@yunhozz/arc 0.1.9 → 0.2.0

package/claude/skill/references/planning.md

@@ -42,7 +42,7 @@ and records the actual absolute workspace/repository, branch or detached HEAD, H
 explicit choice and preparation evidence, and absolute document paths inside that target. Planner drafts for that
 verified workspace; Orchestrator saves directly in the selected target. Missing or mismatched evidence stops the
 affected drafting or save and is reported to Orchestrator. Planned scope and paths do not establish actual preparation.
-Initial target preparation does not authorize Coder; the complete handoff gate still applies.
+Initial target preparation does not authorize Implementer; the complete handoff gate still applies.
 
 Orchestrator classifies scope before implementation. The Orchestrator direct path for small tasks is defined only in
 [handoff](handoff.md#orchestrator-direct-path-for-small-tasks); follow it there and stop and reclassify if scope or risk changes.
@@ -75,6 +75,15 @@ Initial design, required spec approval, and formal plan drafting/approval remain
 Allow additional Planner calls for substantive omissions or user-approved scope/evidence changes. There is no fixed
 call cap; never accept an incomplete draft to minimize calls. Do not add call-count conditions to Planner profiles.
 
+The complete initial brief identifies original user requirements, criteria IDs, approved decisions and open decisions;
+current behavior and connected source, generated, runtime, installer and documentation surfaces; conflicting rules and
+resolution direction; exact current-stage deliverable and absolute output path. Keep the shared brief's fixed field order
+in [coordination](coordination.md). Link accessible evidence and needed ranges instead of full dialogue or raw logs.
+Consolidated feedback contains changed fields only and marks remaining fields `unchanged` relative to the received brief.
+Do not call Planner again for already resolved questions. Missing target preparation or required decisions holds formal
+drafting; initial design proposals may still precede target selection. Written-spec approval precedes dependent plan drafting.
+
+
 ## Design path and plan depth
 
 Record design and plan depth separately from verification risk. Risk determines checks and review, not the design path;
@@ -86,12 +95,12 @@ a bounded path or document omission does not imply low risk, and architectural d
    answers/revisions, and obtains approvals; Orchestrator never runs brainstorming or writing-plans itself (SKILL.md
    Role gate); the direct path uses only a scope record.
 2. Spike: apply Probe scope above; distinguish probe-only authorization from a sufficiently specified combined scope.
-   Bounded: approve a short design before Coder or an Orchestrator direct edit (Planner's design before
-   Coder; a direct edit uses only an approved scope record). Architectural: approve the design, then Planner returns a
+   Bounded: approve a short design before Implementer or an Orchestrator direct edit (Planner's design before
+   Implementer; a direct edit uses only an approved scope record). Architectural: approve the design, then Planner returns a
    complete spec draft and self-review; Orchestrator integrates, saves (user's path or
    `docs/superpowers/specs/YYYY-MM-DD-<topic>-design.md`), self-reviews, and obtains written-spec approval before
    implementation planning. Planner is read-only and cannot request approval.
-3. After approved design/spec and before Coder, Orchestrator assesses plan depth separately from file count, LOC,
+3. After approved design/spec and before Implementer, Orchestrator assesses plan depth separately from file count, LOC,
    or bounded scope. Architectural work always uses `writing-plans` and a written plan approval, regardless of locality,
    risk, or size. For Bounded work skip the plan only for one local change with no dependent stages, cross-component
    shared state, lifecycle or integration-order concerns, and one focused verification path; otherwise require a draft.
@@ -99,9 +108,9 @@ a bounded path or document omission does not imply low risk, and architectural d
    this assessment, including any Bounded written spec requirement, recorded in the brief.
 4. Record dependencies and any plan-depth rationale in the brief. Planner returns the complete proportional plan,
    assumptions/open decisions, verification requirements, and self-review. Orchestrator integrates, saves to the user's
-   path or `docs/superpowers/plans/YYYY-MM-DD-<feature-name>.md`, self-reviews, and obtains plan approval before Coder.
+   path or `docs/superpowers/plans/YYYY-MM-DD-<feature-name>.md`, self-reviews, and obtains plan approval before Implementer.
    Planner cannot save, implement, or request approval.
-5. Every Coder first start and restart requires all applicable approvals and the Common handoff gate (SKILL.md,
+5. Every Implementer first start and restart requires all applicable approvals and the Common handoff gate (SKILL.md,
    handoff). Non-behavior configuration/documentation may skip inapplicable design/planning stages but not the gate.
 
 When Orchestrator's recorded plan-depth judgment requires a Bounded written spec, record that and its scope,
@@ -129,12 +138,12 @@ and approved obligations. No-change, hold, and resume follow [commit](commit.md)
 
 ## Dependency and readiness record
 
-After plan approval and before the first Coder assignment, Orchestrator records all top-level task IDs in the
+After plan approval and before the first Implementer assignment, Orchestrator records all top-level task IDs in the
 accessible canonical handoff record, linked to the approved plan version. For each task record explicit and implicit
 predecessors, required inputs, outputs and shared contracts, owned files, conflicting shared resources, required
 checks/QA path, ready/held status and reasons. Record the initial ready batch and capacity/serialization reasons.
 Analyze shared APIs, contracts, generated artifacts and resources even when tasks edit different files. Unresolved
-shared contracts or insufficient dependency information block the affected tasks; same-file concurrent Coder edits
+shared contracts or insufficient dependency information block the affected tasks; same-file concurrent Implementer edits
 are blocked even for different lines. Do not infer independence from file separation or plan listing order.
 
 A task is ready only when all applicable approvals and execution preparation are complete, required inputs/contracts
@@ -142,7 +151,7 @@ are available and settled, predecessors have required evidence and Orchestrator
 commits (or accepted no-change records), ownership/resources do not conflict, its required check/QA path is available,
 and a subagent slot exists under both the configured ARC full-tree cap shared by all roles and any lower actual runtime
 limit (see [limits](limits.md)). Report runtime limits; ARC's cap is not a claim of runtime capability. Start all ready
-independent tasks with fresh Coders concurrently within capacity; record each hold or serialization reason instead of
+independent tasks with fresh Implementers concurrently within capacity; record each hold or serialization reason instead of
 silently following list order. Preserve existing risk gates, risk-scaled QA/Reviewer timing and execution-target
 restrictions.
 
@@ -190,23 +199,23 @@ Claude v1 uses the current checkout or an approved task branch there; managed wo
 Normal order: initial design approval → execution-target choice → target preparation and verification →
 formal spec drafting (when required), saving and self-review → written-spec approval → formal plan drafting
 (when required), saving and self-review → individual plan approvals → complete applicable set → existing-commit
-verification and one batch docs commit of remaining approved documents → final Git verification → Coder handoff.
+verification and one batch docs commit of remaining approved documents → final Git verification → Implementer handoff.
 Written-spec approval precedes dependent plan drafting. On document-omission paths skip only the inapplicable document
-steps; preserve target choice, preparation, state/ownership checks and Coder gates.
+steps; preserve target choice, preparation, state/ownership checks and Implementer gates.
 
