arkaos 4.43.0 → 4.44.0

package/THE-ARKAOS-GUIDE.md

@@ -1,6 +1,6 @@
 # The ArkaOS Guide
 
-> v4.43.0 — 89 agents, 17 departments, 332 skills, 297 commands, 18 ADRs.
+> v4.44.0 — 89 agents, 17 departments, 332 skills, 297 commands, 18 ADRs.
 > One file, everything you need to start. Generated by `scripts/guide_gen.py` — never hand-edited.
 
 ## What it is

package/VERSION

@@ -1 +1 @@
-4.43.0
+4.44.0

package/config/hooks/agent-provision.sh

@@ -2,11 +2,23 @@
 # ArkaOS PreToolUse hook for dynamic agent provisioning.
 # Intercepts Task tool calls: if subagent_type is not present in the
 # project's .claude/agents/, copies it from ArkaOS core when available,
-# or blocks with an approval-request message when the agent must be
-# created via `/platform-arka agent provision <name>`.
+# or surfaces an approval-request message WITHOUT blocking when the
+# agent is unknown. The set of valid subagent_types is not enumerable
+# here — runtime built-ins (general-purpose, statusline-setup, …)
+# change with Claude Code versions and plugins add their own — so any
+# blocking arm on "unknown" breaks legitimate dispatches (QG PR-B5 r1
+# reproduced exit 2 on general-purpose). Provision when we know the
+# name; stand aside when we don't.
 
 set -euo pipefail
 
+# No jq, no payload parse. .claude/rules/bash-hooks.md:11-12 prescribes
+# a python3 fallback for jq; this gate is OPTIONAL by design, so it
+# stands aside instead of paying a python spawn on every Task call —
+# and per the same rules file ("exit code 2 = block action", last
+# bullet), exiting 0 here can never break a dispatch.
+command -v jq >/dev/null 2>&1 || exit 0
+
 # ─── Shared Python resolver (exports ARKA_PY) ──────────────────────────
 # The resolver guards its own ARKA_PY assignment with `|| true`, so sourcing
 # is set -e-safe even on the last-resort fallback. The trailing `|| true`
@@ -49,7 +61,6 @@ if [ -z "$core_root" ]; then
 fi
 
 if [ -d "$core_root/departments" ]; then
-    mkdir -p "$project_agents_dir"
     set +e
     "$ARKA_PY" - "$core_root" "$subagent_type" "$target" <<'PY'
 import os, re, sys
@@ -105,7 +116,10 @@ if md_path is not None:
 
 content = "\n".join(parts) + "\n"
 
-# Atomic write: temp file in same dir, then os.replace.
+# Create the parent only on the arm that actually writes (a dispatch
+# of an unknown name must not scatter empty .claude/agents/ dirs), then
+# atomic write: temp file in same dir, then os.replace.
+target.parent.mkdir(parents=True, exist_ok=True)
 tmp = target.with_suffix(".md.tmp")
 tmp.write_text(content)
 os.replace(tmp, target)
@@ -128,15 +142,22 @@ PY
     esac
 fi
 
-# Agent not in project and not in core — surface an approval-request.
+# Agent not in project, and the core lookup either found nothing or
+# never ran. Say exactly which, and NEVER block: this name may be a
+# runtime built-in or a plugin agent this script cannot know about —
+# if it truly doesn't exist, the Task dispatch itself fails with the
+# runtime's own error.
+if [ -d "$core_root/departments" ]; then
+    core_note="no ArkaOS core agent of that name was found (core searched at: $core_root)"
+else
+    core_note="the ArkaOS core lookup did not run (no departments/ under: ${core_root:-<unset>})"
+fi
 cat >&2 <<MSG
-[arka:provision-needed] Agent '$subagent_type' is not installed in this
-project and does not exist in ArkaOS core. To create it, run:
-
-    /platform-arka agent provision $subagent_type
-
-This opens the Skill Architect flow which drafts the agent YAML with
-4-framework DNA, goes through Quality Gate, and commits to core before
-propagating to the project. Blocking dispatch until the agent exists.
+[arka:provision-needed] Agent '$subagent_type' is not in this project's
+.claude/agents/, and $core_note.
+If ArkaOS should provide this agent, create it at
+.claude/agents/$subagent_type.md, or run 'npx arkaos update' so ArkaOS
+core ships a definition this gate can copy.
+Runtime built-ins and plugin agents are unaffected — dispatch proceeds.
 MSG
-exit 2
+exit 0

package/core/governance/aggregate_guard.py

@@ -391,12 +391,33 @@ def _digest_issues(
     return issues, notes
 
 
-def _ended_issues(session_id: str) -> list[str]:
-    """A stamped session is not a live quorum (PR-B4 session binding)."""
+def _ended_issues(session_id: str, artifact_names: list[str]) -> list[str]:
+    """A stamped session is not a live quorum (PR-B4 session binding).
+
+    M4 hardening (PR-B5): the stamp only outlaws records that PREDATE
+    it. A counted record captured strictly after the stamp's mtime
+    proves the hook boundary came back to life under this session id —
+    never observed on the dev machine, where the stamp shipped one
+    release earlier and the ledger held a single stamped session when
+    this was written; the refusal must not outlive its own evidence.
+    Ties and unreadable mtimes keep the refusal: equality cannot
+    distinguish before from after, and fail-closed is the guard's
+    resting state.
+    """
     from core.governance.reviewer_ledger import ENDED_NAME
 
-    if not (ledger_root() / session_id / ENDED_NAME).is_file():
+    session_dir = ledger_root() / session_id
+    stamp = session_dir / ENDED_NAME
+    if not stamp.is_file():
         return []
+    try:
+        newest = max(
+            (session_dir / name).stat().st_mtime for name in artifact_names
+        )
+        if newest > stamp.stat().st_mtime:
+            return []
+    except (OSError, ValueError):
+        pass  # no readable counted record newer than the stamp
     return [
         f"session {session_id} is marked ended (SessionEnd stamped its "
         "ledger) — a past session's reviewer records are not a reusable "
@@ -568,7 +589,9 @@ def check_aggregate(aggregate: dict, session_id: str) -> GuardResult:
             reviewers, [name for name, _ in counted]
         )
     verdicts = [(str(r.get("reviewer_id")), r["verdict"]) for _, r in counted]
-    reasons, warnings = _reasons(aggregate, verdicts, session_id)
+    reasons, warnings = _reasons(
+        aggregate, verdicts, session_id, [name for name, _ in counted]
+    )
     return GuardResult(
         ok=not reasons,
         reasons=reasons,
@@ -579,7 +602,10 @@ def check_aggregate(aggregate: dict, session_id: str) -> GuardResult:
 
 
 def _reasons(
-    aggregate: dict, verdicts: list[tuple[str, dict]], session_id: str
+    aggregate: dict,
+    verdicts: list[tuple[str, dict]],
+    session_id: str,
+    artifact_names: list[str],
 ) -> tuple[list[str], list[str]]:
     """Every refusal reason and warning for one aggregate.
 
