store.ts:2499"
+      ],
+      "newSet": false,
+      "added": [
+        "config.cross_boundary_posture",
+        "config.tool_face_invalid"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": true
+    },
+    {
+      "set": "CROSS_BOUNDARY_POSTURES",
+      "at": [
+        "src/core/cross-boundary-taint.ts:37"
+      ],
+      "newSet": true,
+      "added": [
+        "multi_tenant",
+        "single_user"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "CROSS_BOUNDARY_TAINT_BITS",
+      "at": [
+        "src/core/cross-boundary-taint.ts:21"
+      ],
+      "newSet": true,
+      "added": [
+        "offTargetReadObserved",
+        "targetExecutionArmed"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "CrossBoundaryPosture",
+      "at": [
+        "src/core/cross-boundary-taint.ts:38",
+        "src/index.ts:1496"
+      ],
+      "newSet": true,
+      "added": [
+        "multi_tenant",
+        "single_user"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "CrossBoundaryRecordPhase",
+      "at": [
+        "src/core/cross-boundary-taint.ts:318"
+      ],
+      "newSet": true,
+      "added": [
+        "exit",
+        "prepare",
+        "settle",
+        "suspend"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "CrossBoundaryTaintBit",
+      "at": [
+        "src/core/cross-boundary-taint.ts:22",
+        "src/index.ts:1496"
+      ],
+      "newSet": true,
+      "added": [
+        "offTargetReadObserved",
+        "targetExecutionArmed"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "EDITED_RULE_BREADTH_WARNING_CODES",
+      "at": [
+        "src/core/permission-rule-model.ts:2056"
+      ],
+      "newSet": true,
+      "added": [
+        "broad_prefix",
+        "compound_prefix"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "ENGINE_NOTICE_CODES",
+      "at": [
+        "src/core/governance-codes.ts:363"
+      ],
+      "newSet": false,
+      "added": [
+        "config.cross_boundary_posture_undeclared",
+        "config.cross_boundary_record_unwritten"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": true
+    },
+    {
+      "set": "EditedRuleBreadthWarning.code",
+      "at": [
+        "src/core/permission-rule-model.ts:2049"
+      ],
+      "newSet": false,
+      "added": [],
+      "removed": [
+        "broad_prefix",
+        "compound_prefix"
+      ],
+      "breaking": true,
+      "criteriaCovered": false
+    },
+    {
+      "set": "FILE_HISTORY_ERROR_CODES",
+      "at": [
+        "src/core/file-history-store.ts:173"
+      ],
+      "newSet": true,
+      "added": [
+        "aborted",
+        "adopt_failed",
+        "conflict",
+        "not_found",
+        "restore_failed",
+        "snapshot_failed",
+        "track_failed",
+        "unsupported_format"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "FileErrorCode",
+      "at": [
+        "src/engine/harness/types.ts:153"
+      ],
+      "newSet": false,
+      "added": [
+        "target_unavailable"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "FileHistoryError.code",
+      "at": [
+        "src/core/file-history-store.ts:184"
+      ],
+      "newSet": false,
+      "added": [],
+      "removed": [
+        "aborted",
+        "adopt_failed",
+        "conflict",
+        "not_found",
+        "restore_failed",
+        "snapshot_failed",
+        "track_failed",
+        "unsupported_format"
+      ],
+      "persistedBy": "none",
+      "breaking": true,
+      "criteriaCovered": false
+    },
+    {
+      "set": "IMPORTED_SETTINGS_LAYERS",
+      "at": [
+        "src/core/permission-rule-consent.ts:1574"
+      ],
+      "newSet": true,
+      "added": [
+        "localSettings",
+        "projectSettings",
+        "userSettings"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "LexedRedirect.op",
+      "at": [
+        "src/shell/lex.ts:220"
+      ],
+      "newSet": false,
+      "added": [
+        "<>"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "PARSE_FAILURE_REASONS",
+      "at": [
+        "src/shell/lex.ts:57"
+      ],
+      "newSet": false,
+      "added": [
+        "unterminated_arithmetic_expansion"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "PERSISTED_RULE_MANDATES",
+      "at": [
+        "src/core/ask-origin.ts:408"
+      ],
+      "newSet": false,
+      "added": [
+        "cross_boundary_taint"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "PERSISTED_RULE_MATCHES",
+      "at": [
+        "src/core/permission-rule-model.ts:332"
+      ],
+      "newSet": true,
+      "added": [
+        "exact",
+        "host",
+        "name",
+        "name_prefix",
+        "path",
+        "prefix",
+        "subdomain",
+        "subpath",
+        "wildcard"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "REQUIREMENT_WORDS",
+      "at": [
+        "src/core/checkpoint-requirements.ts:36"
+      ],
+      "newSet": false,
+      "added": [
+        "approval_targets",
+        "cross_boundary"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "RESUME_REFUSAL_MEMBERS",
+      "at": [
+        "src/core/resume-startup-cause.ts:87"
+      ],
+      "newSet": true,
+      "added": [
+        "code",
+        "field",
+        "reason"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "RULE_ADD_ORIGINS",
+      "at": [
+        "src/core/permission-rule-model.ts:407"
+      ],
+      "newSet": true,
+      "added": [
