alphacouncil-agent 0.8.0 → 0.9.0-solo-test.2

package/.claude/commands/alpha.md

@@ -13,7 +13,7 @@ Request: **$ARGUMENTS**
 |---|---|
 | *(empty)* | Print the mode table below and stop. Do not start a run. |
 | a ticker alone, or a question | **Full council.** Go to "Full council" below. |
-| ticker + `quick` | The `quick` preset: 4 analysts and the debate. No bench, no verification. |
+| ticker + `quick` | The `quick` evidence preset: 4 analysts + the selected master methods + debate. No verification. |
 | ticker + `screen` | `screen_ticker` only. No language-model judgment, no subagents. |
 | ticker + `options` | `get_options_chain` only. |
 | ticker + `news` | `get_news` on the symbol, and on its CIK when it is a US filer. |
@@ -22,8 +22,8 @@ Request: **$ARGUMENTS**
 When `$ARGUMENTS` is empty, print exactly this and stop:
 
 ```
-/alpha <TICKER>          full council — asks which preset first
-/alpha <TICKER> quick    4 analysts + debate, no bench, no verification
+/alpha <TICKER>          full council — shows every master, then asks which to run
+/alpha <TICKER> quick    4 analysts + selected masters + debate, no verification
 /alpha <TICKER> screen   mechanical filings screen only        (no model spend)
 /alpha <TICKER> options  IV term structure, skew, positioning  (no model spend)
 /alpha <TICKER> news     dated filings and headlines           (no model spend)
@@ -41,13 +41,40 @@ Say plainly that the four marked modes call keyless data tools and spawn no suba
 they cost nothing beyond this turn. The council modes spawn one subagent per seat, and that
 is where the spend is.
 
+## Council selection gate — mandatory for full and quick
+
+This gate happens before any research tool, run envelope, network fetch or subagent. It is
+the same in Claude Code, Codex, OpenCode and Grok Build.
+
+1. Call `begin_council_selection` with the symbol, original request, language and host. If
+   the request explicitly names masters, also pass those stable IDs as
+   `preselected_master_ids`; this highlights them but does not confirm them.
+2. Show **every returned master individually, in the returned order and with its stable
+   number**. Each row must include `identity`, `method`, `best_for` and `maturity`; a school
+   name or a count is not a substitute for the individual catalog.
+3. Ask for one submission. Accept one number from `1..N`, any comma/space-separated
+   combination, ranges such as `1-4` or `1..4`, stable IDs/names, or `all`. A host-native
+   multi-select is a convenience only. If it is unavailable or cannot show the full catalog,
+   use the numbered text table and plain reply on every host.
+4. If the original request already named masters or said `all`, prefill that choice but
+   **still show the full catalog and require this run's submission**. Do not silently reuse a
+   prior choice. The submitted choice is the confirmation; do not ask a second confirmation.
+5. Call `confirm_master_selection` with the returned `selection_id`, `catalog_hash`,
+   `display_ack: true`, and exactly one of `selected_master_ids`, `select_all: true`, or
+   `selection`. Retain the returned one-use `selection_receipt`.
+6. Only now call `plan_visible_run`, `collect_evidence` or `analyze_symbol`, passing that
+   `selection_receipt`. Do not also pass `masters` or `masters_roster`; the receipt is the
+   authoritative selection. If the receipt is missing, expired, stale or consumed, restart
+   from `begin_council_selection`.
+
+`screen`, `options`, `news` and `market` are data-only modes and skip this gate. `quick` is
+still a council judgment, so it never skips the gate; it changes the analyst fan-out, not the
+master-selection contract.
+
 ## Full council
 
-1. **Ask which masters, once, then run.** Call `list_council_options` and ask only about the
-   master bench — the six schools by name with their members, plus "all" and "none". Analysts
-   default to the eight-seat fan-out; do not ask about them. After the answer, start
-   immediately: no preset question, no confirmation. **Skip the question entirely** when the
-   request already said (a named school, "everything", "no masters", "be quick").
+1. Complete the mandatory council selection gate above. Analysts default to the eight-seat
+   fan-out; do not ask about them.
 2. Follow `skills/alphacouncil-agent/SKILL.md` from Stage 0. Do not improvise a shorter
    workflow: a report that looks finished and skipped the bench is worse than an obviously
    partial one.
@@ -61,9 +88,10 @@ is where the spend is.
 
 ## Quick mode owes the reader one sentence
 
-State in the output that no master lenses ran and nothing was cross-verified, so the
-confidence is lower than a standard run. Without it, a four-seat run reads like a full
-council result.