@@ -594,7 +620,7 @@ def _reasons(
     """
     approved = _norm(aggregate.get("verdict")) == "approved"
     issues, notes = _digest_issues(aggregate, verdicts)
-    issues += _ended_issues(session_id)
+    issues += _ended_issues(session_id, artifact_names)
     reasons = (
         _verdict_reasons(aggregate, verdicts)
         + _blocker_reasons(aggregate, verdicts, approved)

package/core/governance/quality_api.py

@@ -8,26 +8,15 @@ Provides a simple programmatic interface for the Quality Gate system:
 """
 
 import json
+from datetime import UTC
 from pathlib import Path
 from typing import Any
 
 from core.governance.quality_router import (
-    QualityRouter,
-    ReviewAssignment,
-    ReviewerType,
     DeliverableType,
-    ReviewPriority,
-    route_deliverable,
-)
-from core.governance.review_workflow import (
-    ReviewWorkflowEngine,
-    ReviewWorkflow,
-    ReviewPhase,
-    Verdict,
-    ReviewerOpinion,
+    QualityRouter,
 )
 
-
 _STATE_DIR = Path.home() / ".arkaos" / "quality-gate"
 _QUEUE_FILE = _STATE_DIR / "queue.json"
 _WORKFLOWS_FILE = _STATE_DIR / "workflows.json"
@@ -147,6 +136,14 @@ def record_verdict(
 ) -> bool:
     """Record a reviewer's verdict for a submission.
 
+    .. deprecated:: 4.44.0 (PR-B5)
+        Writes an unguarded label: no ledger artifact, no digest, no
+        aggregate guard. Use ``core.evals.record_cli``: ``--kind qg``
+        passes ``aggregate_guard.check_aggregate``, which requires at
+        least two hook-captured reviewer artifacts in the session
+        ledger; ``--kind reviewer`` remains an unguarded label path —
+        its ledger cross-reference is provenance, not admission.
+
     Args:
         submission_id: ID of the submission
         reviewer: Agent ID of reviewer
@@ -157,8 +154,6 @@ def record_verdict(
     Returns:
         True if verdict recorded successfully
     """
-    reviewer_type = ReviewerType(reviewer) if reviewer in [r.value for r in ReviewerType] else None
-
     queue = _load_queue()
     for item in queue:
         if item["id"] == submission_id:
@@ -217,9 +212,9 @@ def clear_resolved(older_than_days: int = 7) -> int:
     Returns:
         Number of items removed
     """
-    from datetime import datetime, timedelta, timezone
+    from datetime import datetime, timedelta
 
-    cutoff = datetime.now(timezone.utc) - timedelta(days=older_than_days)
+    cutoff = datetime.now(UTC) - timedelta(days=older_than_days)
     queue = _load_queue()
     original_count = len(queue)
 
@@ -268,6 +263,7 @@ class QualityGateAPI:
         feedback: str = "",
         flagged_rules: list[str] | None = None,
     ) -> bool:
+        """Deprecated with the module function — see ``record_verdict``."""
         return record_verdict(submission_id, reviewer, verdict, feedback, flagged_rules)
 
     def list_pending(self, reviewer: str | None = None) -> list[dict]:

package/core/governance/review_workflow.py

@@ -1,5 +1,15 @@
 """Review Workflow Engine — structured review phases for Quality Gate.
 
+.. deprecated:: 4.44.0 (PR-B5)
+    This engine models review phases in memory and records verdicts
+    WITHOUT the reviewer ledger or the aggregate guard behind them —
+    nothing here proves a verdict was authored at the hook boundary.
+    The guarded path is ``core.evals.record_cli``: ``--kind qg`` passes
+    ``aggregate_guard.check_aggregate``, which requires hook-captured
+    reviewer artifacts in the session ledger. The module stays
+    importable because live tests pin its phase mechanics, but no new
+    caller should route verdicts through it.
+
 Phases:
 1. Submission — deliverable submitted for review
 2. Triage — initial assessment, assign reviewers
@@ -16,13 +26,17 @@ Verdicts:
 """
 
 import uuid
+from collections.abc import Callable
 from dataclasses import dataclass, field
-from datetime import datetime, timezone
+from datetime import UTC, datetime
 from enum import Enum
-from typing import Callable
 
 
-class ReviewPhase(str, Enum):
+# UP042 suppressed on the three enums below: switching to StrEnum changes
+# str(member) from "Verdict.APPROVED" to "APPROVED" — behaviour, not
+# style — and this module is deprecated (see the module docstring), not
+# being modernised.
+class ReviewPhase(str, Enum):  # noqa: UP042
     SUBMISSION = "submission"
     TRIAGE = "triage"
     REVIEW = "review"
@@ -31,14 +45,14 @@ class ReviewPhase(str, Enum):
     DELIVERY = "delivery"
 
 
-class Verdict(str, Enum):
+class Verdict(str, Enum):  # noqa: UP042
     APPROVED = "APPROVED"
     REJECTED = "REJECTED"
     REQUEST_CHANGES = "REQUEST_CHANGES"
     ESCALATE = "ESCALATE"
 
 
-class ReviewerOpinion(str, Enum):
+class ReviewerOpinion(str, Enum):  # noqa: UP042
     APPROVE = "APPROVE"
     REJECT = "REJECT"
     CHANGES = "REQUEST_CHANGES"
@@ -79,7 +93,7 @@ class ReviewWorkflow:
 
     def __post_init__(self):
         if not self.submitted_at:
-            self.submitted_at = datetime.now(timezone.utc).isoformat()
+            self.submitted_at = datetime.now(UTC).isoformat()
 
 
 @dataclass
@@ -156,7 +170,7 @@ class ReviewWorkflowEngine:
         self._announce_phase_start(ReviewPhase.TRIAGE, workflow_id)
 
         workflow.phase = ReviewPhase.TRIAGE
-        workflow.triage_at = datetime.now(timezone.utc).isoformat()
+        workflow.triage_at = datetime.now(UTC).isoformat()
 
         result = PhaseResult(
             phase=ReviewPhase.TRIAGE,
@@ -191,7 +205,7 @@ class ReviewWorkflowEngine:
         self._announce_phase_start(ReviewPhase.REVIEW, workflow_id)
 
         workflow.phase = ReviewPhase.REVIEW
-        workflow.review_started_at = datetime.now(timezone.utc).isoformat()
+        workflow.review_started_at = datetime.now(UTC).isoformat()
 