 While documents are being written, reviewed, or approved, do not stage documents or commit planning documents.
 Selection and initial target preparation happen before formal drafting; document completion is a staging/commit gate,
-not an initial preparation gate. An incomplete set or missing applicable approval blocks document commit and Coder,
-not the initial choice request. No early Coder work is authorized by approval of only some documents.
+not an initial preparation gate. An incomplete set or missing applicable approval blocks document commit and Implementer,
+not the initial choice request. No early Implementer work is authorized by approval of only some documents.
 
 This ARC defers the local brainstorming early spec commit: save and self-review the spec, obtain written-spec
 approval without committing, then write and approve all plans; commit the spec only in the final batch.
-`writing-plans` commit steps do not permit document commits during planning or start Coder.
+`writing-plans` commit steps do not permit document commits during planning or start Implementer.
 Do not modify external skills.
 
 | Path | Approvals and preparation |
 |---|---|
-| Spike probe | Approve question, method/scope, criteria, constraints; no spec/plan forced. If Coder runs the probe, pass the Common handoff gate after approval. Read-only investigation needs no gate. |
+| Spike probe | Approve question, method/scope, criteria, constraints; no spec/plan forced. If Implementer runs the probe, pass the Common handoff gate after approval. Read-only investigation needs no gate. |
 | Bounded, plan skipped | Approve the short design and record plan-skip criteria; select target, prepare any documents or record absence, pass the gate. |
 | Bounded, plan required | Approve short design and every required plan; a spec only when the depth judgment requires it, approved before dependent plans. One preparation batch, then the gate. |
 | Architectural | Approve design, then spec, then every plan; select and prepare the target before formal drafting; complete the set before batch commit, final verification, and the gate. |
@@ -215,14 +224,43 @@ Do not modify external skills.
 Apply Authorization and scope above to probe-only and combined requests; preserve required design/spec/plan gates.
 These gates add no new spec obligation for Spike, Bounded plan-skip, or non-behavior documentation/configuration paths.
 Document omission skips only document obligations, never target choice, Git/ownership checks,
-or handoff evidence. New scope found in planning requires reassessing the list and additional approvals before dependent drafting or commit; revised approved documents need renewed approval. New scope found during implementation stops dependent
-execution (a running Coder stops before edits dependent on new plans) until its documents, approvals,
-and preparation are complete; do not amend old commits to cover it.
+or handoff evidence. New scope found in planning requires reassessing the list and additional approvals before dependent drafting or commit; revised approved document bodies need renewed approval except mechanical execution records defined below. New scope found during implementation stops dependent
+execution (a running Implementer stops before edits dependent on new plans) until its documents, approvals,
+and preparation are complete. Then reflect the approved plan version in its original planning-document commit under the update contract below; never retroactively authorize work before actual approval.
+
+## Plan updates during execution
+
+Mechanical execution records may be recorded without new user approval: checkbox completion, actual results, evidence
+links and task completion state that preserve the approved execution contract. Record their classification, reason and
+actual recording time in the canonical handoff record. Required checks' removal, invented success, unsupported acceptance
+or scope changes mixed with a completion mark are not mechanical records.
+
+Changes to goals, task scope or boundaries, acceptance criteria, method, risk, dependencies or required verification
+require revised-version approval before affected work. Hold affected execution, obtain necessary design/spec/plan approvals
+in order, and complete target, ownership, checks and handoff preparation before resuming. Other approved body corrections
+follow the document-version approval rules; classify typos, paths, commands and explanations by their semantic effect.
+
+Both mechanical records and approved contract revisions amend the original planning-document commit at a safe checkpoint.
+Make no separate document commit or fixup commit, including for newly approved scope. Preserve implementation task commits.
+This history update does not make actual approval time retroactive: the latest plan in the original commit is not evidence
+that its contents were approved from the outset. Never use rewritten history to justify work started before approval.
+
+In the canonical handoff record preserve plan absolute/Git paths; before and after content hashes and versions; prior and
+revised approval references and actual times; change reason and classification; affected tasks and hold/preparation/resume
+evidence. For mechanical records explain why no new approval is needed and record the time. Preserve recoverable document
+contents, not hashes alone, and each old-to-new SHA mapping for the original document commit and descendant task commits.
+Do not overwrite earlier approval references or the contents they approved.
+
+Orchestrator alone performs the safe rewrite in [handoff-prep](handoff-prep.md#execution-time-plan-amendment) and
+[commit](commit.md#execution-time-plan-document-updates). Shared/published or unknown history, merges, unclear ownership,
+unexpected HEAD/dirty state and replay conflicts stop affected work. No force push or fallback document commit.
+After rewriting, connect evidence to the new state under [verification](verification.md#evidence-after-plan-history-rewrite).
+This contract adds no Git automation, runtime enforcement, authority or exemption from required checks/QA/Reviewer gates.
 
