axstack 0.20.22 → 0.20.24

package/README.md

@@ -99,7 +99,7 @@ upgrades, conflicts, and uninstalling.
   inline or from an explicitly scoped backlog without touching active, manual,
   uncertain, user-owned, dirty, unpushed, or useful unmerged work.
 
-Choose an explicit role preset:
+Choose an explicit role preset (27 stable role IDs in each):
 [mixed](profiles/presets/mixed.json),
 [codex-only](profiles/presets/codex-only.json), or
 [claude-only](profiles/presets/claude-only.json).

package/bin/axstack.js

@@ -335,6 +335,8 @@ async function main() {
       } else {
         if (summary.added.length) console.log(`added: ${summary.added.join(', ')}`);
         if (summary.updated.length) console.log(`updated: ${summary.updated.join(', ')}`);
+        if (summary.addedRoleIds?.length) console.log(`added role IDs: ${summary.addedRoleIds.join(', ')}`);
+        if (summary.removedRoleIds?.length) console.log(`removed role IDs: ${summary.removedRoleIds.join(', ')}`);
         if (summary.removed.length) console.log(`removed: ${summary.removed.join(', ')}`);
         if (summary.unchanged.length) console.log(`unchanged: ${summary.unchanged.join(', ')}`);
       }

package/docs/installation.md

@@ -71,7 +71,7 @@ profiles/presets/codex-only.json
 profiles/presets/claude-only.json
 ```
 
-Each has exactly `{ "version": 1, "roles": [...] }` with the same 24 stable
+Each has exactly `{ "version": 1, "roles": [...] }` with the same 27 stable
 role IDs. Installation writes `<skills-dir>/axstack/roles.json` as
 `{ "version": 1, "preset": "<selected preset>", "roles": [...] }` and records
 its ownership hash like every other installed skill asset. There is no second
@@ -140,10 +140,11 @@ The complete bundle is validated before writes:
   the filename's selected identity supplied by the caller, and the same role-ID
   set as its peers;
 - every role has valid preserved fields, while the mixed checker,
-  `axstack-research-web-google`, and `axstack-research-x` launch-by-agent-id
+  `axstack-research-web-google`, `axstack-research-x`, and both arena candidate launch-by-agent-id
   routes explicitly permit `model: null`;
-  in each single-provider preset, the unavailable adviser and its matching arena
-  judge seat explicitly permit `model: null`, as do both cross-provider research routes;
+  in each single-provider preset, the unavailable adviser and round-2 seat
+  explicitly permit `model: null`, as do both cross-provider research routes
+  and both arena candidate seats;
 - obsolete runtime configuration flags fail before mutation with migration
   guidance.
 
@@ -171,7 +172,7 @@ to rewrite them.
 ## Role behavior after installation
 
 The runtime reads `roles.json` from the installed shared root `skills/axstack/`.
-A new run records the selected preset plus all 24 role rows. An active run keeps
+A new run records the selected preset plus all 27 role rows. An active run keeps
 that snapshot after a later preset install unless the user explicitly changes
 it and accepts the resulting evidence invalidation.
 
@@ -181,10 +182,12 @@ The mixed checker and `axstack-research-web-google` have provider
 their notes authorize launch by agent ID, and the run record snapshots the model
 reported by the TUI. The single-provider presets configure the checker and keep
 both cross-provider research routes as intentional absences. Their
-unavailable adviser and its matching arena judge seat remain explicit
-same-provider `model: null` roles, which do not make installation unready;
-Align and Spec still hold until both Astra and Fable can return independent
-receipts, and an arena-grade Align question holds until both judge seats can. The current chat drives on whatever
+unavailable adviser and round-2 seat remain explicit same-provider
+`model: null` roles, which do not make installation unready;
+Align and Spec still hold until both Astra and Opus can return independent
+receipts. For an arena-grade Align question, round 1 needs Opus; round 2, if
+invoked, needs escalation Fable and Astra; a required seat that is unavailable holds that
+round. The current chat drives on whatever
 model runs it; no preset carries a driver role. Every other missing, invalid, unsupported, or unavailable role value holds only
 the affected work. There is no model substitution, subscription inference, or
 quota routing.

package/docs/workflows.md

@@ -48,16 +48,16 @@ only affected work.
 
 Installation requires one explicit canonical preset. The three bundle files
 under `profiles/presets/` each contain exactly
-`{ "version": 1, "roles": [...] }` and the same 24 stable IDs.
+`{ "version": 1, "roles": [...] }` and the same 27 stable IDs.
 
 The current chat drives on whatever model runs it; no preset carries a driver
 role.
 
-| Preset | Author | Ordered peer reviewers | Astra / Fable advisers | Auditor |
+| Preset | Author | Ordered peer reviewers | Astra / Opus advisers | Auditor |
 | --- | --- | --- | --- | --- |
-| `mixed` | Sol high | Sol medium; Opus medium | Astra high / Fable high | Luna xhigh |
-| `codex-only` | Sol high | Sol medium; Luna xhigh | Astra high / unavailable | Luna xhigh |
-| `claude-only` | Opus medium | Opus medium; Sonnet xhigh | unavailable / Fable high | Sonnet xhigh |
+| `mixed` | Sol high | Sol high; Opus medium | Astra high / Opus xhigh | Luna xhigh |
+| `codex-only` | Sol high | Sol high; Luna xhigh | Astra high / unavailable | Luna xhigh |
+| `claude-only` | Opus medium | Opus medium; Sonnet xhigh | unavailable / Opus xhigh | Sonnet xhigh |
 
 The installed `<skills-dir>/axstack/roles.json` adds the selected preset name:
 `{ "version": 1, "preset": "<name>", "roles": [...] }`. The runtime reads it
@@ -120,14 +120,18 @@ session and evidence remain valid.
 ## Phases
 
 - `axstack-align` maps facts and dependencies, asks prioritized questions, and
-  consults Astra and Fable independently with the same bounded evidence and
+  consults Astra and Opus independently with the same bounded evidence and
   question. It synthesizes disagreements and reuses unchanged receipts. For a
-  hard-to-reverse design choice it runs one arena round instead: Astra and
-  Fable each author a candidate, `axstack-arena-judge-astra` and
-  `axstack-arena-judge-fable` score both against the driver's rubric, and the
-  driver picks a base, grafts the losers' strong ideas, and presents the
-  synthesis as the recommendation; the note lands as `Decisions` rows in the
-  run record.
+  hard-to-reverse design choice it runs an arena instead: Astra, Opus, Grok,
+  and Antigravity each author a candidate. `axstack-arena-judge-opus` scores
+  them in round 1; the driver compares its own pick with that verdict. If they
+  disagree on the base or the user rejects the round-1 synthesis,
+  `axstack-escalation-fable` and `axstack-arena-judge-astra` independently
+  score the same anonymized candidates and rubric in round 2. The driver
+  picks a base, grafts strong ideas, and records judge verdicts per round in
+  the `Decisions` rows without averaging. Fable escalation uses a fresh
+  session for round 2, high-stakes agreement, or the bounded trigger in
+  [Standing contracts](../skills/axstack/references/contracts.md).
