agentfootprint 9.82.0 → 9.84.0

package/dist/esm/core/agent/evidence/gate.d.ts

@@ -42,6 +42,13 @@
  * unexamined. A missed fabrication is a miss; a false accusation costs a real
  * turn and can refuse a good answer, so the bias points the way it does.
  *
+ * **And it does not ask WHEN.** A value read four turns ago for a different
+ * question is as grounded here as one read a second ago — which is a measured
+ * failure, not a hypothetical (see `../../../integrity/prior-turn-evidence`).
+ * That fact is reported beside this check, never folded into it: the gate's
+ * job is "was this read at all", and answering a second question through the
+ * same verdict would make one dial control two decisions.
+ *
  * ## Why the check is DETERMINISTIC
  *
  * No model call, no embedding, no judge. The library's thesis is that
@@ -69,6 +76,13 @@ export declare function resolveEvidenceGate(opts?: NamesAndNumbersOptions): Reso
  *
  * `exempt` is checked BEFORE the evidence: a value the user supplied is not a
  * fabrication whether or not a tool ever echoed it back.
+ *
+ * The same pass reports WHEN each grounded value was read (`grounding`) — the
+ * time axis the corpus gained in 9.83.0. Three buckets, and an exempt value is
+ * in none of them: exemption is a statement about who SUPPLIED a value, and a
+ * value the app or the person put in front of the model was never something
+ * the run had to go and look up. Counting one as tool evidence — of any turn —
+ * would answer a question nobody asked.
  */
 export declare function checkAnswer(answer: string, args: {
     readonly gate: ResolvedEvidenceGate;
@@ -92,6 +106,19 @@ export declare function describeValues(values: readonly UnsupportedValue[]): str
  * compaction frame and the schema frame follow, and a rule with an exception
  * is not a rule.
  *
+ * ## The scope this sentence used to claim, and no longer does (9.83.0)
+ *
+ * Both this frame and {@link evidenceRefusalSentence} said the flagged values
+ * "appear in NO tool result FROM THIS TURN". The index they are written from
+ * has never been turn-scoped — it walks every `role: 'tool'` turn in
+ * `scope.history` — so the sentence named a boundary the check did not honour,
+ * in the two places the claim is read by a model and by an operator. It was
+ * also needlessly weak: a flagged value appears in no tool result the run can
+ * point at AT ALL, which is a stronger and true thing to say. So the words
+ * changed to the check's real reach. The recency fact the old wording gestured
+ * at is now reported where it can be measured — `prior-turn-evidence`, off by
+ * default — instead of asserted here where it could not be.
+ *
  * `stagedRefs` (optional) is the staged-refs join computed by the recheck
  * stage: when this turn holds placed artifact tickets a served `wants` tool
  * can spend, the frame names the refs and the spender by their declared names

package/dist/esm/core/agent/evidence/gate.js

@@ -42,6 +42,13 @@
  * unexamined. A missed fabrication is a miss; a false accusation costs a real
  * turn and can refuse a good answer, so the bias points the way it does.
  *
+ * **And it does not ask WHEN.** A value read four turns ago for a different
+ * question is as grounded here as one read a second ago — which is a measured
+ * failure, not a hypothetical (see `../../../integrity/prior-turn-evidence`).
+ * That fact is reported beside this check, never folded into it: the gate's
+ * job is "was this read at all", and answering a second question through the
+ * same verdict would make one dial control two decisions.
+ *
  * ## Why the check is DETERMINISTIC
  *
  * No model call, no embedding, no judge. The library's thesis is that
@@ -148,20 +155,58 @@ function anchor(re) {
  *
  * `exempt` is checked BEFORE the evidence: a value the user supplied is not a
  * fabrication whether or not a tool ever echoed it back.
+ *
+ * The same pass reports WHEN each grounded value was read (`grounding`) — the
+ * time axis the corpus gained in 9.83.0. Three buckets, and an exempt value is
+ * in none of them: exemption is a statement about who SUPPLIED a value, and a
+ * value the app or the person put in front of the model was never something
+ * the run had to go and look up. Counting one as tool evidence — of any turn —
+ * would answer a question nobody asked.
  */
 export function checkAnswer(answer, args) {
     const candidates = extractCandidates(answer, args.gate);
     const unsupported = [];
+    let fromThisTurn = 0;
+    let fromPriorTurns = 0;
+    let latestPriorTurn;
     for (const candidate of candidates) {
         const forms = lookupForms(candidate.value);
-        const known = forms.some((f) => args.exempt.has(f) || args.evidence.values.has(f));
-        if (!known)
+        if (forms.some((f) => args.exempt.has(f)))
+            continue;
+        // The NEWEST turn any spelling of this value was served in. Newest,
+        // because the question is whether this turn could have supplied it — an
+        // identifier echoed back by a lookup this turn is this turn's, whatever
+        // else served it three turns ago.
+        let turn;
+        for (const form of forms) {
+            const seen = args.evidence.values.get(form);
+            if (seen !== undefined && (turn === undefined || seen > turn))
+                turn = seen;
+        }
+        if (turn === undefined) {
             unsupported.push({ value: clip(candidate.value), shape: candidate.shape });
+            continue;
+        }
+        if (turn >= args.evidence.currentTurn) {
+            fromThisTurn += 1;
+            continue;
+        }
+        fromPriorTurns += 1;
+        if (latestPriorTurn === undefined || turn > latestPriorTurn)
+            latestPriorTurn = turn;
     }
     return {
         unsupported,
         candidates: candidates.length,
         evidenceTruncated: args.evidence.truncated,
+        grounding: {
+            fromThisTurn,
+            fromPriorTurns,
+            ...(latestPriorTurn !== undefined && { latestPriorTurn }),
+            currentTurn: args.evidence.currentTurn,
+            toolResultsThisTurn: args.evidence.toolResultsThisTurn,
+            indexTruncated: args.evidence.truncated,
+        },
     };
 }
 /** Render the flagged values for a human or a model: `` `x` (shape) ``. */
@@ -186,6 +231,19 @@ export function describeValues(values) {
  * compaction frame and the schema frame follow, and a rule with an exception
  * is not a rule.
  *
+ * ## The scope this sentence used to claim, and no longer does (9.83.0)
+ *
+ * Both this frame and {@link evidenceRefusalSentence} said the flagged values
+ * "appear in NO tool result FROM THIS TURN". The index they are written from
+ * has never been turn-scoped — it walks every `role: 'tool'` turn in
+ * `scope.history` — so the sentence named a boundary the check did not honour,
+ * in the two places the claim is read by a model and by an operator. It was
+ * also needlessly weak: a flagged value appears in no tool result the run can
+ * point at AT ALL, which is a stronger and true thing to say. So the words
+ * changed to the check's real reach. The recency fact the old wording gestured
+ * at is now reported where it can be measured — `prior-turn-evidence`, off by
+ * default — instead of asserted here where it could not be.
+ *
  * `stagedRefs` (optional) is the staged-refs join computed by the recheck
  * stage: when this turn holds placed artifact tickets a served `wants` tool
  * can spend, the frame names the refs and the spender by their declared names
@@ -197,7 +255,7 @@ export function describeValues(values) {
  */
 export function buildEvidenceCorrection(failedAnswer, values, stagedRefs) {
     const frame = `${EVIDENCE_CHECK_FRAME_PREFIX} — the answer above states values that appear in NO tool ` +
-        `result from this turn, so they were not read from the data. Reply again using only names ` +
+        `result this run read, so they were not read from the data. Reply again using only names ` +
         `and numbers a tool actually returned. If you need one of these values, call the tool that ` +
         `provides it.` +
         (stagedRefs === undefined ? '' : stagedRefsTeachingClause(stagedRefs)) +
@@ -220,14 +278,16 @@ export function buildEvidenceCorrection(failedAnswer, values, stagedRefs) {
  */
 export function evidenceRefusalSentence(values, posture, revised) {
     const head = posture === 'rails'
-        ? `[agentfootprint] this answer was NOT returned: ${values.length} value(s) in it appear in no tool result from this turn`
-        : `[agentfootprint] this answer states ${values.length} value(s) that appear in no tool result from this turn`;
+        ? `[agentfootprint] this answer was NOT returned: ${values.length} value(s) in it appear in no tool result this run read`
+        : `[agentfootprint] this answer states ${values.length} value(s) that appear in no tool result this run read`;
     return (`${head} — ${describeValues(values)}. ` +
         (revised ? 'The model was asked once to correct them and they survived the revision. ' : '') +
         'What would satisfy the check: every name and number in the answer appears in a tool ' +
         'result (or in the message you sent). Call a tool that returns these values, declare their ' +
         'shape via `shapes` if they are legitimate and the extractor mis-read them, or accept the ' +
         "answer with `posture: 'assist'`. This check catches INVENTED values only — it cannot " +
-        'tell you whether a claim built from real values is true.');
+        'tell you whether a claim built from real values is true, and it does not ask WHEN a value ' +
+        'was read (`noticePriorTurnEvidence` reports that). What it reads is the live window: a ' +
+        'result a window strategy has already dropped is not in it.');
 }
 //# sourceMappingURL=gate.js.map