         result = PhaseResult(
             phase=ReviewPhase.REVIEW,
@@ -248,7 +262,7 @@ class ReviewWorkflowEngine:
             opinion=opinion,
             comments=comments,
             flagged_rules=flagged_rules or [],
-            voted_at=datetime.now(timezone.utc).isoformat(),
+            voted_at=datetime.now(UTC).isoformat(),
             evidence_overall=evidence_overall,
         )
         workflow.votes.append(vote)
@@ -279,7 +293,7 @@ class ReviewWorkflowEngine:
         self._announce_phase_start(ReviewPhase.DELIBERATION, workflow_id)
 
         workflow.phase = ReviewPhase.DELIBERATION
-        workflow.deliberation_at = datetime.now(timezone.utc).isoformat()
+        workflow.deliberation_at = datetime.now(UTC).isoformat()
 
         result = PhaseResult(
             phase=ReviewPhase.DELIBERATION,
@@ -331,7 +345,7 @@ class ReviewWorkflowEngine:
         workflow.phase = ReviewPhase.VERDICT
         workflow.verdict = verdict
         workflow.feedback = feedback
-        workflow.verdict_at = datetime.now(timezone.utc).isoformat()
+        workflow.verdict_at = datetime.now(UTC).isoformat()
 
         self._announce_verdict(verdict, workflow_id)
 
@@ -370,7 +384,7 @@ class ReviewWorkflowEngine:
             )
 
         workflow.phase = ReviewPhase.DELIVERY
-        workflow.delivered_at = datetime.now(timezone.utc).isoformat()
+        workflow.delivered_at = datetime.now(UTC).isoformat()
 
         result = PhaseResult(
             phase=ReviewPhase.DELIVERY,

package/core/hooks/stop.py

@@ -371,6 +371,60 @@ def _flow_checks(
         clear_flow_required(session_id)
 
 
+def _qg_aggregate_verdict(session_id: str) -> bool | None:
+    """Verdict from the session's guard-accepted ``AGGREGATE.json``.
+
+    True/False when a readable aggregate for THIS session exists — the
+    aggregate only lands on disk through aggregate_guard (PR-B3), so it
+    is authoritative in both directions. None when absent, foreign or
+    unreadable: only then may the caller fall back to the telemetry log.
+    """
+    try:
+        from core.governance.reviewer_ledger import (
+            AGGREGATE_NAME,
+            _safe_id,
+            ledger_root,
+        )
+
+        if not _safe_id(session_id):
+            return None
+        rec = json.loads(
+            (ledger_root() / session_id / AGGREGATE_NAME).read_text(
+                encoding="utf-8"
+            )
+        )
+    except Exception:
+        return None
+    if not isinstance(rec, dict) or rec.get("session_id") != session_id:
+        return None
+    verdict = (rec.get("aggregate") or {}).get("verdict", "")
+    return str(verdict).upper() == "APPROVED"
+
+
+def _qg_telemetry_approved(session_id: str) -> bool:
+    """Legacy fallback: newest ``qg.jsonl`` record for this session.
+
+    Pre-B3 sessions have no aggregate, so its absence proves nothing;
+    the unguarded telemetry log then keeps its historical role.
+    """
+    qg_log = Path.home() / ".arkaos" / "telemetry" / "qg.jsonl"
+    if not qg_log.exists():
+        return False
+    try:
+        for line in reversed(qg_log.read_text(encoding="utf-8").splitlines()):
+            if not line.strip():
+                continue
+            try:
+                rec = json.loads(line)
+            except Exception:
+                continue
+            if rec.get("session_id") == session_id:
+                return rec.get("verdict", "").upper() == "APPROVED"
+    except Exception:
+        pass
+    return False
+
+
 def _auto_doc_enqueue(
     session_id: str, transcript_path: str, raw: str | None
 ) -> None:
@@ -389,27 +443,19 @@ def _auto_doc_enqueue(
     except Exception:
         last = ""
 
-    qg_approved = bool(re.search(r"\[arka:qg:approved\]", last, re.IGNORECASE))
-    if not qg_approved:
-        qg_log = Path.home() / ".arkaos" / "telemetry" / "qg.jsonl"
-        if qg_log.exists():
-            try:
-                for line in reversed(
-                    qg_log.read_text(encoding="utf-8").splitlines()
-                ):
-                    if not line.strip():
-                        continue
-                    try:
-                        rec = json.loads(line)
-                    except Exception:
-                        continue
-                    if rec.get("session_id") == session_id:
-                        qg_approved = (
-                            rec.get("verdict", "").upper() == "APPROVED"
-                        )
-                        break
-            except Exception:
-                pass
+    # The guard-accepted aggregate is authoritative either way (PR-B5,
+    # G7) — over the telemetry log AND over the assistant's own
+    # [arka:qg:approved] marker: narration must not outrank the record
+    # it narrates (the same laundering shape G7 closes one layer down).
+    # Marker and telemetry keep their historical roles only when no
+    # aggregate exists for the session.
+    from_aggregate = _qg_aggregate_verdict(session_id)
+    if from_aggregate is not None:
+        qg_approved = from_aggregate
+    else:
+        qg_approved = bool(
+            re.search(r"\[arka:qg:approved\]", last, re.IGNORECASE)
+        ) or _qg_telemetry_approved(session_id)
     if not qg_approved:
         return
 

package/harness/codex/AGENTS.md

@@ -1,6 +1,6 @@
 # ArkaOS — The Operating System for AI Agent Teams
 
-> v4.43.0 — 89 agents, 17 departments, 332 skills. Generated by `scripts/harness_gen.py`; do not edit.
+> v4.44.0 — 89 agents, 17 departments, 332 skills. Generated by `scripts/harness_gen.py`; do not edit.
 
 You are operating within ArkaOS. Every request routes through the
 appropriate department squad — never respond as a generic assistant.

package/harness/copilot/copilot-instructions.md

@@ -1,6 +1,6 @@
 # ArkaOS — The Operating System for AI Agent Teams
 
-> v4.43.0 — 89 agents, 17 departments, 332 skills. Generated by `scripts/harness_gen.py`; do not edit.
+> v4.44.0 — 89 agents, 17 departments, 332 skills. Generated by `scripts/harness_gen.py`; do not edit.
 
 You are operating within ArkaOS. Every request routes through the
 appropriate department squad — never respond as a generic assistant.

package/harness/cursor/rules/arkaos.mdc

@@ -1,11 +1,11 @@
 ---
-description: ArkaOS v4.43.0 agent-team contract
+description: ArkaOS v4.44.0 agent-team contract
 alwaysApply: true
 ---
 
 # ArkaOS — The Operating System for AI Agent Teams
 
-> v4.43.0 — 89 agents, 17 departments, 332 skills. Generated by `scripts/harness_gen.py`; do not edit.
+> v4.44.0 — 89 agents, 17 departments, 332 skills. Generated by `scripts/harness_gen.py`; do not edit.
 