 - `axstack-spec` writes observable acceptance, exclusions, decisions, and one
   user-approved revision baseline. Linear is the default authoritative store;
   GitHub Issues and repository Markdown are explicit alternatives. A GitHub

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "axstack",
-  "version": "0.20.22",
+  "version": "0.20.24",
   "description": "Axstack installer and setup CLI: installs owned chat skills and role data, configures supported harness settings, and checks Orca capabilities.",
   "keywords": [
     "claude-code",

package/profiles/presets/claude-only.json

@@ -11,13 +11,13 @@
       "notes": "Required independent Astra adviser for Align, Spec, and unresolved consequential decisions; unavailable in claude-only. The explicit null holds Align and Spec without provider substitution."
     },
     {
-      "id": "axstack-advisor-fable",
-      "name": "Axstack Fable adviser",
+      "id": "axstack-advisor-opus",
+      "name": "Axstack Opus adviser",
       "provider": "claude",
-      "model": "claude-fable-5-1",
+      "model": "claude-opus-5-5",
       "modeId": "bypassPermissions",
-      "thinkingOptionId": "high",
-      "notes": "Independent Fable adviser for Align, Spec, and unresolved consequential decisions. Receives the same bounded evidence and question as Astra; reuse only unchanged receipts."
+      "thinkingOptionId": "xhigh",
+      "notes": "Independent Opus adviser for Align, Spec, and debug L1; authors the Claude arena candidate. Same bounded evidence and question as Astra; reuse only unchanged receipts."
     },
     {
       "id": "axstack-owner",
@@ -206,16 +206,43 @@
       "model": null,
       "modeId": "bypassPermissions",
       "thinkingOptionId": "xhigh",
-      "notes": "Required Arena judge (Astra seat). Read-only cross-judge for an arena-grade Align decision: receives the rubric and both candidates by label, scores each criterion, and recommends a base with rationale. Never authors a candidate, never cross-reads the other judge, never mutates. Disagreement between judges is surfaced by the driver, never averaged. Intentionally absent in the claude-only preset; the arena-grade decision holds without substitution."
+      "notes": "Required Arena judge (Astra seat). Read-only cross-judge for an arena-grade Align decision: receives the rubric and every candidate by label, scores each criterion, and recommends a base with rationale. Never authors a candidate, never cross-reads the other judge, never mutates. Disagreement between judges is surfaced by the driver, never averaged. Intentionally absent in the claude-only preset; the arena-grade decision holds without substitution."
     },
     {
-      "id": "axstack-arena-judge-fable",
-      "name": "Axstack arena judge Fable",
+      "id": "axstack-escalation-fable",
+      "name": "Axstack escalation Fable",
       "provider": "claude",
       "model": "claude-fable-5-1",
       "modeId": "bypassPermissions",
       "thinkingOptionId": "xhigh",
-      "notes": "Arena judge (Fable seat). Read-only cross-judge for an arena-grade Align decision: receives the rubric and both candidates by label, scores each criterion, and recommends a base with rationale. Never authors a candidate, never cross-reads the other judge, never mutates. Disagreement between judges is surfaced by the driver, never averaged."
+      "notes": "Fable escalation seat for arena round 2, high-stakes plain AGREE, or the bounded escalation trigger. Fresh session per use; never reuses adviser or candidate context. Read-only round 2 judge: scores every candidate by label; never authors a candidate."
+    },
+    {
+      "id": "axstack-arena-judge-opus",
+      "name": "Axstack arena judge Opus",
+      "provider": "claude",
+      "model": "claude-opus-5-5",
+      "modeId": "bypassPermissions",
+      "thinkingOptionId": "xhigh",
+      "notes": "Read-only round 1 arena judge. Receives the rubric and every candidate by label, scores each criterion, and recommends a base with rationale. Never authors a candidate, never cross-reads another judge, never mutates; the driver compares its verdict without averaging."
+    },
+    {
+      "id": "axstack-arena-candidate-grok",
+      "name": "Axstack arena candidate Grok (unavailable)",
+      "provider": "claude",
+      "model": null,
+      "modeId": "bypassPermissions",
+      "thinkingOptionId": "high",
+      "notes": "Intentional single-provider absence in the claude-only preset; Grok candidate unavailable. Arena holds without substitution."
+    },
+    {
+      "id": "axstack-arena-candidate-antigravity",
+      "name": "Axstack arena candidate Antigravity (unavailable)",
+      "provider": "claude",
+      "model": null,
+      "modeId": "bypassPermissions",
+      "thinkingOptionId": "high",
+      "notes": "Intentional single-provider absence in the claude-only preset; Antigravity candidate unavailable. Arena holds without substitution."
     }
   ]
 }

package/profiles/presets/codex-only.json

@@ -8,16 +8,16 @@
       "model": "gpt-6-astra",
       "modeId": "full-access",
       "thinkingOptionId": "high",
-      "notes": "Independent Astra adviser for Align, Spec, and unresolved consequential decisions. Receives the same bounded evidence and question as Fable; reuse only unchanged receipts."
+      "notes": "Independent Astra adviser for Align, Spec, and unresolved consequential decisions. Receives the same bounded evidence and question as Opus; reuse only unchanged receipts."
     },
     {
-      "id": "axstack-advisor-fable",
-      "name": "Axstack Fable adviser (unavailable)",
+      "id": "axstack-advisor-opus",
+      "name": "Axstack Opus adviser (unavailable)",
       "provider": "codex",
       "model": null,
       "modeId": "full-access",
-      "thinkingOptionId": "high",
-      "notes": "Required independent Fable adviser for Align, Spec, and unresolved consequential decisions; unavailable in codex-only. The explicit null holds Align and Spec without provider substitution."
+      "thinkingOptionId": "xhigh",
+      "notes": "Opus adviser intentionally absent in codex-only; the explicit null holds Align and Spec without substitution."
     },
     {
       "id": "axstack-owner",
@@ -43,8 +43,8 @@
       "provider": "codex",
       "model": "gpt-6-sol",
       "modeId": "full-access",
-      "thinkingOptionId": "medium",
-      "notes": "Primary reviewer in the ordered codex-only peer pair: Sol medium followed by Luna xhigh. Never author or owner; review exact SHA and base across all six angles and acceptance. Peer first pass stays isolated."
+      "thinkingOptionId": "high",
+      "notes": "Primary reviewer in the ordered codex-only peer pair: Sol high followed by Luna xhigh. Never author or owner; review exact SHA and base across all six angles and acceptance. Peer first pass stays isolated."
     },
     {
       "id": "axstack-reviewer-secondary",
@@ -53,7 +53,7 @@
       "model": "gpt-6-luna",
       "modeId": "full-access",
       "thinkingOptionId": "xhigh",
-      "notes": "Secondary reviewer in the ordered codex-only peer pair: Sol medium followed by Luna xhigh. Eligible authored reviewer for a Sol-authored candidate. Never author or owner; review exact SHA and base across all six angles and acceptance. Peer first pass stays isolated."
+      "notes": "Secondary reviewer in the ordered codex-only peer pair: Sol high followed by Luna xhigh. Eligible authored reviewer for a Sol-authored candidate. Never author or owner; review exact SHA and base across all six angles and acceptance. Peer first pass stays isolated."