+        "imported-cc",
+        "starter",
+        "user"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "RULE_APPROVAL_KINDS",
+      "at": [
+        "src/core/permission-rule-consent.ts:78"
+      ],
+      "newSet": true,
+      "added": [
+        "card",
+        "import",
+        "starter"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "RULE_APPROVAL_STATES",
+      "at": [
+        "src/core/permission-rule-consent.ts:84"
+      ],
+      "newSet": true,
+      "added": [
+        "approved",
+        "pending",
+        "redeemed"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "RULE_OFFER_BATCH_MEMBER_KINDS",
+      "at": [
+        "src/core/permission-rule-model.ts:2922"
+      ],
+      "newSet": true,
+      "added": [
+        "command",
+        "directoryRead"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "RULE_OWNER_KINDS",
+      "at": [
+        "src/core/permission-rule-store.ts:102"
+      ],
+      "newSet": true,
+      "added": [
+        "local-owner",
+        "principal"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "ReadDenyRowAnchorWord",
+      "at": [
+        "src/tools/fs/read-deny.ts:1071"
+      ],
+      "newSet": true,
+      "added": [
+        "home",
+        "none",
+        "root"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "RuleApprovalState",
+      "at": [
+        "src/core/permission-rule-consent.ts:88",
+        "src/index.ts:1946"
+      ],
+      "newSet": true,
+      "added": [
+        "approved",
+        "pending",
+        "redeemed"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "RunnerDeps.crossBoundaryPosture",
+      "at": [
+        "src/core/runner-deps.ts:337"
+      ],
+      "newSet": true,
+      "added": [
+        "multi_tenant",
+        "single_user"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "SPAWNER_SURFACE_LEG_KINDS",
+      "at": [
+        "src/core/tool-face.ts:266"
+      ],
+      "newSet": true,
+      "added": [
+        "teammate"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "TraceEvent.kind",
+      "at": [
+        "src/core/trace.ts:97",
+        "src/core/trace.ts:130",
+        "src/core/trace.ts:162",
+        "src/core/trace.ts:192",
+        "src/core/trace.ts:233",
+        "src/core/trace.ts:251",
+        "src/core/trace.ts:266",
+        "src/core/trace.ts:301",
+        "src/core/trace.ts:303",
+        "src/core/trace.ts:349",
+        "src/core/trace.ts:378",
+        "src/core/trace.ts:396",
+        "src/core/trace.ts:410",
+        "src/core/trace.ts:427",
+        "src/core/trace.ts:443",
+        "src/core/trace.ts:458",
+        "src/core/trace.ts:475",
+        "src/core/trace.ts:491",
+        "src/core/trace.ts:505",
+        "src/core/trace.ts:523",
+        "src/core/trace.ts:542",
+        "src/core/trace.ts:558",
+        "src/core/trace.ts:580",
+        "src/core/trace.ts:605",
+        "src/core/trace.ts:633",
+        "src/core/trace.ts:647",
+        "src/core/trace.ts:661",
+        "src/core/trace.ts:682",
+        "src/core/trace.ts:693",
+        "src/core/trace.ts:708",
+        "src/core/trace.ts:720",
+        "src/core/trace.ts:734",
+        "src/core/trace.ts:753",
+        "src/core/trace.ts:763",
+        "src/core/trace.ts:771",
+        "src/core/trace.ts:781",
+        "src/core/trace.ts:797",
+        "src/core/trace.ts:814",
+        "src/core/trace.ts:826",
+        "src/core/trace.ts:836",
+        "src/core/trace.ts:858",
+        "src/core/trace.ts:880",
+        "src/core/trace.ts:888",
+        "src/core/trace.ts:908",
+        "src/core/trace.ts:924",
+        "src/core/trace.ts:934",
+        "src/core/trace.ts:947",
+        "src/core/trace.ts:961",
+        "src/core/trace.ts:970",
+        "src/core/trace.ts:981",
+        "src/core/trace.ts:991"
+      ],
+      "newSet": false,
+      "added": [
+        "permission.cross_boundary_taint"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "TraceEvent.phase",
+      "at": [
+        "src/core/trace.ts:562",
+        "src/core/trace.ts:652",
+        "src/core/trace.ts:666"
+      ],
+      "newSet": false,
+      "added": [
+        "observed",
+        "prepare",
+        "resume"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "UNCOVERED_SEGMENT_REASONS",
+      "at": [
+        "src/core/permission-rule-model.ts:3026"
+      ],
+      "newSet": true,
+      "added": [
+        "cap_overflow",
+        "no_rule_form",
+        "redirection"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "UNRESOLVED_REASONS",
+      "at": [
+        "src/shell/lex.ts:41"
+      ],
+      "newSet": false,
+      "added": [
+        "trailing_backslash"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "UncoveredSegmentDetail.reason",
+      "at": [
+        "src/core/permission-rule-model.ts:3022"
+      ],
+      "newSet": false,
+      "added": [],
+      "removed": [
+        "cap_overflow",
+        "no_rule_form",
+        "redirection"
+      ],
+      "persistedBy": "none",
+      "breaking": true,
+      "criteriaCovered": false
+    },
+    {
+      "set": "UserMessageAttachment.origin",
+      "at": [
+        "src/engine/llm/types.ts:507"
+      ],
+      "newSet": true,
+      "added": [
+        "compaction_restore"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    }
+  ],
+  "closedSetsUnreadable": [],
+  "typeKeys": [
+    {
+      "type": "AskClassification",
+      "at": [