+Complete the same mandatory council selection gate, then use four analysts, the selected
+masters and the debate without verifier fan-out. State that evidence coverage and
+cross-verification are thinner than a standard run; list the selected masters so the quick
+result cannot be mistaken for the full bench.
 
 ## Screen mode
 

package/.claude-plugin/marketplace.json

@@ -6,14 +6,14 @@
   },
   "metadata": {
     "description": "AlphaCouncil plugins for public-equity research.",
-    "version": "0.8.0"
+    "version": "0.9.0-solo-test.2"
   },
   "plugins": [
     {
       "name": "alphacouncil-agent",
       "source": "./",
       "description": "Multi-agent equity research: evidence packets, bull/bear debate, portfolio-manager decision.",
-      "version": "0.8.0",
+      "version": "0.9.0-solo-test.2",
       "author": {
         "name": "Zhao73"
       },

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "alphacouncil-agent",
-  "version": "0.8.0",
+  "version": "0.9.0-solo-test.2",
   "description": "Multi-agent public-equity research workflow for Claude Code: spawns analyst workers, gathers sourced JSON evidence packets, runs bull/bear debate, and produces a portfolio-manager Buy/Overweight/Hold/Underweight/Sell decision with a full report.",
   "author": {
     "name": "Zhao73"

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "alphacouncil-agent",
-  "version": "0.8.0",
+  "version": "0.9.0-solo-test.2",
   "description": "Host-visible or background public-equity research workflow with shared evidence packets.",
   "author": {
     "name": "Zhao73"
@@ -28,5 +28,5 @@
       "@alphacouncil-agent compare AAPL, 0700.HK, 7203.T."
     ]
   },
-  "mcpServers": "./.mcp.json"
+  "mcpServers": "./codex.mcp.json"
 }

package/.grok/commands/alpha.md

@@ -13,7 +13,7 @@ Request: **$ARGUMENTS**
 |---|---|
 | *(empty)* | Print the mode table below and stop. Do not start a run. |
 | a ticker alone, or a question | **Full council.** Go to "Full council" below. |
-| ticker + `quick` | The `quick` preset: 4 analysts and the debate. No bench, no verification. |
+| ticker + `quick` | The `quick` evidence preset: 4 analysts + the selected master methods + debate. No verification. |
 | ticker + `screen` | `screen_ticker` only. No language-model judgment, no subagents. |
 | ticker + `options` | `get_options_chain` only. |
 | ticker + `news` | `get_news` on the symbol, and on its CIK when it is a US filer. |
@@ -22,8 +22,8 @@ Request: **$ARGUMENTS**
 When `$ARGUMENTS` is empty, print exactly this and stop:
 
 ```
-/alpha <TICKER>          full council — asks which preset first
-/alpha <TICKER> quick    4 analysts + debate, no bench, no verification
+/alpha <TICKER>          full council — shows every master, then asks which to run
+/alpha <TICKER> quick    4 analysts + selected masters + debate, no verification
 /alpha <TICKER> screen   mechanical filings screen only        (no model spend)
 /alpha <TICKER> options  IV term structure, skew, positioning  (no model spend)
 /alpha <TICKER> news     dated filings and headlines           (no model spend)
@@ -41,13 +41,40 @@ Say plainly that the four marked modes call keyless data tools and spawn no suba
 they cost nothing beyond this turn. The council modes spawn one subagent per seat, and that
 is where the spend is.
 
+## Council selection gate — mandatory for full and quick
+
+This gate happens before any research tool, run envelope, network fetch or subagent. It is
+the same in Claude Code, Codex, OpenCode and Grok Build.
+
+1. Call `begin_council_selection` with the symbol, original request, language and host. If
+   the request explicitly names masters, also pass those stable IDs as
+   `preselected_master_ids`; this highlights them but does not confirm them.
+2. Show **every returned master individually, in the returned order and with its stable
+   number**. Each row must include `identity`, `method`, `best_for` and `maturity`; a school
+   name or a count is not a substitute for the individual catalog.
+3. Ask for one submission. Accept one number from `1..N`, any comma/space-separated
+   combination, ranges such as `1-4` or `1..4`, stable IDs/names, or `all`. A host-native
+   multi-select is a convenience only. If it is unavailable or cannot show the full catalog,
+   use the numbered text table and plain reply on every host.
+4. If the original request already named masters or said `all`, prefill that choice but
+   **still show the full catalog and require this run's submission**. Do not silently reuse a
+   prior choice. The submitted choice is the confirmation; do not ask a second confirmation.