     },
     {
       "id": "axstack-checker",
@@ -79,7 +79,7 @@
       "provider": "codex",
       "model": "gpt-6-sol",
       "modeId": "full-access",
-      "thinkingOptionId": "medium",
+      "thinkingOptionId": "high",
       "notes": "Research code investigator: verifies behavior against inspected code and executable evidence. Validate configured availability at launch; hold affected work without fallback."
     },
     {
@@ -133,7 +133,7 @@
       "provider": "codex",
       "model": "gpt-6-sol",
       "modeId": "full-access",
-      "thinkingOptionId": "xhigh",
+      "thinkingOptionId": "high",
       "notes": "Codebase mapper: explores repository structure and interfaces for research and handoff context. Validate configured availability at launch; hold affected work without fallback."
     },
     {
@@ -142,7 +142,7 @@
       "provider": "codex",
       "model": "gpt-6-sol",
       "modeId": "full-access",
-      "thinkingOptionId": "low",
+      "thinkingOptionId": "high",
       "notes": "Execution explorer: runs bounded checks of runtime behavior where authorized. Validate configured availability at launch; hold affected work without fallback."
     },
     {
@@ -169,8 +169,8 @@
       "provider": "codex",
       "model": "gpt-6-sol",
       "modeId": "full-access",
-      "thinkingOptionId": "medium",
-      "notes": "Debug investigator seat 1. Dispatched only by axstack-debug at L1 with the shared evidence packet and one distinct brief; never reads another investigator's output. Works in its own disposable worktree at the pinned revision plus the recorded dirty patch; may instrument there for probes; never commits, pushes, publishes, or creates children. Returns one receipt per brief. Independence comes from brief isolation, not model diversity. This preset repeats gpt-6-sol at medium effort because it has fewer model families."
+      "thinkingOptionId": "high",
+      "notes": "Debug investigator seat 1. Dispatched only by axstack-debug at L1 with the shared evidence packet and one distinct brief; never reads another investigator's output. Works in its own disposable worktree at the pinned revision plus the recorded dirty patch; may instrument there for probes; never commits, pushes, publishes, or creates children. Returns one receipt per brief. Independence comes from brief isolation, not model diversity. This preset repeats gpt-6-sol at high effort because it has fewer model families."
     },
     {
       "id": "axstack-debug-investigator-2",
@@ -178,8 +178,8 @@
       "provider": "codex",
       "model": "gpt-6-sol",
       "modeId": "full-access",
-      "thinkingOptionId": "low",
-      "notes": "Debug investigator seat 2. Dispatched only by axstack-debug at L1 with the shared evidence packet and one distinct brief; never reads another investigator's output. Works in its own disposable worktree at the pinned revision plus the recorded dirty patch; may instrument there for probes; never commits, pushes, publishes, or creates children. Returns one receipt per brief. Independence comes from brief isolation, not model diversity. This preset repeats gpt-6-sol at low effort because it has fewer model families."
+      "thinkingOptionId": "high",
+      "notes": "Debug investigator seat 2. Dispatched only by axstack-debug at L1 with the shared evidence packet and one distinct brief; never reads another investigator's output. Works in its own disposable worktree at the pinned revision plus the recorded dirty patch; may instrument there for probes; never commits, pushes, publishes, or creates children. Returns one receipt per brief. Independence comes from brief isolation, not model diversity. This preset repeats gpt-6-sol at high effort because it has fewer model families."
     },
     {
       "id": "axstack-debug-investigator-3",
@@ -196,8 +196,8 @@
       "provider": "codex",
       "model": "gpt-6-sol",
       "modeId": "full-access",
-      "thinkingOptionId": "xhigh",
-      "notes": "Debug investigator seat 4. Dispatched only by axstack-debug at L1 with the shared evidence packet and one distinct brief; never reads another investigator's output. Works in its own disposable worktree at the pinned revision plus the recorded dirty patch; may instrument there for probes; never commits, pushes, publishes, or creates children. Returns one receipt per brief. Independence comes from brief isolation, not model diversity. This preset repeats gpt-6-sol at xhigh effort because it has fewer model families."
+      "thinkingOptionId": "high",
+      "notes": "Debug investigator seat 4. Dispatched only by axstack-debug at L1 with the shared evidence packet and one distinct brief; never reads another investigator's output. Works in its own disposable worktree at the pinned revision plus the recorded dirty patch; may instrument there for probes; never commits, pushes, publishes, or creates children. Returns one receipt per brief. Independence comes from brief isolation, not model diversity. This preset repeats gpt-6-sol at high effort because it has fewer model families."
     },
     {
       "id": "axstack-arena-judge-astra",
@@ -206,16 +206,43 @@
       "model": "gpt-6-astra",
       "modeId": "full-access",
       "thinkingOptionId": "xhigh",
-      "notes": "Arena judge (Astra seat). Read-only cross-judge for an arena-grade Align decision: receives the rubric and both candidates by label, scores each criterion, and recommends a base with rationale. Never authors a candidate, never cross-reads the other judge, never mutates. Disagreement between judges is surfaced by the driver, never averaged."
+      "notes": "Arena judge (Astra seat). Read-only cross-judge for an arena-grade Align decision: receives the rubric and every candidate by label, scores each criterion, and recommends a base with rationale. Never authors a candidate, never cross-reads the other judge, never mutates. Disagreement between judges is surfaced by the driver, never averaged."
+    },
+    {
+      "id": "axstack-escalation-fable",
+      "name": "Axstack escalation Fable (unavailable)",
+      "provider": "codex",
+      "model": null,
+      "modeId": "full-access",
+      "thinkingOptionId": "xhigh",
+      "notes": "Fable escalation intentionally absent in codex-only; a required use holds without substitution. Read-only round 2 judge; never authors a candidate."
     },
     {
-      "id": "axstack-arena-judge-fable",
-      "name": "Axstack arena judge Fable",
+      "id": "axstack-arena-judge-opus",
+      "name": "Axstack arena judge Opus",
       "provider": "codex",
       "model": null,
       "modeId": "full-access",
       "thinkingOptionId": "xhigh",
-      "notes": "Required Arena judge (Fable seat). Read-only cross-judge for an arena-grade Align decision: receives the rubric and both candidates by label, scores each criterion, and recommends a base with rationale. Never authors a candidate, never cross-reads the other judge, never mutates. Disagreement between judges is surfaced by the driver, never averaged. Intentionally absent in the codex-only preset; the arena-grade decision holds without substitution."
+      "notes": "Read-only round 1 arena judge. Receives the rubric and every candidate by label, scores each criterion, and recommends a base with rationale. Never authors a candidate, never cross-reads another judge, never mutates; the driver compares its verdict without averaging. Intentionally absent in the codex-only preset; round 1 holds without substitution."
+    },
+    {
+      "id": "axstack-arena-candidate-grok",
+      "name": "Axstack arena candidate Grok (unavailable)",
+      "provider": "codex",
+      "model": null,
+      "modeId": "full-access",
+      "thinkingOptionId": "high",
+      "notes": "Intentional single-provider absence in the codex-only preset; Grok candidate unavailable. Arena holds without substitution."
+    },
+    {
+      "id": "axstack-arena-candidate-antigravity",
+      "name": "Axstack arena candidate Antigravity (unavailable)",
+      "provider": "codex",
+      "model": null,
+      "modeId": "full-access",
+      "thinkingOptionId": "high",
+      "notes": "Intentional single-provider absence in the codex-only preset; Antigravity candidate unavailable. Arena holds without substitution."
