audit-tools 0.50.3 → 0.50.6

package/dist/audit/orchestrator/systemicChallengeExecutor.js

@@ -1,6 +1,20 @@
 import { resolveCharterCeiling, ceilingRequestsCharters } from "./charterExtractionExecutor.js";
 import { aggregateMetricsDigest } from "../systemic/aggregateMetricsDigest.js";
 import { foldChallengeRound } from "../systemic/systemicChallengeLoop.js";
+/**
+ * Convergence rule: the loop terminates only after this many CONSECUTIVE quiet
+ * (dry) rounds. Owner decision 2026-08-28: under a one-round rule, a single
+ * re-consumed or duplicate submission reports a dry round and terminates the
+ * adversary loop permanently — durable submission staging is the class fix
+ * (CX-02 blocker 3); two consecutive quiet rounds remove the single-event
+ * trigger. Cost accepted: one extra adversary round per audit. The applied
+ * rule is recorded on the register (`convergence_rule`) so the artifact is
+ * self-describing.
+ */
+const QUIET_ROUNDS_TO_CONVERGE = 2;
+function appliedConvergenceRule() {
+    return { quiet_rounds_required: QUIET_ROUNDS_TO_CONVERGE };
+}
 function omittedRegister(ceiling, generated_at) {
     return {
         generated_at,
@@ -9,6 +23,7 @@ function omittedRegister(ceiling, generated_at) {
         status: "omitted",
         rounds: [],
         converged: true,
+        convergence_rule: appliedConvergenceRule(),
         findings: [],
         validation_issues: [],
     };
@@ -26,16 +41,32 @@ function omittedRegister(ceiling, generated_at) {
  *   conversation-first default; mirrors the charter-clarification omit).
  * - **run** (`deep`/`deepest` ceiling): assemble the metrics digest and fold each
  *   submitted challenge round into the register. An EMPTY submission (a round that
- *   surfaced nothing new) marks the register `converged` — the loop terminates. A
- *   non-empty submission appends a round and keeps the loop open for the next round.
+ *   surfaced nothing new) is a QUIET round; the register marks `converged` only
+ *   after {@link QUIET_ROUNDS_TO_CONVERGE} CONSECUTIVE quiet rounds. A non-empty
+ *   submission appends a round and keeps the loop open for the next round.
  *
  * The first run (no submission yet) computes the digest and writes an OPEN register
  * (converged:false) so the relay step can dispatch the adversary; each subsequent run
  * with a submission folds a round.
  */
-export function runSystemicChallengeExecutor(bundle, submission) {
+export function runSystemicChallengeExecutor(bundle, submission, submissionHash) {
     const ceiling = resolveCharterCeiling(bundle.intent_checkpoint);
     const generated_at = new Date().toISOString();
+    // Iterative-fold duplicate guard (CX-02 landing 3): a submission whose
+    // content hash the register already folded is IGNORED — never folded again,
+    // and above all never counted as a quiet round, which is what would converge
+    // the adversary loop falsely and permanently. Reachable when a crash between
+    // the fold's core commit and its staged-submission cleanup restores an
+    // already-folded submission.
+    if (submission &&
+        submissionHash &&
+        bundle.systemic_challenge?.folded_submission_hashes?.includes(submissionHash)) {
+        return {
+            updated: { ...bundle },
+            artifacts_written: ["systemic_challenge.json"],
+            progress_summary: "Systemic challenge: duplicate round submission ignored (its content hash is already folded into the register).",
+        };
+    }
     if (!ceilingRequestsCharters(ceiling)) {
         const omitted = omittedRegister(ceiling, generated_at);
         return {
@@ -58,7 +89,11 @@ export function runSystemicChallengeExecutor(bundle, submission) {
             ceiling,
             metrics,
             rounds: priorRounds,
+            ...(prior?.folded_submission_hashes
+                ? { folded_submission_hashes: prior.folded_submission_hashes }
+                : {}),
             converged: false,
+            convergence_rule: appliedConvergenceRule(),
             findings: priorFindings,
             validation_issues: prior?.validation_issues ?? [],
         };
@@ -81,14 +116,24 @@ export function runSystemicChallengeExecutor(bundle, submission) {
         new_finding_ids: folded.new_finding_ids,
         dry: folded.dry,
     };
+    const rounds = [...priorRounds, round];
+    const foldedHashes = submissionHash
+        ? [...(prior?.folded_submission_hashes ?? []), submissionHash]
+        : prior?.folded_submission_hashes;
+    // CONSECUTIVE-QUIET convergence: the loop terminates only when the last
+    // QUIET_ROUNDS_TO_CONVERGE rounds were ALL dry. Derived from the persisted
+    // rounds themselves — no separate counter state to drift.
+    const converged = rounds.length >= QUIET_ROUNDS_TO_CONVERGE &&
+        rounds.slice(-QUIET_ROUNDS_TO_CONVERGE).every((r) => r.dry);
     const register = {
         generated_at,
         target: "systemic_challenge",
         ceiling,
         metrics,
-        rounds: [...priorRounds, round],
-        // LOOP-UNTIL-DRY: converged only when this round surfaced nothing new.
-        converged: folded.dry,
+        rounds,
+        ...(foldedHashes ? { folded_submission_hashes: foldedHashes } : {}),
+        converged,
+        convergence_rule: appliedConvergenceRule(),
         findings: folded.findings,
         validation_issues: [
             ...(prior?.validation_issues ?? []),
@@ -99,9 +144,11 @@ export function runSystemicChallengeExecutor(bundle, submission) {
         updated: { ...bundle, systemic_challenge: register },
         artifacts_written: ["systemic_challenge.json"],
         progress_summary: `Systemic challenge round ${round.round}: ${folded.new_finding_ids.length} new improvement(s)` +
-            (folded.dry
-                ? " — nothing new, loop converged (dry)."
-                : `, ${folded.findings.length} total; loop continues.`),
+            (converged
+                ? ` — nothing new for ${QUIET_ROUNDS_TO_CONVERGE} consecutive rounds, loop converged.`
+                : folded.dry
+                    ? " — quiet round; the loop converges after the next consecutive quiet round."
+                    : `, ${folded.findings.length} total; loop continues.`),
     };
 }
 //# sourceMappingURL=systemicChallengeExecutor.js.map

