chati-dev 4.5.10 → 4.5.12

package/framework/manifest.json

@@ -1,5 +1,5 @@
 {
-  "createdAt": "2026-08-27T13:25:29.560Z",
+  "createdAt": "2026-08-27T15:44:26.707Z",
   "files": {
     "agents/build/dev.md": {
       "hash": "13c2b3855c1f815154a2f4020b99fd8ee71e701b41783f5f26696222720a1466",
@@ -17,8 +17,8 @@
       "type": "md"
     },
     "agents/discover/brownfield-wu.md": {
-      "hash": "b89e20408bdb0c672d6799507b0f9679c76df7f87f183f27b325070174ac490f",
-      "size": 18120,
+      "hash": "fed8f14838b00e867bc932a3c4c212e38d7dc7c8f2e4443eb3242d19e6e3a286",
+      "size": 18172,
       "type": "md"
     },
     "agents/discover/greenfield-wu.md": {
@@ -52,8 +52,8 @@
       "type": "md"
     },
     "agents/plan/tasks.md": {
-      "hash": "d6440ac7e7ecc9a24d89f39b1786e3cb218565a16b12ecba888e8899abe57b48",
-      "size": 28257,
+      "hash": "a42a321ca2834c20364edb663619d340ac29317b236820135f07013cae9a4a82",
+      "size": 27960,
       "type": "md"
     },
     "agents/plan/ux-brand-architect.md": {
@@ -97,18 +97,18 @@
       "type": "md"
     },
     "config.yaml": {
-      "hash": "8a10ab3b6db7806591d7168f6aee6332f417c612671177310d3ce6aefb2f51de",
+      "hash": "35917976892c5b3a929837f0193e6b08115c84134af233aba0c79f201688d193",
       "size": 2671,
       "type": "yaml"
     },
     "constitution.md": {
-      "hash": "8de0cc0151d38099ff91a3de763bd5766cffde0253acfe6f3179d992d2887079",
-      "size": 67409,
+      "hash": "5b617a789e63a198828398fb673dc8ae4d9ba28728ebcabb2eaa83dc21ab1402",
+      "size": 66739,
       "type": "md"
     },
     "context/governance.md": {
-      "hash": "bc39df23d48c2cbb005c8e062dfda53442a91f94ccc33f068e26f98d06fe412b",
-      "size": 6200,
+      "hash": "88b3a3463fc14a26459f3202bf939dc954392642e4ac20830429dffd0f209f1f",
+      "size": 6225,
       "type": "md"
     },
     "context/protocols.md": {
@@ -117,17 +117,17 @@
       "type": "md"
     },
     "context/quality.md": {
-      "hash": "43c417d43e47ab724aa559a5edfa476f555ff8a204fb116e9c2d7ceedb47f927",
-      "size": 1997,
+      "hash": "d6cb70d274425b4385a63bd67c217038de9c12992d973b16000b370442905022",
+      "size": 2247,
       "type": "md"
     },
     "context/root.md": {
-      "hash": "6bd0257d5c92c10733782ac68c0d1438571b68e2b162243c9494b0a912f6fe73",
+      "hash": "97f4f47c0ecb2499482401ee859512b30d9c39b53b85261c046145d4b8eeb0ae",
       "size": 1218,
       "type": "md"
     },
     "data/entity-registry.yaml": {
-      "hash": "e56261884e29b046f3c4b5f4d0a22b4fa27bceba17d669d0606ea0a25d3c8237",
+      "hash": "61a4cf5f7ad94b925182040befa609dc0ed8e0598f22118891337f225081667b",
       "size": 34606,
       "type": "yaml"
     },
@@ -212,8 +212,8 @@
       "type": "yaml"
     },
     "domains/constitution.yaml": {
-      "hash": "497b41ae7c45402ac43081c2081639fa2ac86619bd83d86452343fe6d68f39ed",
-      "size": 7037,
+      "hash": "9f609909b33b2fdd7514b4e4ce8b57c72b5618604376ef79dd1d79e4969dbb04",
+      "size": 7061,
       "type": "yaml"
     },
     "domains/global.yaml": {
@@ -227,33 +227,33 @@
       "type": "yaml"
     },
     "domains/workflows/brownfield-fullstack.yaml": {
-      "hash": "823e9533354ac6f38512f774fd32262c71eca164d3b476fa300c1eee8f37d77f",
-      "size": 625,
+      "hash": "bf4f10e0ffd41dea07f3115e8e5c47f5e9fbb1fd857c2afa778072356fae61f0",
+      "size": 742,
       "type": "yaml"
     },
     "domains/workflows/brownfield-service.yaml": {
-      "hash": "10510a573828173a984de9e1dd05d84784aab309e99ccf66589760b2cadce116",
-      "size": 437,
+      "hash": "b3edb0b8158cdcd08c519be5a52fe201e6934e32464dd06e6089b809908980f8",
+      "size": 417,
       "type": "yaml"
     },
     "domains/workflows/brownfield-ui.yaml": {
-      "hash": "900e19680cc39f368418c57636d613332499803a06a06d1010c537eadce18955",
-      "size": 431,
+      "hash": "0aa5ed4f052c0cc60cd6c43cda433fb657eea09e30d6c57f815b2c41b16e480d",
+      "size": 411,
       "type": "yaml"
     },
     "domains/workflows/greenfield-fullstack.yaml": {