package/dist/esm/core/agent/evidence/gate.js.map

@@ -1 +1 @@
-{"version":3,"file":"gate.js","sourceRoot":"","sources":["../../../../../src/core/agent/evidence/gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AAGH,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAE5D,OAAO,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAU7D,MAAM,QAAQ,GAA+B,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAE1E,4EAA4E;AAC5E,8EAA8E;AAC9E,oEAAoE;AACpE,OAAO,EAAE,2BAA2B,EAAE,CAAC;AAEvC,wEAAwE;AACxE,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAEtC,2CAA2C;AAC3C,MAAM,eAAe,GAAG,EAAE,CAAC;AAE3B,0EAA0E;AAC1E,SAAS,IAAI,CAAC,CAAS;IACrB,OAAO,CAAC,CAAC,MAAM,IAAI,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,GAAG,CAAC,CAAC,GAAG,CAAC;AACjF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAA+B,EAAE;IACnE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,QAAQ,CAAC;IACzC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACb,sDAAsD,MAAM,CAAC,OAAO,CAAC,qBAAqB;YACxF,oFAAoF;YACpF,oFAAoF;YACpF,kCAAkC,CACrC,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC;IACtC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CACb,yFAAyF;YACvF,WAAW,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,uDAAuD;YACxF,0FAA0F,CAC7F,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC;IAClC,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,0EAA0E;YACxE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,+DAA+D;YACpF,sFAAsF;YACtF,0BAA0B,CAC7B,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAoB,EAAE,CAAC;IACnC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACjC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CACb,wFAAwF;gBACtF,kFAAkF;gBAClF,4EAA4E,CAC/E,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CACb,wEAAwE,IAAI,WAAW;gBACrF,6EAA6E,CAChF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,YAAY,MAAM,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CACb,oDAAoD,IAAI,6BAA6B,CACtF,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACpD,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QACnC,IAAI,EAAE,YAAY,MAAM;YAAE,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;aACrD,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;YAChC,MAAM,IAAI,GAAG,cAAc,CAAC,EAAE,CAAC,CAAC;YAChC,sEAAsE;YACtE,gDAAgD;YAChD,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,IAAI,CAAC;gBAAE,IAAI,IAAI,KAAK,EAAE;oBAAE,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChF,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CACb,oFAAoF,CACrF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,cAAc,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AAC7E,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,MAAM,CAAC,EAAU;IACxB,OAAO,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AACzE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CACzB,MAAc,EACd,IAIC;IAED,MAAM,UAAU,GAAG,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACxD,MAAM,WAAW,GAAuB,EAAE,CAAC;IAC3C,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACnF,IAAI,CAAC,KAAK;YAAE,WAAW,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC;IACzF,CAAC;IACD,OAAO;QACL,WAAW;QACX,UAAU,EAAE,UAAU,CAAC,MAAM;QAC7B,iBAAiB,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;KAC3C,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,cAAc,CAAC,MAAmC;IAChE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5E,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC1C,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,SAAS,IAAI,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC/D,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,uBAAuB,CACrC,YAAoB,EACpB,MAAmC,EACnC,UAA4B;IAE5B,MAAM,KAAK,GACT,GAAG,2BAA2B,2DAA2D;QACzF,2FAA2F;QAC3F,4FAA4F;QAC5F,cAAc;QACd,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,wBAAwB,CAAC,UAAU,CAAC,CAAC;QACtE,6EAA6E;QAC7E,4FAA4F;QAC5F,2FAA2F;QAC3F,oBAAoB,CAAC;IACvB,OAAO;QACL,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,EAAE;QAC5C,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,OAAO,cAAc,CAAC,MAAM,CAAC,EAAE,EAAE;KACnE,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,uBAAuB,CACrC,MAAmC,EACnC,OAAwB,EACxB,OAAgB;IAEhB,MAAM,IAAI,GACR,OAAO,KAAK,OAAO;QACjB,CAAC,CAAC,kDAAkD,MAAM,CAAC,MAAM,yDAAyD;QAC1H,CAAC,CAAC,uCAAuC,MAAM,CAAC,MAAM,wDAAwD,CAAC;IACnH,OAAO,CACL,GAAG,IAAI,MAAM,cAAc,CAAC,MAAM,CAAC,IAAI;QACvC,CAAC,OAAO,CAAC,CAAC,CAAC,2EAA2E,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5F,sFAAsF;QACtF,4FAA4F;QAC5F,2FAA2F;QAC3F,uFAAuF;QACvF,0DAA0D,CAC3D,CAAC;AACJ,CAAC"}
