atris 3.74.21 → 3.74.23

package/bin/atris.js

@@ -669,7 +669,7 @@ function showHelpAll() {
   console.log('  land       - The landing: what is actually done vs still in the air; --reap backs up + clears overdue');
   console.log('  caretaker  - Classify open pull requests on origin (scan only; no fix, comment, or merge)');
   console.log('  drive      - One self-driving tick: mission doctor -> auto-fix -> count disengagements');
-  console.log('  rsi        - Read the Dream-RSI attempt ledger (trees, attempts, policy, dreams)');
+  console.log('  rsi        - Read the Dream-RSI attempt ledger; rsi loop ships notebook fixes with no mission');
   console.log(`  autoland   - Approve the policy once; ${require('../lib/autoland').certifiedWorkLandsPhrase(process.cwd())}, you keep irreversible calls`);
   console.log('  engine     - engine registry, answer validation, dispatch flights, and live progress');
   console.log('  link       - What two things could become together: one line, why, a first thing to make, who makes it');
@@ -2495,6 +2495,10 @@ if (command === 'guide') {
   Promise.resolve().then(() => require('../commands/balance').balanceCommand(process.argv.slice(3)))
     .then((code) => exitAfterStdoutDrain(typeof code === 'number' ? code : 0))
     .catch((err) => { console.error(String(err.message || err).replace(/\s+/g, ' ')); process.exit(1); });
+} else if (command === 'spend') {
+  // Spend guard: unattended Claude runs on paid models need a yes (2026-10-28, $900 day).
+  const code = require('../commands/spend').spendCommand(process.argv.slice(3));
+  exitAfterStdoutDrain(typeof code === 'number' ? code : 0);
 } else if (command === 'usage') {
   Promise.resolve().then(() => require('../commands/usage').usageCommand(process.argv.slice(3)))
     .then((code) => exitAfterStdoutDrain(typeof code === 'number' ? code : 0))

package/commands/autoland.js

@@ -449,7 +449,7 @@ function wishSweepSummaryLine(summary, error = null) {
   return line;
 }
 