package/dist/audit/orchestrator/systemicChallengeExecutor.js.map

@@ -1 +1 @@
-{"version":3,"file":"systemicChallengeExecutor.js","sourceRoot":"","sources":["../../../src/audit/orchestrator/systemicChallengeExecutor.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAChG,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAE1E,SAAS,eAAe,CAAC,OAAgB,EAAE,YAAoB;IAC7D,OAAO;QACL,YAAY;QACZ,MAAM,EAAE,oBAAoB;QAC5B,OAAO;QACP,MAAM,EAAE,SAAS;QACjB,MAAM,EAAE,EAAE;QACV,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,EAAE;QACZ,iBAAiB,EAAE,EAAE;KACtB,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,4BAA4B,CAC1C,MAAsB,EACtB,UAAwC;IAExC,MAAM,OAAO,GAAG,qBAAqB,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAChE,MAAM,YAAY,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAE9C,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QACvD,OAAO;YACL,OAAO,EAAE,EAAE,GAAG,MAAM,EAAE,kBAAkB,EAAE,OAAO,EAAE;YACnD,iBAAiB,EAAE,CAAC,yBAAyB,CAAC;YAC9C,gBAAgB,EAAE,wCAAwC,OAAO,CAAC,IAAI,yCAAyC;SAChH,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,kBAAkB,CAAC;IACxC,MAAM,aAAa,GAAG,KAAK,EAAE,QAAQ,IAAI,EAAE,CAAC;IAC5C,MAAM,WAAW,GAAG,KAAK,EAAE,MAAM,IAAI,EAAE,CAAC;IAExC,iFAAiF;IACjF,gFAAgF;IAChF,yEAAyE;IACzE,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,QAAQ,GAA8B;YAC1C,YAAY;YACZ,MAAM,EAAE,oBAAoB;YAC5B,OAAO;YACP,OAAO;YACP,MAAM,EAAE,WAAW;YACnB,SAAS,EAAE,KAAK;YAChB,QAAQ,EAAE,aAAa;YACvB,iBAAiB,EAAE,KAAK,EAAE,iBAAiB,IAAI,EAAE;SAClD,CAAC;QACF,OAAO;YACL,OAAO,EAAE,EAAE,GAAG,MAAM,EAAE,kBAAkB,EAAE,QAAQ,EAAE;YACpD,iBAAiB,EAAE,CAAC,yBAAyB,CAAC;YAC9C,gBAAgB,EACd,iCAAiC,aAAa,CAAC,MAAM,0BAA0B;gBAC/E,GAAG,WAAW,CAAC,MAAM,oDAAoD;SAC5E,CAAC;IACJ,CAAC;IAED,sDAAsD;IACtD,MAAM,MAAM,GAAG,kBAAkB,CAAC;QAChC,KAAK,EAAE,aAAa;QACpB,SAAS,EAAE,UAAU,CAAC,QAAQ;QAC9B,SAAS,EAAE,MAAM,CAAC,gBAAgB,EAAE,UAAU;QAC9C,YAAY,EAAE,MAAM,CAAC,aAAa;KACnC,CAAC,CAAC;IAEH,MAAM,KAAK,GAA2B;QACpC,KAAK,EAAE,WAAW,CAAC,MAAM,GAAG,CAAC;QAC7B,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,GAAG,EAAE,MAAM,CAAC,GAAG;KAChB,CAAC;IACF,MAAM,QAAQ,GAA8B;QAC1C,YAAY;QACZ,MAAM,EAAE,oBAAoB;QAC5B,OAAO;QACP,OAAO;QACP,MAAM,EAAE,CAAC,GAAG,WAAW,EAAE,KAAK,CAAC;QAC/B,uEAAuE;QACvE,SAAS,EAAE,MAAM,CAAC,GAAG;QACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,iBAAiB,EAAE;YACjB,GAAG,CAAC,KAAK,EAAE,iBAAiB,IAAI,EAAE,CAAC;YACnC,GAAG,MAAM,CAAC,iBAAiB;SAC5B;KACF,CAAC;IACF,OAAO;QACL,OAAO,EAAE,EAAE,GAAG,MAAM,EAAE,kBAAkB,EAAE,QAAQ,EAAE;QACpD,iBAAiB,EAAE,CAAC,yBAAyB,CAAC;QAC9C,gBAAgB,EACd,4BAA4B,KAAK,CAAC,KAAK,KAAK,MAAM,CAAC,eAAe,CAAC,MAAM,qBAAqB;YAC9F,CAAC,MAAM,CAAC,GAAG;gBACT,CAAC,CAAC,uCAAuC;gBACzC,CAAC,CAAC,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM,yBAAyB,CAAC;KAC5D,CAAC;AACJ,CAAC"}
+{"version":3,"file":"systemicChallengeExecutor.js","sourceRoot":"","sources":["../../../src/audit/orchestrator/systemicChallengeExecutor.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAChG,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAE1E;;;;;;;;;GASG;AACH,MAAM,wBAAwB,GAAG,CAAC,CAAC;AAEnC,SAAS,sBAAsB;IAG7B,OAAO,EAAE,qBAAqB,EAAE,wBAAwB,EAAE,CAAC;AAC7D,CAAC;AAED,SAAS,eAAe,CAAC,OAAgB,EAAE,YAAoB;IAC7D,OAAO;QACL,YAAY;QACZ,MAAM,EAAE,oBAAoB;QAC5B,OAAO;QACP,MAAM,EAAE,SAAS;QACjB,MAAM,EAAE,EAAE;QACV,SAAS,EAAE,IAAI;QACf,gBAAgB,EAAE,sBAAsB,EAAE;QAC1C,QAAQ,EAAE,EAAE;QACZ,iBAAiB,EAAE,EAAE;KACtB,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,4BAA4B,CAC1C,MAAsB,EACtB,UAAwC,EACxC,cAAuB;IAEvB,MAAM,OAAO,GAAG,qBAAqB,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAChE,MAAM,YAAY,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAE9C,uEAAuE;IACvE,4EAA4E;IAC5E,6EAA6E;IAC7E,6EAA6E;IAC7E,uEAAuE;IACvE,6BAA6B;IAC7B,IACE,UAAU;QACV,cAAc;QACd,MAAM,CAAC,kBAAkB,EAAE,wBAAwB,EAAE,QAAQ,CAAC,cAAc,CAAC,EAC7E,CAAC;QACD,OAAO;YACL,OAAO,EAAE,EAAE,GAAG,MAAM,EAAE;YACtB,iBAAiB,EAAE,CAAC,yBAAyB,CAAC;YAC9C,gBAAgB,EACd,gHAAgH;SACnH,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QACvD,OAAO;YACL,OAAO,EAAE,EAAE,GAAG,MAAM,EAAE,kBAAkB,EAAE,OAAO,EAAE;YACnD,iBAAiB,EAAE,CAAC,yBAAyB,CAAC;YAC9C,gBAAgB,EAAE,wCAAwC,OAAO,CAAC,IAAI,yCAAyC;SAChH,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,kBAAkB,CAAC;IACxC,MAAM,aAAa,GAAG,KAAK,EAAE,QAAQ,IAAI,EAAE,CAAC;IAC5C,MAAM,WAAW,GAAG,KAAK,EAAE,MAAM,IAAI,EAAE,CAAC;IAExC,iFAAiF;IACjF,gFAAgF;IAChF,yEAAyE;IACzE,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,QAAQ,GAA8B;YAC1C,YAAY;YACZ,MAAM,EAAE,oBAAoB;YAC5B,OAAO;YACP,OAAO;YACP,MAAM,EAAE,WAAW;YACnB,GAAG,CAAC,KAAK,EAAE,wBAAwB;gBACjC,CAAC,CAAC,EAAE,wBAAwB,EAAE,KAAK,CAAC,wBAAwB,EAAE;gBAC9D,CAAC,CAAC,EAAE,CAAC;YACP,SAAS,EAAE,KAAK;YAChB,gBAAgB,EAAE,sBAAsB,EAAE;YAC1C,QAAQ,EAAE,aAAa;YACvB,iBAAiB,EAAE,KAAK,EAAE,iBAAiB,IAAI,EAAE;SAClD,CAAC;QACF,OAAO;YACL,OAAO,EAAE,EAAE,GAAG,MAAM,EAAE,kBAAkB,EAAE,QAAQ,EAAE;YACpD,iBAAiB,EAAE,CAAC,yBAAyB,CAAC;YAC9C,gBAAgB,EACd,iCAAiC,aAAa,CAAC,MAAM,0BAA0B;gBAC/E,GAAG,WAAW,CAAC,MAAM,oDAAoD;SAC5E,CAAC;IACJ,CAAC;IAED,sDAAsD;IACtD,MAAM,MAAM,GAAG,kBAAkB,CAAC;QAChC,KAAK,EAAE,aAAa;QACpB,SAAS,EAAE,UAAU,CAAC,QAAQ;QAC9B,SAAS,EAAE,MAAM,CAAC,gBAAgB,EAAE,UAAU;QAC9C,YAAY,EAAE,MAAM,CAAC,aAAa;KACnC,CAAC,CAAC;IAEH,MAAM,KAAK,GAA2B;QACpC,KAAK,EAAE,WAAW,CAAC,MAAM,GAAG,CAAC;QAC7B,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,GAAG,EAAE,MAAM,CAAC,GAAG;KAChB,CAAC;IACF,MAAM,MAAM,GAAG,CAAC,GAAG,WAAW,EAAE,KAAK,CAAC,CAAC;IACvC,MAAM,YAAY,GAAG,cAAc;QACjC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,wBAAwB,IAAI,EAAE,CAAC,EAAE,cAAc,CAAC;QAC9D,CAAC,CAAC,KAAK,EAAE,wBAAwB,CAAC;IACpC,wEAAwE;IACxE,2EAA2E;IAC3E,0DAA0D;IAC1D,MAAM,SAAS,GACb,MAAM,CAAC,MAAM,IAAI,wBAAwB;QACzC,MAAM,CAAC,KAAK,CAAC,CAAC,wBAAwB,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAA8B;QAC1C,YAAY;QACZ,MAAM,EAAE,oBAAoB;QAC5B,OAAO;QACP,OAAO;QACP,MAAM;QACN,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,SAAS;QACT,gBAAgB,EAAE,sBAAsB,EAAE;QAC1C,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,iBAAiB,EAAE;YACjB,GAAG,CAAC,KAAK,EAAE,iBAAiB,IAAI,EAAE,CAAC;YACnC,GAAG,MAAM,CAAC,iBAAiB;SAC5B;KACF,CAAC;IACF,OAAO;QACL,OAAO,EAAE,EAAE,GAAG,MAAM,EAAE,kBAAkB,EAAE,QAAQ,EAAE;QACpD,iBAAiB,EAAE,CAAC,yBAAyB,CAAC;QAC9C,gBAAgB,EACd,4BAA4B,KAAK,CAAC,KAAK,KAAK,MAAM,CAAC,eAAe,CAAC,MAAM,qBAAqB;YAC9F,CAAC,SAAS;gBACR,CAAC,CAAC,sBAAsB,wBAAwB,sCAAsC;gBACtF,CAAC,CAAC,MAAM,CAAC,GAAG;oBACV,CAAC,CAAC,4EAA4E;oBAC9E,CAAC,CAAC,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM,yBAAyB,CAAC;KAC9D,CAAC;AACJ,CAAC"}