+{"version":3,"file":"gate.js","sourceRoot":"","sources":["../../../../../src/core/agent/evidence/gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2DG;AAGH,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAE5D,OAAO,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAU7D,MAAM,QAAQ,GAA+B,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAE1E,4EAA4E;AAC5E,8EAA8E;AAC9E,oEAAoE;AACpE,OAAO,EAAE,2BAA2B,EAAE,CAAC;AAEvC,wEAAwE;AACxE,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAEtC,2CAA2C;AAC3C,MAAM,eAAe,GAAG,EAAE,CAAC;AAE3B,0EAA0E;AAC1E,SAAS,IAAI,CAAC,CAAS;IACrB,OAAO,CAAC,CAAC,MAAM,IAAI,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,GAAG,CAAC,CAAC,GAAG,CAAC;AACjF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAA+B,EAAE;IACnE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,QAAQ,CAAC;IACzC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACb,sDAAsD,MAAM,CAAC,OAAO,CAAC,qBAAqB;YACxF,oFAAoF;YACpF,oFAAoF;YACpF,kCAAkC,CACrC,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC;IACtC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CACb,yFAAyF;YACvF,WAAW,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,uDAAuD;YACxF,0FAA0F,CAC7F,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC;IAClC,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,0EAA0E;YACxE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,+DAA+D;YACpF,sFAAsF;YACtF,0BAA0B,CAC7B,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAoB,EAAE,CAAC;IACnC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACjC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CACb,wFAAwF;gBACtF,kFAAkF;gBAClF,4EAA4E,CAC/E,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CACb,wEAAwE,IAAI,WAAW;gBACrF,6EAA6E,CAChF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,YAAY,MAAM,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CACb,oDAAoD,IAAI,6BAA6B,CACtF,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACpD,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QACnC,IAAI,EAAE,YAAY,MAAM;YAAE,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;aACrD,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;YAChC,MAAM,IAAI,GAAG,cAAc,CAAC,EAAE,CAAC,CAAC;YAChC,sEAAsE;YACtE,gDAAgD;YAChD,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,IAAI,CAAC;gBAAE,IAAI,IAAI,KAAK,EAAE;oBAAE,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChF,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CACb,oFAAoF,CACrF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,cAAc,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AAC7E,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,MAAM,CAAC,EAAU;IACxB,OAAO,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AACzE,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,WAAW,CACzB,MAAc,EACd,IAIC;IAED,MAAM,UAAU,GAAG,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACxD,MAAM,WAAW,GAAuB,EAAE,CAAC;IAC3C,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,IAAI,eAAmC,CAAC;IACxC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAAE,SAAS;QACpD,oEAAoE;QACpE,wEAAwE;QACxE,wEAAwE;QACxE,kCAAkC;QAClC,IAAI,IAAwB,CAAC;QAC7B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC5C,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,GAAG,IAAI,CAAC;gBAAE,IAAI,GAAG,IAAI,CAAC;QAC7E,CAAC;QACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,WAAW,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC;YAC3E,SAAS;QACX,CAAC;QACD,IAAI,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;YACtC,YAAY,IAAI,CAAC,CAAC;YAClB,SAAS;QACX,CAAC;QACD,cAAc,IAAI,CAAC,CAAC;QACpB,IAAI,eAAe,KAAK,SAAS,IAAI,IAAI,GAAG,eAAe;YAAE,eAAe,GAAG,IAAI,CAAC;IACtF,CAAC;IACD,OAAO;QACL,WAAW;QACX,UAAU,EAAE,UAAU,CAAC,MAAM;QAC7B,iBAAiB,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;QAC1C,SAAS,EAAE;YACT,YAAY;YACZ,cAAc;YACd,GAAG,CAAC,eAAe,KAAK,SAAS,IAAI,EAAE,eAAe,EAAE,CAAC;YACzD,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW;YACtC,mBAAmB,EAAE,IAAI,CAAC,QAAQ,CAAC,mBAAmB;YACtD,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;SACxC;KACF,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,cAAc,CAAC,MAAmC;IAChE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5E,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC1C,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,SAAS,IAAI,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC/D,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,MAAM,UAAU,uBAAuB,CACrC,YAAoB,EACpB,MAAmC,EACnC,UAA4B;IAE5B,MAAM,KAAK,GACT,GAAG,2BAA2B,2DAA2D;QACzF,0FAA0F;QAC1F,4FAA4F;QAC5F,cAAc;QACd,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,wBAAwB,CAAC,UAAU,CAAC,CAAC;QACtE,6EAA6E;QAC7E,4FAA4F;QAC5F,2FAA2F;QAC3F,oBAAoB,CAAC;IACvB,OAAO;QACL,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,EAAE;QAC5C,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,OAAO,cAAc,CAAC,MAAM,CAAC,EAAE,EAAE;KACnE,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,uBAAuB,CACrC,MAAmC,EACnC,OAAwB,EACxB,OAAgB;IAEhB,MAAM,IAAI,GACR,OAAO,KAAK,OAAO;QACjB,CAAC,CAAC,kDAAkD,MAAM,CAAC,MAAM,wDAAwD;QACzH,CAAC,CAAC,uCAAuC,MAAM,CAAC,MAAM,uDAAuD,CAAC;IAClH,OAAO,CACL,GAAG,IAAI,MAAM,cAAc,CAAC,MAAM,CAAC,IAAI;QACvC,CAAC,OAAO,CAAC,CAAC,CAAC,2EAA2E,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5F,sFAAsF;QACtF,4FAA4F;QAC5F,2FAA2F;QAC3F,uFAAuF;QACvF,4FAA4F;QAC5F,yFAAyF;QACzF,4DAA4D,CAC7D,CAAC;AACJ,CAAC"}