-      "hash": "20dc8aed7141fbb56b3e2cdcdb86e06857cfb89e424f997695382d1e70776a0e",
-      "size": 688,
+      "hash": "bf7b9179f973bd0bf8b119137c86ed3c61ce58c89aa03c3dffebd663366b328c",
+      "size": 811,
       "type": "yaml"
     },
     "domains/workflows/quick-flow.yaml": {
-      "hash": "fcc65dadfb4559f7cece4759495306b4c1be44adf331163314c946bb7ea49587",
-      "size": 779,
+      "hash": "990eaf008e4b02a9d8c17eaab497309d9a4c34a0983eba7012e7d334a7b46e50",
+      "size": 802,
       "type": "yaml"
     },
     "domains/workflows/standard-flow.yaml": {
-      "hash": "e8b21aee685f7cc06f8be9e8e3b05e82e8632b2171b46b7811e5d11646c69b10",
-      "size": 1226,
+      "hash": "550186b773792428358acdf9ba3679d0643c26a354127709ea940fffdc6aff71",
+      "size": 1209,
       "type": "yaml"
     },
     "executors/json-validate.js": {
@@ -282,8 +282,8 @@
       "type": "yaml"
     },
     "frameworks/quality-dimensions.yaml": {
-      "hash": "6d042a08812d9ffaa3844462fdcaf95d898397d8e5d8cd4c6fe254e3a9bb5e27",
-      "size": 2016,
+      "hash": "5f95dbd59628ba24ae365f2db2b7169044481996616199b963644fed24d51810",
+      "size": 1993,
       "type": "yaml"
     },
     "hooks/advance-trigger.js": {
@@ -302,8 +302,8 @@
       "type": "js"
     },
     "hooks/git-push-authority.js": {
-      "hash": "5f4301a95a9b2ff252dbe2df0debccbbccdf6de7eb1ccec9c1a6015bf2353f6e",
-      "size": 4243,
+      "hash": "cb296129155464438b7f3f8834eb9d62674c34c0ef12ccba8769cd2938da97d8",
+      "size": 4666,
       "type": "js"
     },
     "hooks/license-guard.js": {
@@ -472,8 +472,8 @@
       "type": "md"
     },
     "orchestrator/chati.md": {
-      "hash": "8d55e3e354e7e7cf4d28ca3aba5372df0580ca3b191e2e14696363867eba567a",
-      "size": 45355,
+      "hash": "fbba2ec83ded49329dc33f674accb391cc290cd1687048967a49fc70fb62f3af",
+      "size": 46016,
       "type": "md"
     },
     "package.json": {
@@ -857,8 +857,8 @@
       "type": "json"
     },
     "schemas/session.schema.json": {
-      "hash": "57b0aa1b097b2253664a548cad42652ed3ec759feab6d0c1098062e88048cf1e",
-      "size": 19069,
+      "hash": "4745c6f9aa52f73e3353985e99aaa33f629cf73910b60fce7daaac4a075faf8f",
+      "size": 19191,
       "type": "json"
     },
     "schemas/task.schema.json": {
@@ -1322,35 +1322,35 @@
       "type": "yaml"
     },
     "workflows/brownfield-fullstack.yaml": {
-      "hash": "5496b91fd49e4cefd07f15b89fc2e7a9974fcc0559be5a5a4ce22c4c9b4ce52d",
-      "size": 4495,
+      "hash": "19e042bc1f94282e8f21e2767cacde075bfb82df7f65239eea60f022c6976437",
+      "size": 1780,
       "type": "yaml"
     },
     "workflows/brownfield-service.yaml": {
-      "hash": "57cb79885434fa6e885b3393327915b39f631dda9a8e4f389b0459449bc2060d",
-      "size": 3785,
+      "hash": "ad4872a81676ce6d9241547e5e044e7dd8cc1d934f98e595b151792f16e3146a",
+      "size": 1243,
       "type": "yaml"
     },
     "workflows/brownfield-ui.yaml": {
-      "hash": "8e757ae5f12931b0bd4f3f5399af1ba7af5893da83596331fab322083514cc96",
-      "size": 4144,
+      "hash": "e08767603486f3c97cb40815008eeac30698eec3a49573e1d8f5bf56e0310adb",
+      "size": 1289,
       "type": "yaml"
     },
     "workflows/greenfield-fullstack.yaml": {
-      "hash": "952e3eb5cdd133a753c40661d3f68eddf7d1bf23ea324626ed2260a3e88b49e2",
-      "size": 4949,
+      "hash": "2784adcb8ee79c6100e7e8d8e44af696b57f5f76fb6b475a24fd9012d2e8f2b5",
+      "size": 1788,
       "type": "yaml"
     },
     "workflows/quick-flow.yaml": {
-      "hash": "40c129b14b6d7d87d543653c25b4d37037a4f69c9abea1a97673d24f699da5f4",
-      "size": 4617,
+      "hash": "c47fa28ebeb2fdcf3abdd9ebcb6700fc42d09d10b5ce27cf78d4f0efe20d2df8",
+      "size": 1474,
       "type": "yaml"
     },
     "workflows/standard-flow.yaml": {
-      "hash": "136325ee0871063bbbdbd84a2017a90d7c418a5e153cfd080e7208baac5224f8",
-      "size": 5667,
+      "hash": "04351ab5e305117a582b322f681101bf315b73b9cba031489d65d291c1c02329",
+      "size": 1426,
       "type": "yaml"
     }
   },
-  "version": "4.5.10"
+  "version": "4.5.12"
 }