package/dist/audit/systemic/secondOrderAdversaryPrompt.d.ts

@@ -3,8 +3,9 @@ import type { AggregateMetricsDigest } from "./aggregateMetricsDigest.js";
  * Render the second-order-adversary LANE prompt for one challenge round. `round` is
  * the 1-based loop ordinal; `priorFindingCount` orients the adversary on what already
  * surfaced (so it pushes for NEW improvements, not re-statements). `submissionPath`
- * is where the agent writes its findings; an EMPTY findings array is the deliberate
- * loop-until-dry terminator (this round found nothing new).
+ * is where the agent writes its findings; an EMPTY findings array marks a QUIET
+ * round (this round found nothing new) — the loop converges after consecutive
+ * quiet rounds, per the register's `convergence_rule`.
  *
  * Advance-free (design resolution 2): the lane prompt is materialized to a file
  * and carries no continue-command — the step prompt owns the advance, so a lane

package/dist/audit/systemic/secondOrderAdversaryPrompt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"secondOrderAdversaryPrompt.d.ts","sourceRoot":"","sources":["../../../src/audit/systemic/secondOrderAdversaryPrompt.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAE1E;;;;;;;;;;GAUG;AACH,wBAAgB,gCAAgC,CAAC,IAAI,EAAE;IACrD,KAAK,EAAE,MAAM,CAAC;IACd,iBAAiB,EAAE,MAAM,CAAC;IAC1B,OAAO,EAAE,sBAAsB,CAAC;IAChC,cAAc,EAAE,MAAM,CAAC;CACxB,GAAG,MAAM,CA4DT"}
+{"version":3,"file":"secondOrderAdversaryPrompt.d.ts","sourceRoot":"","sources":["../../../src/audit/systemic/secondOrderAdversaryPrompt.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAE1E;;;;;;;;;;;GAWG;AACH,wBAAgB,gCAAgC,CAAC,IAAI,EAAE;IACrD,KAAK,EAAE,MAAM,CAAC;IACd,iBAAiB,EAAE,MAAM,CAAC;IAC1B,OAAO,EAAE,sBAAsB,CAAC;IAChC,cAAc,EAAE,MAAM,CAAC;CACxB,GAAG,MAAM,CA6DT"}

package/dist/audit/systemic/secondOrderAdversaryPrompt.js

@@ -8,7 +8,7 @@
 // duplicated, over-built; what assumption went unquestioned; is there a categorically
 // better approach (design of record spec + backlog "Systemic reviewers must be pushed
 // adversarially for improvement"). LOOP-UNTIL-DRY: this is round N of a loop that ends
-// only when a round surfaces NOTHING NEW.
+// only when CONSECUTIVE rounds surface NOTHING NEW (the register's convergence_rule).
 //
 // The aggregate-metrics digest is NECESSARY supporting evidence, explicitly NOT
 // SUFFICIENT alone — the adversary reasons from the whole system, using the counts as
@@ -17,8 +17,9 @@
  * Render the second-order-adversary LANE prompt for one challenge round. `round` is
  * the 1-based loop ordinal; `priorFindingCount` orients the adversary on what already
  * surfaced (so it pushes for NEW improvements, not re-statements). `submissionPath`
- * is where the agent writes its findings; an EMPTY findings array is the deliberate
- * loop-until-dry terminator (this round found nothing new).
+ * is where the agent writes its findings; an EMPTY findings array marks a QUIET
+ * round (this round found nothing new) — the loop converges after consecutive
+ * quiet rounds, per the register's `convergence_rule`.
  *
  * Advance-free (design resolution 2): the lane prompt is materialized to a file
  * and carries no continue-command — the step prompt owns the advance, so a lane
@@ -55,9 +56,10 @@ export function renderSecondOrderAdversaryPrompt(opts) {
         "`architecture`. The lens routes the improvement to the right place in synthesis.",
         "",
         "## Loop-until-dry",
-        "The review is done only when a round yields NOTHING NEW — not when it first has an",
-        "answer. If, after genuine pressure, you find no NEW improvement this round, submit",
-        "an EMPTY findings array; that converges the loop. Otherwise submit the new",
+        "The review is done only when consecutive rounds yield NOTHING NEW — not when it",
+        "first has an answer. If, after genuine pressure, you find no NEW improvement this",
+        "round, submit an EMPTY findings array; that marks a quiet round, and the loop",
+        "converges after consecutive quiet rounds. Otherwise submit the new",
         "improvements (each pointing at at least one real component).",
         "",
         "## Output",

package/dist/audit/systemic/secondOrderAdversaryPrompt.js.map

@@ -1 +1 @@
-{"version":3,"file":"secondOrderAdversaryPrompt.js","sourceRoot":"","sources":["../../../src/audit/systemic/secondOrderAdversaryPrompt.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,EAAE;AACF,qFAAqF;AACrF,gFAAgF;AAChF,gFAAgF;AAChF,kFAAkF;AAClF,gFAAgF;AAChF,sFAAsF;AACtF,sFAAsF;AACtF,uFAAuF;AACvF,0CAA0C;AAC1C,EAAE;AACF,gFAAgF;AAChF,sFAAsF;AACtF,0BAA0B;AAI1B;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gCAAgC,CAAC,IAKhD;IACC,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAC1C,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,EAAE,CAC5C,CAAC;IACF,WAAW,CAAC,IAAI,CAAC,+BAA+B,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAE5E,OAAO;QACL,mFAAmF;QACnF,EAAE;QACF,sEAAsE,IAAI,CAAC,KAAK,GAAG;QACnF,iCAAiC,IAAI,CAAC,iBAAiB,8BAA8B;QACrF,qDAAqD;QACrD,EAAE;QACF,4DAA4D;QAC5D,8EAA8E;QAC9E,oFAAoF;QACpF,qEAAqE;QACrE,8CAA8C;QAC9C,2DAA2D;QAC3D,wDAAwD;QACxD,0CAA0C;QAC1C,sEAAsE;QACtE,EAAE;QACF,wEAAwE;QACxE,iFAAiF;QACjF,wDAAwD;QACxD,GAAG,WAAW;QACd,EAAE;QACF,yBAAyB;QACzB,iFAAiF;QACjF,sEAAsE;QACtE,kFAAkF;QAClF,EAAE;QACF,mBAAmB;QACnB,oFAAoF;QACpF,oFAAoF;QACpF,4EAA4E;QAC5E,8DAA8D;QAC9D,EAAE;QACF,WAAW;QACX,mBAAmB,IAAI,CAAC,cAAc,qBAAqB;QAC3D,EAAE;QACF,SAAS;QACT,GAAG;QACH,iBAAiB;QACjB,OAAO;QACP,4BAA4B;QAC5B,qCAAqC;QACrC,2CAA2C;QAC3C,sCAAsC;QACtC,wCAAwC;QACxC,qEAAqE;QACrE,uDAAuD;QACvD,4DAA4D;QAC5D,OAAO;QACP,KAAK;QACL,GAAG;QACH,KAAK;QACL,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}
+{"version":3,"file":"secondOrderAdversaryPrompt.js","sourceRoot":"","sources":["../../../src/audit/systemic/secondOrderAdversaryPrompt.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,EAAE;AACF,qFAAqF;AACrF,gFAAgF;AAChF,gFAAgF;AAChF,kFAAkF;AAClF,gFAAgF;AAChF,sFAAsF;AACtF,sFAAsF;AACtF,uFAAuF;AACvF,sFAAsF;AACtF,EAAE;AACF,gFAAgF;AAChF,sFAAsF;AACtF,0BAA0B;AAI1B;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,gCAAgC,CAAC,IAKhD;IACC,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAC1C,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,EAAE,CAC5C,CAAC;IACF,WAAW,CAAC,IAAI,CAAC,+BAA+B,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAE5E,OAAO;QACL,mFAAmF;QACnF,EAAE;QACF,sEAAsE,IAAI,CAAC,KAAK,GAAG;QACnF,iCAAiC,IAAI,CAAC,iBAAiB,8BAA8B;QACrF,qDAAqD;QACrD,EAAE;QACF,4DAA4D;QAC5D,8EAA8E;QAC9E,oFAAoF;QACpF,qEAAqE;QACrE,8CAA8C;QAC9C,2DAA2D;QAC3D,wDAAwD;QACxD,0CAA0C;QAC1C,sEAAsE;QACtE,EAAE;QACF,wEAAwE;QACxE,iFAAiF;QACjF,wDAAwD;QACxD,GAAG,WAAW;QACd,EAAE;QACF,yBAAyB;QACzB,iFAAiF;QACjF,sEAAsE;QACtE,kFAAkF;QAClF,EAAE;QACF,mBAAmB;QACnB,iFAAiF;QACjF,mFAAmF;QACnF,+EAA+E;QAC/E,oEAAoE;QACpE,8DAA8D;QAC9D,EAAE;QACF,WAAW;QACX,mBAAmB,IAAI,CAAC,cAAc,qBAAqB;QAC3D,EAAE;QACF,SAAS;QACT,GAAG;QACH,iBAAiB;QACjB,OAAO;QACP,4BAA4B;QAC5B,qCAAqC;QACrC,2CAA2C;QAC3C,sCAAsC;QACtC,wCAAwC;QACxC,qEAAqE;QACrE,uDAAuD;QACvD,4DAA4D;QAC5D,OAAO;QACP,KAAK;QACL,GAAG;QACH,KAAK;QACL,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/dist/audit/systemic/systemicChallengeLoop.d.ts