     }
   ]
 }

package/profiles/presets/mixed.json

@@ -8,16 +8,16 @@
       "model": "gpt-6-astra",
       "modeId": "full-access",
       "thinkingOptionId": "high",
-      "notes": "Independent Astra adviser for Align, Spec, and unresolved consequential decisions. Receives the same bounded evidence and question as Fable; reuse only unchanged receipts."
+      "notes": "Independent Astra adviser for Align, Spec, and unresolved consequential decisions. Receives the same bounded evidence and question as Opus; reuse only unchanged receipts."
     },
     {
-      "id": "axstack-advisor-fable",
-      "name": "Axstack Fable adviser",
+      "id": "axstack-advisor-opus",
+      "name": "Axstack Opus adviser",
       "provider": "claude",
-      "model": "claude-fable-5-1",
+      "model": "claude-opus-5-5",
       "modeId": "bypassPermissions",
-      "thinkingOptionId": "high",
-      "notes": "Independent Fable adviser for Align, Spec, and unresolved consequential decisions. Receives the same bounded evidence and question as Astra; reuse only unchanged receipts."
+      "thinkingOptionId": "xhigh",
+      "notes": "Independent Opus adviser for Align, Spec, and debug L1; authors the Claude arena candidate. Same bounded evidence and question as Astra; reuse only unchanged receipts."
     },
     {
       "id": "axstack-owner",
@@ -43,8 +43,8 @@
       "provider": "codex",
       "model": "gpt-6-sol",
       "modeId": "full-access",
-      "thinkingOptionId": "medium",
-      "notes": "Primary reviewer in the ordered mixed peer pair: Sol medium followed by Opus medium. Eligible authored reviewer for an Opus-authored candidate. Never author or owner; review exact SHA and base across all six angles and acceptance. Peer first pass stays isolated."
+      "thinkingOptionId": "high",
+      "notes": "Primary reviewer in the ordered mixed peer pair: Sol high followed by Opus medium. Eligible authored reviewer for an Opus-authored candidate. Never author or owner; review exact SHA and base across all six angles and acceptance. Peer first pass stays isolated."
     },
     {
       "id": "axstack-reviewer-secondary",
@@ -53,7 +53,7 @@
       "model": "claude-opus-5-5",
       "modeId": "bypassPermissions",
       "thinkingOptionId": "medium",
-      "notes": "Secondary reviewer in the ordered mixed peer pair: Sol medium followed by Opus medium. Eligible authored reviewer for a Sol-authored candidate. Never author or owner; review exact SHA and base across all six angles and acceptance. Peer first pass stays isolated."
+      "notes": "Secondary reviewer in the ordered mixed peer pair: Sol high followed by Opus medium. Eligible authored reviewer for a Sol-authored candidate. Never author or owner; review exact SHA and base across all six angles and acceptance. Peer first pass stays isolated."
     },
     {
       "id": "axstack-checker",
@@ -79,7 +79,7 @@
       "provider": "codex",
       "model": "gpt-6-sol",
       "modeId": "full-access",
-      "thinkingOptionId": "medium",
+      "thinkingOptionId": "high",
       "notes": "Research code investigator: verifies behavior against inspected code and executable evidence. Validate configured availability at launch; hold affected work without fallback."
     },
     {
@@ -142,7 +142,7 @@
       "provider": "codex",
       "model": "gpt-6-sol",
       "modeId": "full-access",
-      "thinkingOptionId": "low",
+      "thinkingOptionId": "high",
       "notes": "Execution explorer: runs bounded checks of runtime behavior where authorized. Validate configured availability at launch; hold affected work without fallback."
     },
     {
@@ -178,7 +178,7 @@
       "provider": "codex",
       "model": "gpt-6-sol",
       "modeId": "full-access",
-      "thinkingOptionId": "medium",
+      "thinkingOptionId": "high",
       "notes": "Debug investigator seat 2. Dispatched only by axstack-debug at L1 with the shared evidence packet and one distinct brief; never reads another investigator's output. Works in its own disposable worktree at the pinned revision plus the recorded dirty patch; may instrument there for probes; never commits, pushes, publishes, or creates children. Returns one receipt per brief. Independence comes from brief isolation, not model diversity."
     },
     {
@@ -196,7 +196,7 @@
       "provider": "codex",
       "model": "gpt-6-sol",
       "modeId": "full-access",
-      "thinkingOptionId": "low",
+      "thinkingOptionId": "high",
       "notes": "Debug investigator seat 4. Dispatched only by axstack-debug at L1 with the shared evidence packet and one distinct brief; never reads another investigator's output. Works in its own disposable worktree at the pinned revision plus the recorded dirty patch; may instrument there for probes; never commits, pushes, publishes, or creates children. Returns one receipt per brief. Independence comes from brief isolation, not model diversity."
     },
     {
@@ -206,16 +206,43 @@
       "model": "gpt-6-astra",
       "modeId": "full-access",
       "thinkingOptionId": "xhigh",
-      "notes": "Arena judge (Astra seat). Read-only cross-judge for an arena-grade Align decision: receives the rubric and both candidates by label, scores each criterion, and recommends a base with rationale. Never authors a candidate, never cross-reads the other judge, never mutates. Disagreement between judges is surfaced by the driver, never averaged."
+      "notes": "Arena judge (Astra seat). Read-only cross-judge for an arena-grade Align decision: receives the rubric and every candidate by label, scores each criterion, and recommends a base with rationale. Never authors a candidate, never cross-reads the other judge, never mutates. Disagreement between judges is surfaced by the driver, never averaged."
     },
     {
-      "id": "axstack-arena-judge-fable",
-      "name": "Axstack arena judge Fable",
+      "id": "axstack-escalation-fable",
+      "name": "Axstack escalation Fable",
       "provider": "claude",
       "model": "claude-fable-5-1",
       "modeId": "bypassPermissions",
       "thinkingOptionId": "xhigh",
-      "notes": "Arena judge (Fable seat). Read-only cross-judge for an arena-grade Align decision: receives the rubric and both candidates by label, scores each criterion, and recommends a base with rationale. Never authors a candidate, never cross-reads the other judge, never mutates. Disagreement between judges is surfaced by the driver, never averaged."
+      "notes": "Fable escalation seat for arena round 2, high-stakes plain AGREE, or the bounded escalation trigger. Fresh session per use; never reuses adviser or candidate context. Read-only round 2 judge: scores every candidate by label; never authors a candidate."
+    },
+    {
+      "id": "axstack-arena-judge-opus",
+      "name": "Axstack arena judge Opus",
+      "provider": "claude",
+      "model": "claude-opus-5-5",
+      "modeId": "bypassPermissions",
+      "thinkingOptionId": "xhigh",
+      "notes": "Read-only round 1 arena judge. Receives the rubric and every candidate by label, scores each criterion, and recommends a base with rationale. Never authors a candidate, never cross-reads another judge, never mutates; the driver compares its verdict without averaging."
+    },
+    {
+      "id": "axstack-arena-candidate-grok",
+      "name": "Axstack arena candidate Grok",
+      "provider": "grok",
+      "model": null,
+      "modeId": "full-access",
+      "thinkingOptionId": "high",
+      "notes": "Independent Grok Rung 2 design candidate. Launch by agent id grok; model selected by the TUI default. Receives the same brief without cross-reading; returns design, rationale, and rejected alternatives."
