chainlesschain 0.166.140 → 0.166.142

package/README.md

@@ -2,25 +2,64 @@
 
 Command-line interface for installing, configuring, and managing [ChainlessChain](https://www.chainlesschain.com), including the coding agent, governed tools, sessions, memory, and IDE integrations.
 
+## CLI 0.166.142 / authorized goal events and history
+
+Release pairing: Session Core **0.3.25**, CLI **0.166.142**, Open VSX **0.37.178**
+and JetBrains **0.4.195**. This adds authorized goal observation, transactional
+retained history, durable replay checkpoints, explicit recovery in both IDEs and
+the data-only `project-delivery-assistant` 0.2.0 scenario. Separate desktop consent
+and native confirmation remain required; replay is at least once and does not
+prove business completion. Real GUI/business-effect evaluation remains separate.
+
+Publication requires exact-source three-OS CLI CI / Strict Sandbox and OIDC.
+Publish and verify Session Core first, then CLI, then IDE extensions. After public
+verification install `npm i -g chainlesschain@0.166.142 --registry https://registry.npmjs.org`.
+PC/mobile releases follow the verified IDE stage. The block below retains the
+previous verified public pairing.
+
+<!-- release141-current:start -->
+
+## CLI 0.166.141 / verified public pairing
+
+CLI **0.166.141** is public through GitHub Actions OIDC. Open VSX **0.37.177** and JetBrains **0.4.194** are public and both recommend CLI **0.166.141**. CLI public bytes, signed provenance, registry-only `--ignore-scripts` installation and the Agent capability startup probe passed. Both public IDE payloads match their official builds.
+
+Exact release source：`df9295e33ad04aec0aa74cab4dd242766d5556a4`。CLI CI **76/76** / Strict Sandbox **6/6** passed across Linux, Windows and macOS.
+
+This release preserves valid spread expressions in complete source previews, keeps read recovery actionable, and shares launcher-owned exact file scope across CLI and IDE evaluations. The diagnostic broker rejects a formal budget scope before reading options. Existing interactive permissions, IDE protocol and finite diagnostic limits remain.
+
+Install `npm i -g chainlesschain@0.166.141 --registry https://registry.npmjs.org`; restart CLI / IDE chat hosts, then run `cc --version` and `cc doctor`.
+
+No additional model-task retests were run. Volcengine corrected .140 round: generation **39/45**, strict acceptance **24/45**; historical automatic-deliverable union **36/45**, with **9** remaining and the verify-06 candidate-only qualification preserved. Sol original frozen-project history **41/45**, cross-version coverage including repaired sources **45/45**, and the separate .140 repaired-project four-case result **2/4** retain distinct scopes.
+
+[Publication evidence](../../docs/research/cli/evidence/release141-public/README.md) · [45-task ledger](../../docs/research/cli/verify01-36-plus-9-task-list.md)
+
+SDK **0.2.17**, Protocol **0.1.12**, Kernel **0.1.11** and child npm versions are unchanged; public child bytes and dependency installation were verified before CLI publication. PC/mobile **v5.0.3.144** remain independent. Microsoft Marketplace is deferred. NOT_PAID_READY / NOT_ADMITTED / HOLD remain.
+
+<!-- release141-current:end -->
+
 <!-- release140-pairing:start -->
 
 ## CLI 0.166.140 / rejected tool argument recovery
 
-This package is CLI **0.166.140**, paired with Open VSX **0.37.176** and JetBrains **0.4.193**. Install `npm i -g chainlesschain@0.166.140 --registry https://registry.npmjs.org`, restart the CLI and IDE chat hosts, then check `cc --version` and `cc doctor`.
+As checked at **2026-11-03T11:42:31.329Z**, CLI **0.166.140** is verified public through [GitHub Actions OIDC](https://github.com/chainlesschain/chainlesschain/actions/runs/41610020835) from exact source `e2a91bf54332ff3d252c40ecc25c5887e0f0430d`. Public npm bytes, signed provenance, installation and startup have been verified. The same source passed every configured Linux, Windows and macOS CLI CI / CLI Strict Sandbox job.
 
-Malformed provider tool arguments are rejected before tool execution. A uniquely paired pre-execution rejection produces a model-only placeholder so the next turn can continue through strict self-evolution projection. Legacy run_code snapshot rejections can resume without replaying the rejected call; original durable history stays unchanged. Valid object arguments, duplicate-key rejection, nested JSON checks, redaction and decoding budgets retain their existing boundaries.
+Open VSX **0.37.176** is public, listed and downloadable; its VSIX matches the official build byte for byte. JetBrains **0.4.193** has been uploaded and awaits Marketplace review or public indexing; public availability has not been verified. The previously verified public JetBrains release remains **0.4.192**, whose recommendation is CLI **0.166.139**. Both new IDE versions recommend CLI **0.166.140**.
 
-Publication uses GitHub Actions OIDC after the exact release commit passes CLI CI and CLI Strict Sandbox on every configured Linux, Windows and macOS runner. IDE publication follows verified public CLI installation and its own exact-source host gates. JetBrains upload, Marketplace approval and public availability are reported separately.
+[Publication and channel receipts](../../docs/research/cli/evidence/release140-public/publication-readback.json) · [Exact-source gates](../../docs/research/cli/evidence/release140-public/gates.json) · [CLI public readback](../../docs/research/cli/evidence/release140-public/cli.json) · [Open VSX readback](../../docs/research/cli/evidence/release140-public/open-vsx.json) · [JetBrains status](../../docs/research/cli/evidence/release140-public/jetbrains.json)
 
-The focused Windows checks passed 129 tests. Two bounded real Volcengine recovery scenarios passed through the installed runtime with five physical requests and 6,401 tokens; the first scenario explicitly injected the exact logged malformed argument into one inbound model response. These results cover this recovery defect and do not rescore historical model-task acceptance. SDK 0.2.17, Protocol 0.1.12, Kernel 0.1.11 and the other child packages retain their published versions. Microsoft Marketplace and the independent PC/mobile product release are outside this patch.
+Install `npm i -g chainlesschain@0.166.140 --registry https://registry.npmjs.org`, restart the CLI and IDE chat hosts, then run `cc --version` and `cc doctor`.
 
-[Focused live recovery evidence](../../docs/research/cli/evidence/tool-argument-recovery-20261103/live-volcengine.json).
+Malformed provider tool arguments are rejected before tool execution. A uniquely paired pre-execution rejection produces a model-only placeholder so the next turn can continue through strict self-evolution projection. Legacy run_code snapshot rejections can resume without replaying the rejected call; original durable history stays unchanged. Valid object arguments, duplicate-key rejection, nested JSON checks, redaction and decoding budgets retain their existing boundaries.
+
+Agent projection v10 also prevents genuine image and reasoning transport SHA-256 digests from being mistaken for phone numbers. Only authenticated protocol metadata uses the scan view; the original digest and byte-length restoration binding is unchanged. Real phone numbers, user-supplied digest-like text and forged markers retain their existing checks, and v1–v9 historical rules are preserved.
 