+5. Call `confirm_master_selection` with the returned `selection_id`, `catalog_hash`,
+   `display_ack: true`, and exactly one of `selected_master_ids`, `select_all: true`, or
+   `selection`. Retain the returned one-use `selection_receipt`.
+6. Only now call `plan_visible_run`, `collect_evidence` or `analyze_symbol`, passing that
+   `selection_receipt`. Do not also pass `masters` or `masters_roster`; the receipt is the
+   authoritative selection. If the receipt is missing, expired, stale or consumed, restart
+   from `begin_council_selection`.
+
+`screen`, `options`, `news` and `market` are data-only modes and skip this gate. `quick` is
+still a council judgment, so it never skips the gate; it changes the analyst fan-out, not the
+master-selection contract.
+
 ## Full council
 
-1. **Ask which masters, once, then run.** Call `list_council_options` and ask only about the
-   master bench — the six schools by name with their members, plus "all" and "none". Analysts
-   default to the eight-seat fan-out; do not ask about them. After the answer, start
-   immediately: no preset question, no confirmation. **Skip the question entirely** when the
-   request already said (a named school, "everything", "no masters", "be quick").
+1. Complete the mandatory council selection gate above. Analysts default to the eight-seat
+   fan-out; do not ask about them.
 2. Follow `skills/alphacouncil-agent/SKILL.md` from Stage 0. Do not improvise a shorter
    workflow: a report that looks finished and skipped the bench is worse than an obviously
    partial one.
@@ -61,9 +88,10 @@ is where the spend is.
 
 ## Quick mode owes the reader one sentence
 
-State in the output that no master lenses ran and nothing was cross-verified, so the
-confidence is lower than a standard run. Without it, a four-seat run reads like a full
-council result.
+Complete the same mandatory council selection gate, then use four analysts, the selected
+masters and the debate without verifier fan-out. State that evidence coverage and
+cross-verification are thinner than a standard run; list the selected masters so the quick
+result cannot be mistaken for the full bench.
 
 ## Screen mode
 

package/.opencode/command/alpha.md

@@ -13,7 +13,7 @@ Request: **$ARGUMENTS**
 |---|---|
 | *(empty)* | Print the mode table below and stop. Do not start a run. |
 | a ticker alone, or a question | **Full council.** Go to "Full council" below. |
-| ticker + `quick` | The `quick` preset: 4 analysts and the debate. No bench, no verification. |
+| ticker + `quick` | The `quick` evidence preset: 4 analysts + the selected master methods + debate. No verification. |
 | ticker + `screen` | `screen_ticker` only. No language-model judgment, no subagents. |
 | ticker + `options` | `get_options_chain` only. |
 | ticker + `news` | `get_news` on the symbol, and on its CIK when it is a US filer. |
@@ -22,8 +22,8 @@ Request: **$ARGUMENTS**
 When `$ARGUMENTS` is empty, print exactly this and stop:
 
 ```
-/alpha <TICKER>          full council — asks which preset first
-/alpha <TICKER> quick    4 analysts + debate, no bench, no verification
+/alpha <TICKER>          full council — shows every master, then asks which to run
+/alpha <TICKER> quick    4 analysts + selected masters + debate, no verification
 /alpha <TICKER> screen   mechanical filings screen only        (no model spend)
 /alpha <TICKER> options  IV term structure, skew, positioning  (no model spend)
 /alpha <TICKER> news     dated filings and headlines           (no model spend)
@@ -41,13 +41,40 @@ Say plainly that the four marked modes call keyless data tools and spawn no suba
 they cost nothing beyond this turn. The council modes spawn one subagent per seat, and that
 is where the spend is.
 
+## Council selection gate — mandatory for full and quick
+
+This gate happens before any research tool, run envelope, network fetch or subagent. It is
+the same in Claude Code, Codex, OpenCode and Grok Build.
+
+1. Call `begin_council_selection` with the symbol, original request, language and host. If
+   the request explicitly names masters, also pass those stable IDs as
+   `preselected_master_ids`; this highlights them but does not confirm them.
+2. Show **every returned master individually, in the returned order and with its stable
+   number**. Each row must include `identity`, `method`, `best_for` and `maturity`; a school
+   name or a count is not a substitute for the individual catalog.
+3. Ask for one submission. Accept one number from `1..N`, any comma/space-separated
+   combination, ranges such as `1-4` or `1..4`, stable IDs/names, or `all`. A host-native
+   multi-select is a convenience only. If it is unavailable or cannot show the full catalog,
+   use the numbered text table and plain reply on every host.
+4. If the original request already named masters or said `all`, prefill that choice but
+   **still show the full catalog and require this run's submission**. Do not silently reuse a
+   prior choice. The submitted choice is the confirmation; do not ask a second confirmation.