-function evaluateQueue(root, { strictVerify, acceptAll }) {
+function evaluateQueue(root, { strictVerify, acceptAll, includeProtected }) {
   return readProjection(root)
     .filter((task) => task && task.status === 'review')
     .filter((task) => String(task.review?.approval_status || task.metadata?.approval_status || 'pending') === 'pending')
@@ -458,7 +458,7 @@ function evaluateQueue(root, { strictVerify, acceptAll }) {
     .map((task) => {
       const evaluation = evaluateAutoAccept(
         { ...task, workspace_root: root },
-        { strictVerify, acceptAll, executeVerify: false },
+        { strictVerify, acceptAll, includeProtected, executeVerify: false },
       );
       return {
         ...evaluation,
@@ -472,6 +472,7 @@ function protectedReviewWaiting(root, policy = {}, waiting = []) {
   return evaluateQueue(root, {
     strictVerify: policy.strict_verify !== false,
     acceptAll: Boolean(policy.accept_all),
+    includeProtected: Boolean(policy.accept_protected),
   })
     .filter((row) => /^denied_tag_/.test(String(row.reason || '')))
     .filter((row) => !alreadyWaiting.has(row.ref));
@@ -487,7 +488,8 @@ function showStatus(root, args, deps = {}) {
   const enabled = Boolean(policy && policy.enabled);
   const strictVerify = policy ? policy.strict_verify !== false : true;
   const acceptAll = Boolean(policy && policy.accept_all);
-  const results = evaluateQueue(root, { strictVerify, acceptAll })
+  const includeProtected = Boolean(policy && policy.accept_protected);
+  const results = evaluateQueue(root, { strictVerify, acceptAll, includeProtected })
     .filter((r) => r.reason !== 'not_in_review');
   const readyForRecheck = results.filter((r) => r.action === 'would_accept');
   const wouldLand = readyForRecheck.filter((r) => r.verification_pending !== true);
@@ -525,7 +527,8 @@ function showStatus(root, args, deps = {}) {
       : `on (flipped by ${policyOwner}${policy.enabled_at ? ` on ${String(policy.enabled_at).slice(0, 10)}` : ''})`)
     : 'off - everything waits for you';
   console.log(`  policy: ${policyText}`);
-  if (enabled && acceptAll) console.log('  bar: everything lands except the protected lanes (money, deploys, security, customer, outward)');
+  if (enabled && includeProtected) console.log('  bar: protected work (money, deploys, security, customer, outward) also lands itself; sends and payments still need you.');
+  else if (enabled && acceptAll) console.log('  bar: everything lands except the protected lanes (money, deploys, security, customer, outward)');
   console.log(`  heartbeat: ${autoland.heartbeatStatusText(root, policy)}`);
   if (policy && policy.imessage_to) console.log(`  daily message: ${policy.imessage_to} at ${policy.digest_hour ?? autoland.DEFAULT_DIGEST_HOUR}:00`);
   const reapTrouble = autoland.readState(root).last_reap_error;
@@ -634,6 +637,7 @@ function turnOn(root, args) {
     alarm_hours: Number.isFinite(alarmHours) && alarmHours > 0 ? alarmHours : autoland.DEFAULT_ALARM_HOURS,
     strict_verify: !args.includes('--no-strict-verify'),
     accept_all: acceptAll,
+    accept_protected: args.includes('--include-protected'),
     daily_experiment: previous.daily_experiment !== false,
   });
   const cronOk = autoland.installCron(root);
@@ -644,9 +648,11 @@ function turnOn(root, args) {
   });
   console.log('');
   console.log('autoland is on.');
-  if (acceptAll) console.log(`  everything in review now lands itself, accepted as ${owner}; only the protected lanes wait.`);
+  if (acceptAll && policy.accept_protected) console.log(`  everything in review now lands itself, accepted as ${owner}.`);
+  else if (acceptAll) console.log(`  everything in review now lands itself, accepted as ${owner}; only the protected lanes wait.`);
   else console.log(`  certified, verified, reversible work now lands itself, accepted as ${owner}.`);
-  console.log('  protected lanes (money, deploys, security, customer, outward) still wait for you.');
+  if (policy.accept_protected) console.log('  protected work (money, deploys, security, customer, outward) also lands itself; sends and payments still need you.');
+  else console.log('  protected lanes (money, deploys, security, customer, outward) still wait for you.');
   console.log(`  heartbeat: ${cronOk ? 'installed, runs hourly' : 'could not install cron; run atris autoland tick yourself'}`);
   if (policy.imessage_to) {
     console.log(`  daily message to ${policy.imessage_to} at ${policy.digest_hour}:00; anything waiting on you past ${policy.alarm_hours}h pings you.`);
@@ -1020,6 +1026,14 @@ function digestSentToday(state, now = new Date()) {
   return state.last_digest_date === utcDay(now) && state.last_digest_date !== utcDay(yesterday);
 }
 
+function acceptCommandArgs(policy) {
+  const args = ['task', 'auto-accept-certified', '--json', '--certify-first'];
+  if (policy.accept_protected) args.push('--include-protected');
+  if (policy.accept_all) args.push('--all');
+  else if (policy.strict_verify === false) args.push('--no-strict-verify');
+  return args;
+}
+
 async function runTickBody(root, { json, policy, receipt, engineValidationDeps = {} }) {
 