-Agent projection v10 also prevents genuine image and reasoning transport SHA-256 digests from being mistaken for phone numbers. Only authenticated protocol metadata uses the scan view; the original digest and byte-length restoration binding is unchanged. Real phone numbers, user-supplied digest-like text and forged markers retain their existing checks, and v1-v9 historical rules are preserved.
+The focused Windows checks passed **129 tests**. The earlier v9 recovery check used **five real Volcengine requests and 6,401 tokens**; its first scenario explicitly injected the exact logged malformed argument into one inbound model response. [Original scoped evidence](../../docs/research/cli/evidence/tool-argument-recovery-20261103/live-volcengine.json). The separate v10 check passed both recovery scenarios with **five real Volcengine requests and 6,501 tokens**, with runtime source hashes matching this release. [Additional scoped evidence](../../docs/research/cli/evidence/tool-argument-recovery-20261103/live-volcengine-v10.json). The complete related projector/agent-model tests passed **393/393**. These runs remain separate and add no historical model-task acceptance.
 
-The v10 candidate passed both recovery scenarios again with **five real Volcengine requests and 6,501 tokens**, using runtime source hashes matching this candidate. See the [additional live evidence](https://github.com/chainlesschain/chainlesschain/blob/main/docs/research/cli/evidence/tool-argument-recovery-20261103/live-volcengine-v10.json).
+Earlier candidate `eb0fe7a8a1` failed at the Windows ArtifactStore post-index integrity guard, then passed a complete three-OS loopback rerun. The exact rejected condition remains unresolved; the guard stays enforced. The [original failure](../../docs/research/cli/evidence/tool-argument-recovery-20261103/windows-eb-trajectory-attempt1-failure.json) and [complete rerun](../../docs/research/cli/evidence/tool-argument-recovery-20261103/windows-eb-trajectory-attempt2-aggregate.json) retain their historical source scope. The final release source separately passed 100 loopback runs on each of three operating systems; these 300 structural-envelope-only runs are not paid-provider task acceptance or a replacement for CLI CI / Strict Sandbox. Local composition runs timed out on both the v10 source and the earlier baseline and are not counted as passing.
 
-Earlier candidate `eb0fe7a8a1` stopped at a Windows ArtifactStore post-index integrity guard, then passed a complete three-OS loopback rerun. The exact rejected condition remains unresolved, and the guard stays enforced. The [original failure](https://github.com/chainlesschain/chainlesschain/blob/main/docs/research/cli/evidence/tool-argument-recovery-20261103/windows-eb-trajectory-attempt1-failure.json) and [complete rerun](https://github.com/chainlesschain/chainlesschain/blob/main/docs/research/cli/evidence/tool-argument-recovery-20261103/windows-eb-trajectory-attempt2-aggregate.json) retain their historical source scope.
+Agent SDK **0.2.17**, Protocol **0.1.12**, Kernel **0.1.11** and the other child packages retain their published versions; required upstream packages were fetched and dependency alignment verified before CLI publication. Microsoft Marketplace remains deferred. PC/mobile **v5.0.3.144** is already public as an independent release; this CLI/IDE follow-up does not republish clients. Historical .138 **2/4**, .137 **0/5** and cumulative **41/45** retain separate scopes.
+
+Documentation reviewed against `main@d62866538c` on **2026-11-03**. The later read-recovery hint and Web Panel bundle fixes are outside the immutable CLI .140 release source. The .140 full 36+9 Volcengine campaign has no verified final score yet; the internal-output-limit adapter repair is tracked separately. Historical original-project **41/45**, .138 **2/4**, and Sol cross-revision coverage **45/45** (including repaired project sources) retain separate scopes. [Current design](../../docs/design/release-runtime-update-2026-11-03-140.md) · [Upgrade guide](https://docs.chainlesschain.com/chainlesschain/cli-ide-update-2026-11-03-140.html).
 