+5. Call `confirm_master_selection` with the returned `selection_id`, `catalog_hash`,
+   `display_ack: true`, and exactly one of `selected_master_ids`, `select_all: true`, or
+   `selection`. Retain the returned one-use `selection_receipt`.
+6. Only now call `plan_visible_run`, `collect_evidence` or `analyze_symbol`, passing that
+   `selection_receipt`. Do not also pass `masters` or `masters_roster`; the receipt is the
+   authoritative selection. If the receipt is missing, expired, stale or consumed, restart
+   from `begin_council_selection`.
+
+`screen`, `options`, `news` and `market` are data-only modes and skip this gate. `quick` is
+still a council judgment, so it never skips the gate; it changes the analyst fan-out, not the
+master-selection contract.
+
 ## Full council
 
-1. **Ask which masters, once, then run.** Call `list_council_options` and ask only about the
-   master bench — the six schools by name with their members, plus "all" and "none". Analysts
-   default to the eight-seat fan-out; do not ask about them. After the answer, start
-   immediately: no preset question, no confirmation. **Skip the question entirely** when the
-   request already said (a named school, "everything", "no masters", "be quick").
+1. Complete the mandatory council selection gate above. Analysts default to the eight-seat
+   fan-out; do not ask about them.
 2. Follow `skills/alphacouncil-agent/SKILL.md` from Stage 0. Do not improvise a shorter
    workflow: a report that looks finished and skipped the bench is worse than an obviously
    partial one.
@@ -61,9 +88,10 @@ is where the spend is.
 
 ## Quick mode owes the reader one sentence
 
-State in the output that no master lenses ran and nothing was cross-verified, so the
-confidence is lower than a standard run. Without it, a four-seat run reads like a full
-council result.
+Complete the same mandatory council selection gate, then use four analysts, the selected
+masters and the debate without verifier fan-out. State that evidence coverage and
+cross-verification are thinner than a standard run; list the selected masters so the quick
+result cannot be mistaken for the full bench.
 
 ## Screen mode
 

package/AGENTS.md

@@ -13,10 +13,20 @@ Run `npm run check` after any code or prompt change.
 The MCP server is the load-bearing integration on every host: it reads `personas/` directly,
 so a host that ignores the generated agent files still gets correct prompts.
 
+Every host also follows the same mandatory master-selection protocol for a full or quick
+council. Call `begin_council_selection`, display every returned entry with its number,
+identity, method and `best_for`, collect a numbered/range/ID/`all` submission, then call
+`confirm_master_selection` with `display_ack: true`. Existing names in the request are only
+a prefill; the full catalog is still shown. Only the returned one-use `selection_receipt`
+may authorize `plan_visible_run`, `collect_evidence` or `analyze_symbol`. A host-native
+multi-select is optional UI sugar; the numbered text fallback is mandatory on Claude Code,
+Codex, OpenCode and Grok Build. Data-only `screen`, `options`, `news` and `market` modes are
+the only `/alpha` routes that skip this gate.
+
 | Host | Config | Agents | Skills |
 |---|---|---|---|
-| Claude Code | `.claude-plugin/plugin.json`, `.mcp.json` | `.claude/agents/alphacouncil-*.md` | `skills/` via the plugin manifest |
-| Codex | `.codex-plugin/plugin.json`, `.mcp.json` | — | `skills/` via the plugin manifest |
+| Claude Code | `.claude-plugin/plugin.json` | `.claude/agents/alphacouncil-*.md` | `skills/` via the plugin manifest |
+| Codex | `.codex-plugin/plugin.json`, `codex.mcp.json` | — | `skills/` via the plugin manifest |
 | OpenCode | `opencode.json` | `.opencode/agent/alphacouncil-*.md` | see the caveat below |
 | Grok Build | `.grok/config.toml` | `.grok/agents/alphacouncil-*.md` | `AGENTS.md` (this file) |
 
@@ -30,7 +40,9 @@ Verified against a real opencode 1.18.4 install rather than from documentation:
   and the env key is `environment`, not `env`.
 - `opencode debug agent alphacouncil-<role>` parses the generated agent files, resolves
   `anthropic/claude-…` into a provider and model, and applies their permissions.
-  OpenCode does **not** read `.claude/agents/`, `.mcp.json` or `.claude/settings.json`.
+  OpenCode does **not** natively read `.claude/agents/` or `.claude/settings.json`. Some
+  compatibility plugins auto-import a root `.mcp.json`, so this repository deliberately
+  keeps Codex wiring in `codex.mcp.json` to avoid a duplicate, cwd-sensitive server.