   try {
@@ -1044,9 +1058,7 @@ async function runTickBody(root, { json, policy, receipt, engineValidationDeps =
   // Refresh origin once, before anything is accepted: the landing proof reads
   // origin's target, and a stale ref would call landed work unlanded.
   refreshLandingRefs(root);
-  const cliArgs =['task', 'auto-accept-certified', '--json', '--certify-first'];
-  if (policy.accept_all) cliArgs.push('--all');
-  else if (policy.strict_verify === false) cliArgs.push('--no-strict-verify');
+  const cliArgs = acceptCommandArgs(policy);
   const pendingReviewRows = readProjection(root)
     .filter((task) => task && task.status === 'review')
     .filter((task) => String(task.review?.approval_status || task.metadata?.approval_status || 'pending') === 'pending')
@@ -1442,7 +1454,7 @@ function showHelp() {
   console.log('');
   console.log('finished work that passed its checks and two independent reviews lands');
   console.log('automatically with a receipt. money, deploys, security, customer, and');
-  console.log('outward-facing work always waits for you.');
+  console.log('outward-facing work waits for you unless you include protected work.');
   console.log('');
   console.log('recommended agent flight checks:');
   console.log('  fast suite: npm run test:fast');
@@ -1456,6 +1468,7 @@ function showHelp() {
   console.log('  atris autoland on --all            lower the bar: everything lands except');
   console.log('                                     the protected lanes; a failing recorded');
   console.log('                                     check still blocks');
+  console.log('  atris autoland on --include-protected  include protected work in the policy');
   console.log('  atris autoland off                 back to approving every item');
   console.log('  atris autoland digest [--send]     the daily message, now');
   console.log('  atris autoland tick [--json]       one heartbeat (what the hourly cron runs)');
@@ -1501,6 +1514,7 @@ module.exports = {
   hasAgentJargon,
   runEngineAnswerValidation,
   runTickBody,
+  acceptCommandArgs,
   runSshAgentSweep,
   sshAgentSweepNote,
   showStatus,

package/commands/improve.js

@@ -453,7 +453,7 @@ function collectImproveVitals(options = {}, deps = {}) {
     return fs.existsSync(plistPath);
   })();
   const installed = launchdInstalled || legacyCronInstalled;
-  const installNudge = installed ? null : 'the scheduled improve loop is off. turn it on: atris pulse install --model claude-sonnet-5';
+  const installNudge = installed ? null : 'the scheduled improve loop is off. turn it on: atris pulse install';
 
   const experimentsPath = path.join(root, '.atris', 'state', 'experiments-daily.json');
   const experiments = readJsonFile(experimentsPath, {});

package/commands/mission.js

@@ -520,6 +520,13 @@ function recordMissionEngineTickOutcome(engineId, result, root = process.cwd())
 // a closed credit window is credit out. Never throws into the tick.
 function missionTickRunOutcome(result, verifierResult, maxSeconds) {
   if (result && result.status === 'ran') {
+    const review = verifierResult?.referee;
+    if (verifierResult?.passed === false && verifierResult.status === 0 && !verifierResult.timed_out
+      && review?.mode === 'engine-unavailable' && review.reason !== 'code changed during review') {
+      return { outcome: 'review unavailable', detail: review.timed_out
+        ? 'the build check passed, but the second review timed out'
+        : 'the build check passed, but the second review was unavailable' };
+    }
     return verifierResult && verifierResult.passed === false
       ? { outcome: 'failed', detail: 'the verifier failed' }
       : { outcome: 'landed' };
@@ -9353,7 +9360,7 @@ function buildTickPrompt(mission, tickIndex, maxTicks, frozen, pings = [], cwd =
     `## Your task`,
     `Do ONE increment of work toward the stop condition. ONE. No more.`,
     `- ${memberIdentityLine(mission.owner)} Your member files are preloaded above; open atris/team/${mission.owner}/MEMBER.md only if that copy is marked truncated. Work in that identity, inside its scope and stop rules. Atris writes your member log from your receipt, so end the receipt with one \`learned: <one line>\` line instead of editing the log.`,
-    `- FIRST: inspect current mission/task state before acting. Read the relevant files, run \`atris mission status ${mission.id}\`, \`git status\`, or \`atris task list\` as needed so you know what's already done.`,
+    `- Start with the job: inspect the files or state directly relevant to the objective, then do the smallest useful action. Skip workspace boot and start-of-session routines, including brain activation, general Atris or task listings, and reading MAP, persona, or skill files solely for startup. Inspect mission or task state only if the job requires it.`,
     `- Pick the smallest concrete action that moves the mission forward.`,
     `- Before acting, state your single next move in one sentence.`,
     `- Edit / run / research as needed for the lane.`,
@@ -10075,6 +10082,16 @@ function engineHealthRoot(cwd) {
   return dir && path.basename(dir) === '.git' ? path.dirname(dir) : cwd;
 }
 
+function reviewerHealthRoot(engine) {
+  return path.join(require('../lib/state-home').atrisHome(), 'reviewer-health', engine);
+}
+
+function reviewerCooling(engine, registry) {
+  const saved = registry.readEngineRegistry(reviewerHealthRoot(engine), { persist: false })
+    .engines.find((entry) => entry.id === engine);
+  return saved?.health?.status === 'cooling' && !registry.engineReadyAt(saved);
+}
+
 // Every spelling and version of one model family counts as the same model,
 // with or without the long-context tag. Unknown counts as same.
 function reviewerMayBeSameModel(a, b) {
@@ -10102,12 +10119,12 @@ function engineVerifierLineup(mission, cwd, preferredEngine = '', options = {})
     const workerEngine = canonicalEngineName(mission?.runner) || 'claude';
     const workerModel = resolveMissionTickRunnerModel(mission);
     const team = registry.resolveEngineForRoleRanked('validator', root, { job: 'review', quiet: true }).team || [];
-    const backup = team.find((engine) => engine && engine.id !== primary
+    const backup = team.find((engine) => engine && engine.id !== primary && !reviewerCooling(engine.id, registry)
       && !(engine.id === workerEngine && reviewerMayBeSameModel(engine.roster_model, workerModel)));
     if (!backup) return lineup;
     lineup.push({ engine: backup.id, model: backup.roster_model || '' });
     const saved = registry.readEngineRegistry(root, { persist: false }).engines.find((engine) => engine.id === primary);
-    if (saved && !registry.engineReadyAt(saved)) lineup.shift();
+    if ((saved && !registry.engineReadyAt(saved)) || reviewerCooling(primary, registry)) lineup.shift();
   } catch {}
   return lineup;
 }
@@ -10127,7 +10144,7 @@ async function runEngineVerifier(mission, options = {}) {
         sessionId: crypto.randomUUID(),
         cwd,
         signal: options.signal,
-        timeoutMs: ENGINE_VERIFY_TIMEOUT_MS,
+        timeoutMs: options.timeoutMs || ENGINE_VERIFY_TIMEOUT_MS,
         prompt: buildEngineVerifyPrompt(mission, options.tickIndex || 1, missionDoneLooksLike(mission, cwd), {
           timeoutMs: ENGINE_VERIFY_TIMEOUT_MS,
           checkPassed: options.checkPassed || '',
@@ -10140,11 +10157,16 @@ async function runEngineVerifier(mission, options = {}) {
       restoreRunnerProfile();
     }
     verdict = engineVerifierResultFromRun(engineResult, engine);
+    if (engineResult?.ok && !engineResult?.timedOut && !engineResult?.aborted) {
+      try { setEngineHealth(engine, 'ready', healthRoot); } catch {}
+      try { setEngineHealth(engine, 'ready', reviewerHealthRoot(engine)); } catch {}
+    }
     if (verdict.mode !== 'engine-unavailable' || engineResult?.aborted) return verdict;
     // Member lab 10/26: codex hung on every review, and each job waited out
     // the full five minutes. Bench it so the next review starts on the backup.
     if (engineResult?.timedOut) {
       try { setEngineHealth(engine, 'cooling', healthRoot); } catch {}
+      try { setEngineHealth(engine, 'cooling', reviewerHealthRoot(engine)); } catch {}
     }
   }
   return verdict;
@@ -11103,7 +11125,8 @@ async function executeMissionRunTicksPhase(context) {
         next_push: result.next_push || undefined,
         engine: result.engine_id || runtimeMission.runner || mission.runner || null,
         task_type: 'executor',
-        verified_passed: verifierResult && typeof verifierResult.passed === 'boolean' ? verifierResult.passed : undefined,
+        verified_passed: missionTickRunOutcome(result, verifierResult).outcome === 'review unavailable'
+          ? undefined : verifierResult && typeof verifierResult.passed === 'boolean' ? verifierResult.passed : undefined,
         duration_ms: Math.max(0, (Date.parse(finishedAt) || 0) - (Date.parse(tickStart) || 0)),
       }).mission;
       if (rotateSessionForContext) {
@@ -12999,6 +13022,7 @@ module.exports = {
   receiptLearnedLine,
   tickTouchedCheckDefinition,
   engineVerifierLineup,
+  runEngineVerifier,
   claudeRunnerMcpArgs,
   crystallizeMemberSkillLesson,
   listSiblingWorkspaceMissionHints,

package/commands/rsi.js

@@ -6,6 +6,8 @@
 // outcomes, the live policy id, and the last dream receipt. Read-only: it
 // never touches record.py, never writes state, and exits 0 even when the
 // workspace has no ledger yet.
+//
+// `atris rsi loop` ships notebook fixes with no mission queued (lib/rsi-loop.js).
 
 const fs = require('fs');
 const rsi = require('../lib/rsi-record');
@@ -114,8 +116,29 @@ Usage:
   atris rsi            same as status
   atris rsi status     trees + attempts by lane, last night's outcomes, policy, last dream
   atris rsi status --json   machine-readable status
+  atris rsi loop [--minutes M] [--json]
+                       find notebook fixes with no mission queued, verify, commit and
+                       push them on one reusable isolated branch (default budget 5 minutes)
+
+status is read-only. loop checks atris/ pages for line refs that point at
+moved code and for wording the slop rules can repair, commits each check
+that verifies, and pushes the branch. It removes the local branch and checkout
+only once the remote tip matches; the remote branch is reused on later runs.
+The budget is checked between steps and limits network operations.
+The main checkout is never edited.
+
+State lives in .atris/state/rsi/ (or $ATRIS_RSI_STATE); loop reports go to loops.jsonl there.`);
+}
 
-Read-only. State lives in .atris/state/rsi/ (or $ATRIS_RSI_STATE).`);
+async function runLoopCommand(args) {
+  const rsiLoop = require('../lib/rsi-loop');
+  const i = args.indexOf('--minutes');
+  const raw = i >= 0 ? String(args[i + 1] || '') : '';
+  const minutes = i < 0 ? undefined : (/^\d+(\.\d+)?$/.test(raw) ? Number(raw) : NaN);
+  const result = await rsiLoop.runLoop({ minutes, workspace: process.cwd() });
+  console.log(args.includes('--json') ? JSON.stringify(result) : rsiLoop.formatLoopReport(result));
+  if (result.refused) return 2;
+  return result.ok ? 0 : 1;
 }
 
 function run(argv = []) {
@@ -125,6 +148,7 @@ function run(argv = []) {
     return 0;
   }
   const sub = args[0] && !args[0].startsWith('-') ? args[0] : 'status';
+  if (sub === 'loop') return runLoopCommand(args.slice(1));
   if (sub !== 'status') {
     console.log(`unknown rsi subcommand: ${sub}`);
     showHelp();

package/commands/spend.js

@@ -0,0 +1,78 @@
+'use strict';
+
+const fs = require('fs');
+const guard = require('../lib/claude-spend-guard');
+
+function showSpendHelp() {
+  console.log('usage: atris spend guard [install|uninstall|status]');
+  console.log('       atris spend log [--limit N]');
+  console.log('');
+  console.log('The guard stops unattended Claude runs on paid models (anything but Haiku)');
+  console.log(`unless ${guard.APPROVAL_ENV}=<model> names the model for that run.`);
+  console.log('It also stops unattended runs that carry a pay-per-use Anthropic key.');
+  console.log('Interactive Claude sessions are never blocked.');
+}
+
+function printStatus(status) {
+  if (!status.readable) {
+    console.log(`guard: unknown, could not read ${status.settings}`);
+    return;
+  }
+  console.log(status.installed ? 'guard: on' : 'guard: off');
+  console.log(`settings: ${status.settings}`);
+  console.log(`hook: ${status.script}`);
+}
+
+function guardCommand(action = 'status') {
+  if (action === 'install') {
+    const status = guard.installGuard();
+    printStatus(status);
+    if (status.installed) {
+      console.log('Unattended Claude runs on paid models now need a yes on this computer.');
+    }
+    return status.installed ? 0 : 1;
+  }
+  if (action === 'uninstall') {
+    printStatus(guard.uninstallGuard());
+    return 0;
+  }
+  if (action === 'status') {
+    const status = guard.guardStatus();
+    printStatus(status);
+    return status.installed ? 0 : 1;
+  }
+  showSpendHelp();
+  return 1;
+}
+
+function logCommand(args) {
+  const i = args.indexOf('--limit');
+  const limit = i >= 0 ? Math.max(1, Number(args[i + 1]) || 20) : 20;
+  const file = guard.ledgerPath();
+  if (!fs.existsSync(file)) {
+    console.log('no guard decisions recorded on this computer.');
+    return 0;
+  }
+  const rows = fs.readFileSync(file, 'utf8').trim().split('\n').slice(-limit);
+  for (const line of rows) {
+    try {
+      const r = JSON.parse(line);
+      console.log(`${r.ts}  ${r.decision}  ${r.model}  ${r.job || ''}  ${r.cwd || ''}`.trimEnd());
+    } catch {}
+  }
+  return 0;
+}
+
+function spendCommand(args = []) {
+  const [sub, ...rest] = args;
+  if (!sub || sub === '--help' || sub === '-h' || sub === 'help') {
+    showSpendHelp();
+    return sub ? 0 : 1;
+  }
+  if (sub === 'guard') return guardCommand(rest[0] || 'status');
+  if (sub === 'log') return logCommand(rest);
+  showSpendHelp();
+  return 1;
+}
+
+module.exports = { spendCommand };

package/commands/task.js

@@ -31,6 +31,7 @@ const {
   parseVerifyCommand,
   runVerifyCommand,
   DENIED_TAGS,
+  protectedLaneOf,
 } = require('../lib/auto-accept-certified');
 const { evaluateAcceptVerify, nonFalsifyingIssue } = require('../lib/accept-verify-gate');
 const { checkedCodeSha, runVerifyAtJobCode } = require('../lib/job-code-verify');
@@ -10247,6 +10248,7 @@ function cmdCertifyVerified(args, options = {}) {
   const asJson = wantsJson(args);
   const silent = options.silent === true;
   const verifyCache = options.verifyCache || null;
+  const includeProtected = options.includeProtected === true;
   const actor = String(flag(args, '--as') || 'autoland-verifier');
   const limitRaw = flag(args, '--limit');
   const max = limitRaw && limitRaw !== true ? Math.max(1, Number(limitRaw) || 6) : 6;
@@ -10284,7 +10286,7 @@ function cmdCertifyVerified(args, options = {}) {
       continue;
     }
     const tag = String(task.tag || '').toLowerCase();
-    if (DENIED_TAGS.has(tag)) {
+    if (!includeProtected && DENIED_TAGS.has(tag)) {
       results.push({ ref, action: 'skipped', reason: `denied_tag_${tag}` });
       continue;
     }
@@ -10302,7 +10304,7 @@ function cmdCertifyVerified(args, options = {}) {
     // second time per row before the real run. executeVerify: false as well,
     // an untrusted trust tier re-enables the strict block internally even
     // with strictVerify off, which is how this probe spawned a verify per row.
-    const evaluation = evaluateAutoAccept(task, { strictVerify: false, executeVerify: false });
+    const evaluation = evaluateAutoAccept(task, { strictVerify: false, includeProtected, executeVerify: false });
     if (evaluation.eligible) {
       results.push({ ref, action: 'skipped', reason: 'already_landable' });
       continue;
@@ -10415,6 +10417,7 @@ function cmdLanding(args) {
 function cmdAutoAcceptCertified(args) {
   const dryRun = hasFlag(args, '--dry-run');
   const acceptAll = hasFlag(args, '--all');
+  const includeProtected = hasFlag(args, '--include-protected');
   const certifyFirst = hasFlag(args, '--certify-first');
   const strictVerify = !hasFlag(args, '--no-strict-verify') && !acceptAll;
   const actorFlag = flag(args, '--as');
@@ -10479,7 +10482,7 @@ function cmdAutoAcceptCertified(args) {
   // never persisted: a later heartbeat must prove the checkout again.
   const verifyCache = new Map();
   const certification = certifyFirst && !dryRun
-    ? cmdCertifyVerified([], { verifyCache, silent: true })
+    ? cmdCertifyVerified([], { verifyCache, silent: true, includeProtected })
     : null;
 