 <!-- release140-pairing:end -->
 
@@ -2696,6 +2735,105 @@ cc plugin consent goal-progress-viewer --scope project --grant --json
 cc goal panels <id> --plugin goal-progress-viewer --scope project
 ```
 
+The working tree also supports a bounded, explicitly started **standalone goal
+status observer**. This addition is unreleased; use the local CLI source:
+
+```bash
+node packages/cli/bin/chainlesschain.js plugin add packages/cli/src/lib/plugin-runtime/examples/goal-status-observer --scope project --json
+node packages/cli/bin/chainlesschain.js plugin trust goal-status-observer --scope project
+node packages/cli/bin/chainlesschain.js plugin consent goal-status-observer --scope project --grant --json
+node packages/cli/bin/chainlesschain.js goal watch <id> --plugin goal-status-observer --scope project --expected-store <catalog-store-id> --interval 1000 --duration 60 --json
+```
+
+Run these commands from the repository root. `watch` prints a `ready` record,
+then newline-delimited JSON for observed `goal.status.changed` transitions.
+It polls every 1000 ms for 60 seconds by default (interval 250–60000 ms,
+duration 1–900 seconds). Ctrl+C stops it. Every poll rechecks plugin trust,
+consent and policy; revocation, uninstall or an invalid source stops the stream.
+Events contain status transitions and versioned goal references, without the
+objective or task body. This is polling with no history replay: intermediate
+transitions may be missed and timestamps describe observation time. A new run
+starts from the current state. Existing summary/evidence/draft connections grant
+no event access. IDE event UI still requires separate work.
+
+The working tree additionally supports a separately authorized **desktop event
+connection**. In the desktop goal connection panel choose the dedicated risk/action
+event authorization, approve the native dialog, and save a new private connection
+file. This exports v4 `goal.events`; it contains no goal objective and cannot be
+used for goal catalogs, panels or drafts. From the repository root:
+
+```bash
+node packages/cli/bin/chainlesschain.js plugin add packages/cli/src/lib/plugin-runtime/examples/goal-project-observer --scope project --json
+node packages/cli/bin/chainlesschain.js plugin trust goal-project-observer --scope project
+node packages/cli/bin/chainlesschain.js plugin consent goal-project-observer --scope project --grant --json
+node packages/cli/bin/chainlesschain.js goal watch <goal-id> --connection "<event-connection.json>" --plugin goal-project-observer --scope project --duration 60 --json
+```
+
+After `ready`, this observer emits `risk.review.completed` and
+`action.receipt.updated` summaries when new native evidence is observed. Baseline
+history is not replayed. Reads remain bounded to the latest persisted risk check
+and latest 20 receipts, so intermediate changes can be missed. Timestamps describe
+observation time, and neither a check nor an action receipt proves goal completion.
+Disconnect, logout, navigation, target revision, expiry or authorization changes
+stop the observer. Snapshot changes during projection also stop it; explicitly
+restart to observe the current state. The 15-minute connection and 512-read quota
+can end a watch before its requested duration. Cancellation interrupts pending HTTP.
+This source capability is unreleased and does not add durable event replay.
+
+Matching working-tree VS Code and JetBrains builds expose **Observe desktop
+events…** in the plugin manager. Select the admitted observer plugin, choose the
+v4 file with the native picker and enter the goal ID shown in the desktop. The
+IDE starts a fixed 60-second watch, validates the NDJSON target/plugin binding,
+and shows only the latest 50 plain text observations. **Stop and clear**, plugin
+operations, refresh or closing the manager stop the owned CLI process and reject
+late output. These entries need local matching builds; real IDE GUI acceptance
+and cross-platform release gates remain separate.
+
+The working tree separately supports **retained event replay**. The desktop's
+**另行授权保留的事件历史** button exports a v5 `goal.event-history` connection.
+v1–v4 grants are not expanded, and v5 does not grant catalogs, panels, live watch
+or draft submission. Use the admitted `goal-project-observer` sample above:
+
+```bash
+node packages/cli/bin/chainlesschain.js goal replay <goal-id> --connection "<history-connection.json>" --checkpoint "<new-or-existing-checkpoint.json>" --plugin goal-project-observer --scope project --json
+```
+
+Run the same command again with the same checkpoint to read the next page. Each
+page scans at most 20 retained events and stays within 16 KiB. The checkpoint
+contains only the target/plugin/declaration binding and opaque cursor, with no
+credentials or event bodies. The command holds a strict file lock, acknowledges
+stdout, rechecks current native and plugin access, then atomically advances it.
+Exit zero means the checkpoint committed. A crash after output but before commit
+can repeat the same event IDs: delivery is **at least once**, and stdout acceptance
+does not prove downstream consumption. A failed write or revoked access does not
+advance the old cursor; no automatic retry or reconnect runs.
+
+`--checkpoint-mode new` refuses an existing checkpoint; `--checkpoint-mode resume`
+requires the original file and never creates a replacement. The default `auto`
+keeps the existing create-or-resume CLI behavior. All modes check the binding
+and hold the same checkpoint lock through output and commit.
+
+The journal retains the newest 1000 events per actor/goal and starts with the new
+instrumentation; earlier checks, old-version writes and other execution paths are
+not backfilled. The first page reports `truncated` when older journal entries were
+evicted. An expired cursor reports `GOAL_EVENT_HISTORY_GAP`; a cursor ahead of a
+restored database reports `GOAL_EVENT_HISTORY_REGRESSED`. Neither is silently reset.
+After an explicit new desktop authorization, reconnect with the new connection
+file and the same checkpoint for the same active goal revision and plugin. Changed
+identity, goal revision/control generation or plugin declaration requires a new
+explicit checkpoint; an opaque cursor never grants access.
+
+Matching working-tree VS Code and JetBrains plugin managers expose **Recover
+retained history…**, with native v5 connection and new/resume checkpoint selection.
+**Read next page / check again** runs one explicit page. Results appear only after
+successful CLI exit and validation; cancellation clears continuation and warns
+that the checkpoint may already have advanced. Keep it and explicitly resume.
+The IDE never reads credentials or checkpoint bodies. Real GUI acceptance is pending.
+This unreleased change requires matching Session Core, CLI and desktop sources.
+Release the required child package first, verify
+the exact three-OS CLI gates and OIDC publication, then align downstream IDE/client
+releases; local replay tests are not a release gate.
+
 VS Code and JetBrains expose **CLI goal panels…** in the plugin manager. Select
 a goal from the native paged picker, or choose **Enter goal ID…**. The picker uses
 `goal catalog --json`; its opaque `nextCursor` continues with `--after <cursor>`.
@@ -2708,14 +2846,24 @@ the manual-ID path when catalog discovery is unavailable.
 
 Refresh or a new read checks current source and plugin authorization. Standalone
 goals provide objective/status snapshots. Historical project risk and receipt
-summaries require the separate desktop evidence connection below. The broader
-`project-delivery-assistant` example still requires a project host adapter.
+summaries require the separate desktop evidence connection below.
+
+The working-tree [`project-delivery-assistant` 0.2.0 scenario package](src/lib/plugin-runtime/examples/project-delivery-assistant/README.md)
+now combines those evidence panels, standalone status / native risk-receipt
+observations, retained replay and pending description drafts under one installed
+plugin. Install its directory, then explicitly trust it and consent to its full