package/dist/esm/core/agent/evidence/types.d.ts

@@ -6,6 +6,7 @@
  * Role:    core/ layer. Nothing here runs; it is the contract.
  * Emits:   N/A.
  */
+import type { AnswerGroundingReading } from '../../../integrity/prior-turn-evidence/check.js';
 /**
  * How hard the check pushes back. **Same three words as the skill-graph
  * routing dial, deliberately** — one posture vocabulary across the library —
@@ -138,4 +139,15 @@ export interface EvidenceVerdict {
      * accusation.
      */
     readonly evidenceTruncated: boolean;
+    /**
+     * WHEN the answer's grounded values were read (9.83.0) — the same pass,
+     * one time axis.
+     *
+     * Always computed, because it is three counters over a loop that was
+     * already running. It is only READ when the operator armed
+     * `AgentOptions.noticePriorTurnEvidence`, which is what turns it into a
+     * `prior-turn-evidence` finding; nothing else in the gate consults it and
+     * no posture changes because of it.
+     */
+    readonly grounding: AnswerGroundingReading;
 }

package/dist/esm/core/agent/outputEnforcement.d.ts

@@ -105,8 +105,7 @@ export interface OutputFailure {
  * the two paths report a failure the same way.
  */
 export declare function describeFailure(err: unknown): OutputFailure;
-/** Opening of the authored frame. Stable — tests and readers match on it. */
-export declare const SCHEMA_CHECK_FRAME_PREFIX = "[schema check";
+export { SCHEMA_CHECK_FRAME_PREFIX } from '../../lib/saidByPerson.js';
 /**
  * The two messages a failed attempt adds to the conversation: the answer
  * that failed, and the correction.

package/dist/esm/core/agent/outputEnforcement.js

@@ -35,6 +35,7 @@
  */
 import { fnv1a } from '../slots/helpers.js';
 import { applyOutputSchema } from '../outputSchema.js';
+import { SCHEMA_CHECK_FRAME_PREFIX } from '../../lib/saidByPerson.js';
 /**
  * Append one row to the run's output-attempt ledger.
  *
@@ -65,8 +66,9 @@ export function describeFailure(err) {
     };
 }
 // ─── The corrective turn ─────────────────────────────────────────────
-/** Opening of the authored frame. Stable — tests and readers match on it. */
-export const SCHEMA_CHECK_FRAME_PREFIX = '[schema check';
+// The marker lives in the authorship registry both this file and a rule author
+// can import (9.84.0) — see `lib/saidByPerson.ts`. The frame below is ours.
+export { SCHEMA_CHECK_FRAME_PREFIX } from '../../lib/saidByPerson.js';
 /**
  * The two messages a failed attempt adds to the conversation: the answer
  * that failed, and the correction.