 ## Evidence refresh and limits
 
 Missing or mismatched evidence, unfinished approvals, unclear ownership, or unresolved failure blocks the affected save,
-target request, Git mutation, or Coder handoff; Orchestrator resolves it and reverifies.
+target request, Git mutation, or Implementer handoff; Orchestrator resolves it and reverifies.
 Reverify when scope, approved versions, paths, target, or Git state changes. Never treat an early save or commit as
 satisfying a gate or as approval; record the actual order and gaps. Structural checks prove only the written policy,
 not agent runtime compliance; without execution records for role returns, approvals, saves, and Git actions,
@@ -239,8 +277,26 @@ skill. Missing files stop the stage; report paths without global fallback. Keep
 [ARC role policy: contract begin]
 Generated from lib/policy/role-policy.json; do not edit this managed section manually.
 - [git.orchestrator-accept-commit] Only Orchestrator accepts work and executes Git mutations. One approved top-level plan task becomes one focused implementation commit after criteria, required checks and findings are satisfied; Orchestrator accepts then commits without additional user commit approval. Reports, passing checks and Reviewer opinions do not replace acceptance. Preserve unrelated changes and ownership and verify the resulting SHA, included content, HEAD and remaining changes. Existing small-task direct and plan-omission paths are unchanged.
-- [review.significant-no-plan] For significant/high-risk work without a plan: Coder → QA and required QA rechecks → Reviewer of the final full change → Orchestrator acceptance. MUST NOT omit Reviewer merely because no plan exists. This creates no new plan obligation.
-- [review.significant-plan] For significant/high-risk plan work: each task uses Coder → fresh QA as required → Orchestrator acceptance and focused commit. After all tasks are accepted and required QA is complete, Reviewer reviews the final full change once. Reviewer is NOT a per-task or per-commit required gate. Preserve required checks and necessary finding rechecks.
-- [review.final-plan-recheck] For final overall Reviewer findings on plan work, including behavior findings, use Coder → Reviewer without QA reassignment; repeat until resolved. This exception applies only at the final plan stage. Preserve required QA and QA failure rechecks before initial final review and outside this exception.
+- [review.significant-no-plan] For significant/high-risk work without a plan: Implementer → QA and required QA rechecks → Reviewer of the final full change → Orchestrator acceptance. MUST NOT omit Reviewer merely because no plan exists. This creates no new plan obligation.
+- [review.significant-plan] For significant/high-risk plan work: each task uses Implementer → fresh QA as required → Orchestrator acceptance and focused commit. After all tasks are accepted and required QA is complete, Reviewer reviews the final full change once. Reviewer is NOT a per-task or per-commit required gate. Preserve required checks and necessary finding rechecks.
+- [review.final-plan-recheck] For final overall Reviewer findings on plan work, including behavior findings, use Implementer → Reviewer without QA reassignment; repeat until resolved. This exception applies only at the final plan stage. Preserve required QA and QA failure rechecks before initial final review and outside this exception.
+- [planning.plan-amend] During approved task execution, mechanical plan progress records need no new user approval; changed goals, scope, criteria, method, risk, dependencies or required verification require revised-version approval and preparation before affected work. In both cases Orchestrator amends the original planning-document commit at a safe boundary, without a separate document or fixup commit. Preserve actual approval chronology, recoverable old/new contents, hashes, versions and SHA mappings; never retroactively authorize earlier work. Rewrite only unpublished, unshared local linear history with clear ownership and no merges; stop on unknown publication, ownership, unexpected state or replay conflicts, without force push or a fallback document commit. Preserve implementation task boundaries and revalidate affected evidence. See planning, handoff-prep, commit and verification for the full contract.
+- [planning.planner-brief] Before formal drafting, Orchestrator supplies one complete stage-specific brief with original requirements and criteria IDs, approved/open decisions, verified target and ownership, document paths and preceding approved versions, current behavior and connected source/generated/runtime/installer/documentation surfaces, policy conflicts, depth, dependencies, checks, holds and exact deliverable. Preserve shared brief field order. Review the complete draft once and consolidate substantive feedback as changed fields with other fields marked unchanged. Preserve sequential design, spec and plan approvals; no fixed call cap or incomplete drafts, and no calls for already resolved questions.
 - [platform.claude] Existing per-role tool allowlists reduce available tools; Bash and role contracts are not a filesystem sandbox. A role-scoped Git guard is a separate integration and is not supplied by these policy sections alone.
 [ARC role policy: contract end]
+
+## Approved cooperative execution path within the repository
+
+The approved installed workflow entry connects document commits to the initial Implementer assignment in plan mode.
+Resolve `<target-home>/skills/arc/runtime/cli.mjs` from the actual loaded ARC skill location selected by the installation
+resolver, including custom homes. Invoke `node` with that path and command options as separate arguments; for shell
+calls use `node "$ARC_RUNTIME_ENTRY" <command> --cwd "$ARC_CHECKOUT" --workflow "$ARC_WORKFLOW_ID" --input -`
+with safely assigned, quoted values. See [handoff](handoff.md) for invocation and continuity requirements.
+An entry update does not migrate existing state or renew approvals; runtime/target drift still requires current evidence.
+Its scope is decisions and records within the repository's cooperative path. It adds no authority to install native hooks/providers/installers or block direct tool calls.
+`no-plan`/omission is unsupported by this CLI, and this boundary remains in Phases 2 and 3. This does not imply an omission policy violation or a new obligation to write documents.
+
+Orchestrator records the SHA-256 values of the user-approved spec and plan, their shared docs-only commit, document version and approval version.
+The CLI verifies the exact changed paths in actual Git objects and the current document bytes before persisting an assignment intent.
+A new workflow or late document commit cannot prove earlier execution was compliant. Earlier agent history and execution outside this path remain unverified.
+Approval attestations and native returns are `operator-attested`; an agent ID is not an authenticated identity.

package/claude/skill/references/verification.md

@@ -19,6 +19,19 @@ text presence alone cannot establish agent compliance. Distinguish tested behavi
 Unexpected failures trigger diagnosis and stop dependent work; expected failure-first RED does not authorize unrelated
 repairs.
 
+## Evidence after plan history rewrite
+
+After an approved execution-time plan rewrite, verify new HEAD, approved plan version/content and old-to-new SHA mapping;
+descendant implementation content and task boundaries; and remaining staged/unstaged/untracked state. Preserve the actual
+approval chronology and recoverable previous contents in the canonical handoff record. The latest version in the original
+commit does not establish approval before its actual approval time.
+
+SHA change alone does not invalidate all prior acceptance evidence. Check whether evidence bound to an exact HEAD,
+document or policy can be linked to the new state. If it cannot be linked, or its meaning is affected, repeat affected
+checks and required rechecks. Preserve existing runtime evidence invalidation and exact-state requirements; do not rewrite
+old fingerprints to imply a run against the new HEAD. Refresh affected briefs and gates before dependent work.
+Structural checks establish written-contract alignment, not live agent compliance or successful Git history replay.
+
 ## Reviewer timing and task acceptance
 
 Task acceptance and its focused commit need only the task's risk-scaled evidence: a FRESH QA instance per task that
@@ -30,17 +43,17 @@ Reviewer reviews once on the final full change after all plan tasks are accepted
 QA recheck at the final relevant state; without a plan, Reviewer follows QA before acceptance.
 A task commit does not mark unperformed final verification complete.
 
-Fresh-per-task rules apply to Coder and QA, not Reviewer. Orchestrator may reuse a Reviewer only while independent
+Fresh-per-task rules apply to Implementer and QA, not Reviewer. Orchestrator may reuse a Reviewer only while independent
 of implementation and self-review, relevant assignment context remains valid, and refreshed review scope, target
 state, and evidence are provided; otherwise assign another independent Reviewer. Reusing a Reviewer does not reuse
 an earlier verdict or waive required review timing or coverage.
 
 For final Reviewer findings on already committed plan work, Orchestrator defines a follow-up task and required
-planning/approvals. Coder leaves corrections uncommitted during rechecks. Orchestrator refreshes the latest committed
+planning/approvals. Implementer leaves corrections uncommitted during rechecks. Orchestrator refreshes the latest committed
 state plus uncommitted diff and changed-file list in the Reviewer artifact/brief. Reuse an independent Reviewer or
-assign another independent Reviewer as needed. Repeat Coder → Reviewer without QA reassignment until findings are
+assign another independent Reviewer as needed. Repeat Implementer → Reviewer without QA reassignment until findings are
 resolved; Orchestrator then accepts the corrections and creates one focused follow-up commit.
-Final QA findings retain Coder correction and QA recheck before a new focused commit.
+Final QA findings retain Implementer correction and QA recheck before a new focused commit.
 Do not automatically amend/reset or duplicate the original task commit. Scope expansion keeps existing new
 planning and approval obligations.
 
@@ -70,19 +83,19 @@ conditions and expected result to observations. Partial confirmation, out-of-sco
 environment-blocked gaps stay unverified; omit no criteria. PASS, if used, means only run status.
 Structural checks prove structure only, not behavior, installation, or live agent compliance.
 
-For QA execution failure or an unmet criterion within the current task, Orchestrator defaults to the current Coder
+For QA execution failure or an unmet criterion within the current task, Orchestrator defaults to the current Implementer
 for correction and the current QA for a post-fix recheck, subject to the context, task-boundary and amendment rules in
 [coordination](coordination.md). The finding alone does not create a new task. QA reruns the
 reproduction path and invalidated related checks before Reviewer, reporting the actual actor, target state, outcomes, and limitations,
 and the prior finding resolved, unresolved, or unverified with evidence. Reusing QA does not reuse stale evidence.
-An unresolved finding returns to Coder correction and another QA recheck before Reviewer.
+An unresolved finding returns to Implementer correction and another QA recheck before Reviewer.
 Environment blocks, missing checks, and out-of-scope criteria are evidence gaps, not presumed defects;
 Reviewer does not substitute for QA evidence. Outside the required final plan correction loop,
 Orchestrator decides when a Reviewer recheck is warranted by the changed scope and independence.
 