 You are operating within ArkaOS. Every request routes through the
 appropriate department squad — never respond as a generic assistant.

package/harness/gemini/GEMINI.md

@@ -1,6 +1,6 @@
 # ArkaOS — The Operating System for AI Agent Teams
 
-> v4.43.0 — 89 agents, 17 departments, 332 skills. Generated by `scripts/harness_gen.py`; do not edit.
+> v4.44.0 — 89 agents, 17 departments, 332 skills. Generated by `scripts/harness_gen.py`; do not edit.
 
 You are operating within ArkaOS. Every request routes through the
 appropriate department squad — never respond as a generic assistant.

package/harness/opencode/AGENTS.md

@@ -1,6 +1,6 @@
 # ArkaOS — The Operating System for AI Agent Teams
 
-> v4.43.0 — 89 agents, 17 departments, 332 skills. Generated by `scripts/harness_gen.py`; do not edit.
+> v4.44.0 — 89 agents, 17 departments, 332 skills. Generated by `scripts/harness_gen.py`; do not edit.
 
 You are operating within ArkaOS. Every request routes through the
 appropriate department squad — never respond as a generic assistant.

package/harness/opencode/agents/arka-architect-gabriel.md

@@ -3,7 +3,7 @@ description: "Software Architect — ArkaOS /dev department"
 mode: subagent
 ---
 
-You are Gabriel, Software Architect of the ArkaOS /dev department (v4.43.0; generated by scripts/harness_gen.py — do not edit).
+You are Gabriel, Software Architect of the ArkaOS /dev department (v4.44.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: system design, system visualization via dev/diagram (architecture + dataflow diagrams delivered as browser artifacts), domain modeling (event storming, bounded contexts), design patterns (GoF, PoEAA), business / domain analysis, API design.
 

package/harness/opencode/agents/arka-brand-director-valentina.md

@@ -3,7 +3,7 @@ description: "Creative Director — ArkaOS /brand department"
 mode: subagent
 ---
 
-You are Valentina, Creative Director of the ArkaOS /brand department (v4.43.0; generated by scripts/harness_gen.py — do not edit).
+You are Valentina, Creative Director of the ArkaOS /brand department (v4.44.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: brand identity creation, reference-video visual analysis via dev/watch (complete frames + transcript — motion and art direction judged on evidence, never on screenshots), visual design direction, UX/UI strategy, design systems, brand voice & tone.
 

package/harness/opencode/agents/arka-cfo-helena.md

@@ -3,7 +3,7 @@ description: "Chief Financial Officer — ArkaOS /fin department"
 mode: subagent
 ---
 
-You are Helena, Chief Financial Officer of the ArkaOS /fin department (v4.43.0; generated by scripts/harness_gen.py — do not edit).
+You are Helena, Chief Financial Officer of the ArkaOS /fin department (v4.44.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: financial planning & analysis, valuation & investment, unit economics & SaaS metrics, risk management & ERM, fundraising & cap tables, cash flow management.
 

package/harness/opencode/agents/arka-chief-of-staff-afonso.md

@@ -3,7 +3,7 @@ description: "Chief of Staff & Governance Lead — ArkaOS /org department"
 mode: subagent
 ---
 
-You are Afonso, Chief of Staff & Governance Lead of the ArkaOS /org department (v4.43.0; generated by scripts/harness_gen.py — do not edit).
+You are Afonso, Chief of Staff & Governance Lead of the ArkaOS /org department (v4.44.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: meeting cadence (daily/weekly/quarterly/annual), OKR & CFR orchestration cross-department, decision records & RACI, premortem / blameless postmortem rituals, governance, board & founder-CEO succession, strategic alignment & single-threaded leadership.
 

package/harness/opencode/agents/arka-community-strategist-beatriz.md

@@ -3,7 +3,7 @@ description: "Community Strategist — ArkaOS /community department"
 mode: subagent
 ---
 
-You are Beatriz, Community Strategist of the ArkaOS /community department (v4.43.0; generated by scripts/harness_gen.py — do not edit).
+You are Beatriz, Community Strategist of the ArkaOS /community department (v4.44.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: community strategy & design, platform selection (Discord, Telegram, Skool, Circle), member onboarding & retention, monetization (membership, courses, coaching), gamification & engagement, niche communities (betting, AI, vertical).
 

package/harness/opencode/agents/arka-content-strategist-rafael.md

@@ -3,7 +3,7 @@ description: "Content Strategist — ArkaOS /content department"
 mode: subagent
 ---
 
-You are Rafael, Content Strategist of the ArkaOS /content department (v4.43.0; generated by scripts/harness_gen.py — do not edit).
+You are Rafael, Content Strategist of the ArkaOS /content department (v4.44.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: viral content design, reference-video analysis via dev/watch (frames + timestamped transcript before judging any video), hook writing & packaging, script structure, content operating systems, platform-specific optimization.
 

package/harness/opencode/agents/arka-conversion-strategist-ines.md

@@ -3,7 +3,7 @@ description: "Conversion Strategist — ArkaOS /landing department"
 mode: subagent
 ---
 
-You are Ines, Conversion Strategist of the ArkaOS /landing department (v4.43.0; generated by scripts/harness_gen.py — do not edit).
+You are Ines, Conversion Strategist of the ArkaOS /landing department (v4.44.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: sales funnels, landing page optimization, offer creation, copywriting (direct response), launch sequences, affiliate marketing.
 

package/harness/opencode/agents/arka-coo-sofia.md

@@ -3,7 +3,7 @@ description: "Chief Operations Officer — ArkaOS /org department"
 mode: subagent
 ---
 
-You are Sofia, Chief Operations Officer of the ArkaOS /org department (v4.43.0; generated by scripts/harness_gen.py — do not edit).
+You are Sofia, Chief Operations Officer of the ArkaOS /org department (v4.44.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: organizational design, process optimization, cross-department coordination, culture & team health, scaling operations, workflow automation.
 

package/harness/opencode/agents/arka-copy-director-eduardo.md

@@ -3,7 +3,7 @@ description: "Copy & Language Director — ArkaOS /quality department"
 mode: subagent
 ---
 
-You are Eduardo, Copy & Language Director of the ArkaOS /quality department (v4.43.0; generated by scripts/harness_gen.py — do not edit).
+You are Eduardo, Copy & Language Director of the ArkaOS /quality department (v4.44.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: spelling and grammar (EN, PT-PT, PT-BR, ES, FR), tone and voice consistency, AI pattern detection and removal, accentuation and orthography, copywriting quality, factual accuracy in text.
 

package/harness/opencode/agents/arka-cqo-marta.md

@@ -3,7 +3,7 @@ description: "Chief Quality Officer — ArkaOS /quality department"
 mode: subagent
 ---
 
-You are Marta, Chief Quality Officer of the ArkaOS /quality department (v4.43.0; generated by scripts/harness_gen.py — do not edit).
+You are Marta, Chief Quality Officer of the ArkaOS /quality department (v4.44.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: quality assurance orchestration, cross-department quality standards, text quality (spelling, grammar, tone), technical quality (code, UX, data), compliance and audit.
 