package/dist/esm/core/agent/outputEnforcement.js.map

@@ -1 +1 @@
-{"version":3,"file":"outputEnforcement.js","sourceRoot":"","sources":["../../../../src/core/agent/outputEnforcement.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAGH,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAA2B,MAAM,oBAAoB,CAAC;AAoDhF;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAwB,EAAE,GAAkB;IAC9E,MAAM,IAAI,GAAI,KAAK,CAAC,cAAuD,IAAI,EAAE,CAAC;IAClF,2EAA2E;IAC3E,+DAA+D;IAC/D,KAAK,CAAC,cAAc,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC;AACxC,CAAC;AAcD;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,GAAY;IAC1C,MAAM,CAAC,GAAG,GAOT,CAAC;IACF,MAAM,UAAU,GAAG,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IACzC,MAAM,IAAI,GACR,UAAU,EAAE,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACzF,OAAO;QACL,KAAK,EAAE,CAAC,EAAE,KAAK,IAAI,iBAAiB;QACpC,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,IAAI,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC;QACrD,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,CAAC;KACpC,CAAC;AACJ,CAAC;AAED,wEAAwE;AAExE,6EAA6E;AAC7E,MAAM,CAAC,MAAM,yBAAyB,GAAG,eAAe,CAAC;AAEzD;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CACjC,YAAoB,EACpB,OAAsB,EACtB,KAAmE;IAEnE,MAAM,KAAK,GACT,GAAG,yBAAyB,wDAAwD;QACpF,yBAAyB,KAAK,CAAC,OAAO,OAAO,KAAK,CAAC,aAAa,sBAAsB;QACtF,uFAAuF;QACvF,wFAAwF;QACxF,mEAAmE,CAAC;IACtE,OAAO;QACL,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,EAAE;QAC5C,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,OAAO,OAAO,CAAC,KAAK,EAAE,EAAE;KAC1D,CAAC;AACJ,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,oBAAoB,CAAC,GAA2B;IAC9D,OAAO,CACL,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAC9F,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC;AACxB,CAAC;AAED,wEAAwE;AAExE;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,qBAAqB,CAAC;AAEtD,8DAA8D;AAC9D,MAAM,UAAU,eAAe,CAC7B,UAA6C,EAC7C,WAAoB;IAEpB,OAAO;QACL,IAAI,EAAE,gBAAgB;QACtB,WAAW,EACT,oFAAoF;YACpF,iBAAiB;YACjB,CAAC,WAAW,CAAC,CAAC,CAAC,sBAAsB,WAAW,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,WAAW,EAAE,UAAU;KACxB,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAqB;IACxD,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC;IAC3E,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAAmC,EACnC,QAA4C;IAE5C,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IAC5C,MAAM,KAAK,GAAG,MAA0C,CAAC;IACzD,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,UAAU;QAAE,OAAO,SAAS,CAAC;IAC/D,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,KAAK,CAAC,YAAY,EAAE,CAAC;QACtC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClF,OAAO,QAA6C,CAAC;QACvD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,sEAAsE;QACtE,sEAAsE;QACtE,+DAA+D;IACjE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAkCD;;;;;;;;;GASG;AACH,MAAM,UAAU,WAAW,CACzB,MAAc,EACd,MAAmC;IAEnC,IAAI,CAAC;QACH,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAClC,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;AACH,CAAC"}
+{"version":3,"file":"outputEnforcement.js","sourceRoot":"","sources":["../../../../src/core/agent/outputEnforcement.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAGH,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAA2B,MAAM,oBAAoB,CAAC;AAChF,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAoDtE;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAwB,EAAE,GAAkB;IAC9E,MAAM,IAAI,GAAI,KAAK,CAAC,cAAuD,IAAI,EAAE,CAAC;IAClF,2EAA2E;IAC3E,+DAA+D;IAC/D,KAAK,CAAC,cAAc,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC;AACxC,CAAC;AAcD;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,GAAY;IAC1C,MAAM,CAAC,GAAG,GAOT,CAAC;IACF,MAAM,UAAU,GAAG,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IACzC,MAAM,IAAI,GACR,UAAU,EAAE,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACzF,OAAO;QACL,KAAK,EAAE,CAAC,EAAE,KAAK,IAAI,iBAAiB;QACpC,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,IAAI,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC;QACrD,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,CAAC;KACpC,CAAC;AACJ,CAAC;AAED,wEAAwE;AAExE,+EAA+E;AAC/E,4EAA4E;AAC5E,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAEtE;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CACjC,YAAoB,EACpB,OAAsB,EACtB,KAAmE;IAEnE,MAAM,KAAK,GACT,GAAG,yBAAyB,wDAAwD;QACpF,yBAAyB,KAAK,CAAC,OAAO,OAAO,KAAK,CAAC,aAAa,sBAAsB;QACtF,uFAAuF;QACvF,wFAAwF;QACxF,mEAAmE,CAAC;IACtE,OAAO;QACL,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,EAAE;QAC5C,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,OAAO,OAAO,CAAC,KAAK,EAAE,EAAE;KAC1D,CAAC;AACJ,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,oBAAoB,CAAC,GAA2B;IAC9D,OAAO,CACL,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAC9F,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC;AACxB,CAAC;AAED,wEAAwE;AAExE;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,qBAAqB,CAAC;AAEtD,8DAA8D;AAC9D,MAAM,UAAU,eAAe,CAC7B,UAA6C,EAC7C,WAAoB;IAEpB,OAAO;QACL,IAAI,EAAE,gBAAgB;QACtB,WAAW,EACT,oFAAoF;YACpF,iBAAiB;YACjB,CAAC,WAAW,CAAC,CAAC,CAAC,sBAAsB,WAAW,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,WAAW,EAAE,UAAU;KACxB,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAqB;IACxD,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC;IAC3E,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAAmC,EACnC,QAA4C;IAE5C,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IAC5C,MAAM,KAAK,GAAG,MAA0C,CAAC;IACzD,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,UAAU;QAAE,OAAO,SAAS,CAAC;IAC/D,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,KAAK,CAAC,YAAY,EAAE,CAAC;QACtC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClF,OAAO,QAA6C,CAAC;QACvD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,sEAAsE;QACtE,sEAAsE;QACtE,+DAA+D;IACjE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAkCD;;;;;;;;;GASG;AACH,MAAM,UAAU,WAAW,CACzB,MAAc,EACd,MAAmC;IAEnC,IAAI,CAAC;QACH,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAClC,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;AACH,CAAC"}