+    },
+    {
+      "id": "axstack-arena-candidate-antigravity",
+      "name": "Axstack arena candidate Antigravity",
+      "provider": "antigravity",
+      "model": null,
+      "modeId": "full-access",
+      "thinkingOptionId": "high",
+      "notes": "Independent Antigravity Rung 2 design candidate. Launch by agent id antigravity; model selected by the TUI default. Receives the same brief without cross-reading; returns design, rationale, and rejected alternatives."
     }
   ]
 }

package/skills/axstack/references/contracts.md

@@ -48,7 +48,7 @@ The current chat is the driver, whatever model runs it; there is no driver
 profile. Record the driver's provider and model in the run record.
 
 For Align and Spec, the driver forms an independent assessment first, then
-consults `axstack-advisor-astra` and `axstack-advisor-fable` independently with
+consults `axstack-advisor-astra` and `axstack-advisor-opus` independently with
 the same bounded evidence and question. The one exception is an arena-grade
 Align question: there the driver frames the brief and rubric, the advisers
 author candidates, and the driver assesses only after the candidates and judge
@@ -62,11 +62,11 @@ For `axstack-debug`, ordinary diagnosis consults the preset's configured
 adviser roles (both in `mixed`; the one configured adviser in a single-provider
 preset, recording the other as an intentional absence). The high-stakes and
 serious-risk contracts override that rule whenever their conditions arise. A
-configured but unavailable adviser holds debug L1 and L2 without substitution.
+configured but unavailable adviser holds debug L1; an unavailable escalation seat holds L2 without substitution.
 Reuse a debug receipt while its evidence packet is unchanged.
 
-High-stakes decisions require both advisers' plain AGREE and the driver's
-accepted assessment. Resolve disagreement with bounded checks; silence and an
+High-stakes decisions require `axstack-advisor-astra` and
+`axstack-escalation-fable` plain AGREE plus the driver's accepted assessment. Resolve disagreement with bounded checks; silence and an
 unavailable model do not authorize fallback. Ordinary work uses the configured
 author and reviewer roles selected by review mode and the routing snapshot. The
 existing mixed high-stakes route keeps its Opus high author and Sol high
@@ -76,6 +76,15 @@ its effort and do not add a redundant reviewer. No single-provider high-stakes
 mapping is defined: pause for an explicit user decision rather than borrowing
 another preset or inventing a route. There is no silent fallback.
 
+Use `axstack-escalation-fable` only for arena round 2, high-stakes decisions,
+or when two attempts at the same named goal fail a stated acceptance check
+(including debug L2 or a spec decision rejected twice). It also applies when
+Astra and Opus still contradict after one reconciliation with no safe
+discriminating check. A bare "stuck" claim needs pointers to two failed attempts;
+setup slips and new user requirements do not count. Each use starts a fresh
+session that never reuses an adviser or candidate context. Escalation never
+resets existing holds or attempt budgets.
+
 ## Serious risk
 
 Raise credible serious security, downtime, data-loss, or major-design risk

package/skills/axstack/references/design-lens.md

@@ -15,7 +15,7 @@ sketch through the scope identity.
   not reclassify work: Rung 1 can stay small. An unsettled material design
   question still makes routing reassess size.
 - **Rung 2 — arena.** A Rung 1 design that also meets the existing ADR test:
-  a meaningful, hard-to-reverse, non-obvious trade-off. Use Align's existing
+  a meaningful, hard-to-reverse, non-obvious trade-off. Use Align's all-family
   arena for that question.
 
 There is no numeric threshold, file-count gate, or class-count gate.

package/skills/axstack/references/orca-runtime.md

@@ -38,7 +38,7 @@ Read `roles.json` from the installed shared root `skills/axstack/`. The installe
 shape is `{ "version": 1, "preset": "<name>", "roles": [...] }`. Bundled
 profiles are setup inputs shaped as
 `{ "version": 1, "roles": [...] }`. A new run records the selected preset and
-all 24 role rows once. An active run keeps the exact snapshot until the user
+all 27 role rows once. An active run keeps the exact snapshot until the user
 explicitly changes it.
 
 Select the requested role by stable ID. A missing or null model holds only that role;
@@ -50,7 +50,7 @@ permission fields are conservative intent, not proof of effective permission
 parity or a security boundary. Requested settings, input acceptance, effective
 settings, and completed work are separate evidence. An unsupported or
 unavailable value holds affected work for the user's decision without fallback.
-The single-provider preset's null adviser is intentional installation data, not
+The single-provider preset's null adviser and round-2 seat are intentional installation data, not
 readiness failure; because Align and Spec require both adviser receipts, either
 null adviser still holds those phases. The current chat is the driver and has
 no role row in any preset.

package/skills/axstack/references/routing.md

@@ -5,15 +5,14 @@ Driver entry sweep follows [Workspace hygiene](workspace-hygiene.md).
 
 ## Role routing
 
-Presets: `mixed`, `codex-only`, `claude-only`. For a new run, read
+Presets: `mixed`, `codex-only`, `claude-only`. For new runs, use
 `profiles.preset` from `.axstack-manifest.json` at the actually loaded
-skills root, or an explicit user selection recorded in the run record. Proceed
-only with exactly one unambiguous preset; missing or contradictory sources are
+skills root, or an explicit user selection in the run record. Missing or contradictory sources are
 a setup gap: hold. Never infer from live profiles or `list_profiles`, harness,
 tools, credentials, quota, subscription, or default to `mixed`.
 
-At run start, snapshot all 24 role IDs with provider/model/mode/effort; absent
-or unconfigured roles are recorded explicitly; invent no provider default.
+At start, snapshot all 27 role IDs with provider/model/mode/effort; absent
+or unconfigured roles are recorded explicitly; never default.
 Such a role holds only that role's work. A role installed or changed later must not
 silently enter the snapshot; adding it needs an explicit user decision. Live profiles
 are authoritative at snapshot time and for availability; bundled presets are setup
@@ -21,11 +20,9 @@ inputs, not runtime proof.
 
 Preset changes apply to new runs only; an active run keeps its snapshot.
 Changing it or replacing a session needs an explicit user decision and
-revalidation. Unavailable models, unsupported efforts, missing roles, and
-incompatible overrides hold only affected work; no automatic fallback, quota
-routing, subscription inference, or silent provider/model/effort substitution.
-
-Role IDs:
+revalidation. Unavailable models, efforts, roles, or overrides hold only affected
+work; no automatic fallback, quota routing, subscription inference, or silent
+provider/model/effort substitution.
 
 - Chat drives (no role ID); `axstack-owner` owns one PR and
   `axstack-author` its sole writer.