package/harness/opencode/agents/arka-cto-marco.md

@@ -3,7 +3,7 @@ description: "Chief Technology Officer — ArkaOS /dev department"
 mode: subagent
 ---
 
-You are Marco, Chief Technology Officer of the ArkaOS /dev department (v4.43.0; generated by scripts/harness_gen.py — do not edit).
+You are Marco, Chief Technology Officer of the ArkaOS /dev department (v4.44.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: software architecture, system design, tech strategy, cloud infrastructure, ai/ml systems.
 

package/harness/opencode/agents/arka-design-ops-lead-iris.md

@@ -3,7 +3,7 @@ description: "Design Ops Lead — ArkaOS /brand department"
 mode: subagent
 ---
 
-You are Iris, Design Ops Lead of the ArkaOS /brand department (v4.43.0; generated by scripts/harness_gen.py — do not edit).
+You are Iris, Design Ops Lead of the ArkaOS /brand department (v4.44.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: design tokens (JSON + CSS variables), component libraries (shadcn/ui, Radix, Headless UI), design system governance, figma → code pipelines, accessibility compliance (WCAG 2.2 AA/AAA), cross-platform tokenisation (Style Dictionary, Tailwind).
 

package/harness/opencode/agents/arka-ecom-director-ricardo.md

@@ -3,7 +3,7 @@ description: "E-Commerce Director — ArkaOS /ecom department"
 mode: subagent
 ---
 
-You are Ricardo, E-Commerce Director of the ArkaOS /ecom department (v4.43.0; generated by scripts/harness_gen.py — do not edit).
+You are Ricardo, E-Commerce Director of the ArkaOS /ecom department (v4.44.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: e-commerce strategy, conversion optimization, marketplace operations, pricing strategy, fulfillment & logistics, email & retention.
 

package/harness/opencode/agents/arka-knowledge-director-clara.md

@@ -3,7 +3,7 @@ description: "Knowledge Director — ArkaOS /kb department"
 mode: subagent
 ---
 
-You are Clara, Knowledge Director of the ArkaOS /kb department (v4.43.0; generated by scripts/harness_gen.py — do not edit).
+You are Clara, Knowledge Director of the ArkaOS /kb department (v4.44.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: knowledge management, research methodology, persona building, content curation, taxonomy & ontology, Obsidian vault management.
 

package/harness/opencode/agents/arka-leadership-director-rodrigo.md

@@ -3,7 +3,7 @@ description: "Leadership & People Director — ArkaOS /lead department"
 mode: subagent
 ---
 
-You are Rodrigo, Leadership & People Director of the ArkaOS /lead department (v4.43.0; generated by scripts/harness_gen.py — do not edit).
+You are Rodrigo, Leadership & People Director of the ArkaOS /lead department (v4.44.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: team assessment & health, leadership development, hiring & onboarding, performance management, feedback & 1-on-1s, culture building.
 

package/harness/opencode/agents/arka-marketing-director-luna.md

@@ -3,7 +3,7 @@ description: "Marketing Director — ArkaOS /mkt department"
 mode: subagent
 ---
 
-You are Luna, Marketing Director of the ArkaOS /mkt department (v4.43.0; generated by scripts/harness_gen.py — do not edit).
+You are Luna, Marketing Director of the ArkaOS /mkt department (v4.44.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: growth strategy, video-ad teardown via dev/watch (hook, pacing and spoken-copy evidence from frames + transcript), content marketing, SEO, paid acquisition, social media.
 

package/harness/opencode/agents/arka-ops-lead-daniel.md

@@ -3,7 +3,7 @@ description: "Operations Lead — ArkaOS /ops department"
 mode: subagent
 ---
 
-You are Daniel, Operations Lead of the ArkaOS /ops department (v4.43.0; generated by scripts/harness_gen.py — do not edit).
+You are Daniel, Operations Lead of the ArkaOS /ops department (v4.44.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: workflow automation (Zapier, Make, n8n), SOP/process visualization via dev/diagram (workflow + lifecycle diagrams for automations and runbooks), process mapping & optimization, SOP creation & management, bottleneck analysis, integration design.
 

package/harness/opencode/agents/arka-pm-director-carolina.md

@@ -3,7 +3,7 @@ description: "Product Manager — ArkaOS /pm department"
 mode: subagent
 ---
 
-You are Carolina, Product Manager of the ArkaOS /pm department (v4.43.0; generated by scripts/harness_gen.py — do not edit).
+You are Carolina, Product Manager of the ArkaOS /pm department (v4.44.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: continuous product discovery (daily habit), deliverable visualization via dev/diagram (workflow diagrams so stakeholders see scope before build), weekly customer interviewing, dual-track agile (discovery + delivery), product risk assessment (value/usability/feasibility/viability), framing problems for empowered teams (not features).
 

package/harness/opencode/agents/arka-revops-lead-vicente.md

@@ -3,7 +3,7 @@ description: "RevOps Lead — ArkaOS /saas department"
 mode: subagent
 ---
 
-You are Vicente, RevOps Lead of the ArkaOS /saas department (v4.43.0; generated by scripts/harness_gen.py — do not edit).
+You are Vicente, RevOps Lead of the ArkaOS /saas department (v4.44.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: revenue operations (cross mkt + sales + CS), unified funnel & CRM hygiene, SLA MQL→SQL between marketing and sales, revenue metrics (LTV/CAC, NRR, payback), lead scoring & routing, commission & forecast modeling.
 

package/harness/opencode/agents/arka-saas-strategist-tiago.md

@@ -3,7 +3,7 @@ description: "SaaS Strategist — ArkaOS /saas department"
 mode: subagent
 ---
 
-You are Tiago, SaaS Strategist of the ArkaOS /saas department (v4.43.0; generated by scripts/harness_gen.py — do not edit).
+You are Tiago, SaaS Strategist of the ArkaOS /saas department (v4.44.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: SaaS metrics & benchmarking, product-led growth, pricing strategy, customer success, micro-SaaS validation, go-to-market for SaaS.
 

package/harness/opencode/agents/arka-sales-director-miguel.md

@@ -3,7 +3,7 @@ description: "Sales Director — ArkaOS /sales department"
 mode: subagent
 ---
 
-You are Miguel, Sales Director of the ArkaOS /sales department (v4.43.0; generated by scripts/harness_gen.py — do not edit).
+You are Miguel, Sales Director of the ArkaOS /sales department (v4.44.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: consultative selling, pipeline management, proposal writing, negotiation, discovery calls, deal qualification.
 

package/harness/opencode/agents/arka-strategy-director-tomas.md

@@ -3,7 +3,7 @@ description: "Chief Strategist — ArkaOS /strat department"
 mode: subagent
 ---
 