package/dist/esm/core/agent/selfCallNotice.d.ts

@@ -0,0 +1,140 @@
+/**
+ * The answer a `read_skill` SELF-CALL gets back (9.84.0).
+ *
+ * A self-call is `read_skill("X")` from a cursor already standing on X. It used
+ * to fall through the skill-graph gate's reachability arm — `makeReachableSkills`
+ * filters the cursor out of its own successor set (a MOVE to where you already
+ * are is not a move) and `openSkillIds()` excludes every graph-wired skill, so
+ * the cursor's own id is in neither half of `hops ∪ open`. The model was told:
+ *
+ *     read_skill("X") is not reachable from here. Reachable skills: …
+ *
+ * while X's body was in its system prompt and X's tools were in that very call's
+ * tool list. Read as a statement about AVAILABILITY — which is how a model reads
+ * "not reachable" — that is a flat contradiction of the request it arrived in,
+ * and the observed behaviour was to stop and answer that it could not help.
+ *
+ * ── THE LAW THIS FILE IS WRITTEN AGAINST ──────────────────────────────────
+ *
+ * A TOOL RESULT IS NOT READ ONCE. It is composed during iteration N, written
+ * into `history`, and then read by the model on call N+1 AND ON EVERY CALL
+ * AFTER IT for the rest of the turn — including the out-of-budget WRAP-UP,
+ * which `callLLM` serves with an EMPTY tool list under a user message saying
+ * "Do not request tools".
+ *
+ * The consequence is the whole design: NO COMPOSE-TIME CHECK CAN MAKE A
+ * FORWARD-LOOKING SENTENCE SAFE. A budget test, a posture test, a cursor test
+ * — each is true at the instant it runs and each is outlived by the sentence
+ * it admitted. Three rounds of this file fixed one clause at a time and each
+ * time a different clause was still false, because every one of them was a
+ * PREDICTION and the fix was always a better prediction.
+ *
+ * So the notice makes no predictions at all. Every clause is a fact about ONE
+ * already-finished event — the call the model made `read_skill` on — and every
+ * clause is anchored to that call by name ("that call"), never by deixis ("the
+ * call you just made", which denotes a different call each time it is re-read).
+ * A past fact about a named call cannot be falsified by anything that happens
+ * afterwards: not by the budget running out, not by a posture refusing a hop,
+ * not by a sibling tool in the same batch moving the cursor.
+ *
+ * ── WHAT WAS DELETED, AND WHY THE NOTICE STILL DOES ITS JOB ───────────────
+ *
+ * Gone: the exhortation ("Go ahead and act on the request"), the move offer
+ * ("read_skill MOVES you somewhere else — from here that would be: beta"), the
+ * open-skill offer ("These activate without moving you: gamma"), and the
+ * budget clause that was added to gate them. Each was false somewhere:
+ *
+ *   • the exhortation, on the wrap-up call, beside "Do not request tools";
+ *   • the move offer, on the wrap-up call (a hop is a tool call), under
+ *     `strictness: 'rails'` (every model hop refused) and under `'guard'` on a
+ *     decisively-routed turn (every hop not on an outstanding menu refused) —
+ *     where the sibling posture arm answers a taken-up offer with "read_skill
+ *     here reaches only the open skills: gamma", contradicting the notice from
+ *     the arm immediately above it, and spending escalation budget to do so;
+ *   • the budget clause, because a budget read at compose time is a claim
+ *     about a call that has not happened.
+ *
+ * The notice's JOB is to stop a model concluding its capability is gone. It
+ * does that by stating what it held, not by promising what it may do: you were
+ * standing in this skill, its instructions were in that call's prompt, its
+ * tools were on that call's wire, and asking took nothing away. A model that
+ * reads those four facts has no ground left for "I cannot help".
+ *
+ * The forward-looking half had a rightful owner all along, and it is not a
+ * tool result: the `read_skill` DESCRIPTION is recomposed on every single call,
+ * so it can safely speak in the present ("You are in 'beta'."), it is filtered
+ * for per-role visibility at source, and it is absent from the wrap-up because
+ * the whole tool list is. One owner for the present tense, one for the past,
+ * and they can no longer disagree — which is the only property that survived
+ * every round of this bug.
+ */
+import type { ActiveInjection } from '../../lib/injection-engine/types.js';
+import type { LLMToolSchema } from '../../adapters/types.js';
+/** What the current skill's tools did on the call the model made `read_skill` on. */
+export interface SelfSkillTools {
+    /** Every tool the skill declares — `[]` for a skill that declares none. */
+    readonly declared: readonly string[];
+    /** Those actually on that call's wire. A subset of `declared`. */
+    readonly served: readonly string[];
+}
+/**
+ * The skill's tools, as of the call the model just made — or `undefined` when
+ * that cannot be established, which is not the same answer and must not be
+ * reported as one.
+ *
+ * `undefined` means the notice says nothing about tools at all. It happens when
+ * the tools slot composed no per-iteration list (`reactMode: 'classic'` caches
+ * the slot, and `callLLM` falls back to its build-time schemas), or when the
+ * cursor's skill is not in the active set. Silence is the only honest output
+ * there: the alternative is a sentence naming tools the model may not have.
+ *
+ * The out-of-budget wrap-up is NOT one of these cases and must not be modelled
+ * as one. Its empty tool list belongs to a LATER call; the wire read here is
+ * always the one the model was really handed on the call being answered, and
+ * the notice speaks of that call and only that call.
+ */
+export declare function selfSkillTools(skillId: string, activeInjections: readonly ActiveInjection[] | undefined, wire: readonly LLMToolSchema[] | undefined): SelfSkillTools | undefined;
+/**
+ * The self-call's tool result.
+ *
+ * NOT a refusal to the MODEL, and deliberately so. The gate's other two arms
+ * refuse because the model asked for something it may not have; a self-call
+ * asks for a body it already holds, and the useful reply is the fact — where
+ * you stood, and what rode that call — not a decline. It is still counted as a
+ * refusal by the ESCALATION BUDGET (`noteSkillRefusal`, beside the emit), and
+ * those two facts do not fight: the budget is not measuring how the sentence
+ * reads, it is measuring a model that keeps asking the graph where it is
+ * instead of working, which is exactly the stuck run the budget escalates.
+ *
+ * It still OVERWRITES the tool's own result the way every other arm does,
+ * because that overwrite is what puts the authoritative sentence in front of
+ * the governance rules, the refusal cap and the after-tool moment, on both
+ * channels, before the model reads anything.
+ *
+ * The one thing not overwritten is a BODY. The live case is `surfaceMode:
+ * 'both'` — `'tool-only'` cannot arise here, because `skillBodyDelivery`
+ * refuses it at BUILD time for anything but an `llm-activated` skill and only a
+ * graph-wired skill can be the cursor. Under `'both'` the body is in the system
+ * prompt AND rides the tool result, and the second copy is the whole point of
+ * the mode: recency-first delivery, the body at the end of the window rather
+ * than only at the top of the prompt. Dropping it here would quietly demote
+ * `'both'` to `'system-prompt'` on the one call that asked to re-read.
+ *
+ * TENSE IS LOAD-BEARING, AND SO IS DEIXIS. Every clause below is past tense
+ * about a single named call, and every reference to that call is "that call" —
+ * bound by the opening clause, which says which call it was. "The call you just
+ * made" was the earlier wording and it is not safe: re-read four calls later it
+ * denotes call four, and the tools it names rode call one.
+ *
+ * There are exactly two present-tense phrases in the output and both are
+ * timeless rather than temporal: "It declares no tools of its own" (a
+ * declaration is fixed when the skill is defined and cannot vary within a run)
+ * and "Its instructions are repeated below" (the body is appended to this very
+ * string, so the sentence is true wherever the string is read).
+ */
+export declare function selfCallNotice(args: {
+    readonly skillId: string;
+    /** `undefined` when the wire could not be established — see `selfSkillTools`. */
+    readonly tools: SelfSkillTools | undefined;
+    readonly body?: string;
+}): string;