 - `opencode.json` deliberately declares **no** global `permission` block. A global block is
   merged into every agent and overrides the per-agent one, which silently hands the debate
   roles the network access they are specifically denied. Verified both ways: with the block,
@@ -55,8 +67,8 @@ Verified against a real install (grok 0.2.101) rather than from documentation:
 - MCP lives in `.grok/config.toml` as TOML, not JSON:
   `[mcp_servers.alphacouncil-agent]` with `command`, `args` and `enabled`. Generate it with
   `grok mcp add alphacouncil-agent -s project -t stdio node -- ./mcp/server.mjs` rather than
-  hand-writing it. Grok also lists `.mcp.json` among its config sources, so the Claude Code
-  file is read too.
+  hand-writing it. AlphaCouncil does not ship a root `.mcp.json`; this prevents third-party
+  compatibility loaders from importing a second cwd-sensitive server.
 - **A repo-local server will not start until the folder is trusted.** `grok mcp doctor`
   reports `folder untrusted (repo-local (project-scoped) server not started)`. That is a
   security prompt, not a misconfiguration: trust the folder on first launch.
@@ -76,8 +88,8 @@ rather than four in a menu of a hundred.
 
 | Invocation | What runs | Model spend |
 |---|---|---|
-| `/alpha <ticker>` | Full council — asks which preset first | one subagent per seat |
-| `/alpha <ticker> quick` | 4 analysts + debate, no bench, no verification | 7 seats |
+| `/alpha <ticker>` | Shows every master, confirms `1..N`/ranges/`all`, then runs the full council | one subagent per selected seat |
+| `/alpha <ticker> quick` | Same mandatory master selection, then 4 analysts + selected masters + debate; no verification | varies with selection |
 | `/alpha <ticker> screen` | Mechanical filings screen only | **none** |
 | `/alpha <ticker> options` | IV term structure, skew, positioning | **none** |
 | `/alpha <ticker> news` | Dated filings and headlines | **none** |
@@ -85,8 +97,8 @@ rather than four in a menu of a hundred.
 | `/alpha` | Lists the modes and stops | **none** |
 
 The four marked **none** call keyless data tools and spawn no subagents, so they cost
-nothing beyond the turn you type them in. The council modes spawn one subagent per seat, and
-that is the entire cost of running this.
+nothing beyond the turn you type them in. Full and quick are council modes: both require a
+fresh selection receipt, and their cost varies with the selected master count.
 
 | Host | Where it reads them |
 |---|---|

package/CHANGELOG.md

@@ -2,6 +2,146 @@
 
 Notable changes per release. Dates are UTC.
 
+## [0.9.0-solo-test.2] — 2026-07-27
+
+This is a corrective **0.9.0 solo-test prerelease**, cut from a real RKLB acceptance run of
+`0.9.0-solo-test.1`. It does not change the production assurance boundary: all 26 physical
+packs remain provisional `operator_lens`; operational seats and `method_model` seats remain
+**0**; human source/formula approvals and formal four-host GA evidence remain **0**.
+
+### Fixed from the RKLB run
+
+- **Full headless analysis no longer dies at the host's five-minute MCP deadline.** Real
+  `analyze_symbol` calls now return a small accepted handle immediately, persist a
+  receipt-bound `queued` run before returning, and are polled with `read_run`. Initialization
+  and later background failures therefore remain inspectable under the original `run_id`.
+  On restart, a dead-process background run is terminalized as
+  `failed/server_interrupted`; active locked runs in another host process are left alone.
+- **Leaf workers cannot recursively inherit user MCP plugins.** `codex exec` workers retain
+  native web search but use `--ignore-user-config`, preventing an installed Codex search
+  bridge from spawning nested Codex workers and consuming the entire per-seat timeout. The
+  flag is placed after the `exec` subcommand and covered by an argv-order regression test.
+- **Worker transcripts are no longer investment evidence.** A timed-out or failed analyst
+  writes an empty-claim, low-confidence evidence packet and a separate `*.failure.json`
+  diagnostic. Partial tool chatter, internal instructions and search logs cannot flow into
+  `evidence.json`, the source manifest or the debate.
+- **Partial evidence is named partial.** Runs with failed/timed-out tasks emit
+  `evidence_partial` with successful/failed counts instead of an `evidence_complete 8/8`
+  event merely because eight packet files exist.
+- **Debate telemetry now proves the actual dependency order.** Every awaited Bull/Bear round
+  emits `agent_round_completed`; the role enters `waiting` between rounds instead of staying
+  misleadingly `running` while the opposite side executes.