 For an acceptance-linked finding Reviewer reports criterion, expected behavior, observed problem, related source,
 reproduction conditions and steps, and evidence, labeling each source-inferred or execution-observed,
-without running QA tests. Outside the final plan Reviewer correction exception, Orchestrator routes it to Coder and QA recheck. Reviewer still handles structure, design,
+without running QA tests. Outside the final plan Reviewer correction exception, Orchestrator routes it to Implementer and QA recheck. Reviewer still handles structure, design,
 factual, and security findings; observable security/interface issues may need both QA and Reviewer.
 
 Orchestrator accepts using verdicts, findings, rechecks, and remaining gaps, not an overall run result;
@@ -95,9 +108,9 @@ Read brief-cited `references/superpowers/test-driven-development/SKILL.md`; pres
 ### Final plan Reviewer correction loop
 
 For a plan's final overall Reviewer findings, including behavior findings, Orchestrator assigns
-Coder → Reviewer recheck with no QA reassignment. Repeat corrections and Reviewer rechecks until findings are resolved;
+Implementer → Reviewer recheck with no QA reassignment. Repeat corrections and Reviewer rechecks until findings are resolved;
 the initial single full review does not prohibit necessary rechecks. Before the initial final overall Reviewer,
-risk-required checks and QA execution failures or unmet criteria still require Coder correction → QA recheck.
+risk-required checks and QA execution failures or unmet criteria still require Implementer correction → QA recheck.
 This exception applies only to findings from the final overall Reviewer of work with a plan.
 Work without a plan retains its existing verification flow. Scope expansion, separate mandatory obligations,
 or unresolved evidence gaps hold affected work for Orchestrator to resolve and obtain required approvals.
@@ -120,14 +133,14 @@ For Orchestrator, **Evidence verdict**: each criterion is proven, unmet, or unve
 
 ## Risk-scaled execution
 
-Orchestrator assigns edits exclusively to Coder except under the Orchestrator direct path in [handoff](handoff.md#orchestrator-direct-path-for-small-tasks), and determines affected
+Orchestrator assigns edits exclusively to Implementer except under the Orchestrator direct path in [handoff](handoff.md#orchestrator-direct-path-for-small-tasks), and determines affected
 behavior, risk, and smallest meaningful verification.
 
 | Risk | Minimum flow |
 |---|---|
-| Small, low risk | Coder, or Orchestrator direct path → Orchestrator's focused checks → acceptance |
-| Ordinary behavior | Coder → independent QA → acceptance |
-| Significant/high risk | Coder → QA → independent Reviewer of the final full change → acceptance; with a plan, each plan task Coder → FRESH QA → acceptance/commit satisfies the QA step, then independent Reviewer once on the final full change after all plan tasks |
+| Small, low risk | Implementer, or Orchestrator direct path → Orchestrator's focused checks → acceptance |
+| Ordinary behavior | Implementer → independent QA → acceptance |
+| Significant/high risk | Implementer → QA → independent Reviewer of the final full change → acceptance; with a plan, each plan task Implementer → FRESH QA → acceptance/commit satisfies the QA step, then independent Reviewer once on the final full change after all plan tasks |
 
 Ordinary and significant plan tasks need a FRESH QA before acceptance; only small, low-risk tasks may be accepted on
 Orchestrator focused checks. Small, low risk means narrow, understood, readily reversible, and verifiable by focused
@@ -143,7 +156,7 @@ a plan keeps Reviewer after QA before acceptance. Preserve specific approved obl
 before dependent implementation. Reuse evidence only when scope, relevant state, independence, freshness, and flow
 position satisfy each covered requirement; changes, failures, or missing/conflicting evidence invalidate affected reuse.
 QA checks independently without edits; Reviewer independently reads the final full change after QA for significant
-work, without QA, planning, edits, delegation, or completion decisions. Orchestrator routes fixes to Coder,
+work, without QA, planning, edits, delegation, or completion decisions. Orchestrator routes fixes to Implementer,
 obtains affected QA rechecks outside the final plan Reviewer correction exception and required final review, and accepts after findings/evidence gaps are resolved or
 explicitly dispositioned.
 
@@ -155,11 +168,136 @@ After gates hold, continue approved scope without saved documents through requir
 Completion continuity above; a role report alone does not complete the work.
 