-You are Tomas, Chief Strategist of the ArkaOS /strat department (v4.43.0; generated by scripts/harness_gen.py — do not edit).
+You are Tomas, Chief Strategist of the ArkaOS /strat department (v4.44.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: competitive strategy, business-flow visualization via dev/diagram (architecture + dataflow diagrams of business models and value chains), market analysis, business model design, positioning, innovation strategy.
 

package/harness/opencode/agents/arka-tech-director-francisca.md

@@ -3,7 +3,7 @@ description: "Technical & UX Quality Director — ArkaOS /quality department"
 mode: subagent
 ---
 
-You are Francisca, Technical & UX Quality Director of the ArkaOS /quality department (v4.43.0; generated by scripts/harness_gen.py — do not edit).
+You are Francisca, Technical & UX Quality Director of the ArkaOS /quality department (v4.44.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: code quality (SOLID, Clean Code, DRY), test coverage and quality, UX/UI review (heuristics, accessibility), security review (OWASP), performance review (CWV, API latency), data integrity and API contracts.
 

package/harness/opencode/agents/arka-tech-lead-paulo.md

@@ -3,7 +3,7 @@ description: "Tech Lead — ArkaOS /dev department"
 mode: subagent
 ---
 
-You are Paulo, Tech Lead of the ArkaOS /dev department (v4.43.0; generated by scripts/harness_gen.py — do not edit).
+You are Paulo, Tech Lead of the ArkaOS /dev department (v4.44.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: workflow orchestration, visual spec/plan companions via dev/diagram (typed IR -> interactive HTML the user opens before build), code quality enforcement, sprint/cycle management, technical decision-making, developer experience.
 

package/harness/opencode/agents/arka-video-producer-simao.md

@@ -3,7 +3,7 @@ description: "Video Producer & Production Lead — ArkaOS /content department"
 mode: subagent
 ---
 
-You are Simão, Video Producer & Production Lead of the ArkaOS /content department (v4.43.0; generated by scripts/harness_gen.py — do not edit).
+You are Simão, Video Producer & Production Lead of the ArkaOS /content department (v4.44.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: video production pipelines (script → storyboard → assets → edit → render), cut review via dev/watch (frame + transcript evidence on own renders before the Quality Gate), Hyperframes video-as-code editing (HTML/CSS/JS + GSAP → MP4), Higgsfield generation orchestration (image, video, audio, motion control, upscale, reframe), shot lists and EDLs (scene/shot/VO/on-screen-text columns), transcription-synced cuts and word-level captions.
 

package/harness/zed/.rules

@@ -1,6 +1,6 @@
 # ArkaOS — The Operating System for AI Agent Teams
 
-> v4.43.0 — 89 agents, 17 departments, 332 skills. Generated by `scripts/harness_gen.py`; do not edit.
+> v4.44.0 — 89 agents, 17 departments, 332 skills. Generated by `scripts/harness_gen.py`; do not edit.
 
 You are operating within ArkaOS. Every request routes through the
 appropriate department squad — never respond as a generic assistant.

package/installer/adapters/claude-code.js

@@ -1,4 +1,4 @@
-import { existsSync, readFileSync, writeFileSync, mkdirSync, readdirSync, copyFileSync, statSync } from "node:fs";
+import { existsSync, readFileSync, writeFileSync, mkdirSync, readdirSync, copyFileSync, statSync, renameSync } from "node:fs";
 import { join, dirname, resolve } from "node:path";
 import { platform } from "node:os";
 import { fileURLToPath } from "node:url";
@@ -31,8 +31,12 @@ export function deployProjectAgents(projectDir, sourceRoot = ARKAOS_ROOT) {
   let deployed = 0;
   try {
     mkdirSync(agentsDest, { recursive: true });
-    for (const file of readdirSync(agentsSrc)) {
-      if (!file.endsWith(".md")) continue;
+    const sourceFiles = readdirSync(agentsSrc).filter((f) => f.endsWith(".md"));
+    retireLegacyPersonas(
+      agentsDest,
+      new Set(sourceFiles.map((f) => f.slice(0, -3))),
+    );
+    for (const file of sourceFiles) {
       const srcFile = join(agentsSrc, file);
       try {
         if (!statSync(srcFile).isFile()) continue;
@@ -48,6 +52,65 @@ export function deployProjectAgents(projectDir, sourceRoot = ARKAOS_ROOT) {
   return deployed;
 }
 
+// PR-B5 (N5): personas from the v1 agent payload predate the QGVerdict
+// contract. Left in place they stay dispatchable — a Quality Gate in that
+// project reaches `cqo` (no contract, no fence) instead of `marta-cqo`,
+// which is exactly the dead-relay shape the campaign repaired. Retirement
+// is a rename into .claude/agents/.arkaos-legacy/, never a delete, and
+// only fires under a double guard: the name is on this list AND absent
+// from the current source set (a name ArkaOS ships again is deployed,
+// not retired). Files outside the list are untouched — they are the
+// user's.
+export const LEGACY_PERSONAS = new Set([
+  "analyst",
+  "content-creator",
+  "copy-director",
+  "cqo",
+  "creative-director",
+  "devops",
+  "ecommerce-manager",
+  "motion-designer",
+  "qa",
+  "security",
+  "senior-dev",
+  "strategist",
+  "tech-lead",
+  "tech-ux-director",
+]);
+
+function retireLegacyPersonas(agentsDest, sourceNames) {
+  const legacyDir = join(agentsDest, ".arkaos-legacy");
+  let retired = 0;
+  let entries;
+  try {
+    entries = readdirSync(agentsDest);
+  } catch {
+    return 0;
+  }
+  for (const file of entries) {
+    if (!file.endsWith(".md")) continue;
+    const base = file.slice(0, -3);
+    if (!LEGACY_PERSONAS.has(base) || sourceNames.has(base)) continue;
+    try {
+      mkdirSync(legacyDir, { recursive: true });
+      let dest = join(legacyDir, file);
+      for (let n = 1; existsSync(dest); n++) {
+        dest = join(legacyDir, `${base}-${n}.md`);
+      }
+      renameSync(join(agentsDest, file), dest);
+      // Never silent (QG r1 M3): these are generic names — the owner
+      // must see the move and where the file went.
+      console.log(
+        `         Retired v1 persona: ${file} -> .claude/agents/.arkaos-legacy/`
+      );
+      retired++;
+    } catch {
+      // Best-effort: an unmovable persona stays in place, never deleted.
+    }
+  }
+  return retired;
+}
+
 /**
  * Build a complete inner hook-entry object for Claude Code's settings.json.
  *
@@ -180,6 +243,28 @@ export default {
       { hooks: [hookEntry(hooksDir, "pre-tool-use", 10)] },
     ];
 