+        "src/core/ask-origin.ts:843"
+      ],
+      "added": [
+        "askFace"
+      ],
+      "addedDetail": [
+        {
+          "key": "askFace",
+          "optional": true
+        }
+      ],
+      "addedRequired": [],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": true
+    },
+    {
+      "type": "BackgroundAgentTaskHandle",
+      "at": [
+        "src/core/task-registry-shared.ts:265"
+      ],
+      "via": "TaskRegistry.BackgroundAgentTaskHandle",
+      "added": [
+        "crossBoundaryTree"
+      ],
+      "addedDetail": [
+        {
+          "key": "crossBoundaryTree",
+          "optional": true
+        }
+      ],
+      "addedRequired": [],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "type": "CheckpointState",
+      "at": [
+        "src/core/checkpoint-store.ts:1207"
+      ],
+      "added": [
+        "crossBoundaryRecorded"
+      ],
+      "addedDetail": [
+        {
+          "key": "crossBoundaryRecorded",
+          "optional": true
+        }
+      ],
+      "addedRequired": [],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": true
+    },
+    {
+      "type": "EngineAttestation",
+      "at": [
+        "src/core/tool-policy.ts:273"
+      ],
+      "added": [
+        "bindingRefusal"
+      ],
+      "addedDetail": [
+        {
+          "key": "bindingRefusal",
+          "optional": true
+        }
+      ],
+      "addedRequired": [],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": true
+    },
+    {
+      "type": "ExecutionEnvFactoryContext",
+      "at": [
+        "src/core/remote-env.ts:498"
+      ],
+      "added": [
+        "resumeWorkspace"
+      ],
+      "addedDetail": [
+        {
+          "key": "resumeWorkspace",
+          "optional": true
+        }
+      ],
+      "addedRequired": [],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": true
+    },
+    {
+      "type": "MaybeCompactOptions",
+      "at": [
+        "src/core/auto-compaction.ts:340"
+      ],
+      "added": [
+        "workingFileAttachments.restore",
+        "workingFileAttachments.undelivered"
+      ],
+      "addedDetail": [
+        {
+          "key": "workingFileAttachments.restore",
+          "optional": false
+        },
+        {
+          "key": "workingFileAttachments.undelivered",
+          "optional": true
+        }
+      ],
+      "addedRequired": [
+        "workingFileAttachments.restore"
+      ],
+      "removed": [
+        "workingFileAttachments.readFile"
+      ],
+      "breaking": true,
+      "criteriaCovered": false
+    },
+    {
+      "type": "ParentSpecSeat",
+      "at": [
+        "src/core/parent-spec-seat.ts:81"
+      ],
+      "added": [
+        "memory",
+        "memory.enabled"
+      ],
+      "addedDetail": [
+        {
+          "key": "memory",
+          "optional": true
+        },
+        {
+          "key": "memory.enabled",
+          "optional": false
+        }
+      ],
+      "addedRequired": [],
+      "removed": [
+        "memoryOff"
+      ],
+      "breaking": true,
+      "criteriaCovered": true
+    },
+    {
+      "type": "PendingAction",
+      "at": [
+        "src/core/checkpoint-store.ts:976"
+      ],
+      "added": [
+        "tool_approval.targets"
+      ],
+      "addedDetail": [
+        {
+          "key": "tool_approval.targets",
+          "optional": true
+        }
+      ],
+      "addedRequired": [],
+      "removed": [
+        "tool_approval.rosterDigest"
+      ],
+      "breaking": true,
+      "criteriaCovered": false
+    },
+    {
+      "type": "PermissionResult",
+      "at": [
+        "src/core/tool-policy.ts:515"
+      ],
+      "added": [
+        "ask.crossBoundaryMandated"
+      ],
+      "addedDetail": [
+        {
+          "key": "ask.crossBoundaryMandated",
+          "optional": true
+        }
+      ],
+      "addedRequired": [],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "type": "PreToolUseResult",
+      "at": [
+        "src/core/hooks.ts:678"
+      ],
+      "added": [
+        "ask.crossBoundaryMandated"
+      ],
+      "addedDetail": [
+        {
+          "key": "ask.crossBoundaryMandated",
+          "optional": true
+        }
+      ],
+      "addedRequired": [],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "type": "RegisterBackgroundAgentInput",
+      "at": [
+        "src/core/task-registry-shared.ts:1312"
+      ],
+      "via": "TaskRegistry.RegisterBackgroundAgentInput",
+      "added": [
+        "crossBoundaryTree"
+      ],
+      "addedDetail": [
+        {
+          "key": "crossBoundaryTree",
+          "optional": true
+        }
+      ],
+      "addedRequired": [],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "type": "ResolvedOutcome",
+      "at": [
+        "src/core/checkpoint-store.ts:1821"
+      ],
+      "added": [
+        "feedback"
+      ],
+      "addedDetail": [
+        {
+          "key": "feedback",
+          "optional": true
+        }
+      ],
+      "addedRequired": [],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": true
+    },
+    {
+      "type": "ResumeOutcome",
+      "at": [
+        "src/core/checkpoint-store.ts:798"
+      ],
+      "added": [
+        "policy_ask.feedback"
+      ],
+      "addedDetail": [
+        {
+          "key": "policy_ask.feedback",
+          "optional": true
+        }
+      ],
+      "addedRequired": [],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "type": "RunInternals",