package/dist/esm/core/agent/selfCallNotice.js

@@ -0,0 +1,169 @@
+/**
+ * The answer a `read_skill` SELF-CALL gets back (9.84.0).
+ *
+ * A self-call is `read_skill("X")` from a cursor already standing on X. It used
+ * to fall through the skill-graph gate's reachability arm — `makeReachableSkills`
+ * filters the cursor out of its own successor set (a MOVE to where you already
+ * are is not a move) and `openSkillIds()` excludes every graph-wired skill, so
+ * the cursor's own id is in neither half of `hops ∪ open`. The model was told:
+ *
+ *     read_skill("X") is not reachable from here. Reachable skills: …
+ *
+ * while X's body was in its system prompt and X's tools were in that very call's
+ * tool list. Read as a statement about AVAILABILITY — which is how a model reads
+ * "not reachable" — that is a flat contradiction of the request it arrived in,
+ * and the observed behaviour was to stop and answer that it could not help.
+ *
+ * ── THE LAW THIS FILE IS WRITTEN AGAINST ──────────────────────────────────
+ *
+ * A TOOL RESULT IS NOT READ ONCE. It is composed during iteration N, written
+ * into `history`, and then read by the model on call N+1 AND ON EVERY CALL
+ * AFTER IT for the rest of the turn — including the out-of-budget WRAP-UP,
+ * which `callLLM` serves with an EMPTY tool list under a user message saying
+ * "Do not request tools".
+ *
+ * The consequence is the whole design: NO COMPOSE-TIME CHECK CAN MAKE A
+ * FORWARD-LOOKING SENTENCE SAFE. A budget test, a posture test, a cursor test
+ * — each is true at the instant it runs and each is outlived by the sentence
+ * it admitted. Three rounds of this file fixed one clause at a time and each
+ * time a different clause was still false, because every one of them was a
+ * PREDICTION and the fix was always a better prediction.
+ *
+ * So the notice makes no predictions at all. Every clause is a fact about ONE
+ * already-finished event — the call the model made `read_skill` on — and every
+ * clause is anchored to that call by name ("that call"), never by deixis ("the
+ * call you just made", which denotes a different call each time it is re-read).
+ * A past fact about a named call cannot be falsified by anything that happens
+ * afterwards: not by the budget running out, not by a posture refusing a hop,
+ * not by a sibling tool in the same batch moving the cursor.
+ *
+ * ── WHAT WAS DELETED, AND WHY THE NOTICE STILL DOES ITS JOB ───────────────
+ *
+ * Gone: the exhortation ("Go ahead and act on the request"), the move offer
+ * ("read_skill MOVES you somewhere else — from here that would be: beta"), the
+ * open-skill offer ("These activate without moving you: gamma"), and the
+ * budget clause that was added to gate them. Each was false somewhere:
+ *
+ *   • the exhortation, on the wrap-up call, beside "Do not request tools";
+ *   • the move offer, on the wrap-up call (a hop is a tool call), under
+ *     `strictness: 'rails'` (every model hop refused) and under `'guard'` on a
+ *     decisively-routed turn (every hop not on an outstanding menu refused) —
+ *     where the sibling posture arm answers a taken-up offer with "read_skill
+ *     here reaches only the open skills: gamma", contradicting the notice from
+ *     the arm immediately above it, and spending escalation budget to do so;
+ *   • the budget clause, because a budget read at compose time is a claim
+ *     about a call that has not happened.
+ *
+ * The notice's JOB is to stop a model concluding its capability is gone. It
+ * does that by stating what it held, not by promising what it may do: you were
+ * standing in this skill, its instructions were in that call's prompt, its
+ * tools were on that call's wire, and asking took nothing away. A model that
+ * reads those four facts has no ground left for "I cannot help".
+ *
+ * The forward-looking half had a rightful owner all along, and it is not a
+ * tool result: the `read_skill` DESCRIPTION is recomposed on every single call,
+ * so it can safely speak in the present ("You are in 'beta'."), it is filtered
+ * for per-role visibility at source, and it is absent from the wrap-up because
+ * the whole tool list is. One owner for the present tense, one for the past,
+ * and they can no longer disagree — which is the only property that survived
+ * every round of this bug.
+ */
+/**
+ * The skill's tools, as of the call the model just made — or `undefined` when
+ * that cannot be established, which is not the same answer and must not be
+ * reported as one.
+ *
+ * `undefined` means the notice says nothing about tools at all. It happens when
+ * the tools slot composed no per-iteration list (`reactMode: 'classic'` caches
+ * the slot, and `callLLM` falls back to its build-time schemas), or when the
+ * cursor's skill is not in the active set. Silence is the only honest output
+ * there: the alternative is a sentence naming tools the model may not have.
+ *
+ * The out-of-budget wrap-up is NOT one of these cases and must not be modelled
+ * as one. Its empty tool list belongs to a LATER call; the wire read here is
+ * always the one the model was really handed on the call being answered, and
+ * the notice speaks of that call and only that call.
+ */
+export function selfSkillTools(skillId, activeInjections, wire) {
+    if (wire === undefined || activeInjections === undefined)
+        return undefined;
+    const mine = activeInjections.find((i) => i.id === skillId);
+    if (mine === undefined)
+        return undefined;
+    const declared = (mine.inject.tools ?? []).map((t) => t.schema.name);
+    const onWire = new Set(wire.map((s) => s.name));
+    return { declared, served: declared.filter((n) => onWire.has(n)) };
+}
+/**
+ * The self-call's tool result.
+ *
+ * NOT a refusal to the MODEL, and deliberately so. The gate's other two arms
+ * refuse because the model asked for something it may not have; a self-call
+ * asks for a body it already holds, and the useful reply is the fact — where
+ * you stood, and what rode that call — not a decline. It is still counted as a
+ * refusal by the ESCALATION BUDGET (`noteSkillRefusal`, beside the emit), and
+ * those two facts do not fight: the budget is not measuring how the sentence
+ * reads, it is measuring a model that keeps asking the graph where it is
+ * instead of working, which is exactly the stuck run the budget escalates.
+ *
+ * It still OVERWRITES the tool's own result the way every other arm does,
+ * because that overwrite is what puts the authoritative sentence in front of
+ * the governance rules, the refusal cap and the after-tool moment, on both
+ * channels, before the model reads anything.
+ *
+ * The one thing not overwritten is a BODY. The live case is `surfaceMode:
+ * 'both'` — `'tool-only'` cannot arise here, because `skillBodyDelivery`
+ * refuses it at BUILD time for anything but an `llm-activated` skill and only a
+ * graph-wired skill can be the cursor. Under `'both'` the body is in the system
+ * prompt AND rides the tool result, and the second copy is the whole point of
+ * the mode: recency-first delivery, the body at the end of the window rather
+ * than only at the top of the prompt. Dropping it here would quietly demote
+ * `'both'` to `'system-prompt'` on the one call that asked to re-read.
+ *
+ * TENSE IS LOAD-BEARING, AND SO IS DEIXIS. Every clause below is past tense
+ * about a single named call, and every reference to that call is "that call" —
+ * bound by the opening clause, which says which call it was. "The call you just
+ * made" was the earlier wording and it is not safe: re-read four calls later it
+ * denotes call four, and the tools it names rode call one.
+ *
+ * There are exactly two present-tense phrases in the output and both are
+ * timeless rather than temporal: "It declares no tools of its own" (a
+ * declaration is fixed when the skill is defined and cannot vary within a run)
+ * and "Its instructions are repeated below" (the body is appended to this very
+ * string, so the sentence is true wherever the string is read).
+ */
+export function selfCallNotice(args) {
+    const { skillId, tools, body } = args;
+    // "were in that call's system prompt" is a claim about the prompt, and the
+    // evidence for it is that the skill was in the ACTIVE set for that call —
+    // which is exactly what `tools !== undefined` establishes (see
+    // `selfSkillTools`). With no body to append and no proof it was mounted, the
+    // notice says nothing about the instructions rather than asserting where
+    // they were.
+    const bodyClause = body !== undefined
+        ? `Its instructions are repeated below. `
+        : tools !== undefined
+            ? `Its instructions were in that call's system prompt. `
+            : '';
+    const toolClause = tools === undefined
+        ? ''
+        : tools.declared.length === 0
+            ? `It declares no tools of its own. `
+            : tools.served.length > 0
+                ? `Its own tools were on that call's tool list: ${tools.served.join(', ')}.`
+                : `None of its own tools were on that call's tool list (${tools.declared.join(', ')} ` +
+                    `${tools.declared.length === 1 ? 'was' : 'were'} withheld).`;
+    // The opening clause is what binds "that call" for every clause after it, so
+    // it names the event rather than the state: not where the cursor IS, but
+    // where it stood when this call was made. A sibling tool in the SAME batch
+    // can fire a step edge and move the cursor before the model reads this — the
+    // read_skill description in that request will then say "You are in 'beta'",
+    // and the two must not contradict each other. Only one of them is entitled
+    // to the present tense, and it is the one recomposed on every call.
+    const notice = `read_skill("${skillId}") named the skill you were already standing in when you ` +
+        `made that call, so the cursor did not move — nothing was activated, and nothing ` +
+        `was taken away. ${bodyClause}${toolClause}`;
+    const trimmed = notice.trimEnd();
+    return body === undefined ? trimmed : `${trimmed}\n\n${body}`;
+}
+//# sourceMappingURL=selfCallNotice.js.map