+declared capability set. Each operation still needs the separate source/connection
+for that surface; an evidence connection cannot watch events or submit drafts.
+The same installed plugin works with both IDE plugin managers. Installation and
+reinstallation do not start an observer, retry or business action. Use matching
+local CLI/Desktop/Session Core sources; these additions are unreleased. The
+package does not yet offer task-creation proposals or automatic drafting.
 
 The working-tree SDK now shares its proposal contract with Session Core's native
 pending-draft queue. A trusted-host SQLite integration verifies source and
 admission checks, idempotency and revocation; the CLI still has no authenticated
 live project write entry. The desktop's separately consented built-in delivery
-draft rule is not an installed CLI plugin or the full `project-delivery-assistant`.
+draft rule is separate from the installed `project-delivery-assistant` scenario.
 The trusted desktop host can now explicitly convert a persisted draft into one
 native preview/intent, then use the existing native confirmation and receipt
 flow. Conversion IDs survive restart and lost responses; revocation blocks
@@ -2768,8 +2916,8 @@ not establish current risk or goal completion. Running actions remain unresolved
 The read path performs no initialization, recovery or usage settlement and
 exposes no task bodies, previews or approval evidence. Summary-only plugins
 cannot read evidence fields. Project writes and event subscriptions remain
-unavailable through either connection. The complete `project-delivery-assistant`
-example still requires those additional host capabilities.
+unavailable through either connection. The combined `project-delivery-assistant`
+uses separate v3 draft, v4 event and v5 replay authorization for those surfaces.
 
 The working tree also supports **request-file handoff** for task descriptions.
 Install the proposal-only example and explicitly trust/consent it:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "chainlesschain",
-  "version": "0.166.140",
+  "version": "0.166.142",
   "description": "CLI for ChainlessChain - install, configure, and manage your personal AI management system",
   "type": "module",
   "bin": {
@@ -108,7 +108,7 @@
     "@chainlesschain/core-mtc": "0.2.3",
     "@chainlesschain/core-multisig": "0.1.4",
     "@chainlesschain/personal-data-hub": "0.4.66",
-    "@chainlesschain/session-core": "0.3.24",
+    "@chainlesschain/session-core": "0.3.25",
     "@chainlesschain/shared-logger": "0.1.1",
     "@inquirer/prompts": "^7.2.0",
     "@noble/curves": "^1.9.7",

package/src/assets/linux-subreaper/linux-arm64/manifest.json

@@ -6,5 +6,5 @@
   "imageDigest": "sha256:6395a47a5bd9b038303e94a5e93754258c8480dab64635460f973eb93dc6f4d8",
   "bytes": 778808,
   "linkage": "static",
-  "commit": "e2a91bf54332ff3d252c40ecc25c5887e0f0430d"
+  "commit": "b78cf0af8c8b0491189465773b148ac77c332222"
 }

package/src/assets/linux-subreaper/linux-x64/manifest.json

@@ -6,5 +6,5 @@
   "imageDigest": "sha256:f162e55ad3f3f72f8a52e9d7f12b5b8db44506c2ca66a14d7d62d5cd4f12498e",
   "bytes": 934160,
   "linkage": "static",
-  "commit": "e2a91bf54332ff3d252c40ecc25c5887e0f0430d"
+  "commit": "b78cf0af8c8b0491189465773b148ac77c332222"
 }

package/src/command-help-index.json

@@ -64,7 +64,7 @@
     "fflag": "Usage: chainlesschain fflag [options] [command]\n\nFeature Flags V2 governance (in-memory, CLI v0.143.0)\n\nOptions:\n  -h, --help                      display help for command\n\nCommands:\n  enums-v2                        Show V2 maturity + lifecycle enums\n  register-profile-v2 [options]   Register a feature flag profile (pending)\n  activate-profile-v2 <id>        Transition profile to active\n  pause-profile-v2 <id>           Transition profile to paused\n  archive-profile-v2 <id>         Transition profile to archived (terminal)\n  touch-profile-v2 <id>           Refresh lastTouchedAt\n  get-profile-v2 <id>             Get a profile by id\n  list-profiles-v2                List all profiles\n  create-eval-v2 [options]        Create an eval (queued)\n  evaluating-eval-v2 <id>         Mark eval as evaluating\n  evaluate-eval-v2 <id>           Mark eval as evaluated (terminal)\n  fail-eval-v2 [options] <id>     Mark eval as failed (terminal)\n  cancel-eval-v2 [options] <id>   Mark eval as cancelled (terminal)\n  get-eval-v2 <id>                Get an eval by id\n  list-evals-v2                   List all evals\n  config-v2                       Show V2 config (caps + idle/stuck windows)\n  set-max-active-profiles-v2 <n>  Set max active profiles per owner\n  set-max-pending-evals-v2 <n>    Set max pending evals per profile\n  set-profile-idle-ms-v2 <ms>     Set profile idle window\n  set-eval-stuck-ms-v2 <ms>       Set eval stuck window\n  auto-pause-idle-v2              Auto-pause idle active profiles\n  auto-fail-stuck-v2              Auto-fail stuck evaluating evals\n  gov-stats-v2                    Show V2 governance stats\n  help [command]                  display help for command\n",
     "fusion": "Usage: chainlesschain fusion [options] [command]\n\nProtocol fusion & AI social (Phase 72-73)\n\nOptions:\n  -h, --help                                                     display help for command\n\nCommands:\n  protocols [options]                                            List supported protocols\n  quality-levels [options]                                       List quality levels\n  send [options]                                                 Send cross-protocol message\n  msg-show [options] <id>                                        Show message details\n  messages [options]                                             List unified messages\n  map-identity [options]                                         Create identity mapping\n  identity [options] <did>                                       Look up identity mapping by DID\n  identities [options]                                           List identity mappings\n  verify-identity [options] <id>                                 Verify an identity mapping\n  assess [options] <content>                                     Assess content quality\n  quality-show [options] <id>                                    Show quality score details\n  quality-scores [options]                                       List quality scores\n  quality-report [options]                                       Content quality report\n  translate [options] <text>                                     Translate text (simulated)\n  detect-lang [options] <text>                                   Detect language of text\n  translation-stats [options]                                    Translation cache statistics\n  stats [options]                                                Protocol fusion & AI social statistics\n  bridge-maturities-v2                                           List BRIDGE_MATURITY_V2 enum values\n  translation-runs-v2                                            List TRANSLATION_RUN_V2 enum values\n  max-active-bridges-per-operator                                Get current max-active-bridges-per-operator cap\n  set-max-active-bridges-per-operator <n>                        Set max-active-bridges-per-operator cap\n  max-running-translations-per-bridge                            Get current max-running-translations-per-bridge cap\n  set-max-running-translations-per-bridge <n>                    Set max-running-translations-per-bridge cap\n  bridge-idle-ms                                                 Get current bridge-idle-ms threshold\n  set-bridge-idle-ms <n>                                         Set bridge-idle-ms threshold\n  translation-stuck-ms                                           Get current translation-stuck-ms threshold\n  set-translation-stuck-ms <n>                                   Set translation-stuck-ms threshold\n  active-bridge-count [options]                                  Count non-retired, non-provisional bridges (optionally by operator)\n  running-translation-count [options]                            Count RUNNING