 
+## Verification lifecycle in the cooperative CLI
+
+The supported `workflow` path is an approved complete spec+plan. No-plan, small-task and document omission paths remain
+`cooperative.unsupported`; this outcome does not imply a violation of existing ARC policy or a new obligation to write documents.
+The CLI does not execute checks or invoke Reviewer. All actors, results and verdicts are `operator-attested`; they do not prove
+identity, actual independence, semantic sufficiency or enforced execution.
+
+An Orchestrator actor (`actor.role: "orchestrator"`) registers a verification contract by recording
+`data: {kind: "task", task: {...}}` in `acceptance-evidence` through `record`. The task specifies `id`, absolute `paths`,
+`criteria`, `requiredChecks`, `dependencies`, `approvalRef`, `approvalVersion`, `documentVersion`,
+`scopeVersion` and `targetVersion`. Only pending tasks can be registered; this record is neither acceptance nor a commit.
+Each requiredChecks descriptor is `{executable, args, cwd, env, outputs}`; executable, cwd and outputs are absolute paths.
+cwd and outputs must be within the workspace. Do not include Reviewer in task requiredChecks.
+
+`changeFingerprints.tasks[taskId]` and `changeFingerprints.final` in `status` are independent observations.
+They include read-only Git inventory/index observations and current regular-file bytes, modes and deletions. Task fingerprints
+cover owned paths; the final fingerprint covers the whole repository snapshot. Unsupported observations such as symlinks,
+submodules and unmerged indexes cause a hold. This is not a sandbox that atomically locks observation and execution.
+Leave runtimeHash drift as stale/hold; do not automatically update the stored version or convert it through migration or renewed approval.
+
+`operation: "check"` in `prepare` accepts `taskId` and
+`arguments: {scope: "task", actor: {id, role: "qa"}, descriptor, changeFingerprint, findingIds?}`.
+Actor ID attestations must be independent of Implementer and Orchestrator; QA/Implementer reuse across tasks is rejected. The descriptor must
+exactly match the registered requiredChecks. After the intent is persisted, the responsible role executes within its existing approved scope.
+`result` or `reconcile` records `intentId` and `{status, messageRef, data}`. data specifies the same
+`actor`, `descriptor` and `scope` as the intent, `taskId` for tasks, `changeFingerprint`, and
+`verdict: "proven" | "unmet" | "unverified"`. Even a succeeded/proven result is valid only for that change version.
+This is an operator verdict record; it does not replace semantic proof of a criterion or Orchestrator acceptance.
+Failures, unknown, mismatch and unverified outcomes are not passing evidence. Preserve previous results and failure records.
+
+A failed check/review leaves an open finding. Link a separate finding to an existing check/review through `record` with
+`data: {action: "open", id, checkId, message}`. After a Implementer fix, record
+`data: {action: "resolve", id, actor: {id, role: "implementer"}, changeFingerprint}` and the fix evidence messageRef.
+The actor must be the Implementer assigned to that task, or a relevant task for an overall finding. This marks the finding resolved;
+it becomes closed only when a subsequent prepare includes it in `findingIds` and revalidation passes for the same change version.
+Earlier QA failures retain the Implementer→QA recheck requirement.
+
+`operation: "review"` uses `scope: "final"`, `actor.role: "reviewer"` and
+`descriptor: {kind: "source-review", paths: [...]}`, without taskId. The initial final review requires acceptance of all tasks
+and current required task QA evidence. Reviewer is not a prerequisite gate for task acceptance or focused commits.
+For final Reviewer findings in supported plan work, repeat Implementer resolution→Reviewer revalidation without QA reassignment.
+Do not present earlier QA evidence as execution evidence for a subsequent fix. This exception does not omit separate unresolved QA failures.
+
+Scope, document and approval change records do not overwrite history. Specifying `data.affectedTaskIds` invalidates task,
+verification and acceptance evidence for those tasks and their dependency chain; omitting it holds all tasks. Final evidence also becomes stale.
+Preserve evidence for unaffected independent tasks. Orchestrator determines semantic impact. Affected tasks require a new approval record
+for the current scope and an updated task contract before preparation; earlier approvals cannot revive them. New checks/reviews and
+finding revalidation are also required. Current evidence supersedes earlier failures without deleting them; acceptance, commits and final completion remain Orchestrator decisions.
+
+### Task acceptance and focused commit reconciliation in the cooperative CLI
+
+In the current plan mode, `prepare` supports `operation: "accept"` and `operation: "commit"`.
+Acceptance is an Orchestrator attestation specifying `actor.role: "orchestrator"`, `taskId`, and, in `arguments`,
+`messageRef`, the same `criteria` as the task, exact `checkIds` for current required QA, all task
+`findingIds` and the current `changeFingerprint`. The latest QA result for each required descriptor must be
+passed/proven, and findings must be closed through Implementer fixes and QA rechecks.
+A successful attestation marks the task accepted; passing commands or Implementer reports alone do not constitute acceptance.
+The provenance is `operator-attested`; the operator confirms semantic criterion satisfaction and actor identities.
+
+At acceptance, the code pins the actual index tree, staged diff, paths and task fingerprint together. Orchestrator stages only
+approved task paths beforehand and confirms required QA for that index state. Unrelated paths, changes from another registered
+task, or unstaged/untracked changes within scope cause a hold. The code cannot automatically distinguish semantically unrelated
+hunks within the same file; Orchestrator reads the actual diff to confirm them.
+
+`operation: "commit"` in `prepare` references the exact acceptance through `arguments: {"acceptanceId": "acceptance requestId"}`.
+The code checks that the current approval, task contract, QA, findings and index match acceptance, then persists a durable intent
+with the expected parent, tree, paths and residual paths. The CLI does not stage or commit.
+Orchestrator creates one focused implementation commit matching these expectations.
+
+Then submit `intentId`, `actor.role: "orchestrator"`, and
+`result: {"status": "succeeded", "messageRef": "actual result evidence", "data": {"commit": "full OID"}}`
+through `reconcile` or result-form `result`. The CLI rereads the actual commit object, parent, tree, paths, HEAD, index and residual changes from local Git.
+Only a complete match updates target HEAD and marks the task committed. Failure, unknown and mismatch observations and actual
+history are preserved; the target is not updated arbitrarily. Reusing the same request or a completed intent does not authorize
+a second effect. After a failure, read the actual state, resolve the cause and reconcile the existing intent.
+
+Do not rewrite earlier QA fingerprints after a successful commit. Separate post-commit file/index observations detect subsequent
+changes. Under the existing rules, final review requires current task evidence and the final fingerprint.
+A changed runtimeHash follows the existing stale/hold rules; the stored version is not automatically updated.