package/framework/manifest.sig

@@ -1 +1 @@
-IEfPaGbjqj36vXbd2ODiFxMhP6C9zd7GCMIkHitsiRCQ4nht3ymf69h9kXqnyGqMgrpiiFKs1Kn3/K0UzxJqAw==
+qw0VeF2Ymm1U0meAoVLpTkcRUKiPWmv1LhJvOo6GdZYWc81BUGLHW1uMWcI84SkVRsI4skriATd7rAi2h13kAQ==

package/framework/orchestrator/chati.md

@@ -65,7 +65,12 @@ When the user invokes `/chati`, execute this sequence:
 
 /chati providers:
   → Run: node .chati.dev/orchestrator/chati-router.js providers
-  → Display provider table and agent model assignments
+  → For v2, display three distinct blocks from JSON:
+     1. `planning_agent_models`, discovery and planning routing only
+     2. `rail_execution_pool`, eligible provider and model capabilities for task execution and review
+     3. `release_lane`, explicit authorization policy
+  → Never describe `dev`, `qa-implementation`, `qa-visual`, or `devops` as v2 pipeline agents
+  → Never infer that a provider with no planning agent assignment is unavailable to RAIL
   → Stay locked
 
 /chati resume:
@@ -75,7 +80,7 @@ When the user invokes `/chati`, execute this sequence:
   → Display:
      /chati              Start or resume session
      /chati status       Show project dashboard
-     /chati providers    List providers and agent models
+     /chati providers    Show planning routing and the RAIL execution pool
      /chati exit         Save and exit session
      /chati help         Show this help
   → Stay locked
@@ -319,7 +324,7 @@ returned `next` state. Do not treat it as an error.
 
 Planning phase agents (detail, architect, ux) run simultaneously.
 
-**NOTE (Article XXI):** When `features.agent_teams: true` in config.yaml, the orchestrator MUST attempt `spawn_team` FIRST for Planning Team (detail, architect, ux, qa-planning) and Build Team (dev, qa-implementation). Only fall back to `spawn_parallel` if team spawning is unavailable or fails. The CLI `orchestrate next` command handles this automatically - when teams are enabled, it returns `spawn_team` instead of `spawn_parallel`.
+**NOTE (Article XXI):** For v2, when `features.agent_teams: true` in config.yaml, the orchestrator MUST attempt `spawn_team` first for the Planning Team (detail, architect, ux, qa-planning). Only fall back to `spawn_parallel` if team spawning is unavailable or fails. After Tasks, RAIL owns execution and review. A Build Team is never formed in v2.
 