+    // PreToolUse (Task matcher) — dynamic agent provisioning (PR-B5,
+    // N3). config/settings-template.json declared this entry for
+    // months, but the template is not the executed path: THIS adapter
+    // writes settings.json, and it never registered the hook, so
+    // agent-provision.sh shipped in the package and was never deployed
+    // on the npm path while projects dispatched v1 personas.
+    // POSIX-only (no .ps1 port exists) and conditional on the script
+    // existing — an older package must not register a dead command
+    // (same rule as the fastpath shim above).
+    if (!IS_WINDOWS && existsSync(join(hooksDir, "agent-provision.sh"))) {
+      settings.hooks.PreToolUse.push({
+        matcher: "Task",
+        hooks: [
+          {
+            type: "command",
+            command: join(hooksDir, "agent-provision.sh"),
+            timeout: 10,
+          },
+        ],
+      });
+    }
+
     // Stop — Flow completion validator (WARN mode in v2.20.0; promotion
     // to STRICT mode is gated on ≥ 2 weeks of clean telemetry per ADR
     // 2026-04-17-binding-flow-enforcement).

package/installer/doctor.js

@@ -14,6 +14,7 @@ import {
   resolveServicesForProfile,
 } from "./services.js";
 import { menubarHealthy } from "./menubar.js";
+import { LEGACY_PERSONAS } from "./adapters/claude-code.js";
 
 const INSTALL_DIR = join(homedir(), ".arkaos");
 
@@ -36,9 +37,21 @@ export function currentInstallProfile(
 
 /** Null when the check applies; otherwise the human-readable skip reason. */
 export function checkSkipReason(check, activeProfile) {
-  if (!check.minProfile) return null;
-  if (profileIncludes(activeProfile, check.minProfile)) return null;
-  return `not in ${activeProfile} profile`;
+  if (check.minProfile && !profileIncludes(activeProfile, check.minProfile)) {
+    return `not in ${activeProfile} profile`;
+  }
+  // PR-B5: per-check applicability — a project-scoped check run outside
+  // a project is an informational skip (same rendering as the profile
+  // gate), never a misleading fail. A predicate that throws must not
+  // hide its check, so the error path runs the check normally.
+  if (typeof check.skipIf === "function") {
+    try {
+      return check.skipIf() || null;
+    } catch {
+      return null;
+    }
+  }
+  return null;
 }
 
 // Resolve a single command via the platform-native locator. Returns true
@@ -206,6 +219,77 @@ export function watchMediaTooling() {
   return missing;
 }
 
+// PR-B5 (N5): a project is "repaired" when the three Quality Gate
+// reviewers are deployed WITH the QGVerdict contract and no v1 persona
+// remains dispatchable — at project scope OR at user scope, where the
+// installer used to write them as arka-<name>.md (QG r1 B2: the arka-
+// prefix defeats basename matching, so user-level detection reads the
+// frontmatter name instead). Injectable for tests; the check uses the
+// cwd and the real user agents dir.
+export function qgAgentsRepaired(
+  agentsDir = join(process.cwd(), ".claude", "agents"),
+  userAgentsDir = join(homedir(), ".claude", "agents")
+) {
+  for (const reviewer of ["marta-cqo", "eduardo-copy", "francisca-tech"]) {
+    try {
+      const text = readFileSync(join(agentsDir, `${reviewer}.md`), "utf-8");
+      if (!text.includes("QGVerdict")) return false;
+    } catch {
+      return false;
+    }
+  }
+  try {
+    for (const file of readdirSync(agentsDir)) {
+      if (!file.endsWith(".md")) continue;
+      if (LEGACY_PERSONAS.has(file.slice(0, -3))) return false;
+    }
+  } catch {
+    return false;
+  }
+  try {
+    for (const file of readdirSync(userAgentsDir)) {
+      if (!file.endsWith(".md")) continue;
+      if (isLegacyQgPersonaFile(join(userAgentsDir, file))) return false;
+    }
+  } catch {
+    // No user-level agents dir — nothing legacy can be dispatched there.
+  }
+  return true;
+}
+
+// The v1 QG trio at user scope: dispatchability follows the frontmatter
+// `name:`, not the filename. Detection only — retirement of user-level
+// files belongs to the deployer that wrote them (skill-deploy.js).
+export function isLegacyQgPersonaFile(path) {
+  try {
+    // First 500 chars only: enough for installer-written files, whose
+    // frontmatter opens the file deterministically (skill-deploy copies
+    // departments/*/agents/*.md verbatim). A hand-crafted file with the
+    // name buried deeper is out of detection scope on purpose — this
+    // check hunts the installer's own deploys, not user files.
+    const head = readFileSync(path, "utf-8").slice(0, 500);
+    const match = head.match(/^name:\s*([A-Za-z0-9-]+)\s*$/m);
+    return (
+      !!match &&
+      ["cqo", "copy-director", "tech-ux-director"].includes(match[1])
+    );
+  } catch {
+    return false;
+  }
+}
+
+// PR-B5: the hook-boundary channel has captured at least one session's
+// verdicts on this machine. Injectable for tests.
+export function qgLedgerPopulated(
+  root = join(INSTALL_DIR, "quality-gate")
+) {
+  try {
+    return readdirSync(root).length > 0;
+  } catch {
+    return false;
+  }
+}
+
 export const checks = [
   {
     name: "install-dir",
@@ -412,6 +496,40 @@ export const checks = [
     fix: () =>
       "Remove the ARKAOS_ROOT export from your shell rc (~/.zshrc) — the hooks resolve the root themselves",
   },
+  {
+    name: "qg-agents",
+    description: "Quality Gate reviewers deployed (QGVerdict contract, project + user scope)",
+    severity: "fail",
+    // PR-B5 (N5): a project whose .claude/agents/ lacks the three
+    // reviewers with the QGVerdict contract — or still carries
+    // dispatchable v1 personas — runs every Quality Gate through a
+    // contract-less agent: the dead-relay shape the campaign repaired.
+    // Project-scoped: skipped outside a project directory.
+    skipIf: () =>
+      existsSync(join(process.cwd(), ".claude", "agents"))
+        ? null
+        : "no .claude/agents here — run inside a project",
+    check: () => qgAgentsRepaired(),
+    // The two arms need two different commands: init reaches only the
+    // project scope (installer/init.js -> deployProjectAgents), while
+    // the user-scope retirement runs in deploySkills, reached from
+    // install and update — a fix string naming init alone sends the
+    // user in a dead-end loop (QG r2, both reviewers independently).
+    fix: () =>
+      "Run: npx arkaos update  (retires v1 QG personas from ~/.claude/agents/), then npx arkaos init in the project (deploys the QGVerdict reviewers into .claude/agents/)",
+  },
+  {
+    name: "qg-ledger",
+    description: "Quality Gate reviewer ledger has captured verdicts",
+    severity: "warn",
+    // PR-B5: an empty ledger root means the hook-boundary channel has
+    // never captured a verdict on this machine — the relay may still be
+    // dead in practice even with every contract deployed. Warn, not
+    // fail: a fresh install legitimately starts empty.
+    check: () => qgLedgerPopulated(),
+    fix: () =>
+      "Run a Quality Gate review — reviewer verdicts are hook-captured to ~/.arkaos/quality-gate/<session>/",
+  },
   {
     name: "profile",
     description: "User profile exists",