translations (optionally by bridge)\n  register-bridge-v2 [options] <bridge-id>                       Register V2 bridge (provisional by default)\n  bridge-v2 <bridge-id>                                          Show V2 bridge state\n  list-bridges-v2 [options]                                      List V2 bridges\n  set-bridge-maturity-v2 [options] <bridge-id> <status>          Transition V2 bridge maturity\n  activate-bridge [options] <bridge-id>                          Shortcut for activate transition\n  degrade-bridge [options] <bridge-id>                           Shortcut for degrade transition\n  deprecate-bridge [options] <bridge-id>                         Shortcut for deprecate transition\n  retire-bridge [options] <bridge-id>                            Shortcut for retire transition\n  touch-bridge-usage <bridge-id>                                 Mark V2 bridge as used now (for idle auto-retire)\n  enqueue-translation-v2 [options] <translation-id>              Enqueue a V2 translation run\n  translation-v2 <translation-id>                                Show V2 translation state\n  list-translations-v2 [options]                                 List V2 translations\n  set-translation-status-v2 [options] <translation-id> <status>  Transition V2 translation status\n  start-translation [options] <translation-id>                   Shortcut for start transition\n  succeed-translation [options] <translation-id>                 Shortcut for succeed transition\n  fail-translation [options] <translation-id>                    Shortcut for fail transition\n  cancel-translation [options] <translation-id>                  Shortcut for cancel transition\n  auto-retire-idle-bridges                                       Bulk-retire ACTIVE/DEGRADED/DEPRECATED bridges whose lastUsedAt is older than bridgeIdleMs\n  auto-fail-stuck-running-translations                           Bulk-fail RUNNING translations whose startedAt is older than translationStuckMs\n  stats-v2                                                       Show V2 stats with all-enum zero-initialized counters\n  help [command]                                                 display help for command\n",
     "git": "Usage: chainlesschain git [options] [command]\n\nGit integration for knowledge base versioning\n\nOptions:\n  -h, --help                       display help for command\n\nCommands:\n  gitlab-mr [options] <reference>  Render a local GitLab MR/worktree footer (no\n                                   network I/O)\n  status [options]                 Show git status of the knowledge base\n                                   directory\n  init [options]                   Initialize a git repository\n  auto-commit [options]            Auto-commit all changes with a generated\n                                   message\n  hooks [options]                  Install git hooks for the knowledge base\n  history-analyze [options]        Analyze repository history and statistics\n  enums-v2 [options]               List Git V2 enums\n  config-set-v2 [options]          Set Git V2 caps/thresholds\n  register-repo-v2 [options] <id>  Register Git V2 repo\n  activate-repo-v2 <id>            Activate Git V2 repo\n  archive-repo-v2 <id>             Archive Git V2 repo\n  decommission-repo-v2 <id>        Decommission Git V2 repo\n  touch-repo-v2 <id>               Touch Git V2 repo\n  get-repo-v2 [options] <id>       Get Git V2 repo\n  list-repos-v2 [options]          List Git V2 repos\n  create-commit-v2 [options] <id>  Create Git V2 commit\n  start-commit-v2 <id>             Start Git V2 commit\n  commit-commit-v2 <id>            Commit Git V2 commit\n  fail-commit-v2 [options] <id>    Fail Git V2 commit\n  cancel-commit-v2 [options] <id>  Cancel Git V2 commit\n  get-commit-v2 <id>               Get Git V2 commit\n  list-commits-v2                  List Git V2 commits\n  auto-archive-repos-v2            Auto-archive idle Git V2 repos\n  auto-fail-commits-v2             Auto-fail stuck Git V2 commits\n  gov-stats-v2 [options]           Git V2 governance stats\n  help [command]                   display help for command\n",
-    "goal": "Usage: chainlesschain goal [options] [command]\n\nCross-session persistent goals / OKRs\n\nOptions:\n  -h, --help                         display help for command\n\nCommands:\n  set|add [options] <objective>      Create a goal with an objective (and\n                                     optional key results)\n  list|ls [options]                  List goals (newest first)\n  show [options] <id>                Show a goal in full\n  catalog [options]                  Read a bounded page of standalone goal\n                                     metadata for selection\n  panels [options] <id>              Read authorized extension panels for a\n                                     standalone CLI goal\n  draft-request [options] <id>       Export an untrusted description request\n                                     for explicit desktop adoption\n  draft-access [options]             Export a plugin label for separate native\n                                     pending-draft authorization\n  draft-sources [options] <id>       Read current source IDs under a v3\n                                     pending-draft connection\n  draft-send [options] <id>          Save one pending suggestion with a durable\n                                     submission reference\n  draft-receipt [options] <id>       Reconcile a recorded submission without\n                                     resending it\n  kr                                 Manage key results\n  progress [options] <id>            Record progress: set a percentage and/or\n                                     append a note\n  link [options] <id> [sessionId]    Attach a session to a goal (defaults to\n                                     the latest session)\n  unlink [options] <id> [sessionId]  Detach a session from a goal\n  pause [options] <id>               Mark a goal paused\n  resume [options] <id>              Mark a goal resumed\n  close [options] <id>               Mark a goal closed (done)\n  abandon [options] <id>             Mark a goal abandoned\n  rm|delete [options] <id>           Delete a goal\n  active [options]                   Show the goal that would bind to a run\n                                     (resolution order)\n  help [command]                     display help for command\n",
+    "goal": "Usage: chainlesschain goal [options] [command]\n\nCross-session persistent goals / OKRs\n\nOptions:\n  -h, --help                         display help for command\n\nCommands:\n  set|add [options] <objective>      Create a goal with an objective (and\n                                     optional key results)\n  list|ls [options]                  List goals (newest first)\n  show [options] <id>                Show a goal in full\n  catalog [options]                  Read a bounded page of standalone goal\n                                     metadata for selection\n  panels [options] <id>              Read authorized extension panels for a\n                                     standalone CLI goal\n  replay [options] <id>              Read one retained event-history page and\n                                     checkpoint acknowledged output\n  watch [options] <id>               Observe authorized goal changes for a\n                                     bounded time\n  draft-request [options] <id>       Export an untrusted description request\n                                     for explicit desktop adoption\n  draft-access [options]             Export a plugin label for separate native\n                                     pending-draft authorization\n  draft-sources [options] <id>       Read current source IDs under a v3\n                                     pending-draft connection\n  draft-send [options] <id>          Save one pending suggestion with a durable\n                                     submission reference\n  draft-receipt [options] <id>       Reconcile a recorded submission without\n                                     resending it\n  kr                                 Manage key results\n  progress [options] <id>            Record progress: set a percentage and/or\n                                     append a note\n  link [options] <id> [sessionId]    Attach a session to a goal (defaults to\n                                     the latest session)\n  unlink [options] <id> [sessionId]  Detach a session from a goal\n  pause [options] <id>               Mark a goal paused\n  resume [options] <id>              Mark a goal resumed\n  close [options] <id>               Mark a goal closed (done)\n  abandon [options] <id>             Mark a goal abandoned\n  rm|delete [options] <id>           Delete a goal\n  active [options]                   Show the goal that would bind to a run\n                                     (resolution order)\n  help [command]                     display help for command\n",