+- **Round 3 is now a real cross-fed Q&A.** Round 2 must save exactly three opponent
+  questions per side; Round 3 receives those questions and must return exactly three ordered
+  `{question, answer}` bindings. Each `question` must match the corresponding opponent
+  Round-2 question exactly and in position, and every answer must be non-empty. The JSON
+  schema now includes both fields, and any missing, reordered or substituted exchange fails
+  the Q&A gate instead of being marked complete with `questions_answered=[]`.
+- **SEC typed-fact source identity is canonical.** The same Company Facts record may support
+  ROE and net-margin derivations without a false `source_id_collision`. The metric rule now
+  belongs to derivation lineage, not source identity; the RKLB fixture consequently retains
+  `financial.net_margin_5y` without inventing owner earnings, forward growth, liquidity
+  impulse, realized volatility or ruin facts.
+- **Chinese report-quality headings match the generated report contract.** The mixed
+  `Master席位分歧处理` heading emitted by a Chinese PM now satisfies the conditional
+  `master_bench` section instead of causing a false `needs_revision` result.
+- **Chat handoff summaries stop at readable boundaries.** Chinese and English handoff fields
+  prefer sentence or word boundaries and use Unicode code points, avoiding mid-sentence
+  fragments and unpaired surrogate characters.
+- **Headless verification claims are explicit.** `status.json` separates
+  `source_id_presence_only` from adversarial verification and records verifier verdict count.
+  The runtime skill now says plainly that headless execution does not run the host-visible
+  three-verifier fan-out.
+- **Codex MCP wiring no longer creates an OpenCode duplicate.** Codex uses the isolated
+  `codex.mcp.json`; the ambiguous root `.mcp.json` is not shipped. The Codex interface icon
+  is now included in the npm package.
+
+The public package remains on npm's `next` dist-tag and the GitHub release remains a
+prerelease. Stable `0.9.0` is still reserved for the formal production-GA gates.
+
+## [0.9.0-solo-test.1] — 2026-07-27
+
+This package is the first **0.9.0 solo-test prerelease**, not a formal production-GA release.
+`package.json`, the Claude/Codex plugin surfaces, marketplace metadata and
+`data/build-profile.v1.json` all declare `0.9.0-solo-test.1`.
+
+The public package uses npm's `next` dist-tag and the GitHub release is marked as a
+pre-release. Exact `0.9.0-solo-test.1` installation is supported while `latest` stays on the
+production-facing 0.8.0 line and the stable `0.9.0` version remains unoccupied until the
+formal GA gates pass.
+
+### Solo-test assurance boundary
+
+- Exactly 26 physical PersonaPack v3 packs are packaged under the isolated solo-test root.
+- Exactly 52 executable tools are present, all marked `provisional_derived_proxy`.
+- All 26 seats remain provisional `operator_lens`; operational seats: **0**;
+  `method_model` seats: **0**.
+- Human source approvals: **0**; human formula approvals: **0**; human approval signatures:
+  **0**. Project-derived proxies are test fixtures, not named-investor method attribution.
+- All 32 archived source candidates now have hash-bound machine pre-review artifacts. Three
+  isolated AI roles produce 96 deterministic triage outputs with explicit questions and
+  verdicts, while `human_reviewed=false` and `production_effect=none` keep the trusted
+  human-review quorum and production gate fail-closed.
+- The production loader rejects all 26 solo-test packs. Formal production assembly,
+  cutover, rollback evidence and GA remain fail-closed until the outstanding human-review,
+  experiment, host and release gates pass.
+- Source and installed-package validation are now separated: a source checkout verifies its
+  private/raw staging tree when present, while an installed package runs a real MCP selection
+  and receipt-replay smoke instead of reporting a misleading zero-test pass.
+
+Exact verification commands and the observed status are recorded in
+`docs/solo-test-0.9.0.md`.
+
+### Added in the first 0.9.0 increment
+
+- **A mandatory per-run master chooser.** `begin_council_selection` freezes the current
+  catalog and returns every seat with a stable number, identity, method, best-use case and
+  maturity. `confirm_master_selection` accepts one seat, any combination, ranges, stable IDs
+  or `all`, then issues a short-lived one-run receipt.
+- **Server-side enforcement rather than prompt etiquette.** `plan_visible_run`,
+  `collect_evidence` and `analyze_symbol` reject an absent, stale, replayed, cross-symbol or
+  cross-intent receipt before creating a run or fetching data. Confirm and consume operations
+  use exclusive file locks so separate host processes cannot spend the same selection twice.
+  Run starts also hold an exclusive lock: concurrent retries create one lifecycle, while a
+  completed same-receipt retry loads existing state instead of erasing packets or paying for
+  the council again.