@@ -4,9 +4,12 @@ import type { GoalGraph } from "audit-tools/shared";
 export interface SystemicRoundResult {
     /** Every distinct finding across all rounds so far, blast-ranked, true-lens. */
     findings: Finding[];
-    /** The ids this round added that no prior round had (empty ⇒ dry/converged). */
+    /** The ids this round added that no prior round had (empty ⇒ dry). */
     new_finding_ids: string[];
-    /** True when this round surfaced nothing new — the loop-until-dry terminator. */
+    /**
+     * True when this round surfaced nothing new — a QUIET round. Convergence is
+     * the executor's call over CONSECUTIVE quiet rounds, not this flag alone.
+     */
     dry: boolean;
     /** Assembly notes (e.g. a finding was dropped as ungrounded), surfaced. */
     validation_issues: string[];
@@ -20,8 +23,9 @@ export interface SystemicRoundResult {
  *      PRESERVING the adversary-tagged TRUE lens.
  *   3. DEDUPE against prior rounds by finding identity (lens+category+title); a
  *      re-emission of a prior finding is NOT new.
- *   4. Determine convergence: a round that adds zero new findings is `dry` (the loop
- *      terminates); an empty submission is trivially dry.
+ *   4. Mark dryness: a round that adds zero new findings is `dry`; an empty
+ *      submission is trivially dry. The EXECUTOR converges the loop only after
+ *      consecutive dry rounds (the register's `convergence_rule`).
  * Deterministic: the returned `findings` are ordered by descending blast radius, ties
  * broken by finding id, so the register never churns on submission order.
  */

package/dist/audit/systemic/systemicChallengeLoop.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"systemicChallengeLoop.d.ts","sourceRoot":"","sources":["../../../src/audit/systemic/systemicChallengeLoop.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAwBpD,sEAAsE;AACtE,MAAM,WAAW,mBAAmB;IAClC,gFAAgF;IAChF,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,gFAAgF;IAChF,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,iFAAiF;IACjF,GAAG,EAAE,OAAO,CAAC;IACb,2EAA2E;IAC3E,iBAAiB,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE;IACzC,KAAK,EAAE,OAAO,EAAE,CAAC;IACjB,SAAS,EAAE,OAAO,EAAE,CAAC;IACrB,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,YAAY,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC;IACnD,wEAAwE;IACxE,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,MAAM,GAAG,SAAS,CAAC;CACvD,GAAG,mBAAmB,CA4CtB"}
+{"version":3,"file":"systemicChallengeLoop.d.ts","sourceRoot":"","sources":["../../../src/audit/systemic/systemicChallengeLoop.ts"],"names":[],"mappings":"AAyBA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAwBpD,sEAAsE;AACtE,MAAM,WAAW,mBAAmB;IAClC,gFAAgF;IAChF,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,sEAAsE;IACtE,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B;;;OAGG;IACH,GAAG,EAAE,OAAO,CAAC;IACb,2EAA2E;IAC3E,iBAAiB,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE;IACzC,KAAK,EAAE,OAAO,EAAE,CAAC;IACjB,SAAS,EAAE,OAAO,EAAE,CAAC;IACrB,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,YAAY,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC;IACnD,wEAAwE;IACxE,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,MAAM,GAAG,SAAS,CAAC;CACvD,GAAG,mBAAmB,CA6CtB"}

package/dist/audit/systemic/systemicChallengeLoop.js

@@ -2,7 +2,9 @@
 //
 // A second-order adversary (a SEPARATE agent) re-interrogates the whole system with
 // human-grade pressure and folds newly-surfaced improvements back in, LOOP-UNTIL-DRY:
-// done only when a challenge round yields NOTHING NEW (design of record
+// done only when CONSECUTIVE challenge rounds yield NOTHING NEW — this module marks
+// each round dry or not; the EXECUTOR decides convergence over the rounds register
+// (design of record
 // spec/conceptual-design-review-design.md §"Convergence (loop-until-dry)"). The
 // mandate is OPTIMIZATION / BETTER-WAY — superior alternatives to things that
 // currently work — not only defect-finding.
@@ -46,8 +48,9 @@ function resolveBlastRadius(finding, goalGraph, goalNodeOf) {
  *      PRESERVING the adversary-tagged TRUE lens.
  *   3. DEDUPE against prior rounds by finding identity (lens+category+title); a
  *      re-emission of a prior finding is NOT new.
- *   4. Determine convergence: a round that adds zero new findings is `dry` (the loop
- *      terminates); an empty submission is trivially dry.
+ *   4. Mark dryness: a round that adds zero new findings is `dry`; an empty
+ *      submission is trivially dry. The EXECUTOR converges the loop only after
+ *      consecutive dry rounds (the register's `convergence_rule`).
  * Deterministic: the returned `findings` are ordered by descending blast radius, ties
  * broken by finding id, so the register never churns on submission order.
  */
@@ -85,8 +88,9 @@ export function foldChallengeRound(params) {
             return blastDelta;
         return compareCodeUnits(a.id, b.id);
     });
-    // A round is DRY (converged) when it surfaced nothing the prior set lacked — an
-    // empty submission is trivially dry. `new_finding_ids` already captures the newness.
+    // A round is DRY when it surfaced nothing the prior set lacked — an empty
+    // submission is trivially dry. `new_finding_ids` already captures the newness.
+    // Convergence over consecutive dry rounds is the executor's decision.
     const dry = new_finding_ids.length === 0;
     return { findings, new_finding_ids, dry, validation_issues };
 }