     "governance": "Usage: chainlesschain governance [options] [command]\n\nCommunity governance — proposals, voting, impact analysis, prediction\n\nOptions:\n  -h, --help                                                   display help for command\n\nCommands:\n  types [options]                                              List proposal types\n  statuses [options]                                           List proposal statuses\n  impact-levels [options]                                      List impact levels\n  create [options] <title>                                     Create a governance proposal (starts as draft)\n  list [options]                                               List proposals\n  show [options] <proposal-id>                                 Show proposal details\n  activate [options] <proposal-id>                             Activate a draft proposal for voting\n  close [options] <proposal-id>                                Close voting — auto-resolves to passed/rejected\n  expire <proposal-id>                                         Mark a draft/active proposal as expired\n  vote [options] <proposal-id> <voter-did> <yes|no|abstain>    Cast a vote (replaces any prior vote by same voter)\n  votes [options] <proposal-id>                                List votes for a proposal\n  tally [options] <proposal-id>                                Show vote tally with quorum/threshold check\n  analyze [options] <proposal-id>                              Run heuristic impact analysis on a proposal\n  predict [options] <proposal-id>                              Predict voting outcome (heuristic or vote-based)\n  stats [options]                                              Governance statistics\n  proposer-maturities-v2 [options]                             List proposer V2 maturity states\n  delegation-lifecycles-v2 [options]                           List delegation V2 lifecycle states\n  default-max-active-proposers-per-realm                       Default per-realm active proposer cap\n  max-active-proposers-per-realm                               Current per-realm active proposer cap\n  set-max-active-proposers-per-realm <n>                       Set per-realm active proposer cap\n  default-max-active-delegations-per-delegator                 Default per-delegator active delegation cap\n  max-active-delegations-per-delegator                         Current per-delegator active delegation cap\n  set-max-active-delegations-per-delegator <n>                 Set per-delegator active delegation cap\n  default-proposer-idle-ms                                     Default proposer idle window (ms)\n  proposer-idle-ms                                             Current proposer idle window (ms)\n  set-proposer-idle-ms <ms>                                    Set proposer idle window (ms)\n  default-pending-delegation-ms                                Default pending delegation window (ms)\n  pending-delegation-ms                                        Current pending delegation window (ms)\n  set-pending-delegation-ms <ms>                               Set pending delegation window (ms)\n  active-proposer-count [options]                              Count active V2 proposers (scope by realm)\n  active-delegation-count [options]                            Count active V2 delegations (scope by delegator)\n  register-proposer-v2 [options] <proposer-id>                 Register a V2 proposer\n  proposer-v2 <proposer-id>                                    Get V2 proposer record\n  set-proposer-maturity-v2 [options] <proposer-id> <status>    Set proposer V2 maturity status\n  activate-proposer [options] <proposer-id>                    Activate V2 proposer\n  suspend-proposer [options] <proposer-id>                     Suspend V2 proposer\n  retire-proposer [options] <proposer-id>                      Retire V2 proposer (terminal)\n  touch-proposer-activity <proposer-id>                        Touch V2 proposer lastActivityAt\n  create-delegation-v2 [options] <delegation-id>               Create V2 vote delegation\n  delegation-v2 <delegation-id>                                Get V2 delegation record\n  set-delegation-status-v2 [options] <delegation-id> <status>  Set delegation V2 status\n  activate-delegation [options] <delegation-id>                Activate V2 delegation\n  revoke-delegation [options] <delegation-id>                  Revoke V2 delegation (terminal)\n  expire-delegation [options] <delegation-id>                  Expire V2 delegation (terminal)\n  auto-retire-idle-proposers                                   Auto-retire active/suspended proposers past idle window\n  auto-expire-stale-pending-delegations                        Auto-expire pending delegations past window\n  stats-v2                                                     V2 governance statistics\n  help [command]                                               display help for command\n",
     "hardening": "Usage: chainlesschain hardening [options] [command]\n\nSecurity hardening — baselines, audits, regression detection\n\nOptions:\n  -h, --help                                               display help for command\n\nCommands:\n  baseline                                                 Performance baseline management\n  audit                                                    Security audit management\n  config-check [options] <config-path>                     Audit a config file (presence, required keys, placeholders)\n  deploy-check [options]                                   Evaluate the 6-item production-deployment checklist\n  audit-statuses-v2 [options]                              List V2 audit lifecycle statuses\n  baseline-statuses-v2 [options]                           List V2 baseline lifecycle statuses\n  severities-v2 [options]                                  List V2 severity buckets\n  default-max-concurrent-audits [options]                  Default concurrent audit cap\n  max-concurrent-audits [options]                          Current concurrent audit cap\n  set-max-concurrent-audits [options] <n>                  Set concurrent audit cap\n  default-baseline-retention-ms [options]                  Default baseline retention in ms\n  baseline-retention-ms [options]                          Current baseline retention in ms\n  set-baseline-retention-ms [options] <ms>                 Set baseline retention in ms\n  default-audit-timeout-ms [options]                       Default audit timeout in ms\n  audit-timeout-ms [options]                               Current audit timeout in ms\n  set-audit-timeout-ms [options] <ms>                      Set audit timeout in ms\n  running-audit-count [options]                            Number of currently RUNNING audits\n  register-audit-v2 [options] <name>                       Register a V2 audit entry (PENDING)\n  start-audit [options] <audit-id>                         Start a PENDING audit (enforces concurrency cap)\n  complete-audit [options] <audit-id>                      Complete a RUNNING audit\n  set-audit-status-v2 [options] <audit-id> <status>        Transition audit to a new status\n  audit-status-v2 [options] <audit-id>                     Get V2 audit status\n  auto-timeout-audits [options]                            Bulk-fail RUNNING audits past auditTimeoutMs\n  create-baseline-v2 [options] <name>                      Create a V2 baseline (DRAFT)\n  activate-baseline [options] <baseline-id>                Activate a DRAFT baseline (supersedes previous ACTIVE)\n  set-baseline-status-v2 [options] <baseline-id> <status>  Transition baseline to a new status\n  baseline-status-v2 [options] <baseline-id>               Get V2 baseline status\n  auto-archive-stale-baselines [options]                   Bulk-archive SUPERSEDED baselines past retention\n  stats-v2 [options]                                       V2 hardening statistics\n  help [command]                                           display help for command\n",