 1. Display naturally what is happening using user-facing language. Examples (pick one that fits the phase): "Working on the planning phase now." / "Reviewing the architecture and UX in parallel." NEVER say "spawning parallel group", "spawn_parallel", or list internal agent names like "detail, architect, ux".
 2. If `parallel_spawn_commands` is non-empty, execute every member's `command`
@@ -363,7 +368,7 @@ Parse the JSON response. Extract these values - you will need them in Step 2:
 
 If `fallback_required: true` → fall back silently to the "Action: Parallel Spawn" section. Do NOT display error messages.
 
-Display naturally what is happening. For Planning Team: "Working on the planning - designing the requirements, architecture, and user experience together." For Build Team: "Building this with continuous quality review." NEVER expose internal agent names.
+Display naturally what is happening: "Working on the planning, designing the requirements, architecture, and user experience together." Never expose internal agent names.
 
 ### MANDATORY Step 2: Spawn Teammates via Agent Tool
 
@@ -421,6 +426,7 @@ Agent tool call 4:
     Write your handoff to artifacts/handoffs/qa-planning-handoff.md when done.]
 ```
 
+<!-- CHATI_LEGACY_BUILD_START -->
 **Legacy compatibility only, installations without `.chati/v2/installation.json`: For Build Team** (BUILD phase) - Wave-Based Pipeline:
 
 For a v2 installation this section MUST NOT run. The `tasks` handoff returns
@@ -593,6 +599,8 @@ Before dissolving the team, verify both handoffs exist:
        STOP and return.]
 2. `artifacts/handoffs/qa-implementation-handoff.md` - should exist from Final QA Wave
 
+<!-- CHATI_LEGACY_BUILD_END -->
+
 ### Step 3: Collect Results
 
 When all Agent tool calls return:
@@ -700,9 +708,9 @@ The user is returning to an active session.
 
 ---
 
-## Action: User Preview
+## Action: User Preview (legacy runtime only)
 
-QA-Implementation passed. User must approve before deploy.
+This action is invalid when `.chati/v2/installation.json` exists. V2 preview evidence and external authorization belong to the RAIL Release Lane.
 
 1. Present QA results to user
 2. Options:
@@ -718,7 +726,7 @@ QA-Implementation passed. User must approve before deploy.
 
 ## Action: Complete
 
-Pipeline finished. Present final project summary. Run `orchestrate exit`.
+The RAIL Release Lane has completed or the legacy pipeline has finished. Present the final project summary. Run `orchestrate exit`.
 Congratulate the user.
 
 ---
@@ -862,12 +870,12 @@ interactive (default):
   → Agent-driven guided mode. Agent leads, user validates.
   → All 8 universal protocols apply.
 
-autonomous (Ralph Wiggum mode):
+autonomous:
   → Requires: most recent QA gate score >= 95% (Article XVII prerequisite).
   → If quality gate not met, inform user and suggest guided mode instead.
   → Agent executes without asking unless blocker encountered.
-  → Primarily for Dev agent during BUILD phase.
-  → QA gates always run regardless of mode.
+  → Primarily for dependency-ready RAIL tasks.
+  → Independent review and rework gates always run regardless of mode.
   → Activated by user request or orchestrator suggestion post-Brief.
 ```
 
@@ -906,12 +914,13 @@ discover/plan phase:
   BLOCK write to: everything else
   ALLOW read: everything
 
-build/validate phase:
+RAIL execution/review:
   ALLOW write to: everything
   ALLOW read: everything
 