   const taskDb = getTaskDb();
@@ -10514,7 +10517,7 @@ function cmdAutoAcceptCertified(args) {
       results.push({ ...proofBoundary, action: 'skipped' });
       continue;
     }
-    const evaluation = evaluateAutoAccept(task, { strictVerify, acceptAll, verifyCache });
+    const evaluation = evaluateAutoAccept(task, { strictVerify, acceptAll, includeProtected, verifyCache });
     if (!evaluation.eligible) {
       results.push({ ...evaluation, action: 'skipped' });
       continue;
@@ -10547,7 +10550,9 @@ function cmdAutoAcceptCertified(args) {
     }
     const accepted = acceptReviewTask(taskDb, db, task.id, {
       actor,
-      proof: evaluation.proof,
+      proof: includeProtected && protectedLaneOf(task)
+        ? `${evaluation.proof}\nprotected lane accepted by owner policy (${protectedLaneOf(task)})`
+        : evaluation.proof,
       reward: parsedReward.value,
       lesson: String(task.review?.lesson || task.metadata?.latest_agent_lesson || ''),
       nextTask: String(task.review?.next_task || task.metadata?.latest_agent_next_task || ''),
@@ -10632,7 +10637,17 @@ function autoAcceptSweepNormalizedTokens(value) {
   return [normalized, ...normalized.split(/[^a-z0-9-]+/).filter(Boolean)];
 }
 
-function autoAcceptSweepDeniedReason(task) {
+function autoAcceptSweepLane(task) {
+  for (const value of autoAcceptSweepLabelValues(task)) {
+    for (const token of autoAcceptSweepNormalizedTokens(value)) {
+      const lane = [...SWEEP_AUTO_ACCEPT_PROTECTED].find((denied) => token === denied || token.replace(/s$/, '') === denied);
+      if (lane) return lane;
+    }
+  }
+  return null;
+}
+
+function autoAcceptSweepDeniedReason(task, includeProtected = false) {
   for (const value of autoAcceptSweepLabelValues(task)) {
     const tokens = autoAcceptSweepNormalizedTokens(value);
     for (const token of tokens) {
@@ -10642,7 +10657,7 @@ function autoAcceptSweepDeniedReason(task) {
       const protectedLane = [...SWEEP_AUTO_ACCEPT_PROTECTED].find((denied) =>
         token === denied || token.replace(/s$/, '') === denied
       );
-      if (protectedLane) return 'protected_lane';
+      if (protectedLane && !includeProtected) return 'protected_lane';
     }
   }
   return null;
@@ -10689,7 +10704,7 @@ function autoAcceptSweepHappened(task) {
   );
 }
 