package/dist/esm/core/agent/selfCallNotice.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"selfCallNotice.js","sourceRoot":"","sources":["../../../../src/core/agent/selfCallNotice.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqEG;AAaH;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,cAAc,CAC5B,OAAe,EACf,gBAAwD,EACxD,IAA0C;IAE1C,IAAI,IAAI,KAAK,SAAS,IAAI,gBAAgB,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3E,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC;IAC5D,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACzC,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACrE,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,MAAM,UAAU,cAAc,CAAC,IAK9B;IACC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;IACtC,2EAA2E;IAC3E,0EAA0E;IAC1E,+DAA+D;IAC/D,6EAA6E;IAC7E,yEAAyE;IACzE,aAAa;IACb,MAAM,UAAU,GACd,IAAI,KAAK,SAAS;QAChB,CAAC,CAAC,uCAAuC;QACzC,CAAC,CAAC,KAAK,KAAK,SAAS;YACrB,CAAC,CAAC,sDAAsD;YACxD,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,UAAU,GACd,KAAK,KAAK,SAAS;QACjB,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;YAC7B,CAAC,CAAC,mCAAmC;YACrC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;gBACzB,CAAC,CAAC,gDAAgD,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;gBAC5E,CAAC,CAAC,wDAAwD,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;oBACpF,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,aAAa,CAAC;IACnE,6EAA6E;IAC7E,yEAAyE;IACzE,2EAA2E;IAC3E,6EAA6E;IAC7E,4EAA4E;IAC5E,2EAA2E;IAC3E,oEAAoE;IACpE,MAAM,MAAM,GACV,eAAe,OAAO,2DAA2D;QACjF,kFAAkF;QAClF,mBAAmB,UAAU,GAAG,UAAU,EAAE,CAAC;IAC/C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IACjC,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,OAAO,IAAI,EAAE,CAAC;AAChE,CAAC"}

package/dist/esm/core/agent/stages/route.d.ts

@@ -75,4 +75,9 @@ hasWrapUp?: boolean,
  *  Both absent → the claim seam never runs and not one line changes. */
 claims?: readonly DeclaredClaim[], integrityLedger?: {
     current: DispositionLedger | undefined;
-}): (scope: TypedScope<AgentState>) => RouteBranch | Promise<RouteBranch>;
+}, 
+/** `AgentOptions.noticePriorTurnEvidence` (9.83.0) — the claim seam's
+ *  recency read. Needs the evidence gate to be armed too (it owns the
+ *  extractor), so absent OR gate-less → not one row, not one event, and
+ *  the decider a pre-9.83.0 chart was handed. */
+noticePriorTurnEvidence?: boolean): (scope: TypedScope<AgentState>) => RouteBranch | Promise<RouteBranch>;