package/dist/audit/systemic/systemicChallengeLoop.js.map

@@ -1 +1 @@
-{"version":3,"file":"systemicChallengeLoop.js","sourceRoot":"","sources":["../../../src/audit/systemic/systemicChallengeLoop.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,EAAE;AACF,oFAAoF;AACpF,sFAAsF;AACtF,wEAAwE;AACxE,gFAAgF;AAChF,8EAA8E;AAC9E,4CAA4C;AAC5C,EAAE;AACF,qFAAqF;AACrF,6EAA6E;AAC7E,oFAAoF;AACpF,sFAAsF;AACtF,sFAAsF;AACtF,qBAAqB;AACrB,EAAE;AACF,sFAAsF;AACtF,sFAAsF;AACtF,kFAAkF;AAClF,2CAA2C;AAC3C,EAAE;AACF,0DAA0D;AAI1D,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAClG,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAElE;;;;;;GAMG;AACH,SAAS,kBAAkB,CACzB,OAAgB,EAChB,SAAgC,EAChC,UAAoD;IAEpD,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,SAAS,IAAI,MAAM,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,eAAe,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACnD,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,OAAO,CAAC,YAAY,IAAI,CAAC,CAAC;AACnC,CAAC;AAcD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAOlC;IACC,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC1D,MAAM,iBAAiB,GAAa,EAAE,CAAC;IAEvC,iFAAiF;IACjF,MAAM,QAAQ,GAAG,oBAAoB,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;IAE7E,MAAM,KAAK,GAAG,IAAI,GAAG,EAAmB,CAAC;IACzC,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,KAAK;QAAE,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;IAEtF,MAAM,eAAe,GAAa,EAAE,CAAC;IACrC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,SAAS,EAAE,MAAM,KAAK,YAAY,EAAE,CAAC;YAC/C,iBAAiB,CAAC,IAAI,CACpB,mCAAmC,OAAO,CAAC,KAAK,MAAM,OAAO,CAAC,SAAS,CAAC,MAAM,IAAI,cAAc,IAAI,CACrG,CAAC;YACF,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAY;YACxB,GAAG,OAAO;YACV,QAAQ,EAAE,IAAI;YACd,oFAAoF;YACpF,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,YAAY,EAAE,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC;SACxE,CAAC;QACF,MAAM,GAAG,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACpB,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACpC,CAAC;QACD,gFAAgF;QAChF,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC3B,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACjD,MAAM,UAAU,GAAG,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC;QACjE,IAAI,UAAU,KAAK,CAAC;YAAE,OAAO,UAAU,CAAC;QACxC,OAAO,gBAAgB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,gFAAgF;IAChF,qFAAqF;IACrF,MAAM,GAAG,GAAG,eAAe,CAAC,MAAM,KAAK,CAAC,CAAC;IAEzC,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,GAAG,EAAE,iBAAiB,EAAE,CAAC;AAC/D,CAAC"}
+{"version":3,"file":"systemicChallengeLoop.js","sourceRoot":"","sources":["../../../src/audit/systemic/systemicChallengeLoop.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,EAAE;AACF,oFAAoF;AACpF,sFAAsF;AACtF,oFAAoF;AACpF,mFAAmF;AACnF,oBAAoB;AACpB,gFAAgF;AAChF,8EAA8E;AAC9E,4CAA4C;AAC5C,EAAE;AACF,qFAAqF;AACrF,6EAA6E;AAC7E,oFAAoF;AACpF,sFAAsF;AACtF,sFAAsF;AACtF,qBAAqB;AACrB,EAAE;AACF,sFAAsF;AACtF,sFAAsF;AACtF,kFAAkF;AAClF,2CAA2C;AAC3C,EAAE;AACF,0DAA0D;AAI1D,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAClG,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAElE;;;;;;GAMG;AACH,SAAS,kBAAkB,CACzB,OAAgB,EAChB,SAAgC,EAChC,UAAoD;IAEpD,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,SAAS,IAAI,MAAM,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,eAAe,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACnD,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,OAAO,CAAC,YAAY,IAAI,CAAC,CAAC;AACnC,CAAC;AAiBD;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAOlC;IACC,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC1D,MAAM,iBAAiB,GAAa,EAAE,CAAC;IAEvC,iFAAiF;IACjF,MAAM,QAAQ,GAAG,oBAAoB,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;IAE7E,MAAM,KAAK,GAAG,IAAI,GAAG,EAAmB,CAAC;IACzC,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,KAAK;QAAE,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;IAEtF,MAAM,eAAe,GAAa,EAAE,CAAC;IACrC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,SAAS,EAAE,MAAM,KAAK,YAAY,EAAE,CAAC;YAC/C,iBAAiB,CAAC,IAAI,CACpB,mCAAmC,OAAO,CAAC,KAAK,MAAM,OAAO,CAAC,SAAS,CAAC,MAAM,IAAI,cAAc,IAAI,CACrG,CAAC;YACF,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAY;YACxB,GAAG,OAAO;YACV,QAAQ,EAAE,IAAI;YACd,oFAAoF;YACpF,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,YAAY,EAAE,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC;SACxE,CAAC;QACF,MAAM,GAAG,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACpB,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACpC,CAAC;QACD,gFAAgF;QAChF,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC3B,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACjD,MAAM,UAAU,GAAG,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC;QACjE,IAAI,UAAU,KAAK,CAAC;YAAE,OAAO,UAAU,CAAC;QACxC,OAAO,gBAAgB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,0EAA0E;IAC1E,+EAA+E;IAC/E,sEAAsE;IACtE,MAAM,GAAG,GAAG,eAAe,CAAC,MAAM,KAAK,CAAC,CAAC;IAEzC,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,GAAG,EAAE,iBAAiB,EAAE,CAAC;AAC/D,CAAC"}

package/dist/audit/types/systemicChallenge.d.ts

@@ -6,8 +6,8 @@ import type { AggregateMetricsDigest } from "../systemic/metricsDigestTypes.js";
  * the SYSTEMIC IMPROVEMENT-SEEKING CHALLENGE LOOP. A second-order adversary (a
  * SEPARATE agent — [[delegate-adversarial-phases-to-separate-agent]]) re-interrogates
  * the whole system with human-grade pressure and folds newly-surfaced improvements
- * back in, LOOP-UNTIL-DRY: the pass is done only when a challenge round yields
- * NOTHING NEW, not when it first has an answer (design of record
+ * back in, LOOP-UNTIL-DRY: the pass is done only when CONSECUTIVE challenge rounds
+ * yield NOTHING NEW, not when it first has an answer (design of record
  * spec/conceptual-design-review-design.md §"Convergence (loop-until-dry)"; backlog
  * "Systemic reviewers must be pushed adversarially for improvement").
  *
@@ -22,8 +22,10 @@ import type { AggregateMetricsDigest } from "../systemic/metricsDigestTypes.js";
  * `status:"omitted"` when the ceiling did not request the systemic layer (shallow —
  * the default), so the obligation is satisfied without a host turn.
  *
- * Each host-delegation round appends to `rounds`; a round that returns zero new
- * findings sets `converged:true` and terminates the loop. `findings` are every
+ * Each host-delegation round appends to `rounds`; the loop terminates
+ * (`converged:true`) only after CONSECUTIVE rounds that return zero new
+ * findings — the applied count is recorded in `convergence_rule`, so the
+ * register is self-describing. `findings` are every
  * distinct improvement surfaced across rounds — carrying their TRUE lens (a
  * test-parallelization finding is `tests`/`performance`, an ops finding is
  * `operability`), NEVER a hardcoded `architecture` tag.
@@ -33,7 +35,11 @@ export interface SystemicChallengeRound {
     round: number;
     /** Distinct finding ids this round surfaced that no prior round had. */
     new_finding_ids: string[];
-    /** Whether this round yielded nothing new (the loop-until-dry terminator). */
+    /**
+     * Whether this round yielded nothing new (a QUIET round). One quiet round is
+     * not the terminator on its own: convergence requires the consecutive count
+     * the register's `convergence_rule` states.
+     */
     dry: boolean;
 }
 export interface SystemicChallengeRegister {
@@ -57,10 +63,32 @@ export interface SystemicChallengeRegister {
      * from the whole picture, not the counts). Absent on an omitted register.
      */
     metrics?: AggregateMetricsDigest;
-    /** The loop-until-dry challenge rounds, in order; the last one is `dry`. */
+    /** The loop-until-dry challenge rounds, in order. */
     rounds: SystemicChallengeRound[];
-    /** True once a challenge round surfaced nothing new (the loop terminated). */
+    /**
+     * Content hashes of every submission already folded into this register — the
+     * iterative-fold duplicate guard (CX-02 landing 3). A crash between the
+     * fold's core commit and its staged-submission cleanup can restore an
+     * already-folded submission for re-consumption; without this register a
+     * re-fold of the identical round reports a QUIET round and can converge the
+     * adversary loop falsely. A duplicate hash is ignored, never counted.
+     */
+    folded_submission_hashes?: string[];
+    /**
+     * True once the required number of CONSECUTIVE rounds surfaced nothing new
+     * (the loop terminated) — see `convergence_rule` for the applied count.
+     */
     converged: boolean;
+    /**
+     * The convergence rule the enforcement half applied: the loop terminates
+     * only after `quiet_rounds_required` CONSECUTIVE dry rounds (owner decision
+     * 2026-08-28 — one dry round let a single duplicate submission terminate the
+     * adversary loop permanently). Optional because registers written before the
+     * rule existed do not carry it; every current writer records it.
+     */
+    convergence_rule?: {
+        quiet_rounds_required: number;
+    };
     /** Every distinct improvement finding surfaced, carrying its TRUE lens. */
     findings: Finding[];
     /** Gate/assembly notes (e.g. a round dropped an ungrounded finding) — surfaced. */