+
 [ARC role policy: contract begin]
 Generated from lib/policy/role-policy.json; do not edit this managed section manually.
 - [git.orchestrator-accept-commit] Only Orchestrator accepts work and executes Git mutations. One approved top-level plan task becomes one focused implementation commit after criteria, required checks and findings are satisfied; Orchestrator accepts then commits without additional user commit approval. Reports, passing checks and Reviewer opinions do not replace acceptance. Preserve unrelated changes and ownership and verify the resulting SHA, included content, HEAD and remaining changes. Existing small-task direct and plan-omission paths are unchanged.
-- [review.significant-no-plan] For significant/high-risk work without a plan: Coder → QA and required QA rechecks → Reviewer of the final full change → Orchestrator acceptance. MUST NOT omit Reviewer merely because no plan exists. This creates no new plan obligation.
-- [review.significant-plan] For significant/high-risk plan work: each task uses Coder → fresh QA as required → Orchestrator acceptance and focused commit. After all tasks are accepted and required QA is complete, Reviewer reviews the final full change once. Reviewer is NOT a per-task or per-commit required gate. Preserve required checks and necessary finding rechecks.
-- [review.final-plan-recheck] For final overall Reviewer findings on plan work, including behavior findings, use Coder → Reviewer without QA reassignment; repeat until resolved. This exception applies only at the final plan stage. Preserve required QA and QA failure rechecks before initial final review and outside this exception.
+- [review.significant-no-plan] For significant/high-risk work without a plan: Implementer → QA and required QA rechecks → Reviewer of the final full change → Orchestrator acceptance. MUST NOT omit Reviewer merely because no plan exists. This creates no new plan obligation.
+- [review.significant-plan] For significant/high-risk plan work: each task uses Implementer → fresh QA as required → Orchestrator acceptance and focused commit. After all tasks are accepted and required QA is complete, Reviewer reviews the final full change once. Reviewer is NOT a per-task or per-commit required gate. Preserve required checks and necessary finding rechecks.
+- [review.final-plan-recheck] For final overall Reviewer findings on plan work, including behavior findings, use Implementer → Reviewer without QA reassignment; repeat until resolved. This exception applies only at the final plan stage. Preserve required QA and QA failure rechecks before initial final review and outside this exception.
+- [planning.plan-amend] During approved task execution, mechanical plan progress records need no new user approval; changed goals, scope, criteria, method, risk, dependencies or required verification require revised-version approval and preparation before affected work. In both cases Orchestrator amends the original planning-document commit at a safe boundary, without a separate document or fixup commit. Preserve actual approval chronology, recoverable old/new contents, hashes, versions and SHA mappings; never retroactively authorize earlier work. Rewrite only unpublished, unshared local linear history with clear ownership and no merges; stop on unknown publication, ownership, unexpected state or replay conflicts, without force push or a fallback document commit. Preserve implementation task boundaries and revalidate affected evidence. See planning, handoff-prep, commit and verification for the full contract.
 - [platform.claude] Existing per-role tool allowlists reduce available tools; Bash and role contracts are not a filesystem sandbox. A role-scoped Git guard is a separate integration and is not supplied by these policy sections alone.
 [ARC role policy: contract end]
+
+
+## External operations and recovery in the cooperative CLI
+
+The three phases support state, documents and assignment; scope, verification, acceptance and focused commits; and external approval, results and audit recovery.
+Use `status.support` to inspect all nine areas and their limits. The supported mode is `plan` with spec+plan; no-plan and omission are unsupported. The CLI does not execute native/provider calls or push, merge, deploy or publish.
+User approvals and execution results confirmed by the operator are `operator-attested`, with `nativeVerified: false` and
+`remoteVerified: false`. Blocking direct calls outside the CLI and independent remote verification are not provided.
+
+Orchestrator records an explicit approval it has already confirmed through `record` with
+`evidence: {kind: "external-approval", messageRef, data: {operation, scope, descriptor}}`.
+`scope` is an array of unique absolute paths within the checkout. Local commit approval does not authorize external operations.
+Include the exact action, scope and target in the approval, and record every descriptor field below.
+
+| operation | descriptor fields |
+|---|---|
+| push | repository, destination, refspec, sourceOid, expectedRemoteOid |
+| merge | repository, changeRef, targetRef, expectedTargetOid |
+| deploy | service, project, environment, artifactId, destination |
+| publish | service, namespace, name, version, artifactHash, destination |
+
+Git OIDs are full 40/64-character lowercase hex values; artifactHash is `sha256:<64-hex>`. Without a remote observation,
+an OID is an expected value asserted by the user, not verified remote state. destination must be an identifier without secrets.
+Do not submit URL userinfo, query or fragment components, or authentication information such as passwords, tokens or credentials.
+The CLI rejects recognized credential inputs before persistence, but cannot determine whether every arbitrary string contains a secret.
+
+Pass `{requestId, expectedRevision, actor: {id, role: "orchestrator"}, operation,
+arguments: {approvalRef, scope, descriptor}}` to `prepare`. approvalRef matches the external approval messageRef.
+An intent is persisted only when the exact approval, scope/target versions and runtime version match and no effect is unresolved.
+After confirming `allow` and `persisted: true`, Orchestrator performs the external operation within its separately approved scope.
+This CLI does not expand that execution authority.
+
+`result`/`reconcile` accepts `{requestId, expectedRevision, actor, intentId,
+result: {status, messageRef, data: {operation, scope, descriptor}}}`. intentId is the prepare requestId.
+Target mismatches, unknown outcomes and stale results cause a hold while preserving earlier attestations. After an interruption,
+use `status` to inspect the intent, `state.requests`, `state.audit` and `state.results`, and investigate whether the effect occurred.
+Reconcile the investigation result against the same intent rather than preparing again or reusing the same approval to execute again.
+Cancellation additionally requires a `notExecutedEvidence: {messageRef}` attestation that the operation was not executed.
+The approval remains consumed after cancellation. Do not resolve version drift through automatic updates, migration or renewed permission.
+Report the cause of the hold to Orchestrator.
+
+Even succeeded results are operator attestations, not independent remote verification. `audit` retains the
+request→decision→intent→result→resolution linkage, but is a locally editable record rather than tamper-proof security evidence.
+Do not retry while the actual external outcome is uncertain.