@@ -35,13 +32,15 @@ Role IDs:
   | Preset | Author | Reviewer (model/effort) |
   | --- | --- | --- |
   | `mixed` | Codex / Sol (`codex/gpt-6-sol`) | `axstack-reviewer-secondary` (`claude/claude-opus-5-5` medium) |
-  | `mixed` | Claude / Opus (`claude/claude-opus-5-5`) | `axstack-reviewer-primary` (`codex/gpt-6-sol` medium) |
+  | `mixed` | Claude / Opus (`claude/claude-opus-5-5`) | `axstack-reviewer-primary` (`codex/gpt-6-sol` high) |
   | `codex-only` | Codex / Sol (`codex/gpt-6-sol`) | `axstack-reviewer-secondary` (`codex/gpt-6-luna` xhigh) |
   | `claude-only` | Claude / Opus (`claude/claude-opus-5-5`) | `axstack-reviewer-secondary` (`claude/claude-sonnet-5` xhigh) |
-- `axstack-advisor-astra` and `axstack-advisor-fable` advise independently
-  and author align arena candidates; `axstack-arena-judge-astra` and
-  `axstack-arena-judge-fable` judge them. `axstack-auditor` audits;
-  `axstack-checker` reports discrepancies.
+- `axstack-advisor-astra`/`axstack-advisor-opus` advise and author candidates;
+  `axstack-arena-candidate-grok`/
+  `axstack-arena-candidate-antigravity` add families.
+  `axstack-arena-judge-opus` judges round 1; `axstack-escalation-fable`/`axstack-arena-judge-astra` judge round 2.
+  High-stakes/trigger: fresh [contract](contracts.md) session.
+  `axstack-auditor` audits; `axstack-checker` reports discrepancies.
 - `axstack-explainer`/`axstack-explainer-review`: explain/review.
   `axstack-monitor`: standalone watch never sends; chat-run watch: bounded
   internal reports to its Run and original driver.
@@ -51,17 +50,16 @@ Provenance is matched on provider/model ID; effort never maps. Missing table-row
 provenance is unsupported and `INCOMPLETE`; report it and ask the user. Never
 infer from slot, driver, owner, or provider. Author and owner never review.
 
-The `axstack-implement` loop requires `mixed`; single-provider presets hold at
-step (3) for user routing, with no substitution or same-provider review.
+`axstack-implement` requires `mixed`; single-provider presets hold at
+step (3) for user routing: no substitution or same-provider review.
 
 ## Direct routes (no spec ceremony)
 
 - One bounded research question -> `axstack-research`: verify primary sources
-  and code, return a cited note with limitations. Fan out only distinct
-  questions.
+  and code; return a cited note with limitations. Fan out only distinct questions.
 - Understanding a system, change, or implementation gap -> `axstack-explain`:
-  current/intended behavior, evidence dimensions, and bounded gaps from project
-  docs and rendered behavior. "What could this break" follows
+  current/intended behavior, evidence dimensions, bounded gaps from project docs and
+  rendered behavior. "What could this break" follows
   [Blast radius](blast-radius.md). Publication needs separate authority.
 - A bug, failing test, regression, or wrong behavior, red loop wanted ->
   `axstack-debug`: diagnose, escalate via adviser-directed investigators, hand
@@ -69,11 +67,11 @@ step (3) for user routing, with no substitution or same-provider review.
 - Codebase-quality or refactor discovery -> `axstack-improve`: inspect bounded
   scope, rank evidenced candidates, report only; no spec, tickets, or source
   edits.
-- Accepted worker/Task/Run completion or bounded backlog request -> invoke
-  `axstack-cleanup` inline in the driver; never dispatch it.
+- Accepted worker/Task/Run completion or bounded backlog request -> driver invokes
+  `axstack-cleanup` inline; never dispatch it.
 - Preparation completion, watch expiry, resume, or reconciliation -> the
-  [lifecycle](lifecycle.md#native-handoff-and-resume): reconcile the run
-  record, keep its owner, launch no native handoff.
+  [lifecycle](lifecycle.md#native-handoff-and-resume): reconcile run record,
+  keep owner, launch no native handoff.
 - Explicit user-requested ownership transfer -> the same lifecycle section.
   Load the [Orca runtime boundary](orca-runtime.md), follow the runtime-owned
   handoff guide, and require explicit recipient acceptance before ownership
@@ -81,10 +79,10 @@ step (3) for user routing, with no substitution or same-provider review.
 - Colleague PR review -> `axstack-review`, peer mode.
 - Codebase review -> `axstack-review` codebase mode, report only.
 - A status question about an own open PR or stack ("check now", "what's left",
-  "are we done", or "is it approved") -> `axstack-watch` in observation-only
+  "are we done", or "is it approved") -> `axstack-watch` observation-only
   mode. Explicit "address", "patch", or "fix" grants authorized maintenance.
-- Chat-run PR watch -> `axstack-watch`: original driver; verified run PRs
-  and explicit adoptions only.
+- Chat-run PR watch -> `axstack-watch`: original driver; verified run PRs and
+  explicit adoptions only.
 - Other own PR work -> `axstack-review` authored mode or `axstack-watch`
   adoption.
 

package/skills/axstack-align/SKILL.md

@@ -65,7 +65,7 @@ user round, the driver independently drafts the prioritized frontier and
 recommendations, except for an arena-grade question (below), where the driver
 writes the brief and rubric but drafts no recommendation until the candidates
 and judge verdicts return, so nothing anchors them. Then consult `axstack-advisor-astra` and
-`axstack-advisor-fable` independently, without cross-reading, using the same
+`axstack-advisor-opus` independently, without cross-reading, using the same
 bounded evidence and question. Each adviser challenges assumptions, edges,
 omissions, and alternatives; the driver synthesizes disagreements and accepts
 or rejects each material point with a reason. Use one focused reply when
@@ -81,45 +81,53 @@ hold Align; safe fact work may continue without substitution.
 
 ## Arena for hard-to-reverse design choices
 
-Critique of one draft anchors every reader to that draft's shape. When a
-question is arena-grade, the same test as for an ADR (a meaningful,
+Critique of one draft anchors every reader to that draft's shape. Rung 2 designs
+alone enter the arena: they meet the same test as for an ADR (a meaningful,
 hard-to-reverse, non-obvious trade-off: architecture, module boundaries, data
-model, migration strategy), replace the critique round for that question with
-one arena round. Small or routine questions never enter the arena.
+model, migration strategy). Replace the critique round for that question with
+an arena. Small or routine questions never enter the arena.
 
 1. **Frame.** The driver writes the brief (the artifact, its constraints, the
    settled decisions it must respect) and three to six gradeable rubric
    criteria. Candidates receive only the brief; the rubric is for judging.
-2. **Fan out.** `axstack-advisor-astra` and `axstack-advisor-fable` each
-   independently produce one candidate design plus a short rationale naming
-   the alternatives considered and rejected, from the same bounded evidence and
-   question, without cross-reading. The driver authors no candidate.
-3. **Cross-judge.** After both candidates are complete, `axstack-arena-judge-astra`
-   and `axstack-arena-judge-fable` each independently score every candidate
-   per criterion from the rubric and candidates by label, and recommend a base
-   with a reason. Judges never author, never cross-read each other.
+2. **Fan out.** Produce one candidate per configured family independently from the same brief,
+   without cross-reading: `axstack-advisor-astra`, `axstack-advisor-opus`,
+   `axstack-arena-candidate-grok`, and `axstack-arena-candidate-antigravity`.
+   Each gives a design, rationale, and rejected alternatives. The driver authors no candidate.
+3. **Cross-judge.** After every candidate completes, give round 1 judge
+   `axstack-arena-judge-opus` the anonymized, relabeled candidates and rubric to
+   score every candidate per criterion and recommend a base with a reason.