package/installer/index.js

@@ -817,6 +817,23 @@ function installHooks(installDir) {
     }
   }
 
+  // PR-B5 (N3): agent-provision.sh is a PreToolUse(Task) gate, not a
+  // lifecycle hook, and it is POSIX-only (no .ps1 port exists, and the
+  // adapter only registers it off-Windows). It lives OUTSIDE hookNames
+  // on purpose: that list's consistency tests require a .sh/.ps1 pair
+  // for every universal hook. Before this block the script was neither
+  // copied nor registered — settings-template.json declared it, but the
+  // template is not the executed path.
+  if (hookExt === ".sh") {
+    const provisionSrc = join(srcHooksDir, "agent-provision.sh");
+    if (existsSync(provisionSrc)) {
+      const provisionDest = join(hooksDir, "agent-provision.sh");
+      writeFileSync(provisionDest, readFileSync(provisionSrc, "utf-8"));
+      try { chmodSync(provisionDest, 0o755); } catch {}
+      ok("Hook: agent-provision.sh");
+    }
+  }
+
   if (copyHookLib(srcHooksDir, hooksDir)) {
     ok("Hook lib: _lib/");
   }

package/installer/skill-deploy.js

@@ -1,6 +1,6 @@
 import {
   copyFileSync, cpSync, existsSync, mkdirSync, readdirSync, readFileSync,
-  statSync, writeFileSync,
+  renameSync, statSync, writeFileSync,
 } from "node:fs";
 import { join } from "node:path";
 
@@ -64,7 +64,8 @@ function deployTopLevelSkill(skillSrcDir, arkaName, skillsBase) {
 /**
  * Deploy the full skill surface: main /arka skill (+ nested reference
  * bundle), department hubs, sub-skills, meta skills and agent personas.
- * Copy-only — never deletes anything already deployed.
+ * Copy-and-retire — never deletes anything already deployed (the v1 QG
+ * persona retirement renames into .arkaos-legacy/, it does not delete).
  *
  * Returns per-category counts so both callers can keep their own log
  * style. `version`/`repoRoot` stamp the main skill's VERSION and
@@ -145,6 +146,7 @@ export function deploySkills({
     // owner to a dispatchable source; hand-authored dept .md files win
     // (already deployed above), compiled ones fill the gaps.
     counts.agents += deployGateOwners(repoRoot, agentsBase, written);
+    retireLegacyQgPersonas(agentsBase);
   }
 
   log(counts);
@@ -205,10 +207,49 @@ function deployAgents(deptRoot, agentsBase, written = new Set()) {
   return deployed;
 }
 
+// PR-B5 (QG r1 B2): the three v1 Quality Gate personas predate the
+// QGVerdict contract. Deployed to ~/.claude/agents/ they keep a
+// contract-less cqo / copy-director / tech-ux-director dispatchable at
+// USER scope even after every project is repaired — the dead-relay
+// shape workstream B closes. The dept loop skips them, and the targets
+// this deployer itself wrote in earlier runs are retired — renamed
+// into .arkaos-legacy/, never deleted (the copy-only contract holds:
+// no delete primitive here). The real reviewers ship per project from
+// config/claude-agents/ via deployProjectAgents.
+const LEGACY_QG_PERSONA_FILES = [
+  "cqo.md", "copy-director.md", "tech-ux-director.md",
+];
+
+function retireLegacyQgPersonas(agentsBase) {
+  let retired = 0;
+  const legacyDir = join(agentsBase, ".arkaos-legacy");
+  for (const file of LEGACY_QG_PERSONA_FILES) {
+    const deployedName = `arka-${file}`;
+    const src = join(agentsBase, deployedName);
+    if (!existsSync(src)) continue;
+    try {
+      mkdirSync(legacyDir, { recursive: true });
+      let dest = join(legacyDir, deployedName);
+      for (let n = 1; existsSync(dest); n++) {
+        dest = join(legacyDir, `arka-${file.slice(0, -3)}-${n}.md`);
+      }
+      renameSync(src, dest);
+      // Full resolved destination: this retirement moves files in the
+      // user's HOME — the scope a reader is least able to guess.
+      console.log(`         Retired v1 QG persona: ${deployedName} -> ${dest}`);
+      retired++;
+    } catch {
+      // Best-effort — an unmovable persona stays in place, never deleted.
+    }
+  }
+  return retired;
+}
+
 function deployDeptAgents(agentsSrc, agentsBase, written) {
   let deployed = 0;
   for (const file of readdirSync(agentsSrc)) {
     if (!file.endsWith(".md")) continue;
+    if (LEGACY_QG_PERSONA_FILES.includes(file)) continue;
     const srcFile = join(agentsSrc, file);
     try {
       if (!statSync(srcFile).isFile()) continue;

package/installer/update.js

@@ -287,6 +287,18 @@ export async function update({ skillsFlag = "" } = {}) {
       try { chmodSync(destPath, 0o755); } catch {}
     }
   }
+
+  // PR-B5 (N3): the agent-provision PreToolUse(Task) gate — POSIX-only,
+  // outside hookNames on purpose (see the same block in index.js; the
+  // consistency tests require .sh/.ps1 pairs for the universal hooks).
+  if (hookExt === ".sh") {
+    const provisionSrc = join(srcHooksDir, "agent-provision.sh");
+    if (existsSync(provisionSrc)) {
+      const provisionDest = join(destHooksDir, "agent-provision.sh");
+      writeFileSync(provisionDest, readFileSync(provisionSrc, "utf-8"));
+      try { chmodSync(provisionDest, 0o755); } catch {}
+    }
+  }
   ok("Hook scripts updated");
 
   // Shared hook libraries (config/hooks/_lib/ — the Python interpreter

package/knowledge/skills-manifest.json

@@ -1,7 +1,7 @@
 {
   "_meta": {
     "generator": "scripts/marketplace_gen.py",
-    "version": "4.43.0",
+    "version": "4.44.0",
     "marketplace": "arkaos"
   },
   "structural": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "arkaos",
-  "version": "4.43.0",
+  "version": "4.44.0",
   "description": "The Operating System for AI Agent Teams",
   "type": "module",
   "bin": {

package/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "arkaos-core"
-version = "4.43.0"
+version = "4.44.0"
 description = "Core engine for ArkaOS — The Operating System for AI Agent Teams"
 readme = "README.md"
 license = {text = "MIT"}