package/claude/skill/runtime/acceptance.mjs

@@ -0,0 +1,68 @@
+import path from 'node:path';
+import {fingerprintRequest} from './store.mjs';
+import {validateGitPreflight,validateGitCommitResult} from './git-evidence.mjs';
+import {within} from './scope.mjs';
+const reconciliations=new WeakMap();
+export function verifiedCooperativeReconciliation(decision,state){const proof=reconciliations.get(decision);return !!proof&&proof.before===fingerprintRequest(state)&&proof.after===fingerprintRequest(decision.proposedTransition);}
+const completed=(state,id)=>state.tasks?.some(t=>t.id===id&&t.status==='committed'&&!t.invalidated)&&state.commits?.some(c=>c.taskId===id&&c.observationSource==='local-git'&&state.intents.some(i=>i.operation==='commit'&&i.requestId===c.requestId&&i.taskId===id&&i.status==='succeeded'));
+const same=(a,b)=>JSON.stringify(a)===JSON.stringify(b);
+const text=v=>typeof v==='string'&&v.length>0;
+const list=v=>Array.isArray(v)&&v.every(text)&&new Set(v).size===v.length;
+const exact=(a,b)=>list(a)&&list(b)&&same([...a].sort(),[...b].sort());
+const fields=(v,keys)=>v&&typeof v==='object'&&!Array.isArray(v)&&Object.keys(v).every(k=>keys.includes(k));
+const semanticLimit='Semantically unrelated hunks inside the same file require Orchestrator inspection; path and byte evidence cannot distinguish them automatically.';
+const base=state=>({expectedRevision:state?.revision??0,coverage:{enforcement:'cooperative',provenance:'operator-attested',nativeVerified:false},semanticLimit,requiredEvidence:[],nextActions:[],proposedTransition:null});
+const hold=(state,reason)=>({...base(state),decision:'hold',ruleIds:['cooperative.acceptance'],reason});
+const allow=(state,transition)=>({...base(state),decision:'allow',ruleIds:['cooperative.acceptance'],proposedTransition:transition});
+const approval=(state,id)=>state.records.filter(r=>r.kind==='approval'&&(!r.data.affectedTaskIds||r.data.affectedTaskIds.includes(id))).at(-1);
+function authorized(state,task){const a=approval(state,task?.id);return state.mode==='plan'&&task&&!task.invalidated&&a?.source==='operator-attested'&&a.targetVersion===state.targetVersion&&task.targetVersion===state.targetVersion&&task.scopeVersion===a.scopeVersion&&task.approvalRef===a.messageRef&&task.approvalVersion===a.data.approvalVersion&&task.documentVersion===a.data.documentVersion;}
+function checkEvidence(state,task,a,changes){
+ if(!same(a.criteria,task.criteria)||!task.criteria.length||!list(a.checkIds)||!list(a.findingIds)||a.changeFingerprint!==changes?.tasks?.[task.id])return false;
+ const checks=state.checks.filter(c=>c.scope==='task'&&c.taskId===task.id);
+ const latest=task.requiredChecks.map(d=>checks.filter(c=>same(c.descriptor,d)).at(-1));
+ if(!task.requiredChecks.length||latest.some(c=>!c||c.stale||c.status!=='passed'||c.verdict!=='proven'||!text(c.resultRef)||c.source!=='operator-attested'||c.verificationActor?.role!=='qa'||!text(c.verificationActor.id)||state.assignments.some(a=>a.agentId===c.verificationActor.id)||c.changeFingerprint!==a.changeFingerprint)||!exact(a.checkIds,latest.map(c=>c?.id)))return false;
+ const findings=state.findings.filter(f=>f.scope==='task'&&f.taskId===task.id);
+ return exact(a.findingIds,findings.map(f=>f.id))&&findings.every(f=>f.status==='closed'&&text(f.resolutionRef)&&text(f.recheckRef)&&f.resolutionActor?.role==='implementer'&&f.recheckActor?.role==='qa'&&f.changeFingerprint===a.changeFingerprint);
+}
+function waitingFor(state,task,predecessor){
+ if(task.status!=='pending'||state.intents.some(i=>i.taskId===task.id&&i.operation==='assign-agent'&&['prepared','unknown','mismatch','succeeded'].includes(i.status)))return false;
+ const seen=new Set(),queue=[...(task.dependencies??[])];while(queue.length){const id=queue.pop();if(id===predecessor)return true;if(seen.has(id))continue;seen.add(id);queue.push(...(state.tasks.find(t=>t.id===id)?.dependencies??[]));}return false;
+}
+function dirtyOtherTask(state,task,git){return git.stagedPaths?.some(name=>state.tasks.some(t=>t.id!==task.id&&!completed(state,t.id)&&!waitingFor(state,t,task.id)&&t.paths.some(p=>within(p,path.join(state.target.realpath,...name.split('/'))))));}
+function freshAcceptance(state,task,acceptance,changes){return acceptance&&!acceptance.stale&&authorized(state,task)&&acceptance.taskFingerprint===fingerprintRequest({...task,status:'pending'})&&same(acceptance.approval,approval(state,task.id))&&same(acceptance.target,state.target)&&same(acceptance.versions,state.versions)&&checkEvidence(state,task,acceptance,changes);}
+/** Operator attests semantic sufficiency; code binds exact current evidence only. */
+export function evaluateCooperativeAcceptance({state,request,evidence}={}){
+ const task=state?.tasks?.find(t=>t.id===request?.taskId),a=request?.arguments,g=evidence?.git;
+ if(request?.expectedRevision!==state?.revision||request.actor?.role!=='orchestrator'||!authorized(state,task)||task.status!=='pending'||state.acceptances.some(v=>v.taskId===task.id&&!v.stale)||state.commits.some(v=>v.taskId===task.id))return hold(state,'Current pending approved task and Orchestrator acceptance required');
+ if(!fields(a,['messageRef','criteria','checkIds','findingIds','changeFingerprint'])||!text(a.messageRef)||!checkEvidence(state,task,a,evidence?.changes)||state.checks.some(c=>a.checkIds?.includes(c.id)&&c.verificationActor?.id===request.actor.id))return hold(state,'Exact criteria, current required QA checks and closed findings required');
+ const descriptor={kind:'task',parent:state.target.head,indexTree:g?.indexTree,fingerprint:g?.stagedFingerprint,paths:g?.stagedPaths};
+ const invalid=validateGitPreflight({target:state.target,descriptor,scope:task.paths,gitEvidence:g});
+ if(invalid||dirtyOtherTask(state,task,g))return hold(state,invalid??'Index includes another task changes');
+ return allow(state,{acceptance:{...structuredClone(a),id:request.requestId,taskId:task.id,actor:structuredClone(request.actor),source:'operator-attested',descriptor:structuredClone(descriptor),taskFingerprint:fingerprintRequest({...task,status:'pending'}),approval:structuredClone(approval(state,task.id)),target:structuredClone(state.target),versions:structuredClone(state.versions)}});
+}
+/** Prepares a durable intent; never stages or executes a commit. */
+export function prepareCooperativeCommit({state,request,gitEvidence,evidence}={}){
+ const task=state?.tasks?.find(t=>t.id===request?.taskId),a=state?.acceptances?.find(a=>a.id===request?.arguments?.acceptanceId&&a.taskId===request.taskId);
+ if(request?.expectedRevision!==state?.revision||request.actor?.role!=='orchestrator'||!fields(request.arguments,['acceptanceId'])||task?.status!=='accepted'||!freshAcceptance(state,task,a,evidence?.changes)||state.commits.some(c=>c.taskId===task.id)||state.intents.some(i=>i.operation==='commit'&&i.taskId===task.id&&['prepared','unknown','mismatch'].includes(i.status)))return hold(state,'Exact current acceptance and no prior task commit or unresolved commit required');
+ const invalid=validateGitPreflight({target:state.target,descriptor:a.descriptor,scope:task.paths,gitEvidence});
+ if(invalid||dirtyOtherTask(state,task,gitEvidence))return hold(state,invalid??'Index includes another task changes');
+ const expected={parent:a.descriptor.parent,tree:a.descriptor.indexTree,paths:[...a.descriptor.paths],fingerprint:a.descriptor.fingerprint,remainingPaths:[...new Set([...gitEvidence.workingPaths,...gitEvidence.untrackedPaths])].sort()};
+ return allow(state,{intent:{requestId:request.requestId,operation:'commit',taskId:task.id,status:'prepared',acceptanceId:a.id,acceptanceFingerprint:fingerprintRequest(a),expected,target:structuredClone(state.target),versions:structuredClone(state.versions),fingerprint:fingerprintRequest(request),source:'operator-attested'}});
+}
+/** Results are local Git observations, correlated with an operator statement.
+ * Mismatch observations remain historical evidence and never rebind the target. */
+export function reconcileCooperativeCommit({state,intent,result,gitEvidence}={}){
+ if(!intent||intent.operation!=='commit'||!['prepared','unknown','mismatch'].includes(intent.status)||state.commits.some(c=>c.taskId===intent.taskId))return hold(state,'Matching unresolved commit intent required; replay cannot authorize another effect');
+ const task=state.tasks.find(t=>t.id===intent.taskId),a=state.acceptances.find(a=>a.id===intent.acceptanceId),g=gitEvidence;
+ const observation=g?structuredClone(g):null;
+ const transition={observation,result:{...structuredClone(result),status:'mismatch',source:'operator-attested'}};
+ const reject=reason=>({...hold(state,reason),proposedTransition:transition});
+ if(!result||!text(result.messageRef)||!fields(result.data,['commit'])||!['succeeded','failed','unknown','mismatch'].includes(result.status))return reject('Exact commit result statement required');
+ if(result.status!=='succeeded'){transition.result.status=result.status;return reject('Execution did not establish a successful commit');}
+ if(task?.status!=='accepted'||!authorized(state,task)||a?.stale||!a||intent.acceptanceFingerprint!==fingerprintRequest(a)||a.taskFingerprint!==fingerprintRequest({...task,status:'pending'})||!same(a.approval,approval(state,task.id))||!checkEvidence(state,task,a,{tasks:{[task.id]:a.changeFingerprint}})||!same(intent.target,state.target)||!same(intent.versions,state.versions)||!g?.commit||result.data.commit!==g.commit.commit||g.stagedPaths?.length||g.indexTree!==g.commit.tree)return reject('Acceptance, observed commit or clean resulting index mismatch');
+ const actual={...g.commit,target:g.target,remainingPaths:[...new Set([...g.workingPaths??[],...g.untrackedPaths??[]])].sort()};
+ const invalid=validateGitCommitResult({target:state.target,expected:intent.expected,result:actual,scope:task.paths});
+ if(invalid)return reject(invalid);
+ transition.result.status='succeeded';transition.commit={...actual,taskId:task.id,requestId:intent.requestId,acceptanceId:a.id,source:'operator-attested',observationSource:'local-git',fingerprint:a.changeFingerprint};transition.target=structuredClone(g.target);
+ const decision=allow(state,transition);reconciliations.set(decision,{before:fingerprintRequest(state),after:fingerprintRequest(transition)});return decision;
+}