+- **Text-complete four-host interaction.** Claude Code, Codex, OpenCode and Grok may enhance
+  the chooser with native multi-select, but all share the numbered text grammar and the same
+  MCP receipt. A named master is only preselected; the catalog is still displayed and the
+  user still submits this run's choice.
+- **Headless master execution.** The one-call analysis path now actually runs the selected
+  masters between evidence and debate. A failed selected seat stays missing and prevents a
+  false `complete` status.
+- **Selection audit fields.** `status.json` records the catalog/selection hashes, selected,
+  completed and pending masters, counts, per-seat state and the consumed selection ID.
+- **The five missing requested seats are now selectable.** Damodaran, Ackman, Cathie Wood,
+  Pabrai and Jhunjhunwala expand the active catalog from 21 to exactly 26. The complete
+  26-seat solo-test tree now loads only through the explicit provisional path as
+  `operator_lens`; none is mislabeled as operational or as a completed v3 method model.
+- **Cryptographic PersonaPack admission and release foundations.** Experiment results now use
+  Ed25519 attestations bound to the exact artifact/corpus/policy/tool/prompt hashes;
+  `method_model` promotion stays fused closed until explicitly enabled after all gates pass.
+  Source review and release operations each require two distinct trusted principals, so
+  repeated keys or copied reviewer names cannot manufacture independence.
+- **Immutable 26-pack publication and rollback.** The assembler accepts only one complete
+  operational-or-higher 26-seat tree, verifies signed source-adjudication ledgers, embeds and
+  hashes their evidence, then publishes by same-filesystem fsync and atomic rename. Signed
+  cutover/rollback approvals produce immutable versioned pointer history.
+- **A fail-closed GA verifier.** The real immutable release manifest is checked against the
+  production pack hashes. A separate signed evidence document must cover Claude Code,
+  Codex, OpenCode, Grok, the installed package, cutover and rollback. The previous unsigned
+  combined-JSON shape is rejected rather than accepted as self-certification.
+
+### In progress, not yet a production-GA claim
+
+- Migrate all 26 seats to PersonaPack v3 with sourced doctrine, private research plans,
+  typed computations, native decisions, hard vetoes, calibration and ablation tests.
+- Pass the A-E comparison ladder: single-agent baseline; 8 analysts; 8 analysts plus selected
+  masters; verifier-enabled council; and blinded human reference answers. Seat count is never
+  treated as independent sample count.
+
+Implementation tracker: `docs/plans/0.9.0-personapack-v3.md`.
+
 ## [0.8.0] — 2026-07-27
 
 Minor rather than patch: **the master bench changes from prompt voices to method models,

package/CLAUDE.md

@@ -6,15 +6,25 @@ You are working on `alphacouncil-agent`, a Codex plugin for public-equity resear
 
 The plugin turns `@alphacouncil-agent <ticker/request>` into a full equity-research workflow:
 
-1. Spawn or plan specialized analyst workers.
-2. Produce JSON evidence packets with sourced claims.
-3. Merge packets into a shared evidence base.
-4. Run bull and bear researchers.
-5. Run a portfolio manager to decide Buy / Overweight / Hold / Underweight / Sell.
-6. Write a complete final report directly in chat and to `~/.alphacouncil-agent/runs/<run_id>/final_report.md`.
+1. Display every available master method and confirm a one-run selection receipt.
+2. Spawn or plan specialized analyst workers.
+3. Produce JSON evidence packets with sourced claims.
+4. Merge packets into a shared evidence base and run every selected master.
+5. Run bull and bear researchers.
+6. Run a portfolio manager to decide Buy / Overweight / Hold / Underweight / Sell.
+7. Write a complete final report directly in chat and to `~/.alphacouncil-agent/runs/<run_id>/final_report.md`.
 
 Default behavior is full workflow. Do not downgrade to lite, smoke-test, or debug output unless the user explicitly asks for it.
 
+## Current Build Profile
+
+The declared package/plugin version is `0.9.0-solo-test.2`, channel `solo_test`. The isolated packaged
+tree contains 26 physical v3 packs and 52 executable `provisional_derived_proxy` tools.
+Every seat is still a provisional `operator_lens`: operational = 0, `method_model` = 0,
+human source approvals = 0, human formula approvals = 0, human approval signatures = 0.
+The production loader rejects these packs and formal production GA remains fail-closed.
+See `docs/solo-test-0.9.0.md`.