+   The driver compares its own pick with the Opus verdict. Only if the driver
+   and the Opus judge disagree on the base, or the user rejects the round-1
+   synthesis,
+   run round 2 with fresh sessions: `axstack-escalation-fable` and `axstack-arena-judge-astra`
+   independently score the same anonymized candidates and rubric. Judges never
+   author, never cross-read each other, and never average verdicts. After round-2
+   verdicts return, the driver re-picks in step 4 and re-presents in step 6.
 4. **Pick.** The driver reads every candidate end to end and scores per
-   criterion, not on holistic feel, then compares with both judges. Agreement
-   confirms the base. Disagreement between judges or with the driver means one
-   reading is biased or the rubric was ambiguous: re-read both rationales and
-   decide with a stated reason; never average verdicts or fabricate consensus.
-5. **Graft.** Walk the losing candidate once more for the one or two ideas
+   criterion, not on holistic feel, then compares with the judge verdicts from
+   each completed round. Agreement confirms the base. On disagreement, re-read
+   the rationales and decide with a stated reason; never average verdicts or
+   fabricate consensus.
+5. **Graft.** Walk the losing candidates once more for the one or two ideas
    worth porting and fold them into the base by hand so the result stays
    coherent under one mental model. Convergence on the same shape is a strong
    agreement signal: adopt the consensus shape, no graft. Wide divergence
    means the frame was under-specified: reframe and rerun once, never
    average.
 6. **Present.** The synthesized design is the recommendation in the next
-   `Qn`, with its trade-off, judge verdicts, and what was grafted or rejected.
+   `Qn`, with its trade-off, judge verdicts per round, and what was grafted or rejected.
    The user still decides; spec approval remains the one human checkpoint.
 
 Record the synthesis note (base, grafts and their source candidate, rejections,
-dropouts, both judge verdicts) as `Decisions` rows in the
+dropouts, judge verdicts per round) as `Decisions` rows in the
 [run record](../axstack/references/run-record.md). Load
 [Orca runtime](../axstack/references/orca-runtime.md) immediately before the
-first candidate or judge dispatch. If either adviser or judge seat is
-unavailable, hold that question without substitution; unaffected fact work
-and questions continue.
+first candidate or judge dispatch. If any configured candidate or judge seat
+required for that round is unavailable at launch or returns a failed receipt,
+hold that question without substitution, record the gap, and ask: the user decides whether to proceed without it.
+For an uncertain dispatch, reconcile natively; it is never treated as absent.
+Unaffected fact work and questions continue.
 
 ## Bound the interview
 

package/skills/axstack-audit/SKILL.md

@@ -47,7 +47,8 @@ Use actual records, never memory:
 
 - the approved spec, or the accepted peer, research, or maintenance scope;
 - the decision log and configured `axstack-advisor-astra` and
-  `axstack-advisor-fable` receipts;
+  `axstack-advisor-opus` receipts and fresh `axstack-escalation-fable`
+  receipts when triggered;
 - exact git revisions;
 - test and review evidence; and
 - the run execution record at its recorded `progress.md` path.
@@ -71,7 +72,10 @@ counts with denominators plus the evidence behind the count:
 - Planned steps completed and deviated, each deviation with why and approval.
 - Configured adviser coverage across Align, Spec creation, Spec revision,
   solution design, and unresolved consequential decisions, including
-  independent same-question receipts, disagreement synthesis, and both plain AGREE receipts where high-stakes.
+  independent same-question receipts and disagreement synthesis. Measure
+  Astra/Opus routine coverage and Astra/Fable high-stakes plain AGREE coverage
+  over eligible uses; record escalation triggers, evidence pointers, and whether
+  the outcome changed.
 - Debug evidence where `axstack-debug` ran: rung reached, loop command, fix
   attempts with why each failed, adviser and investigator receipts, and
   isolation evidence (pinned worktree, preserved probe artifacts).
@@ -95,7 +99,7 @@ counts with denominators plus the evidence behind the count:
   record. Record `UNKNOWN` when a receipt lacks the measurement.
   This is evidence, not a score to game. Audit treats routine shape choices as
   autonomous driver decisions; size alone never requires user approval.
-- Actual model, tool, time, token, and cost figures when provider receipts are available, unknown otherwise.
+- API-dollar cost by model when provider receipts are available, UNKNOWN otherwise.
 
 Record `UNKNOWN` where evidence is absent. Never count missing evidence as a
 pass or collapse gaps into a vanity score. Prefer parallelism for genuinely

package/skills/axstack-audit/references/record.md

@@ -9,7 +9,8 @@ Run: <run identity + scope/authority + audit mode (end-of-run | checkpoint)>
 Baseline: <approved spec rev | peer mode | research mode | maintenance scope>
 Acceptance: <passed / failed / unverified + test + SHA traces>
 Steps: <completed / deviated + why + approval per deviation>
-Advisers: <Astra/Fable coverage + same-question receipts + high-stakes AGREE status>
+Advisers: <Astra/Opus configured coverage / eligible uses + same-question receipts; Astra/Fable high-stakes AGREE coverage / eligible uses>
+Decisions: <escalation trigger + evidence pointers + outcome changed yes/no, or n/a>
 Debug: <rung reached + loop command + fix attempts + adviser and investigator receipts + isolation evidence | n/a>
 TDD: <applicable evidence path: normal real red-green | accepted structure-preserving old revision green before edits + same checks new revision green; absent proof: noncompliance | unavailable records: UNKNOWN with reason>
 Review: <exact-rev independent review status + unresolved findings>
@@ -17,7 +18,7 @@ Rework: <cycles + causes>
 Interventions: <avoidable user interventions, or unsupported by records>
 Parallelism: <identified vs dispatched + dependency/writer isolation>
 Shape: <PRs within band / total PRs + rationale-band cohesion rationale + exception-band full driver exception record; missing measurement: UNKNOWN>
-Cost: <model/tool/time/token/cost figures, or unknown otherwise>
+Cost: <API dollars by model when measured, or UNKNOWN with reason>
 Judgment: <execution outcome vs procedural adherence vs measurement coverage>
 Proposals: <bounded hypothesized changes with regression-first plan, or none>
 Learning candidates: <each candidate's statement + scope + evidence/revision pointers + target instruction surfaces + contradiction/uncertainty + disposition; explicit already-covered no-op or none>

package/skills/axstack-debug/SKILL.md

@@ -91,7 +91,7 @@ before any further probe or attempt.
 | L0 | entry | driver alone | phases 1–7; at most one fix attempt through `axstack-implement` |
 | L1 | the L0 fix attempt failed; or phases 1–3 complete plus at least one discriminating probe (or a recorded reason no safe probe exists) and no hypothesis ranks | the preset's configured advisers, independently, same evidence packet | ranked hypotheses and one investigator brief per hypothesis |
 | L1 fan-out | driver merges the adviser plans | `axstack-debug-investigator-1..4`, identical packet, distinct briefs, no cross-reading | one receipt per brief |
-| L2 | the L1 fix attempt failed (second failure overall); or each fix reveals a new symptom elsewhere | the configured advisers on architecture, then the user | wrong-architecture finding, bounded refactor proposal, or one bounded next diagnostic action; the user decides before any third attempt |
+| L2 | two failed attempts at the same named goal and stated acceptance check (second failure overall); or each fix reveals a new symptom elsewhere | `axstack-advisor-astra` and `axstack-escalation-fable` (fresh session) on architecture, then the user | wrong-architecture finding, bounded refactor proposal, or one bounded next diagnostic action; the user decides before any third attempt |
 
 L1 is inadmissible without a red loop. Ordinary diagnosis is not a high-stakes
 decision: in `mixed` both advisers are consulted and both receipts are
@@ -100,8 +100,9 @@ records the other as an intentional absence. Whenever a run exposes a
 high-stakes architecture choice, serious security, downtime, or data-loss
 risk, the standing high-stakes and serious-risk contracts override this rule,
 including the single-provider high-stakes hold. An adviser configured but
-unavailable at launch holds L1 and L2 without substitution; L0 continues.