package/claude/skill/runtime/assignment.mjs

@@ -0,0 +1,42 @@
+import {fingerprintRequest} from './store.mjs';
+import {absolute,within} from './scope.mjs';
+const completed=(state,id)=>state.tasks?.some(t=>t.id===id&&t.status==='committed'&&!t.invalidated)&&state.commits?.some(c=>c.taskId===id&&c.observationSource==='local-git'&&state.intents.some(i=>i.operation==='commit'&&i.requestId===c.requestId&&i.taskId===id&&i.status==='succeeded'));
+const same=(a,b)=>JSON.stringify(a)===JSON.stringify(b);
+const text=value=>typeof value==='string'&&value.length>0;
+const version=value=>Number.isSafeInteger(value)&&value>0;
+const setEqual=(a,b)=>Array.isArray(a)&&Array.isArray(b)&&new Set(a).size===a.length&&new Set(b).size===b.length&&same([...a].sort(),[...b].sort());
+const base=state=>({expectedRevision:state?.revision??0,coverage:{enforcement:'cooperative',provenance:'operator-attested',nativeVerified:false},requiredEvidence:[],nextActions:[],proposedTransition:null});
+const hold=(state,id,reason)=>({...base(state),decision:'hold',ruleIds:['cooperative.'+id],reason});
+/** Pure gate. observations are supplied by trusted local readers, never JSON input. */
+export function prepareCooperativeAssignment({policy,state,request,observations}={}){
+ if(policy!==undefined&&policy.workflowKind!=='cooperative')return hold(state,'contract','Explicit cooperative contract required');
+ const args=request?.arguments;
+ if(state?.mode!=='plan'||request?.operation!=='assign-agent'||!args)return hold(state,'unsupported','Only explicit plan assignment is supported');
+ const allowed=['role','paths','operations','documents','approvalRef','approvalVersion','documentVersion','correlation'];
+ if(Object.keys(args).some(k=>!allowed.includes(k))||args.role!=='implementer'||!text(request.taskId)||!text(request.requestId)||!text(args.correlation)||!text(args.approvalRef)||!version(args.approvalVersion)||!version(args.documentVersion)||!Array.isArray(args.paths)||!args.paths.length||new Set(args.paths).size!==args.paths.length||args.paths.some(p=>!absolute(p)||!within(state.target.realpath,p))||!Array.isArray(args.operations)||!args.operations.length||args.operations.some(o=>o!=='edit'))return hold(state,'assignment','Invalid assignment or unsupported historical agent import');
+ if(!same(observations?.target,state.target)||!same(observations?.git?.target,state.target))return hold(state,'target','Re-observe target and renew approval after drift');
+ if(request.expectedRevision!==state.revision)return hold(state,'revision','Stale assignment request');
+ if(state.records.some(r=>r.data?.priorExecution===true)||state.assignments.some(a=>a.source!=='operator-attested'))return hold(state,'history','Earlier execution remains unverified; a late commit cannot authorize it');
+ if(state.intents.some(i=>i.operation==='assign-agent'&&['prepared','unknown','mismatch','succeeded'].includes(i.status)&&(i.taskId===request.taskId||i.correlation===args.correlation||!(i.status==='succeeded'&&completed(state,i.taskId))&&i.paths?.some(p=>args.paths.some(q=>within(p,q)||within(q,p))))))return hold(state,'assignment-active','Resolve the existing dispatch before preparing another');
+ const task=state.tasks?.find(t=>t.id===request.taskId);
+ if(task&&(task.invalidated||task.status==='held'||task.dependencies?.some(id=>{const predecessor=state.tasks.find(t=>t.id===id);return !predecessor||predecessor.invalidated||!['accepted','committed'].includes(predecessor.status);})))return hold(state,'task-stale','Affected task or predecessor requires renewed readiness and approval');
+ const scope=state.scopes?.findLast(s=>s.scopeVersion===state.scopeVersion&&(!s.data.affectedTaskIds||s.data.affectedTaskIds.includes(request.taskId)));
+ if(!task||!task.paths?.length||args.paths.some(p=>!task.paths.some(base=>within(base,p)))||scope&&args.paths.some(p=>!scope.data.paths?.some(base=>within(base,p))))return hold(state,'assignment-scope','Assignment must stay inside approved task and recorded scope');
+ const documents=args.documents,git=observations.git;
+ if(!Array.isArray(documents)||documents.length!==2||!setEqual(documents.map(d=>d.kind),['spec','plan'])||!git.docsCommit||!setEqual(git.docsCommit.paths,documents.map(d=>d.gitPath))||!same(git.docsCommit.documents,documents)||documents.some(d=>d.commit!==git.docsCommit.commit)||!Array.isArray(git.documents)||git.documents.length!==2||documents.some(d=>!git.documents.some(o=>o.path===d.path&&o.gitPath===d.gitPath&&o.kind===d.kind&&o.observedHash===d.contentHash&&o.currentHash===d.contentHash)))return hold(state,'documents','Exact committed spec and plan plus current bytes must match approval');
+ const approval=state.records.filter(r=>r.kind==='approval'&&(!r.data.affectedTaskIds||r.data.affectedTaskIds.includes(request.taskId))).at(-1);
+ if(task.approvalRef!==args.approvalRef||task.approvalVersion!==args.approvalVersion||task.documentVersion!==args.documentVersion||task.scopeVersion!==state.scopeVersion||task.targetVersion!==state.targetVersion||!approval||approval.source!=='operator-attested'||approval.messageRef!==args.approvalRef||approval.targetVersion!==state.targetVersion||approval.scopeVersion!==state.scopeVersion||approval.data.approvalVersion!==args.approvalVersion||approval.data.documentVersion!==args.documentVersion||!same(approval.data.documents,documents)||documents.some(d=>d.approvalRef!==args.approvalRef))return hold(state,'approval','Current document and approval versions must match');
+ const intent={requestId:request.requestId,taskId:request.taskId,operation:request.operation,status:'prepared',role:args.role,paths:[...args.paths],operations:[...args.operations],correlation:args.correlation,documents:structuredClone(documents),docsCommit:git.docsCommit.commit,approvalRef:args.approvalRef,approvalVersion:args.approvalVersion,documentVersion:args.documentVersion,target:structuredClone(state.target),targetVersion:state.targetVersion,scopeVersion:state.scopeVersion,revision:state.revision+1,fingerprint:fingerprintRequest(request),source:'operator-attested'};
+ return {...base(state),decision:'allow',ruleIds:['cooperative.assignment-prepared'],proposedTransition:{intent}};
+}
+/** A native response is an operator statement, not authenticated identity or compliance. */
+export function recordCooperativeAssignmentResult({state,intent,result,observations}={}){
+ if(!intent||intent.operation!=='assign-agent')return hold(state,'intent','No matching assignment intent');
+ if(!['prepared','unknown','mismatch'].includes(intent.status))return hold(state,'assignment-terminal','Preserve the prior terminal native response');
+ if(!result||!['succeeded','failed','unknown','mismatch'].includes(result.status)||!text(result.messageRef)||!result.data)return hold(state,'assignment-result','Invalid native result statement');
+ if(result.status==='succeeded'&&(state.assignments.some(a=>a.agentId===result.data.agentId&&a.taskId!==intent.taskId)||state.intents?.some(i=>i.verificationActor?.id===result.data.agentId)||state.checks?.some(c=>c.verificationActor?.id===result.data.agentId)))return hold(state,'assignment-freshness','Implementer actor statements cannot cross tasks');
+ let status=result.status;
+ if(!same(intent.target,observations?.target)||result.data.correlation!==intent.correlation||result.data.taskId!==intent.taskId||status==='succeeded'&&!text(result.data.agentId))status='mismatch';
+ const entry={...structuredClone(result),status,requestId:intent.requestId,source:'operator-attested'};
+ return {...base(state),decision:['succeeded','failed'].includes(status)?'allow':'hold',ruleIds:['cooperative.assignment-'+status],proposedTransition:{result:entry}};
+}