+      "at": [
+        "src/core/runner/contracts.ts:1458"
+      ],
+      "added": [
+        "crossBoundaryTree"
+      ],
+      "addedDetail": [
+        {
+          "key": "crossBoundaryTree",
+          "optional": true
+        }
+      ],
+      "addedRequired": [],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "type": "RunWorkflowOptions",
+      "at": [
+        "src/orchestration/workflow.ts:882"
+      ],
+      "added": [
+        "crossBoundaryTree"
+      ],
+      "addedDetail": [
+        {
+          "key": "crossBoundaryTree",
+          "optional": true
+        }
+      ],
+      "addedRequired": [],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "type": "RunWorkflowToolDeps",
+      "at": [
+        "src/orchestration/run-workflow-tool.ts:358"
+      ],
+      "added": [
+        "crossBoundaryTree"
+      ],
+      "addedDetail": [
+        {
+          "key": "crossBoundaryTree",
+          "optional": true
+        }
+      ],
+      "addedRequired": [],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "type": "RunnerDeps",
+      "at": [
+        "src/core/runner-deps.ts:105"
+      ],
+      "added": [
+        "crossBoundaryPosture"
+      ],
+      "addedDetail": [
+        {
+          "key": "crossBoundaryPosture",
+          "optional": true
+        }
+      ],
+      "addedRequired": [],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": true
+    },
+    {
+      "type": "TaskRegistry",
+      "at": [
+        "src/core/task-registry.ts:485"
+      ],
+      "added": [
+        "boundaryLegsOf"
+      ],
+      "addedDetail": [
+        {
+          "key": "boundaryLegsOf",
+          "optional": true
+        }
+      ],
+      "addedRequired": [],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "type": "ToolCatalogEntry",
+      "at": [
+        "src/core/tool-face.ts:298"
+      ],
+      "added": [],
+      "addedDetail": [],
+      "addedRequired": [],
+      "removed": [
+        "protocolUnderCeiling"
+      ],
+      "breaking": true,
+      "criteriaCovered": false
+    },
+    {
+      "type": "ToolExecuteContext",
+      "at": [
+        "src/core/tool-spec.ts:654"
+      ],
+      "added": [
+        "crossBoundaryTreeForChildren"
+      ],
+      "addedDetail": [
+        {
+          "key": "crossBoundaryTreeForChildren",
+          "optional": true
+        }
+      ],
+      "addedRequired": [],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "type": "ToolFaceDeclaration",
+      "at": [
+        "src/core/tool-face.ts:225"
+      ],
+      "added": [
+        "boundaryLegs"
+      ],
+      "addedDetail": [
+        {
+          "key": "boundaryLegs",
+          "optional": false
+        }
+      ],
+      "addedRequired": [
+        "boundaryLegs"
+      ],
+      "removed": [],
+      "breaking": true,
+      "criteriaCovered": false
+    },
+    {
+      "type": "ToolGateInput",
+      "at": [
+        "src/core/hooks.ts:886"
+      ],
+      "via": "runToolGate.ToolGateInput",
+      "added": [
+        "crossBoundaryCheck"
+      ],
+      "addedDetail": [
+        {
+          "key": "crossBoundaryCheck",
+          "optional": true
+        }
+      ],
+      "addedRequired": [],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "type": "ToolSpec",
+      "at": [
+        "src/core/tool-spec.ts:131"
+      ],
+      "added": [
+        "boundaryLegs",
+        "boundaryLegsFor"
+      ],
+      "addedDetail": [
+        {
+          "key": "boundaryLegs",
+          "optional": true
+        },
+        {
+          "key": "boundaryLegsFor",
+          "optional": true
+        }
+      ],
+      "addedRequired": [],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "type": "TraceEvent",
+      "at": [
+        "src/core/trace.ts:95"
+      ],
+      "added": [
+        "permission.cross_boundary_taint.governed",
+        "permission.cross_boundary_taint.kind",
+        "permission.cross_boundary_taint.phase",
+        "permission.cross_boundary_taint.runId",
+        "permission.cross_boundary_taint.taint",
+        "permission.cross_boundary_taint.taskId",
+        "permission.cross_boundary_taint.toolCallId",
+        "permission.cross_boundary_taint.toolName",
+        "permission.cross_boundary_taint.ts",
+        "permission.cross_boundary_taint.version"
+      ],
+      "addedDetail": [
+        {
+          "key": "permission.cross_boundary_taint.governed",
+          "optional": false
+        },
+        {
+          "key": "permission.cross_boundary_taint.kind",
+          "optional": false
+        },
+        {
+          "key": "permission.cross_boundary_taint.phase",
+          "optional": false
+        },
+        {
+          "key": "permission.cross_boundary_taint.runId",
+          "optional": false
+        },
+        {
+          "key": "permission.cross_boundary_taint.taint",
+          "optional": false
+        },
+        {
+          "key": "permission.cross_boundary_taint.taskId",
+          "optional": false
+        },
+        {
+          "key": "permission.cross_boundary_taint.toolCallId",
+          "optional": true
+        },
+        {
+          "key": "permission.cross_boundary_taint.toolName",
+          "optional": true
+        },
+        {
+          "key": "permission.cross_boundary_taint.ts",
+          "optional": false
+        },
+        {