     "hmemory": "Usage: chainlesschain hmemory [options] [command]\n\nHierarchical Memory 2.0 — four-layer memory system\n\nOptions:\n  -h, --help                                   display help for command\n\nCommands:\n  store [options] <content>                    Store a memory at the appropriate layer\n  recall [options] <query>                     Recall memories with forgetting curve\n  consolidate                                  Promote and forget memories across layers\n  search [options] <query>                     Search memories by type\n  stats [options]                              Show memory statistics\n  share [options] <id> <agent-id>              Share a memory with another agent\n  prune [options]                              Remove weak old memories\n  layers [options]                             List MEMORY_LAYER enum values\n  types [options]                              List MEMORY_TYPE enum values\n  statuses [options]                           List CONSOLIDATION_STATUS enum values\n  permissions [options]                        List SHARE_PERMISSION enum values\n  attach-metadata [options] <id>               Attach V2 metadata (scene/context/concepts) to a memory\n  promote-v2 [options] <id>                    Promote memory one layer up (working→short-term→long-term)\n  demote-v2 [options] <id>                     Demote memory one layer down (short-term → working)\n  share-v2 [options] <id> <target>             Share a memory with permissions (read,copy,modify)\n  revoke-share [options] <shareId>             Revoke a sharing record\n  shares [options]                             List V2 sharing records\n  search-episodic-v2 [options] [query]         Search episodic memories with time/scene/context filters\n  search-semantic-v2 [options] [query]         Search semantic memories with concept similarity\n  consolidate-v2 [options]                     Run V2 consolidation with status tracking\n  consolidations [options]                     List V2 consolidation run history\n  prune-v2 [options]                           Layer-scoped prune with custom threshold\n  stats-v2 [options]                           Extended V2 stats with per-layer + consolidation + shares\n  enums-v2                                     Show V2 enums (tier maturity + promotion lifecycle)\n  config-v2                                    Show V2 config thresholds\n  set-max-active-tiers-v2 <n>                  Set max active tiers per owner\n  set-max-pending-promotions-v2 <n>            Set max pending promotions per tier\n  set-tier-idle-ms-v2 <n>                      Set tier idle threshold (ms)\n  set-promotion-stuck-ms-v2 <n>                Set promotion stuck threshold (ms)\n  register-tier-v2 [options] <id> <owner>      Register V2 memory tier\n  activate-tier-v2 <id>                        Activate tier\n  dormant-tier-v2 <id>                         Mark tier dormant\n  retire-tier-v2 <id>                          Retire tier (terminal)\n  touch-tier-v2 <id>                           Touch tier lastTouchedAt\n  get-tier-v2 <id>                             Get V2 tier\n  list-tiers-v2                                List all V2 tiers\n  create-promotion-v2 [options] <id> <tierId>  Create V2 promotion (queued)\n  start-promotion-v2 <id>                      Start promotion (queued→promoting)\n  complete-promotion-v2 <id>                   Complete promotion (promoting→promoted)\n  fail-promotion-v2 <id> [reason]              Fail promotion\n  cancel-promotion-v2 <id> [reason]            Cancel promotion\n  get-promotion-v2 <id>                        Get V2 promotion\n  list-promotions-v2                           List all V2 promotions\n  auto-dormant-idle-v2                         Auto-dormant idle active tiers\n  auto-fail-stuck-v2                           Auto-fail stuck promoting promotions\n  gov-stats-v2                                 V2 governance aggregate stats\n  help [command]                               display help for command\n",

package/src/commands/goal.js

@@ -286,6 +286,167 @@ export function registerGoalCommand(program) {
       }
     });
 
+  goal
+    .command("replay <id>")
+    .description(
+      "Read one retained event-history page and checkpoint acknowledged output",
+    )
+    .requiredOption(
+      "--connection <file>",
+      "Select a separately authorized v5 history connection",
+    )
+    .requiredOption(
+      "--checkpoint <file>",
+      "New or existing body-free event checkpoint",
+    )
+    .requiredOption("--plugin <name>", "Select the admitted event observer")
+    .option(
+      "--checkpoint-mode <mode>",
+      "auto|new|resume; new refuses existing files, resume requires one",
+      "auto",
+    )
+    .requiredOption(
+      "--scope <scope>",
+      "Select its user, project or local install scope",
+    )
+    .option(
+      "--expected-store <storeId>",
+      "Require the selected native goal store",
+    )
+    .option(
+      "--json",
+      "Output one bounded page as JSON; exit zero means checkpoint committed",
+    )
+    .action(async (id, options) => {
+      const controller = new AbortController(),
+        stop = () => controller.abort();
+      process.on("SIGINT", stop);
+      process.on("SIGTERM", stop);
+      const selection = {
+        connection: options.connection,
+        checkpoint: options.checkpoint,
+        checkpointMode: options.checkpointMode,
+        plugin: options.plugin,
+        scope: options.scope,
+        expectedStore: options.expectedStore,
+        signal: controller.signal,
+      };
+      const json = options.json;
+      try {
+        const { replayCliGoalEvents } = await import(
+          "../lib/plugin-runtime/cli-goal-event-history.js"
+        );
+        await replayCliGoalEvents(id, selection, async (page) => {
+          const output = json
+            ? JSON.stringify(page) + "\n"
+            : stripVTControlCharacters(
+                [
+                  `Retained history for ${page.goalRef.id}; at-least-once delivery.`,
+                  ...(page.truncated
+                    ? ["Earlier history is outside the retention window."]
+                    : []),
+                  ...page.entries.map(
+                    (entry) =>
+                      `${entry.sequence} ${entry.recordedAt} ${entry.event.summary}`,
+                  ),
+                  page.hasMore
+                    ? "More retained events remain; run the same command with the same checkpoint."
+                    : "Reached this page's recorded watermark; this does not prove goal completion.",
+                ].join("\n") + "\n",
+              );
+          await new Promise((resolve, reject) => {
+            const abort = () => reject(new Error("GOAL_EVENT_REPLAY_ABORTED"));
+            controller.signal.addEventListener("abort", abort, { once: true });
+            if (controller.signal.aborted) {
+              controller.signal.removeEventListener("abort", abort);
+              abort();
+              return;
+            }
+            process.stdout.write(output, (error) => {
+              controller.signal.removeEventListener("abort", abort);
+              if (error) reject(error);
+              else resolve();
+            });
+          });
+          return true;
+        });
+      } catch (error) {
+        fail("replay", error);
+      } finally {
+        controller.abort();