-function evaluateSweepAutoAccept(task, root) {
+function evaluateSweepAutoAccept(task, root, includeProtected = false) {
   const ref = taskRef(task);
   if (!task) return { eligible: false, ref, reason: 'task_not_found' };
   if (task.status !== 'review') return { eligible: false, ref, reason: 'not_in_review' };
@@ -10698,7 +10713,7 @@ function evaluateSweepAutoAccept(task, root) {
   const approval = String(review.approval_status || metadata.approval_status || 'pending').toLowerCase();
   if (approval !== 'pending') return { eligible: false, ref, reason: `approval_${approval}` };
   if (metadata.auto_accepted_at) return { eligible: false, ref, reason: 'already_auto_accepted' };
-  const denied = autoAcceptSweepDeniedReason(task);
+  const denied = autoAcceptSweepDeniedReason(task, includeProtected);
   if (denied) return { eligible: false, ref, reason: denied };
   const proof = autoAcceptSweepLatestProof(task);
   if (!proof) return { eligible: false, ref, reason: 'no_proof' };
@@ -10819,14 +10834,17 @@ function cmdSweep(args) {
   for (const item of pendingReview) {
     const fullProjection = enrichTaskProjection(taskDb.taskProjection(db, { taskId: item.id }));
     const task = fullProjection.tasks[0] || null;
-    const evaluation = evaluateSweepAutoAccept(task, root);
+    const includeProtected = hasFlag(args, '--include-protected');
+    const evaluation = evaluateSweepAutoAccept(task, root, includeProtected);
     if (!evaluation.eligible) {
       results.push({ ...evaluation, action: 'skipped', task_id: task?.id || item.id || null });
       continue;
     }
     const accepted = acceptReviewTask(taskDb, db, task.id, {
       actor,
-      proof: evaluation.proof,
+      proof: includeProtected && (protectedLaneOf(task) || autoAcceptSweepLane(task))
+        ? `${evaluation.proof}\nprotected lane accepted by owner policy (${protectedLaneOf(task) || autoAcceptSweepLane(task)})`
+        : evaluation.proof,
       reward: parsedReward.value,
       lesson: String(task.review?.lesson || task.metadata?.latest_agent_lesson || ''),
       nextTask: String(task.review?.next_task || task.metadata?.latest_agent_next_task || ''),

package/lib/auto-accept-certified.js

@@ -1177,6 +1177,7 @@ function evaluateAutoAccept(task, options = {}) {
     strictVerify = true,
     minPasses = AGENT_CERTIFICATION_REVIEW_PASSES,
     acceptAll = false,
+    includeProtected = false,
     executeVerify = true,
     verifyCache = null,
   } = options;
@@ -1200,7 +1201,7 @@ function evaluateAutoAccept(task, options = {}) {
   // strip, so a tag variant never slips money/deploy work past the human.
   const tag = String(task.tag || '').trim().toLowerCase();
   const deniedTag = deniedTagOf(task);
-  if (deniedTag) return { eligible: false, ref, reason: `denied_tag_${deniedTag}` };
+  if (deniedTag && !includeProtected) return { eligible: false, ref, reason: `denied_tag_${deniedTag}` };
 
   // A protected lane declared in prose is not a protection, it is a note.
   // WEB-410 said "PROTECTED LANE: auth/session minting ... never self-land"
@@ -1208,7 +1209,7 @@ function evaluateAutoAccept(task, options = {}) {
   // safety through a tag field that authors leave empty fails open, silently.
   // So read the declaration where authors actually write it.
   const declared = declaredProtectedLane(task);
-  if (declared) {
+  if (declared && !includeProtected) {
     return {
       eligible: false,
       ref,
@@ -1236,7 +1237,7 @@ function evaluateAutoAccept(task, options = {}) {
     // same outage as failing open, just quieter. Instead: when there is no
     // tag to route on, read the task text for the denied lanes themselves.
     // WEB-406 (Stripe checkout + paywall) landed untagged this way.
-    if (!tag) {
+    if (!tag && !includeProtected) {
       const sniffed = sniffedProtectedLane(task);
       if (sniffed) {
         return {