+          "key": "permission.cross_boundary_taint.version",
+          "optional": false
+        }
+      ],
+      "addedRequired": [],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "type": "UserMessageAttachment",
+      "at": [
+        "src/engine/llm/types.ts:501"
+      ],
+      "added": [
+        "origin"
+      ],
+      "addedDetail": [
+        {
+          "key": "origin",
+          "optional": true
+        }
+      ],
+      "addedRequired": [],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "type": "WordExpansion",
+      "at": [
+        "src/shell/lex.ts:138"
+      ],
+      "via": "ShellReadSegment.argv.pieces.expansion",
+      "added": [
+        "inner"
+      ],
+      "addedDetail": [
+        {
+          "key": "inner",
+          "optional": true
+        }
+      ],
+      "addedRequired": [],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    }
+  ],
+  "typeKeysUnreadableArms": [
+    {
+      "type": "ImportedSettingsLayer",
+      "at": "src/core/permission-rule-consent.ts:1577",
+      "reasons": [
+        "the two refs do not name this type's union arms the same way (flat -> no union read), so the delta below is stated at UNION level, with arm prefixes dropped — a key that moved between arms without leaving the union is not visible in it"
+      ]
+    },
+    {
+      "type": "PersistedRuleMatch",
+      "at": "src/core/permission-rule-model.ts:360",
+      "reasons": [
+        "the two refs do not name this type's union arms the same way (flat -> no union read), so the delta below is stated at UNION level, with arm prefixes dropped — a key that moved between arms without leaving the union is not visible in it"
+      ]
+    },
+    {
+      "type": "RuleAddOrigin",
+      "at": "src/core/permission-rule-model.ts:411",
+      "reasons": [
+        "the two refs do not name this type's union arms the same way (flat -> no union read), so the delta below is stated at UNION level, with arm prefixes dropped — a key that moved between arms without leaving the union is not visible in it"
+      ]
+    },
+    {
+      "type": "RuleApprovalKind",
+      "at": "src/core/permission-rule-consent.ts:81",
+      "reasons": [
+        "the two refs do not name this type's union arms the same way (flat -> no union read), so the delta below is stated at UNION level, with arm prefixes dropped — a key that moved between arms without leaving the union is not visible in it"
+      ]
+    }
+  ],
+  "typeKeysFlattenedCount": 232,
+  "signatures": [
+    {
+      "name": "MaybeCompactOptions.onApplied",
+      "at": [
+        "src/core/auto-compaction.ts:578"
+      ],
+      "from": [
+        "(attachedComplete: ReadonlyArray<{ path: string; content: string; }>, preserveReadState?: ReadonlyArray<string>): void"
+      ],
+      "to": [
+        "(preserveReadState: ReadonlyArray<string>): void"
+      ],
+      "changes": [
+        {
+          "aspect": "param",
+          "detail": "param 1 `preserveReadState` type changed, direction not read: ReadonlyArray<[{ path: string; content: string; } -> string]>",
+          "breaking": true,
+          "uncertain": true
+        },
+        {
+          "aspect": "param",
+          "detail": "-param `preserveReadState?: ReadonlyArray<string>`",
+          "breaking": true
+        }
+      ],
+      "uncertain": "param 1 `preserveReadState` type changed, direction not read: ReadonlyArray<[{ path: string; content: string; } -> string]> — the direction of a type change is not read syntactically, so it is reported breaking: check whether existing call sites still type-check before writing the BREAKING line",
+      "breaking": true,
+      "criteriaCovered": false
+    },
+    {
+      "name": "createAllowDenyPolicy",
+      "at": [
+        "src/core/tool-policy.ts:1422"
+      ],
+      "from": [
+        "(opts: { allow?: string[]; deny?: string[]; onInvalidName?: \"throw\" | \"skip\"; onInvalidNameIssue?: (issue: { entry: string; list: \"allow\" | \"deny\"; message: string; }) => void; scope?: \"grant\" | \"narrowing\"; }): NamedToolPolicy"
+      ],
+      "to": [
+        "(opts: { allow?: string[]; deny?: string[]; onInvalidName?: \"throw\" | \"skip\"; onInvalidNameIssue?: (issue: { entry: string; list: \"allow\" | \"deny\"; message: string; }) => void; }): NamedToolPolicy"
+      ],
+      "changes": [
+        {
+          "aspect": "param",
+          "detail": "param 1 `opts` type changed, direction not read: …ge: string; }) => void; [scope?: \"grant\" | \"narrowing\";  -> ]}",
+          "breaking": true,
+          "uncertain": true
+        }
+      ],
+      "uncertain": "param 1 `opts` type changed, direction not read: …ge: string; }) => void; [scope?: \"grant\" | \"narrowing\";  -> ]} — the direction of a type change is not read syntactically, so it is reported breaking: check whether existing call sites still type-check before writing the BREAKING line",
+      "breaking": true,
+      "criteriaCovered": false
+    },
+    {
+      "name": "parkedToolIdentity",
+      "at": [
+        "src/core/tool-roster.ts:269"
+      ],
+      "from": [
+        "(roster: ToolRoster | undefined, toolName: string): { capabilityId?: string; contractId?: string; shapeDigest?: string; implementationRevision?: string; rosterDigest?: string; }"
+      ],
+      "to": [
+        "(roster: ToolRoster | undefined, toolName: string): Partial<ToolIdentity>"