+
 ## Agent-Skills Governance
 
 Also follow `skills/agent-skills-governance/SKILL.md`. It is bundled with this plugin and applies the `addyosmani/agent-skills` style of explicit gates, anti-rationalizations, and exit criteria to AlphaCouncil runs. Do not treat it as an optional local setup step.
@@ -25,6 +35,16 @@ Also follow `skills/agent-skills-governance/SKILL.md`. It is bundled with this p
 `quick`, `screen`, `options`, `news` and `market` select narrower modes, and the last four
 spawn no subagents at all.
 
+Every full or quick council run must first call `begin_council_selection`, display each
+returned master with its stable number, identity, method and `best_for`, and obtain a
+submission. A native multi-select is optional; the common fallback accepts numbered choices,
+ranges and `all` in plain text on every host. Even if the request already names masters,
+show the complete catalog and treat those names only as a prefill. Call
+`confirm_master_selection(selection_id, catalog_hash, display_ack: true, ...)`, then pass its
+one-use `selection_receipt` to `plan_visible_run`, `collect_evidence` or `analyze_symbol`.
+No research, run directory or worker may start before that receipt exists. Data-only
+`screen`, `options`, `news` and `market` modes skip the selection gate.
+
 ## Analyst Roles
 
 Default evidence roles (the eight-seat default fan-out):
@@ -44,9 +64,14 @@ Optional analysts, on the `full` roster rather than the default:
 - `market_narrative`
 - `social_pulse`
 
-Master bench: 21 lenses across six rosters, run between evidence and debate on **every**
-host. Verifiers: `source_fidelity`, `rederivation`, `refuter`. See `skills/alphacouncil-agent/SKILL.md`
-for the workflow and `docs/personas.md` for the full roster.
+Master bench: the complete generated catalog (26 selectable lenses for the 0.9.0 roster), selectable
+one by one or with `all`, and run between evidence and debate on **every** host. Verifiers:
+`source_fidelity`, `rederivation`, `refuter`. See `skills/alphacouncil-agent/SKILL.md` for the
+workflow and `docs/personas.md` for the generated roster.
+
+Do not call the 26 solo-test packs approved method models. The explicit solo-test loader
+exposes 26 provisional `operator_lens` packs and 52 executable derived-proxy tools; none is
+operational or `method_model`, and none has human source/formula approval or signature.
 
 Debate roles:
 

package/PRODUCT.md

@@ -0,0 +1,37 @@
+# Product
+
+## Register
+
+product
+
+## Users
+
+AlphaCouncil serves investors, analysts, researchers, and technically capable users who run public-equity research from Claude Code, Codex, OpenCode, or Grok Build. They may be making a quick research pass or assembling a deeper investment-committee record, and they need to understand the time, cost, evidence coverage, and method lenses they are choosing before work begins.
+
+## Product Purpose
+
+AlphaCouncil turns a listed-equity question into an auditable research workflow: specialist evidence collection, selected investor-method lenses, verification, bull/bear debate, and a portfolio-manager decision with durable artifacts. Success means the user controls which method seats run, every selected seat is actually completed, material claims remain traceable to sources, and every supported host executes the same workflow contract.
+
+## Brand Personality
+
+Precise, rigorous, transparent. The product should communicate expert confidence without theatrical certainty. It should make cost, missing evidence, method limits, and incomplete work visible instead of hiding them behind polished prose.
+
+## Anti-references
+
+- A one-click AI stock picker that starts expensive work without showing what will run.
+- A casino-like voting screen that treats correlated persona outputs as independent votes.
+- Celebrity role-play whose only differentiation is a name, portrait, quote, or speaking style.
+- A dense configuration wizard that asks users to decide technical details they do not need to understand.
+- Host-specific workflows whose controls or completion rules drift between Claude Code, Codex, OpenCode, and Grok Build.
+
+## Design Principles
+
+1. User choice before spend: every council run requires an explicit, one-run master selection.
+2. Explain the method, not the celebrity: each selectable master states what it examines, where it abstains, and its maturity.
+3. Progressive disclosure: show a compact grouped roster first, preserve access to all individual seats, and make select-all explicit.
+4. Native when available, text-complete everywhere: use a host's multi-select control when it exists, with an equivalent numbered or ID-based fallback.
+5. Selection is a contract: persist the exact selected IDs and catalog version, and block execution until the selection is confirmed.
+
+## Accessibility & Inclusion
+
+The complete selection workflow must work by keyboard and in plain text without relying on color, pointer input, hover, images, or a particular host widget. Labels and descriptions must support the run language, preserve stable persona IDs, expose selected count and validation errors, and remain usable with screen readers and narrow terminal widths. Motion is not required. Host-native controls must retain an equivalent textual fallback.