axstack 0.20.10 → 0.20.11

package/docs/workflows.md

@@ -50,8 +50,8 @@ role.
 
 | Preset | Author | Ordered peer reviewers | Astra / Fable advisers | Auditor |
 | --- | --- | --- | --- | --- |
-| `mixed` | Sol medium | Sol medium; Opus medium | Astra high / Fable high | Luna max |
-| `codex-only` | Sol medium | Sol medium; Luna xhigh | Astra high / unavailable | Luna max |
+| `mixed` | Sol medium | Sol medium; Opus medium | Astra high / Fable high | Luna xhigh |
+| `codex-only` | Sol medium | Sol medium; Luna xhigh | Astra high / unavailable | Luna xhigh |
 | `claude-only` | Opus medium | Opus medium; Sonnet xhigh | unavailable / Fable high | Sonnet xhigh |
 
 The installed `<skills-dir>/axstack/roles.json` adds the selected preset name:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "axstack",
-  "version": "0.20.10",
+  "version": "0.20.11",
   "description": "Axstack installer and setup CLI: installs owned chat skills and role data, configures supported harness settings, and checks Orca capabilities.",
   "keywords": [
     "claude-code",

package/profiles/presets/codex-only.json

@@ -124,7 +124,7 @@
       "provider": "codex",
       "model": "gpt-6-luna",
       "modeId": "full-access",
-      "thinkingOptionId": "max",
+      "thinkingOptionId": "xhigh",
       "notes": "Independent visual explanation reviewer: checks the exact artifact for source fidelity and rendered behavior where warranted. Any artifact change invalidates its review. Validate configured availability at launch; hold affected work without fallback."
     },
     {
@@ -160,7 +160,7 @@
       "provider": "codex",
       "model": "gpt-6-luna",
       "modeId": "full-access",
-      "thinkingOptionId": "max",
+      "thinkingOptionId": "xhigh",
       "notes": "Read-only end-of-run and checkpoint auditor. Collects scope and outcome evidence with counts and denominators and reports PASS, FAIL, or UNKNOWN without inventing numbers. Never edits, merges, activates, or audits itself."
     },
     {

package/profiles/presets/mixed.json

@@ -124,7 +124,7 @@
       "provider": "codex",
       "model": "gpt-6-luna",
       "modeId": "full-access",
-      "thinkingOptionId": "max",
+      "thinkingOptionId": "xhigh",
       "notes": "Independent visual explanation reviewer: checks the exact artifact for source fidelity and rendered behavior where warranted. Any artifact change invalidates its review. Validate configured availability at launch; hold affected work without fallback."
     },
     {
@@ -160,7 +160,7 @@
       "provider": "codex",
       "model": "gpt-6-luna",
       "modeId": "full-access",
-      "thinkingOptionId": "max",
+      "thinkingOptionId": "xhigh",
       "notes": "Read-only end-of-run and checkpoint auditor. Collects scope and outcome evidence with counts and denominators and reports PASS, FAIL, or UNKNOWN without inventing numbers. Never edits, merges, activates, or audits itself."
     },
     {

package/skills/axstack/references/automations.md

@@ -238,6 +238,9 @@ or send outcome, not pending CI. Waiting state belongs in GitHub and the compact
 record, never in an idle model, per-PR timer, or polling loop.
 Follow the [private evidence archive](evidence-archive.md) when evidence is the
 only local state to preserve; archive success does not relax any other guard.
+For a completed, forge-merged PR-job, classified reviewer scratch may instead
+follow [axstack-cleanup](../../axstack-cleanup/SKILL.md)'s compact receipt and
+exact-path guards. This does not release active jobs or manager pass workspaces.
 
 ## Review and repair authority
 
@@ -307,6 +310,8 @@ terminals, unknown liveness, `user_takeover`, and ambiguous publication state.
 Never classify all dirt as evidence. If explicitly classified evidence is the
 last retention reason, apply and verify the [private evidence archive](evidence-archive.md),
 update durable continuity, and read it back before native retirement.
+The completed, forge-merged PR-job reviewer scratch exception above uses
+axstack-cleanup; it never changes manager pass preservation or retirement guards.
 
 For the manager pass only, verify native run/workspace identity, exclusive
 automation ownership, no unsettled descendants, and a fresh terminal inventory

package/skills/axstack/references/orca-runtime.md

@@ -95,8 +95,13 @@ owner. Remove only that exact validated owned path, with no glob or parent-root
 deletion; never wipe a general cache. Uncertain temporary files are preserved
 for later reconciliation. Incidental tool-managed caches are not review evidence.
 Before removing a reviewer worktree, preserve its report and supporting evidence
-in the driver's Orca workspace and update the run record's paths. Terminal
-release alone is not permission to discard evidence or remove the worktree.
+in the driver's Orca workspace and update the run record's paths. For a settled
+merged run with a confirmed forge merge, the compact durable receipt in
+[axstack-cleanup](../../axstack-cleanup/SKILL.md) satisfies this preservation
+rule only after its classification, readback, and removal guards pass. Preserve
+active or unmerged review evidence and unique evidence whose bytes must survive;
+uncertain ownership or evidence holds. Terminal release alone is not permission
+to discard evidence or remove the worktree.
 