+      ],
+      "changes": [
+        {
+          "aspect": "returns",
+          "detail": "return type [{ capabilityId?: string; contractId?: string; shapeDigest?: string; i… -> Partial<ToolIdentity>]",
+          "breaking": true
+        }
+      ],
+      "breaking": true,
+      "criteriaCovered": false
+    },
+    {
+      "name": "toolFaceProblem",
+      "at": [
+        "src/core/runner/tool-face-overlay.ts:61"
+      ],
+      "from": [
+        "(face: McpToolFace, schema: AgentTool[\"parameters\"], tool?: { readonly toolName: string; }): string | undefined"
+      ],
+      "to": [
+        "(face: McpToolFace, schema: AgentTool[\"parameters\"], tool?: FaceTool): string | undefined"
+      ],
+      "changes": [
+        {
+          "aspect": "param",
+          "detail": "param 3 `tool` type changed, direction not read: [{ readonly toolName: string; } -> FaceTool]",
+          "breaking": true,
+          "uncertain": true
+        }
+      ],
+      "uncertain": "param 3 `tool` type changed, direction not read: [{ readonly toolName: string; } -> FaceTool] — the direction of a type change is not read syntactically, so it is reported breaking: check whether existing call sites still type-check before writing the BREAKING line",
+      "breaking": true,
+      "criteriaCovered": false
+    }
+  ],
+  "declarationMoves": [
+    {
+      "name": "DECLARATION_PATH_RULES",
+      "kind": "variable",
+      "onSurface": true,
+      "from": [
+        "src/core/mcp-server-spec.ts",
+        "src/core/types.ts"
+      ],
+      "to": [
+        "src/core/mcp-server-spec.ts",
+        "src/core/types.ts",
+        "src/index.ts"
+      ]
+    },
+    {
+      "name": "DeclarationFault",
+      "kind": "interface",
+      "onSurface": true,
+      "from": [
+        "src/core/mcp-server-spec.ts",
+        "src/core/types.ts"
+      ],
+      "to": [
+        "src/core/mcp-server-spec.ts",
+        "src/core/types.ts",
+        "src/index.ts"
+      ]
+    },
+    {
+      "name": "DeclarationPathRule",
+      "kind": "interface",
+      "onSurface": true,
+      "from": [
+        "src/core/mcp-server-spec.ts",
+        "src/core/types.ts"
+      ],
+      "to": [
+        "src/core/mcp-server-spec.ts",
+        "src/core/types.ts",
+        "src/index.ts"
+      ]
+    },
+    {
+      "name": "DeclarationRead",
+      "kind": "type",
+      "onSurface": true,
+      "from": [
+        "src/core/mcp-server-spec.ts",
+        "src/core/types.ts"
+      ],
+      "to": [
+        "src/core/mcp-server-spec.ts",
+        "src/core/types.ts",
+        "src/index.ts"
+      ]
+    },
+    {
+      "name": "MAX_SHELL_READ_CHARS",
+      "kind": "variable",
+      "onSurface": true,
+      "from": [
+        "src/core/shell-lexer.ts",
+        "src/index.ts"
+      ],
+      "to": [
+        "src/core/shell-run-candidates.ts",
+        "src/index.ts"
+      ]
+    },
+    {
+      "name": "MintedAttachmentFrame",
+      "kind": "interface",
+      "onSurface": true,
+      "from": [
+        "src/core/user-attachment.ts"
+      ],
+      "to": [
+        "src/core/user-attachment.ts",
+        "src/index.ts"
+      ]
+    },
+    {
+      "name": "SHELL_WRAPPER_TABLE",
+      "kind": "variable",
+      "onSurface": true,
+      "from": [
+        "src/core/shell-lexer.ts",
+        "src/core/shell-wrapper-table.ts",
+        "src/index.ts"
+      ],
+      "to": [
+        "src/core/shell-run-candidates.ts",
+        "src/core/shell-wrapper-table.ts",
+        "src/index.ts"
+      ]
+    },
+    {
+      "name": "ShellCommandShape",
+      "kind": "interface",
+      "onSurface": true,
+      "from": [
+        "src/core/shell-lexer.ts",
+        "src/index.ts"
+      ],
+      "to": [
+        "src/core/shell-run-candidates.ts",
+        "src/index.ts"
+      ]
+    },
+    {
+      "name": "ShellRedirection",
+      "kind": "interface",
+      "onSurface": true,
+      "from": [
+        "src/core/shell-lexer.ts",
+        "src/index.ts"
+      ],
+      "to": [
+        "src/core/shell-run-candidates.ts",
+        "src/index.ts"
+      ]
+    },
+    {
+      "name": "ShellSegment",
+      "kind": "interface",
+      "onSurface": true,
+      "from": [
+        "src/core/shell-lexer.ts",
+        "src/index.ts"
+      ],
+      "to": [
+        "src/core/shell-run-candidates.ts",
+        "src/index.ts"
+      ]
+    },
+    {
+      "name": "ShellWord",
+      "kind": "interface",
+      "onSurface": true,
+      "from": [
+        "src/core/shell-lexer.ts",
+        "src/index.ts"
+      ],
+      "to": [
+        "src/core/shell-run-candidates.ts",
+        "src/index.ts"
+      ]
+    },
+    {
+      "name": "ShellWrapperName",
+      "kind": "type",
+      "onSurface": true,
+      "from": [
+        "src/core/shell-lexer.ts",
+        "src/core/shell-wrapper-table.ts",
+        "src/index.ts"
+      ],
+      "to": [
+        "src/core/shell-run-candidates.ts",
+        "src/core/shell-wrapper-table.ts",
+        "src/index.ts"
+      ]
+    },
+    {
+      "name": "assertForkTarget",
+      "kind": "function",
+      "onSurface": true,
+      "from": [
+        "src/engine/session/repo-utils.ts",
+        "src/internal/harness.ts"
+      ],
+      "to": [
+        "src/engine/session/repo-utils.ts",
+        "src/index.ts",
+        "src/internal/harness.ts"
+      ]
+    },
+    {
+      "name": "canonicalJsonStringify",
+      "kind": "function",
+      "onSurface": true,
+      "from": [
+        "src/core/memory-engine/file-backend.ts"
+      ],
+      "to": [
+        "src/core/canonical-json.ts",
+        "src/index.ts"
+      ]
+    },
+    {
+      "name": "findToolByName",
+      "kind": null,
+      "onSurface": false,
+      "from": [
+        "src/engine/llm/validation.ts"
+      ],
+      "to": [
+        "src/engine/llm/validation.ts",
+        "src/internal/llm.ts"
+      ]
+    },
+    {
+      "name": "forkRowCells",
+      "kind": "function",
+      "onSurface": true,
+      "from": [
+        "src/engine/session/repo-utils.ts",
+        "src/internal/harness.ts"
+      ],
+      "to": [
+        "src/engine/session/repo-utils.ts",
+        "src/index.ts",
+        "src/internal/harness.ts"
+      ]
+    },
+    {
+      "name": "incarnationCell",
+      "kind": "function",
+      "onSurface": true,
+      "from": [
+        "src/engine/session/repo-utils.ts",
+        "src/internal/harness.ts"
+      ],
+      "to": [
+        "src/engine/session/repo-utils.ts",
+        "src/index.ts",
+        "src/internal/harness.ts"
+      ]
+    },
+    {
+      "name": "isFullyReadable",
+      "kind": "function",
+      "onSurface": true,
+      "from": [
+        "src/core/shell-lexer.ts",
+        "src/index.ts"
+      ],
+      "to": [
+        "src/core/shell-run-candidates.ts",
+        "src/index.ts"
+      ]
+    },
+    {
+      "name": "mcpStartupTimeoutMs",
+      "kind": "function",
+      "onSurface": true,
+      "from": [
+        "src/core/mcp.ts"
+      ],
+      "to": [
+        "src/core/mcp.ts",
+        "src/index.ts"
+      ]
+    },
+    {
+      "name": "readShellCommand",
+      "kind": "function",
+      "onSurface": true,
+      "from": [
+        "src/core/shell-lexer.ts",
+        "src/index.ts"
+      ],
+      "to": [
+        "src/core/shell-run-candidates.ts",
+        "src/index.ts"
+      ]
+    },
+    {
+      "name": "receiveDeclaration",
+      "kind": "function",
+      "onSurface": true,
+      "from": [
+        "src/core/mcp-server-spec.ts",
+        "src/core/types.ts"
+      ],
+      "to": [
+        "src/core/mcp-server-spec.ts",
+        "src/core/types.ts",
+        "src/index.ts"
+      ]
+    },
+    {
+      "name": "sameOrgPolicyContent",
+      "kind": "function",
+      "onSurface": true,
+      "from": [
+        "src/core/permission-rule-org.ts"
+      ],
+      "to": [
+        "src/core/permission-rule-org.ts",
+        "src/index.ts"
+      ]
+    }
+  ],
+  "mintMoves": [
+    {
+      "code": "resume.tool_unavailable",
+      "from": [
+        "src/agents/subagent.ts"
+      ],
+      "to": [
+        "src/agents/subagent.ts",
+        "src/core/approval-object.ts"
+      ]
+    }
+  ],
+  "criteriaObserves": [
+    {
+      "kind": "engineNoticeCode",
+      "name": "classifier.denial_limit",
+      "assertions": [
+        "G5.a"
+      ]
+    },
+    {
+      "kind": "engineNoticeCode",
+      "name": "config.cross_boundary_record_unwritten",
+      "assertions": [
+        "G12.a"
+      ]
+    },
+    {
+      "kind": "engineNoticeCode",
+      "name": "config.tool_face_invalid",
+      "assertions": [
+        "G8.a"
+      ]
+    },
+    {
+      "kind": "engineNoticeCode",
+      "name": "delegation.ask_unresolvable",
+      "assertions": [
+        "G5.a"
+      ]
+    },
+    {
+      "kind": "taskEventField",
+      "name": "tool_end.errorCode",
+      "assertions": [
+        "G4.a",
+        "G9.a"
+      ]
+    },
+    {
+      "kind": "taskEventField",
+      "name": "tool_end.gate",
+      "assertions": [
+        "G4.a"
+      ]
+    },
+    {
+      "kind": "taskEventField",
+      "name": "tool_end.isError",
+      "assertions": [
+        "G4.a",
+        "G5.a",
+        "G6.a",
+        "G9.a",
+        "G12.a"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "AskClassification.askFace",
+      "assertions": [
+        "G2.a"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "AskClassification.classes",
+      "assertions": [
+        "G2.a"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "AskRequest.requiresRealApproval",
+      "assertions": [
+        "G3.a"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "CheckpointError.detail",
+      "assertions": [
+        "G1.a",
+        "G8.a"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "CheckpointState.crossBoundaryRecorded",
+      "assertions": [
+        "G12.a"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "EngineAttestation.bindingRefusal",
+      "assertions": [
+        "G5.a"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "EngineAttestation.inputDigest",
+      "assertions": [
+        "G5.a"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "ExecutionEnvFactoryContext.resumeWorkspace",
+      "assertions": [
+        "G10.a"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "FileError.code",
+      "assertions": [
+        "G10.a"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "GateOutcome.disposition",
+      "assertions": [
+        "G2.a",
+        "G3.a",
+        "G5.a",
+        "G6.a"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "ModEventRow.side",
+      "assertions": [
+        "G11.a"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "ParentSpecSeat.memory",
+      "assertions": [
+        "G7.a"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "PendingAction.targets",