-Reuse an adviser receipt while the packet is unchanged; a changed packet needs
+unavailable at launch holds L1 without substitution; a null or unavailable L2
+seat holds L2 without substitution. L0 continues.
+Reuse an L1 adviser receipt while the packet is unchanged; a changed packet needs
 a fresh receipt.
 
 **Plan merge.** The driver de-duplicates the advisers' hypotheses, ranks the

package/skills/axstack-review/SKILL.md

@@ -207,7 +207,7 @@ This section applies to peer and authored PR modes.
      | Preset | Actual author provider/model | Reviewer role (configured model/effort) |
      | --- | --- | --- |
      | `mixed` | Codex / Sol (`codex/gpt-6-sol`) | `axstack-reviewer-secondary` (`claude/claude-opus-5-5` medium) |
-     | `mixed` | Claude / Opus (`claude/claude-opus-5-5`) | `axstack-reviewer-primary` (`codex/gpt-6-sol` medium) |
+     | `mixed` | Claude / Opus (`claude/claude-opus-5-5`) | `axstack-reviewer-primary` (`codex/gpt-6-sol` high) |
      | `codex-only` | Codex / Sol (`codex/gpt-6-sol`) | `axstack-reviewer-secondary` (`codex/gpt-6-luna` xhigh) |
      | `claude-only` | Claude / Opus (`claude/claude-opus-5-5`) | `axstack-reviewer-secondary` (`claude/claude-sonnet-5` xhigh) |
 

package/skills/axstack-spec/SKILL.md

@@ -41,7 +41,7 @@ and the lifecycle's [audit skill](../axstack-audit/SKILL.md) hook.
    acceptance. First record the driver's
    independent assessment, then load
    [Orca runtime](../axstack/references/orca-runtime.md) before dispatching the
-   configured `axstack-advisor-astra` and `axstack-advisor-fable` independently,
+   configured `axstack-advisor-astra` and `axstack-advisor-opus` independently,
    without cross-reading, with the same bounded evidence and question. The
    driver synthesizes disagreements. Cache both receipts with the draft and
    reuse unchanged receipts only while their evidence, scope, and question
@@ -50,7 +50,8 @@ and the lifecycle's [audit skill](../axstack-audit/SKILL.md) hook.
    criteria, exclusions, and both adviser receipts or the reported hold.
 4. **Obtain the specification checkpoint.** The driver owns the draft and the
    user approves it; adviser input cannot grant approval. High-stakes decisions
-   require both advisers' plain AGREE. Present one
+   require `axstack-advisor-astra` and a fresh `axstack-escalation-fable`
+   session to return plain AGREE. Present one
    reviewable, identified revision for this checkpoint. Its user approval
    creates the execution baseline.
 5. **Snapshot the baseline.** Record the approved revision identity and a

package/src/installer.js

@@ -626,6 +626,20 @@ export async function installBundle({
         if (rel in ownedFiles) installedHashes[rel] = ownedFiles[rel];
       }
     }
+    const previousRoles = desired.find(({ rel }) => rel === 'axstack/roles.json')?.current;
+    if (previousRoles && summary.updated.some((rel) => rel.startsWith('axstack/roles.json'))) {
+      try {
+        const old = JSON.parse(previousRoles.toString());
+        if (Array.isArray(old.roles)) {
+          const oldIds = new Set(old.roles.map((role) => role?.id));
+          const newIds = new Set(bundle.bundleRoles.map((role) => role.id));
+          const addedRoleIds = bundle.bundleRoles.filter((role) => !oldIds.has(role.id)).map((role) => role.id);
+          const removedRoleIds = old.roles.filter((role) => role?.id && !newIds.has(role.id)).map((role) => role.id);
+          summary.addedRoleIds = addedRoleIds;
+          summary.removedRoleIds = removedRoleIds;
+        }
+      } catch { /* No reliable role-ID diff for malformed prior bytes. */ }
+    }
 
     // Stale manifest entries (owned files the bundle no longer ships):
     // the phase-1 plan validated every stale destination read-only

package/src/roles.js

@@ -7,7 +7,7 @@ const PROVIDER_BOUNDS = Object.freeze({
 const AUTHORED_ROUTES = Object.freeze({
   mixed: {
     'codex/gpt-6-sol': ['axstack-reviewer-secondary', 'claude/claude-opus-5-5', 'medium'],
-    'claude/claude-opus-5-5': ['axstack-reviewer-primary', 'codex/gpt-6-sol', 'medium'],
+    'claude/claude-opus-5-5': ['axstack-reviewer-primary', 'codex/gpt-6-sol', 'high'],
   },
   'codex-only': {
     'codex/gpt-6-sol': ['axstack-reviewer-secondary', 'codex/gpt-6-luna', 'xhigh'],
@@ -66,8 +66,10 @@ export function assessRoleReadiness(roles, preset) {
     (preset === 'mixed' && role.id === 'axstack-checker' && role.provider === 'antigravity') ||
     (preset === 'mixed' && role.id === 'axstack-research-web-google' && role.provider === 'antigravity') ||
     (preset === 'mixed' && role.id === 'axstack-research-x' && role.provider === 'grok') ||
-    (preset === 'codex-only' && ['axstack-advisor-fable', 'axstack-arena-judge-fable', 'axstack-research-web-google', 'axstack-research-x'].includes(role.id)) ||
-    (preset === 'claude-only' && ['axstack-advisor-astra', 'axstack-arena-judge-astra', 'axstack-research-web-google', 'axstack-research-x'].includes(role.id))
+    (preset === 'mixed' && role.id === 'axstack-arena-candidate-grok' && role.provider === 'grok') ||
+    (preset === 'mixed' && role.id === 'axstack-arena-candidate-antigravity' && role.provider === 'antigravity') ||
+    (preset === 'codex-only' && ['axstack-advisor-opus', 'axstack-escalation-fable', 'axstack-arena-judge-opus', 'axstack-research-web-google', 'axstack-research-x', 'axstack-arena-candidate-grok', 'axstack-arena-candidate-antigravity'].includes(role.id)) ||
+    (preset === 'claude-only' && ['axstack-advisor-astra', 'axstack-arena-judge-astra', 'axstack-research-web-google', 'axstack-research-x', 'axstack-arena-candidate-grok', 'axstack-arena-candidate-antigravity'].includes(role.id))
   );
   for (const role of roles) {
     if (!bounds.has(role.provider)) {