+        process.removeListener("SIGINT", stop);
+        process.removeListener("SIGTERM", stop);
+      }
+    });
+
+  goal
+    .command("watch <id>")
+    .description("Observe authorized goal changes for a bounded time")
+    .requiredOption("--plugin <name>", "Select one installed event observer")
+    .option(
+      "--connection <file>",
+      "Use a separately authorized desktop event connection",
+    )
+    .option(
+      "--scope <scope>",
+      "Select its user, project or local install scope",
+    )
+    .option(
+      "--expected-store <storeId>",
+      "Require the store selected from goal catalog",
+    )
+    .option(
+      "--interval <ms>",
+      "Polling interval (250–60000 milliseconds)",
+      "1000",
+    )
+    .option("--duration <seconds>", "Stop after 1–900 seconds", "60")
+    .option(
+      "--json",
+      "Output ready and event records as newline-delimited JSON",
+    )
+    .action(async (id, options) => {
+      const controller = new AbortController();
+      const stop = () => controller.abort();
+      process.on("SIGINT", stop);
+      process.on("SIGTERM", stop);
+      try {
+        const selection = {
+          plugin: options.plugin,
+          scope: options.scope,
+          expectedStore: options.expectedStore,
+          connection: options.connection,
+          intervalMs: Number(options.interval),
+          durationMs: Number(options.duration) * 1000,
+          signal: controller.signal,
+        };
+        const json = options.json;
+        const watch =
+          selection.connection !== undefined
+            ? (await import("../lib/plugin-runtime/cli-project-goal-events.js"))
+                .watchCliProjectGoalEvents
+            : (await import("../lib/plugin-runtime/cli-goal-events.js"))
+                .watchCliGoalExtensionEvents;
+        for await (const record of watch(id, selection)) {
+          if (json) console.log(JSON.stringify(record));
+          else
+            logger.log(
+              stripVTControlCharacters(
+                record.kind === "ready"
+                  ? `Observing ${record.goalRef.id}; polling, no history replay. Ctrl+C to stop.`
+                  : `${record.observedAt} ${record.event.summary}`,
+              ),
+            );
+        }
+      } catch (err) {
+        fail("watch", err);
+      } finally {
+        controller.abort();
+        process.removeListener("SIGINT", stop);
+        process.removeListener("SIGTERM", stop);
+      }
+    });
+
   goal
     .command("draft-request <id>")
     .description(

package/src/data/changelog.json

@@ -1,6 +1,32 @@
 {
   "source": "CHANGELOG.md",
   "releases": [
+    {
+      "productVersion": null,
+      "cliVersion": "0.166.142",
+      "cliVersions": ["0.166.142"],
+      "date": "2026-11-05",
+      "title": "",
+      "sections": [
+        {
+          "heading": "Added - cc CLI 0.166.142: authorized goal events and retained recovery (candidate, 2026-11-05)",
+          "body": "- Add standalone status and separately authorized native risk/action observation, plus a transactional retained event journal in Session Core 0.3.25.\n- Add one-page CLI replay with durable new/resume checkpoints, at-least-once delivery, and explicit VS Code / JetBrains recovery controls.\n- Compose the data-only project-delivery-assistant 0.2.0 scenario with full declaration consent and per-operation capability limits; native confirmation remains separate from pending drafts.\n- Pair Open VSX 0.37.178 and JetBrains 0.4.195 only after the exact-source CLI matrices, OIDC publication and public package verification. Real GUI and business-effect acceptance remain separate."
+        }
+      ]
+    },
+    {
+      "productVersion": null,
+      "cliVersion": "0.166.141",
+      "cliVersions": ["0.166.141"],
+      "date": "2026-11-04",
+      "title": "",
+      "sections": [
+        {
+          "heading": "Fixed - cc CLI 0.166.141: preserve complete source previews and evaluation entry scope (2026-11-04)",
+          "body": "- Preserve legitimate bounded source spread expressions in host-created read previews instead of omitting valid code. Keep strict JSON, sensitive-data and source-identity checks enforced.\n- Keep focused read recovery instructions actionable and retain the existing shared author/review turn budget.\n- Bind launcher-owned hermetic evaluation file scope consistently at the shared CLI/IDE agent loop, preserving caller narrowing and empty/read-only tool sets. Ordinary interactive permissions and the IDE protocol retain their existing behavior.\n- Reject diagnostic broker construction under a formal budget before reading its options, while preserving the existing finite diagnostic limits.\n- Pair with Open VSX 0.37.177 and JetBrains 0.4.194 after verified CLI publication. Child npm packages are unchanged; require their public-byte reuse checks and the complete exact-source CLI CI / Strict Sandbox matrices.\n- Preserve the recorded Volcengine full-round results and OpenAI four-case results. Engineering checks and publication add no model-task acceptance; already tested samples are not retested."
+        }
+      ]
+    },
     {
       "productVersion": null,
       "cliVersion": "0.166.140",

package/src/lib/evolution/evolution-artifact-ports.js

@@ -3131,11 +3131,74 @@ export class EvolutionArtifactPorts {
       createdAtMs < core.issuedAtMs ||
       !storeRetentionIsAdmissible
     ) {
-      throw artifactError(
+      const error = artifactError(
         EVOLUTION_ARTIFACT_INTEGRITY_FAILED_CODE,
         "ArtifactStore index entry is not exactly admissible for this envelope",
         { artifactId: id },
       );
+      // Diagnostic branch only: observe the already-rejected guard without
+      // retaining any entry values or changing its decision or original error.
+      try {
+        if (process.env.CC_R140_STORAGE_DIAGNOSTIC) {
+          const failures = [
+            ["file", file !== `${id}.json` || path.basename(file) !== file],
+            [
+              "title",
+              ownData(entry, "title", "ArtifactStore index entry") !==
+                `Evolution ${core.type} artifact`,
+            ],
+            [
+              "kind",
+              ownData(entry, "kind", "ArtifactStore index entry") !== "data",
+            ],
+            [
+              "mime",
+              ownData(entry, "mime", "ArtifactStore index entry") !==
+                "application/json",
+            ],
+            [
+              "size",
+              !Number.isSafeInteger(size) ||
+                size < 1 ||
+                size > EVOLUTION_ARTIFACT_MAX_CANONICAL_BYTES,
+            ],
+            [
+              "hash",
+              ownData(entry, "sha256", "ArtifactStore index entry") !==
+                core.recordDigest.slice("sha256:".length),
+            ],
+            [
+              "sourcePath",
+              ownData(entry, "sourcePath", "ArtifactStore index entry") !==
+                null,
+            ],
+            [
+              "sessionId",
+              ownData(entry, "sessionId", "ArtifactStore index entry") !== null,
+            ],
+            [
+              "immutable",
+              ownData(entry, "immutable", "ArtifactStore index entry") !== true,
+            ],
+            [
+              "recordDigest",
+              ownData(entry, "recordDigest", "ArtifactStore index entry") !==
+                core.recordDigest,
+            ],
+            ["expiry-order", storeExpiresAtMs <= createdAtMs],
+            ["created-before-issued", createdAtMs < core.issuedAtMs],
+            ["retention", !storeRetentionIsAdmissible],
+          ]
+            .filter(([, failed]) => failed)
+            .map(([label]) => label);
+          Object.defineProperty(error, "r140IndexFailures", {
+            value: Object.freeze(failures),
+          });
+        }
+      } catch {
+        // Observation must never replace the original rejection.
+      }
+      throw error;
     }
     const lineage = this.#validateLineage(
       ownData(entry, "lineage", "ArtifactStore index entry"),