+      "assertions": [
+        "G4.a"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "ResolvedOutcome.feedback",
+      "assertions": [
+        "G1.a"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "ResumeOutcome.feedback",
+      "assertions": [
+        "G1.a"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "RunnerDeps.crossBoundaryPosture",
+      "assertions": [
+        "G12.a"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "TaskResult.terminal.code",
+      "assertions": [
+        "G8.a"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "VmLifecycleOptions.priorHandle",
+      "assertions": [
+        "G10.a"
+      ]
+    }
+  ],
+  "consumersHint": {
+    "cli": [
+      "ASK_CLASSES",
+      "CHECKPOINT_CONFIG_REFUSAL_CODES",
+      "CheckpointState",
+      "ENGINE_NOTICE_CODES",
+      "EngineAttestation",
+      "IMPORTED_SETTINGS_LAYERS",
+      "LexedRedirect",
+      "MaybeCompactOptions",
+      "PARSE_FAILURE_REASONS",
+      "PERSISTED_RULE_MANDATES",
+      "ParentSpecSeat",
+      "PendingAction",
+      "PermissionResult",
+      "PreToolUseResult",
+      "REQUIREMENT_WORDS",
+      "RULE_OFFER_BATCH_MEMBER_KINDS",
+      "RegisterBackgroundAgentInput",
+      "ResumeOutcome",
+      "RunInternals",
+      "RunWorkflowOptions",
+      "RunWorkflowToolDeps",
+      "RunnerDeps",
+      "TaskRegistry",
+      "ToolCatalogEntry",
+      "ToolExecuteContext",
+      "ToolFaceDeclaration",
+      "ToolGateInput",
+      "ToolSpec",
+      "TraceEvent",
+      "UNCOVERED_SEGMENT_REASONS",
+      "UNRESOLVED_REASONS",
+      "WordExpansion",
+      "createAllowDenyPolicy",
+      "readDenyRowAnchor"
+    ],
+    "server": [
+      "ASK_CLASSES",
+      "BackgroundAgentTaskHandle",
+      "CHECKPOINT_CONFIG_REFUSAL_CODES",
+      "CheckpointState",
+      "DECLARATION_PATH_RULES",
+      "EDITED_RULE_BREADTH_WARNING_CODES",
+      "ENGINE_NOTICE_CODES",
+      "EditedRuleBreadthWarning",
+      "ExecutionEnvFactoryContext",
+      "FileErrorCode",
+      "FileHistoryError",
+      "PERSISTED_RULE_MANDATES",
+      "PERSISTED_RULE_MATCHES",
+      "ParentSpecSeat",
+      "PendingAction",
+      "PermissionResult",
+      "PreToolUseResult",
+      "RULE_APPROVAL_RECORD_SCHEMA",
+      "RULE_OFFER_BATCH_MEMBER_KINDS",
+      "ResolvedOutcome",
+      "ResumeOutcome",
+      "RunInternals",
+      "RunWorkflowOptions",
+      "RunWorkflowToolDeps",
+      "RunnerDeps",
+      "TaskRegistry",
+      "ToolExecuteContext",
+      "ToolFaceDeclaration",
+      "ToolGateInput",
+      "ToolSpec",
+      "TraceEvent",
+      "UNCOVERED_SEGMENT_REASONS",
+      "UncoveredSegmentDetail",
+      "WordExpansion",
+      "canonicalJsonStringify",
+      "createAllowDenyPolicy",
+      "mcpStartupTimeoutMs",
+      "receiveDeclaration",
+      "toolFaceProblem"
+    ],
+    "sdk": [
+      "ASK_CLASSES",
+      "CHECKPOINT_CONFIG_REFUSAL_CODES",
+      "ENGINE_NOTICE_CODES",
+      "FileErrorCode",
+      "PERSISTED_RULE_MANDATES",
+      "PERSISTED_RULE_MATCHES",
+      "PendingAction",
+      "PermissionResult",
+      "PreToolUseResult",
+      "RULE_OFFER_BATCH_MEMBER_KINDS",
+      "RunnerDeps",
+      "TaskRegistry",
+      "TraceEvent",
+      "UNCOVERED_SEGMENT_REASONS"
+    ],
+    "note": "scanned cli@2b577d42 server@5df75153 sdk@accb19e — a name listed is MENTIONED there today, which is evidence of consumption, not proof of it. Ledger files (**/docs/core-consumption/**, **/docs/wire-consumption/**, **/*LEDGER*.json) are not evidence of use — server: 10 name(s) matched ONLY in bookkeeping files and were set aside (AskClassification, EngineAttestation, MaybeCompactOptions, REQUIREMENT_WORDS, RegisterBackgroundAgentInput, ToolCatalogEntry, UserMessageAttachment, judgeParkedToolIdentity, parkedToolIdentity, readDenyRowAnchor)"
+  },
+  "breakingCount": 14,
+  "breakingItems": [
+    "closed set lost members: EditedRuleBreadthWarning.code -broad_prefix,compound_prefix",
+    "closed set lost members: FileHistoryError.code -aborted,adopt_failed,conflict,not_found,restore_failed,snapshot_failed,track_failed,unsupported_format",
+    "closed set lost members: UncoveredSegmentDetail.reason -cap_overflow,no_rule_form,redirection",
+    "export removed: judgeParkedToolIdentity (function)",
+    "signature changed: MaybeCompactOptions.onApplied — param 1 `preserveReadState` type changed, direction not read: ReadonlyArray<[{ path: string; content: string; } -> string]>; -param `preserveReadState?: ReadonlyArray<string>`",
+    "signature changed: createAllowDenyPolicy — param 1 `opts` type changed, direction not read: …ge: string; }) => void; [scope?: \"grant\" | \"narrowing\";  -> ]}",
+    "signature changed: parkedToolIdentity — return type [{ capabilityId?: string; contractId?: string; shapeDigest?: string; i… -> Partial<ToolIdentity>]",
+    "signature changed: toolFaceProblem — param 3 `tool` type changed, direction not read: [{ readonly toolName: string; } -> FaceTool]",
+    "type gained required keys: MaybeCompactOptions +workingFileAttachments.restore",
+    "type gained required keys: ToolFaceDeclaration +boundaryLegs",
+    "type lost keys: MaybeCompactOptions -workingFileAttachments.readFile",
+    "type lost keys: ParentSpecSeat -memoryOff",
+    "type lost keys: PendingAction -tool_approval.rosterDigest",
+    "type lost keys: ToolCatalogEntry -protocolUnderCeiling"
+  ]
+}