 ## Consume, settle, and recover
 

package/skills/axstack-audit/SKILL.md

@@ -25,7 +25,7 @@ immediately before an actual auditor profile or session dispatch. Ordinary
 audit reading and record writing do not load it, and the auditor never
 dispatches.
 
-Core owns the `axstack-auditor` profile (codex/gpt-6-luna max) and its
+Core owns the `axstack-auditor` profile (codex/gpt-6-luna xhigh) and its
 invocation. This skill governs what that auditor reads, measures, and proposes.
 The user-chosen improvement mode is a tested, independently reviewed PR that a
 human merges.

package/skills/axstack-cleanup/SKILL.md

@@ -34,8 +34,8 @@ Never clean a manual chat, the current driver, `user_takeover`, an active or
 unknown worker, an unsettled descendant, or a resource with ambiguous ownership.
 Preserve dirty or unknown files, unpushed commits, unmerged useful work,
 ambiguous publication, and evidence that has not been durably preserved. Do not
-force, bulk-clean, override a hook failure, edit a runtime database, or add a
-scheduler, daemon, or state machine.
+force native removal, bulk-clean, override a hook failure, edit a runtime
+database, or add a scheduler, daemon, or state machine.
 
 ## Reconcile each candidate
 
@@ -57,13 +57,51 @@ Classify exact evidence files individually. Save the compact cleanup decision
 and identities in the private run record or another configured durable private
 location outside disposable worktrees. When the evidence archive applies, use
 its helper with either the existing PR identity or the non-PR Run and Task
-identity; never invent a PR number. Read back both the durable record and the
-archive manifest, including hashes and exact identities, before removing any
-source copy or workspace.
+identity; never invent a PR number. Read back the durable record and, when an
+archive is used, its manifest, including hashes and exact identities, before
+removing any source copy or workspace.
 
 Archive success proves only preservation of the listed bytes. It does not prove
 settlement, exit, ownership, a clean worktree, publication, or removal safety.
 
+For a settled merged run whose forge merge is confirmed, generated reviewer
+scratch is disposable after a compact durable receipt is written outside the
+review worktree and read back. Bind that receipt to the exact repository, Run,
+Task, Dispatch, reviewer workspace and terminal, exact head SHA and base SHA,
+review verdict, coverage and limitations, test and CI result pointers, and the
+user authorization and scope for cleanup. A raw reviewer report may be discarded
+after its verdict and limitations are compacted into that read-back receipt;
+use the private evidence archive for unique evidence whose exact bytes must
+survive. Raw reproducible probes and logs need not be archived solely to retire
+a completed review worktree.
+
+Use only a named run-owned scratch prefix recorded with the Dispatch. Require
+`git status --porcelain=v1 -z --untracked-files=all` to show all dirt as
+untracked files inside that run-owned scratch prefix; any tracked, staged,
+unmerged or unpushed work, dirty source, or dirt outside it holds. Validate that
+the detached checkout still matches the reviewed head and check local commits
+against recorded remote refs; unknown divergence holds. Validate that
+the exact reviewed scratch prefix names the recorded directory inside the exact
+reviewer worktree, never a repository-root target or symlink. Inspect every
+descendant for symlinks, hard links, special files, unknown content, user-owned
+files, or ignored files; any mismatch holds. Active or `user_takeover` terminals
+also hold.
+
+List the exact scoped path and all descendants with their types, confirm each
+belongs to generated reviewer scratch, and record that inventory. Dry-run the
+exact scoped path from the reviewer worktree root with
+`git clean -nd -- <exact reviewed scratch prefix>`
+with the concrete reviewed relative prefix substituted for the angle-bracket
+notation. Compare its sole target to the classified directory; an empty,
+partial, or different result holds. Re-read the compact receipt, complete Git
+status, directory contents, native ownership and liveness immediately before
+removal; any change holds. Then run `git clean -fd -- <same exact prefix>` with
+the identical concrete path and recheck clean Git status, recording the path and
+outcome. Use no unresolved variable as a destructive target. Never use `-x`, a
+glob, a repository-root target, extra force, or broad clean.
+This scratch decision does not waive any other preservation or native removal
+guard.
+
 ## Apply distinct native operations
 
 Treat these operations as separate decisions and receipts: