baldart 5.3.0 → 5.3.1

package/CHANGELOG.md

@@ -5,6 +5,27 @@ All notable changes to BALDART will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [5.3.1] - 2026-07-03
+
+**AGENTS.md primitive 1.7.3 — anti-fabricated-policy guard on the grounding spawn.**
+A live Codex session on an up-to-date consumer (mayo) reconstructed the
+`codebase-architect PROFILE=ui` mandate correctly and then self-exempted by
+inventing a runtime constraint ("subagent tool disponibile ma policy runtime lo
+vieta senza delega esplicita") that exists nowhere — the only real Codex limit
+is `agents.max_depth: 1`, which forbids *nested* spawns from inside a subagent,
+never the top-level session. Recurrence of the 1.7.0/v4.98.0 misreading class:
+the AGENTS.md delegation rules inverted into "spawn only on explicit user
+delegation".
+
+- **Primitive `AGENTS.md` 1.7.3**: the grounding MUST now states in place that
+  **the mandate IS the delegation** — claiming a runtime policy requires prior
+  user delegation is named as non-compliant, and the degrade precondition is
+  tightened to "Task tool absent AND no
+  `.codex/agents/codebase-architect.toml`". Declaring the tool available and
+  degrading anyway is a protocol violation, not a fallback.
+- Codex parity: portable (the primitive is the cross-tool SSOT; the guard's
+  Codex branch cites the real `max_depth` semantics from `CODEX-AGENTS.md`).
+
 ## [5.3.0] - 2026-07-03
 
 **Haiku banned fleet-wide + FEAT-0067 post-mortem fixes.** The FEAT-0067 audit

package/VERSION

@@ -1 +1 @@
-5.3.0
+5.3.1

package/framework/templates/primitives/AGENTS.CHANGELOG.md

@@ -4,6 +4,22 @@ Formato: [Keep a Changelog](https://keepachangelog.com/) · [SemVer](https://sem
 Questo è il changelog INTERNO dello skeleton spedito (`primitive_version`), separato dal
 file `AGENTS.md` generato nel consumer e indipendente dal `VERSION` del framework.
 
+## 1.7.3 — 2026-07-03
+
+- **Anti-fabricated-policy guard: no runtime policy gates the `codebase-architect` spawn.**
+  A live Codex session (mayo, UP-TO-DATE install with 1.7.2) correctly reconstructed the
+  mandate ("Grounding obbligatorio via codebase-architect PROFILE=ui") and then self-exempted
+  by inventing a constraint — "subagent tool disponibile ma policy runtime lo vieta senza
+  delega esplicita" — a policy that exists nowhere (framework or Codex runtime; the only real
+  Codex limit is `agents.max_depth: 1`, which forbids *nested* spawns from inside a subagent,
+  never the top-level session). Same misreading class as 1.7.0's Claude/Codex asymmetry: the
+  AGENTS.md *delegation* rules ("MUST delegate Heavy implementation…") inverted into "I may
+  only spawn when the user explicitly delegates". The MUST now states in place that **the
+  mandate IS the delegation**, names the fabricated-policy claim as non-compliant, and
+  tightens the degrade precondition to "Task tool absent AND no
+  `.codex/agents/codebase-architect.toml`" — declaring the tool available and degrading anyway
+  is a protocol violation, not a fallback. Portable (Claude + Codex).
+
 ## 1.7.2 — 2026-07-02
 
 - **Negative guard: the understanding step is `codebase-architect`, NOT a generic search

package/framework/templates/primitives/AGENTS.md

@@ -1,4 +1,4 @@
-<!-- baldart-primitive: name=AGENTS primitive_version=1.7.2
+<!-- baldart-primitive: name=AGENTS primitive_version=1.7.3
      This is the SHIPPED SKELETON. The writer (src/utils/root-primitives.js) strips
      this banner, resolves every {{ slot }} / {{> partial }} / {{#flag}} from
      baldart.config.yml (+ package.json/README), merges .baldart/overlays/AGENTS.md,
@@ -43,7 +43,15 @@ mechanics — this file remains the single source of truth for the protocol.
   matching profile) — **NOT the generic built-in search / `general-purpose` agent**, which
   lacks the profile engine, Reuse Analysis, Canonical Evidence, and the Return Contract; that
   is the agent to invoke, not a generic explorer.
-  Only if NEITHER invocation mechanism exists, degrade explicitly to inline retrieval
+  **No runtime policy gates this spawn — this mandate IS the delegation.** Never claim the
+  spawn requires "explicit user delegation" or that a "runtime policy forbids it": no such
+  rule exists on Claude Code or Codex (Codex's `agents.max_depth: 1` only forbids a
+  *subagent* spawning further agents — it never applies to the top-level session, which is
+  where this rule fires). If the invocation mechanism is reachable, invoking it is the only
+  compliant move; declaring the tool available and then degrading anyway is a protocol
+  violation, not a fallback.
+  Only if NEITHER invocation mechanism exists (Task tool absent AND no
+  `.codex/agents/codebase-architect.toml`), degrade explicitly to inline retrieval
   (code-graph → LSP → Grep) and SAY SO.
 - MUST have any **Heavy** plan (see § Change Tiers) reviewed BEFORE presenting it for
   approval — run `plan-auditor` + `doc-reviewer` (in parallel), incorporate their feedback,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "baldart",
-  "version": "5.3.0",
+  "version": "5.3.1",
   "description": "Claude Agent Framework - Reusable framework for coordinating AI agents and humans in software projects",
   "bin": {
     "baldart": "./bin/baldart.js"