package/dist/audit/types/systemicChallenge.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"systemicChallenge.d.ts","sourceRoot":"","sources":["../../../src/audit/types/systemicChallenge.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAEhF;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,WAAW,sBAAsB;IACrC,gEAAgE;IAChE,KAAK,EAAE,MAAM,CAAC;IACd,wEAAwE;IACxE,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,8EAA8E;IAC9E,GAAG,EAAE,OAAO,CAAC;CACd;AAED,MAAM,WAAW,yBAAyB;IACxC,YAAY,EAAE,MAAM,CAAC;IACrB,uEAAuE;IACvE,MAAM,EAAE,oBAAoB,CAAC;IAC7B;;;OAGG;IACH,OAAO,EAAE,OAAO,CAAC;IACjB;;;;OAIG;IACH,MAAM,CAAC,EAAE,SAAS,CAAC;IACnB;;;;OAIG;IACH,OAAO,CAAC,EAAE,sBAAsB,CAAC;IACjC,4EAA4E;IAC5E,MAAM,EAAE,sBAAsB,EAAE,CAAC;IACjC,8EAA8E;IAC9E,SAAS,EAAE,OAAO,CAAC;IACnB,2EAA2E;IAC3E,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,mFAAmF;IACnF,iBAAiB,EAAE,MAAM,EAAE,CAAC;CAC7B"}
+{"version":3,"file":"systemicChallenge.d.ts","sourceRoot":"","sources":["../../../src/audit/types/systemicChallenge.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAEhF;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,WAAW,sBAAsB;IACrC,gEAAgE;IAChE,KAAK,EAAE,MAAM,CAAC;IACd,wEAAwE;IACxE,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B;;;;OAIG;IACH,GAAG,EAAE,OAAO,CAAC;CACd;AAED,MAAM,WAAW,yBAAyB;IACxC,YAAY,EAAE,MAAM,CAAC;IACrB,uEAAuE;IACvE,MAAM,EAAE,oBAAoB,CAAC;IAC7B;;;OAGG;IACH,OAAO,EAAE,OAAO,CAAC;IACjB;;;;OAIG;IACH,MAAM,CAAC,EAAE,SAAS,CAAC;IACnB;;;;OAIG;IACH,OAAO,CAAC,EAAE,sBAAsB,CAAC;IACjC,qDAAqD;IACrD,MAAM,EAAE,sBAAsB,EAAE,CAAC;IACjC;;;;;;;OAOG;IACH,wBAAwB,CAAC,EAAE,MAAM,EAAE,CAAC;IACpC;;;OAGG;IACH,SAAS,EAAE,OAAO,CAAC;IACnB;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE;QAAE,qBAAqB,EAAE,MAAM,CAAA;KAAE,CAAC;IACrD,2EAA2E;IAC3E,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,mFAAmF;IACnF,iBAAiB,EAAE,MAAM,EAAE,CAAC;CAC7B"}

package/dist/shared/engine/obligationEngine.d.ts

@@ -152,25 +152,44 @@ export declare function deriveEngineBound(cap: number): number;
  * - `step` null, `stopped: "bound"` → the fold spent `maxTransitions`
  *   transitions without reaching an emit or completion. Also non-convergence,
  *   detected by counting rather than by signature.
+ * - `step` null, `stopped: "budget"` → the fold spent `maxExecutions` charged
+ *   obligation executions. This is NOT non-convergence: the budget is a pacing
+ *   cap, the stop is graceful, and the caller resumes the fold on its next
+ *   call. Only possible when `opts.maxExecutions` is supplied.
  *
  * `stopped` being ABSENT is what means "the run is complete". A caller that
  * branches on `step` alone therefore cannot tell completion from
- * non-convergence, and would report a wedged fold as a finished one — so both
- * stopped values must be handled explicitly. `lastObligationId` names the
- * obligation the fold was executing when it stopped, so a caller can say WHICH
- * obligation is spinning without parsing it out of a message.
+ * non-convergence, and would report a wedged fold as a finished one — so every
+ * stopped value must be handled explicitly. `lastObligationId` names the
+ * obligation the fold was executing (or, for `budget`, about to execute) when
+ * it stopped, so a caller can say WHICH obligation is in flight without
+ * parsing it out of a message.
  */
 export interface AdvanceResult<S, Step> {
     state: S;
     step: Step | null;
-    stopped?: "cycle" | "bound";
+    stopped?: "cycle" | "bound" | "budget";
     /** The obligation in flight when `stopped` was set; absent otherwise. */
     lastObligationId?: string;
+    /**
+     * The numeric limit that fired — `maxTransitions` for `bound`,
+     * `maxExecutions` for `budget`; absent for `cycle` (no number fired). Carried
+     * ON the result so `describeStoppedFold` reports the number that actually
+     * stopped the fold, and no caller has to know which of two limits to restate.
+     */
+    stoppedBound?: number;
 }
-/** A non-convergent stop, described once for every draw that can hit one. */
+/**
+ * A stop, described once for every draw that can hit one. `cycle` and `bound`
+ * are non-convergence; `budget` is the graceful pacing cap — a caller that
+ * expects the cap should branch on `stopped === "budget"` BEFORE reaching for
+ * this description, and build its own resumable pause from its accumulators.
+ * The description exists so a caller that does NOT special-case the budget
+ * still reports the stop honestly rather than as a finished run.
+ */
 export interface StoppedFoldDescription {
     /** Which backstop fired, carried through so a caller need not re-read it. */
-    stopped: "cycle" | "bound";
+    stopped: "cycle" | "bound" | "budget";
     /**
      * The obligation in flight when the fold stopped, or `"unknown"` when it
      * stopped before selecting one. Never parsed out of prose.
@@ -189,14 +208,16 @@ export interface StoppedFoldDescription {
  * null-check itself the branch: there is no way to consume the description
  * without having asked the question.
  *
- * Consumers pass the bound actually in force (`opts.bound`) rather than
- * restating a constant, so the number a host reads is the number that fired.
+ * The number reported is `outcome.stoppedBound` — the limit that actually
+ * fired, carried on the result by the engine itself. `opts.bound` remains as
+ * the fallback for callers describing an outcome from an engine that did not
+ * stamp one, so the number a host reads is still never a restated constant.
  *
  * `cause` is prose for a human terminal ONLY. Never match it: `stopped` and
  * `spinning` are the machine-readable fields, and recognizing a wedged fold by
  * its message text is the divergence this module's bounded-call invariant bans.
  */
-export declare function describeStoppedFold(outcome: Pick<AdvanceResult<unknown, unknown>, "stopped" | "lastObligationId">, opts?: {
+export declare function describeStoppedFold(outcome: Pick<AdvanceResult<unknown, unknown>, "stopped" | "lastObligationId" | "stoppedBound">, opts?: {
     bound?: number;
 }): StoppedFoldDescription | null;
 /**
@@ -222,7 +243,19 @@ export declare function describeStoppedFold(outcome: Pick<AdvanceResult<unknown,
  *   signature — it stops the loop with `stopped: "bound"` after that many
  *   consecutive transitions.
  *
- * BOTH backstops terminate GRACEFULLY. The bound used to throw, which forced
+ * **Execution budget.** `opts.maxExecutions` is the consumer-facing pacing cap
+ * (PH-03: a budget stop the result expresses structurally, so no caller wraps
+ * the engine in a second drain to enforce one). The engine charges EVERY
+ * `obligation.execute` call to it, spend-before-dispatch: once the budget is
+ * spent, the next selected obligation is NOT executed and the loop returns
+ * `stopped: "budget"` naming it. Because every transition follows a charged
+ * execution, `transitions <= charged executions` holds by construction — so a
+ * `maxTransitions` derived via {@link deriveEngineBound} from the same cap can
+ * never fire first, which is the bounded-call invariant this module owns. An
+ * `emit` spends its charge and returns normally; it is never converted into a
+ * budget stop.
+ *
+ * ALL backstops terminate GRACEFULLY. The bound used to throw, which forced
  * every consumer to recognize a wedged fold by matching text in an error
  * message and to recover the spinning obligation's id with a regex over that
  * same prose — so the engine's bound was part of its contract while its only
@@ -239,5 +272,6 @@ export declare function describeStoppedFold(outcome: Pick<AdvanceResult<unknown,
 export declare function advance<S, Ctx, Step>(engine: ObligationEngine<S, Ctx, Step>, state: S, ctx: Ctx, opts?: {
     maxTransitions?: number;
     stateSignature?: (state: S) => string;
+    maxExecutions?: number;
 }): Promise<AdvanceResult<S, Step>>;
 //# sourceMappingURL=obligationEngine.d.ts.map

package/dist/shared/engine/obligationEngine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"obligationEngine.d.ts","sourceRoot":"","sources":["../../../src/shared/engine/obligationEngine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,oEAMhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,+EAA+E;AAC/E,eAAO,MAAM,gBAAgB;;;;;;;;;;;;EAMlB,CAAC;AACZ,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D;;;;;;;;;;;;GAYG;AACH,wBAAgB,6BAA6B,CAAC,CAAC,SAAS,UAAU,EAChE,QAAQ,EAAE,SAAS,MAAM,EAAE,EAC3B,WAAW,EAAE,SAAS,CAAC,EAAE,GACxB,CAAC,GAAG,SAAS,CAQf;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,WAAW,aAAa,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI;IACzC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,CAAC,KAAK,EAAE,CAAC,GAAG,eAAe,CAAC;IAClC,OAAO,CAAC,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;CAClE;AAED;;;;;;;;;;GAUG;AACH,MAAM,MAAM,iBAAiB,CAAC,CAAC,EAAE,IAAI,IACjC;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,IAAI,CAAC;IAAC,KAAK,CAAC,EAAE,CAAC,CAAA;CAAE,CAAC;AAE5C,8EAA8E;AAC9E,MAAM,WAAW,gBAAgB,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI;IAC5C,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,WAAW,EAAE,SAAS,aAAa,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;CACrD;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAC7C,QAAQ,EAAE,SAAS,MAAM,EAAE,EAC3B,WAAW,EAAE,SAAS,aAAa,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,EACnD,KAAK,EAAE,CAAC,GACP,aAAa,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,SAAS,CAIzC;AAED;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,MAAM,CAAC;AAE3C;;;;;;;;;;GAUG;AACH,eAAO,MAAM,0BAA0B,IAAI,CAAC;AAE5C;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAErD;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,WAAW,aAAa,CAAC,CAAC,EAAE,IAAI;IACpC,KAAK,EAAE,CAAC,CAAC;IACT,IAAI,EAAE,IAAI,GAAG,IAAI,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC;IAC5B,yEAAyE;IACzE,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,6EAA6E;AAC7E,MAAM,WAAW,sBAAsB;IACrC,6EAA6E;IAC7E,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC;IAC3B;;;OAGG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB,yEAAyE;IACzE,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,SAAS,GAAG,kBAAkB,CAAC,EAC9E,IAAI,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GACxB,sBAAsB,GAAG,IAAI,CAW/B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,wBAAsB,OAAO,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EACxC,MAAM,EAAE,gBAAgB,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,EACtC,KAAK,EAAE,CAAC,EACR,GAAG,EAAE,GAAG,EACR,IAAI,CAAC,EAAE;IAAE,cAAc,CAAC,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,MAAM,CAAA;CAAE,GACxE,OAAO,CAAC,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAoDjC"}
+{"version":3,"file":"obligationEngine.d.ts","sourceRoot":"","sources":["../../../src/shared/engine/obligationEngine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,oEAMhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,+EAA+E;AAC/E,eAAO,MAAM,gBAAgB;;;;;;;;;;;;EAMlB,CAAC;AACZ,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D;;;;;;;;;;;;GAYG;AACH,wBAAgB,6BAA6B,CAAC,CAAC,SAAS,UAAU,EAChE,QAAQ,EAAE,SAAS,MAAM,EAAE,EAC3B,WAAW,EAAE,SAAS,CAAC,EAAE,GACxB,CAAC,GAAG,SAAS,CAQf;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,WAAW,aAAa,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI;IACzC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,CAAC,KAAK,EAAE,CAAC,GAAG,eAAe,CAAC;IAClC,OAAO,CAAC,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;CAClE;AAED;;;;;;;;;;GAUG;AACH,MAAM,MAAM,iBAAiB,CAAC,CAAC,EAAE,IAAI,IACjC;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,IAAI,CAAC;IAAC,KAAK,CAAC,EAAE,CAAC,CAAA;CAAE,CAAC;AAE5C,8EAA8E;AAC9E,MAAM,WAAW,gBAAgB,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI;IAC5C,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,WAAW,EAAE,SAAS,aAAa,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;CACrD;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAC7C,QAAQ,EAAE,SAAS,MAAM,EAAE,EAC3B,WAAW,EAAE,SAAS,aAAa,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,EACnD,KAAK,EAAE,CAAC,GACP,aAAa,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,SAAS,CAIzC;AAED;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,MAAM,CAAC;AAE3C;;;;;;;;;;GAUG;AACH,eAAO,MAAM,0BAA0B,IAAI,CAAC;AAE5C;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAErD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,WAAW,aAAa,CAAC,CAAC,EAAE,IAAI;IACpC,KAAK,EAAE,CAAC,CAAC;IACT,IAAI,EAAE,IAAI,GAAG,IAAI,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,GAAG,OAAO,GAAG,QAAQ,CAAC;IACvC,yEAAyE;IACzE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,sBAAsB;IACrC,6EAA6E;IAC7E,OAAO,EAAE,OAAO,GAAG,OAAO,GAAG,QAAQ,CAAC;IACtC;;;OAGG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB,yEAAyE;IACzE,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,IAAI,CACX,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,EAC/B,SAAS,GAAG,kBAAkB,GAAG,cAAc,CAChD,EACD,IAAI,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GACxB,sBAAsB,GAAG,IAAI,CAc/B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AACH,wBAAsB,OAAO,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EACxC,MAAM,EAAE,gBAAgB,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,EACtC,KAAK,EAAE,CAAC,EACR,GAAG,EAAE,GAAG,EACR,IAAI,CAAC,EAAE;IACL,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,MAAM,CAAC;IACtC,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,GACA,OAAO,CAAC,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAqEjC"}

package/dist/shared/engine/obligationEngine.js

@@ -111,8 +111,10 @@ export function deriveEngineBound(cap) {
  * null-check itself the branch: there is no way to consume the description
  * without having asked the question.
  *
- * Consumers pass the bound actually in force (`opts.bound`) rather than
- * restating a constant, so the number a host reads is the number that fired.
+ * The number reported is `outcome.stoppedBound` — the limit that actually
+ * fired, carried on the result by the engine itself. `opts.bound` remains as
+ * the fallback for callers describing an outcome from an engine that did not
+ * stamp one, so the number a host reads is still never a restated constant.
  *
  * `cause` is prose for a human terminal ONLY. Never match it: `stopped` and
  * `spinning` are the machine-readable fields, and recognizing a wedged fold by
@@ -121,13 +123,16 @@ export function deriveEngineBound(cap) {
 export function describeStoppedFold(outcome, opts) {
     if (!outcome.stopped)
         return null;
-    const bound = opts?.bound ?? DEFAULT_MAX_TRANSITIONS;
+    const bound = outcome.stoppedBound ?? opts?.bound ?? DEFAULT_MAX_TRANSITIONS;
+    const cause = outcome.stopped === "bound"
+        ? `spent the engine transition bound (${String(bound)}) without reaching a host-actionable step`
+        : outcome.stopped === "budget"
+            ? `spent its charged-execution budget (${String(bound)}) and pauses resumably at the cap`
+            : "revisited a state it had already scanned this run";
     return {
         stopped: outcome.stopped,
         spinning: outcome.lastObligationId ?? "unknown",
-        cause: outcome.stopped === "bound"
-            ? `spent the engine transition bound (${String(bound)}) without reaching a host-actionable step`
-            : "revisited a state it had already scanned this run",
+        cause,
     };
 }
 /**
@@ -153,7 +158,19 @@ export function describeStoppedFold(outcome, opts) {
  *   signature — it stops the loop with `stopped: "bound"` after that many
  *   consecutive transitions.
  *
- * BOTH backstops terminate GRACEFULLY. The bound used to throw, which forced
+ * **Execution budget.** `opts.maxExecutions` is the consumer-facing pacing cap
+ * (PH-03: a budget stop the result expresses structurally, so no caller wraps
+ * the engine in a second drain to enforce one). The engine charges EVERY
+ * `obligation.execute` call to it, spend-before-dispatch: once the budget is
+ * spent, the next selected obligation is NOT executed and the loop returns
+ * `stopped: "budget"` naming it. Because every transition follows a charged
+ * execution, `transitions <= charged executions` holds by construction — so a
+ * `maxTransitions` derived via {@link deriveEngineBound} from the same cap can
+ * never fire first, which is the bounded-call invariant this module owns. An
+ * `emit` spends its charge and returns normally; it is never converted into a
+ * budget stop.
+ *
+ * ALL backstops terminate GRACEFULLY. The bound used to throw, which forced
  * every consumer to recognize a wedged fold by matching text in an error
  * message and to recover the spinning obligation's id with a regex over that
  * same prose — so the engine's bound was part of its contract while its only
@@ -169,10 +186,12 @@ export function describeStoppedFold(outcome, opts) {
  */
 export async function advance(engine, state, ctx, opts) {
     const maxTransitions = opts?.maxTransitions ?? DEFAULT_MAX_TRANSITIONS;
+    const maxExecutions = opts?.maxExecutions;
     const stateSignature = opts?.stateSignature;
     const visited = stateSignature ? new Set() : null;
     let current = state;
     let transitions = 0;
+    let executions = 0;
     // The obligation most recently selected — reported on every non-convergent
     // stop so the caller can name what is spinning.
     let lastObligationId = null;
@@ -197,6 +216,20 @@ export async function advance(engine, state, ctx, opts) {
         if (!obligation)
             return { state: current, step: null };
         lastObligationId = obligation.id;
+        if (maxExecutions !== undefined && executions >= maxExecutions) {
+            // The budget is spent and another obligation is still actionable. Spend-
+            // before-dispatch: the selected obligation is NOT executed — a cap stated
+            // as a maximum must never authorize one step past itself. Graceful and
+            // resumable; the next call re-selects this same obligation.
+            return {
+                state: current,
+                step: null,
+                stopped: "budget",
+                lastObligationId,
+                stoppedBound: maxExecutions,
+            };
+        }
+        executions += 1;
         const outcome = await obligation.execute(current, ctx);
         if (outcome.kind === "emit") {
             return { state: outcome.state ?? current, step: outcome.step };
@@ -213,6 +246,7 @@ export async function advance(engine, state, ctx, opts) {
                 step: null,
                 stopped: "bound",
                 lastObligationId,
+                stoppedBound: maxTransitions,
             };
         }
     }

package/dist/shared/engine/obligationEngine.js.map

@@ -1 +1 @@
-{"version":3,"file":"obligationEngine.js","sourceRoot":"","sources":["../../../src/shared/engine/obligationEngine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,IAAI,CAAC;IAC1C,SAAS;IACT,SAAS;IACT,OAAO;IACP,SAAS;IACT,WAAW;CACZ,CAAC,CAAC;AAGH,+EAA+E;AAC/E,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC9B,MAAM,CAAC;IACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,KAAK,EAAE,qBAAqB;IAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,6BAA6B,CAC3C,QAA2B,EAC3B,WAAyB;IAEzB,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAClD,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,KAAK,OAAO,CAAC,EAAE,CAAC;YACjE,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAiDD;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAA2B,EAC3B,WAAmD,EACnD,KAAQ;IAER,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/E,MAAM,MAAM,GAAG,6BAA6B,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAChE,OAAO,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1E,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAE3C;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC;AAE5C;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,OAAO,GAAG,GAAG,0BAA0B,CAAC;AAC1C,CAAC;AA6CD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAA8E,EAC9E,IAAyB;IAEzB,IAAI,CAAC,OAAO,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,uBAAuB,CAAC;IACrD,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,QAAQ,EAAE,OAAO,CAAC,gBAAgB,IAAI,SAAS;QAC/C,KAAK,EACH,OAAO,CAAC,OAAO,KAAK,OAAO;YACzB,CAAC,CAAC,sCAAsC,MAAM,CAAC,KAAK,CAAC,2CAA2C;YAChG,CAAC,CAAC,mDAAmD;KAC1D,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,MAAsC,EACtC,KAAQ,EACR,GAAQ,EACR,IAAyE;IAEzE,MAAM,cAAc,GAAG,IAAI,EAAE,cAAc,IAAI,uBAAuB,CAAC;IACvE,MAAM,cAAc,GAAG,IAAI,EAAE,cAAc,CAAC;IAC5C,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,IAAI,GAAG,EAAU,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1D,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,2EAA2E;IAC3E,gDAAgD;IAChD,IAAI,gBAAgB,GAAkB,IAAI,CAAC;IAC3C,SAAS,CAAC;QACR,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,SAAS,GAAG,cAAe,CAAC,OAAO,CAAC,CAAC;YAC3C,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC3B,wEAAwE;gBACxE,wEAAwE;gBACxE,0EAA0E;gBAC1E,mCAAmC;gBACnC,OAAO;oBACL,KAAK,EAAE,OAAO;oBACd,IAAI,EAAE,IAAI;oBACV,OAAO,EAAE,OAAO;oBAChB,GAAG,CAAC,gBAAgB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC;iBAC3D,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACzB,CAAC;QACD,MAAM,UAAU,GAAG,kBAAkB,CACnC,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,WAAW,EAClB,OAAO,CACR,CAAC;QACF,IAAI,CAAC,UAAU;YAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACvD,gBAAgB,GAAG,UAAU,CAAC,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACvD,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC5B,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;QACjE,CAAC;QACD,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC;QACxB,IAAI,EAAE,WAAW,GAAG,cAAc,EAAE,CAAC;YACnC,0EAA0E;YAC1E,yEAAyE;YACzE,sEAAsE;YACtE,qEAAqE;YACrE,8CAA8C;YAC9C,OAAO;gBACL,KAAK,EAAE,OAAO;gBACd,IAAI,EAAE,IAAI;gBACV,OAAO,EAAE,OAAO;gBAChB,gBAAgB;aACjB,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"obligationEngine.js","sourceRoot":"","sources":["../../../src/shared/engine/obligationEngine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,IAAI,CAAC;IAC1C,SAAS;IACT,SAAS;IACT,OAAO;IACP,SAAS;IACT,WAAW;CACZ,CAAC,CAAC;AAGH,+EAA+E;AAC/E,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC9B,MAAM,CAAC;IACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,KAAK,EAAE,qBAAqB;IAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,6BAA6B,CAC3C,QAA2B,EAC3B,WAAyB;IAEzB,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAClD,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,KAAK,OAAO,CAAC,EAAE,CAAC;YACjE,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAiDD;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAA2B,EAC3B,WAAmD,EACnD,KAAQ;IAER,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/E,MAAM,MAAM,GAAG,6BAA6B,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAChE,OAAO,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1E,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAE3C;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC;AAE5C;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,OAAO,GAAG,GAAG,0BAA0B,CAAC;AAC1C,CAAC;AAgED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAGC,EACD,IAAyB;IAEzB,IAAI,CAAC,OAAO,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,KAAK,GAAG,OAAO,CAAC,YAAY,IAAI,IAAI,EAAE,KAAK,IAAI,uBAAuB,CAAC;IAC7E,MAAM,KAAK,GACT,OAAO,CAAC,OAAO,KAAK,OAAO;QACzB,CAAC,CAAC,sCAAsC,MAAM,CAAC,KAAK,CAAC,2CAA2C;QAChG,CAAC,CAAC,OAAO,CAAC,OAAO,KAAK,QAAQ;YAC5B,CAAC,CAAC,uCAAuC,MAAM,CAAC,KAAK,CAAC,mCAAmC;YACzF,CAAC,CAAC,mDAAmD,CAAC;IAC5D,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,QAAQ,EAAE,OAAO,CAAC,gBAAgB,IAAI,SAAS;QAC/C,KAAK;KACN,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,MAAsC,EACtC,KAAQ,EACR,GAAQ,EACR,IAIC;IAED,MAAM,cAAc,GAAG,IAAI,EAAE,cAAc,IAAI,uBAAuB,CAAC;IACvE,MAAM,aAAa,GAAG,IAAI,EAAE,aAAa,CAAC;IAC1C,MAAM,cAAc,GAAG,IAAI,EAAE,cAAc,CAAC;IAC5C,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,IAAI,GAAG,EAAU,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1D,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,2EAA2E;IAC3E,gDAAgD;IAChD,IAAI,gBAAgB,GAAkB,IAAI,CAAC;IAC3C,SAAS,CAAC;QACR,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,SAAS,GAAG,cAAe,CAAC,OAAO,CAAC,CAAC;YAC3C,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC3B,wEAAwE;gBACxE,wEAAwE;gBACxE,0EAA0E;gBAC1E,mCAAmC;gBACnC,OAAO;oBACL,KAAK,EAAE,OAAO;oBACd,IAAI,EAAE,IAAI;oBACV,OAAO,EAAE,OAAO;oBAChB,GAAG,CAAC,gBAAgB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC;iBAC3D,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACzB,CAAC;QACD,MAAM,UAAU,GAAG,kBAAkB,CACnC,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,WAAW,EAClB,OAAO,CACR,CAAC;QACF,IAAI,CAAC,UAAU;YAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACvD,gBAAgB,GAAG,UAAU,CAAC,EAAE,CAAC;QACjC,IAAI,aAAa,KAAK,SAAS,IAAI,UAAU,IAAI,aAAa,EAAE,CAAC;YAC/D,yEAAyE;YACzE,0EAA0E;YAC1E,uEAAuE;YACvE,4DAA4D;YAC5D,OAAO;gBACL,KAAK,EAAE,OAAO;gBACd,IAAI,EAAE,IAAI;gBACV,OAAO,EAAE,QAAQ;gBACjB,gBAAgB;gBAChB,YAAY,EAAE,aAAa;aAC5B,CAAC;QACJ,CAAC;QACD,UAAU,IAAI,CAAC,CAAC;QAChB,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACvD,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC5B,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;QACjE,CAAC;QACD,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC;QACxB,IAAI,EAAE,WAAW,GAAG,cAAc,EAAE,CAAC;YACnC,0EAA0E;YAC1E,yEAAyE;YACzE,sEAAsE;YACtE,qEAAqE;YACrE,8CAA8C;YAC9C,OAAO;gBACL,KAAK,EAAE,OAAO;gBACd,IAAI,EAAE,IAAI;gBACV,OAAO,EAAE,OAAO;gBAChB,gBAAgB;gBAChB,YAAY,EAAE,cAAc;aAC7B,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}