-deploy phase:
-  ALLOW everything + infra operations
+Release Lane:
+  ALLOW evidence preparation
+  REQUIRE explicit human authorization before external action
 ```
 
 ### Backward Transitions
@@ -923,10 +932,10 @@ If QA finds spec or architecture issues:
 
 ### Root Layer Routing (Article XXII)
 
-When QA-Implementation classifies a fault via the Fault Vector Protocol:
+When the independent RAIL reviewer classifies a fault:
 - `INTENT` → escalate to user via deviation protocol (requirement is flawed)
 - `SPEC` → backward transition to Architect, UX, or Tasks agent
-- `CODE` → Dev agent silent correction loop (existing behavior)
+- `CODE` → bounded RAIL rework using the task's sealed execution binding
 - `DEFER` → add to session backlog, do not block approval
 
 ---
@@ -936,13 +945,13 @@ When QA-Implementation classifies a fault via the Fault Vector Protocol:
 ### EXCLUSIVE (only orchestrator)
 - Route messages to agents
 - Activate/deactivate agents
-- Execute mode transitions (planning → build → validate → deploy)
+- Execute mode transitions (discovery → planning → RAIL → Release Lane)
 - Manage session lock (activate/deactivate)
 - Handle deviations and re-routing
 - Manage backlog items
 - Spawn parallel terminals
 - Decide execution mode (interactive vs autonomous)
-- Form and dissolve Agent Teams (Team Lead role, Article XXI)
+- Form and dissolve the Planning Team (Team Lead role, Article XXI)
 - Monitor shared task list and mailbox during team execution
 - Detect and respond to echo events within teams (Article XXII)
 - Route corrections to correct layer via Root Layer Routing (Article XXII)
@@ -955,11 +964,11 @@ When QA-Implementation classifies a fault via the Fault Vector Protocol:
 - Generate session digests
 
 ### BLOCKED (never do this - redirect instead)
-- Write code or implementation files → route to dev
+- Write code or implementation files outside RAIL → route through the sealed RAIL task
 - Write specification documents → route to detail
 - Make architectural decisions → route to architect
-- Write tests → route to dev
-- Deploy or configure infrastructure → route to devops
+- Write tests outside RAIL → route through the sealed RAIL task
+- Deploy or configure infrastructure directly → route to the Release Lane authorization gate
 - Modify constitution or config files
 
 ---

package/framework/schemas/session.schema.json

@@ -20,7 +20,7 @@
       "description": "Normalized active_model recorded when /chati-update last completed. Article XXIV: when active_model differs from this, the orchestrator advises a harness re-audit. The advisory is driven entirely by this comparison; there is no separate flag."
     },
     "mode": {
-      "enum": ["discover", "plan", "build", "validate", "deploy", "completed"],
+      "enum": ["discover", "plan", "rail", "release", "build", "validate", "deploy", "completed"],
       "default": "discover",
       "description": "Flat pipeline macro-phase (mirrors project.state). Read by prism-engine and mode-governance hooks."
     },
@@ -67,13 +67,13 @@
       "properties": {
         "name": { "type": "string", "description": "Project name" },
         "type": { "enum": ["greenfield", "brownfield"], "description": "Project type" },
-        "state": { "enum": ["discover", "plan", "build", "validate", "deploy", "completed"], "description": "Current pipeline macro-phase" }
+        "state": { "enum": ["discover", "plan", "rail", "release", "build", "validate", "deploy", "completed"], "description": "Current pipeline macro-phase" }
       }
     },
     "execution_mode": {
       "enum": ["interactive", "autonomous"],
       "default": "interactive",
-      "description": "interactive = agent-driven guided mode; autonomous = Ralph Wiggum mode (Dev agent)"
+      "description": "interactive requires user checkpoints; autonomous advances eligible gates while preserving RAIL review and release authorization"
     },
     "providers_enabled": {
       "type": "array",
@@ -235,8 +235,8 @@
         "required": ["timestamp", "from", "to", "trigger"],
         "properties": {
           "timestamp": { "type": "string", "format": "date-time" },
-          "from": { "enum": ["discover", "plan", "build", "validate", "deploy", "completed"] },
-          "to": { "enum": ["discover", "plan", "build", "validate", "deploy", "completed"] },
+          "from": { "enum": ["discover", "plan", "rail", "release", "build", "validate", "deploy", "completed"] },
+          "to": { "enum": ["discover", "plan", "rail", "release", "build", "validate", "deploy", "completed"] },
           "trigger": { "type": "string", "description": "What caused the transition (agent completion, override, backward)" },
           "type": { "enum": ["automatic", "backward", "override"], "description": "Transition classification" },
           "skipped_agents": {

package/framework/workflows/brownfield-fullstack.yaml

@@ -1,139 +1,33 @@
-# Brownfield Fullstack Workflow
-# Handles: feature addition, refactoring, modernization
-
 workflow:
   id: brownfield-fullstack
   name: Brownfield Fullstack Development
-  version: "1.0.0"
+  version: "2.0.0"
   type: brownfield
   project_types: [feature-addition, refactoring, modernization, enhancement]
-  description: >
-    Development pipeline for existing projects. Key difference from greenfield:
-    Architect comes BEFORE Detail to understand existing constraints first.
-    brownfield-wu ALWAYS runs Deep Discovery with 3 scout calls.
+  execution_authority: rail
 
 phases:
   - phase: 0
     name: Deep Discovery
     category: DISCOVER
     sequence:
-      - agent: brownfield-wu
-        action: full-discovery
-        creates: [artifacts/0-WU/wu-full-report.md]
-        notes: >
-          Both axes (technical + operational). ALWAYS runs Deep Discovery
-          with 3 scout calls: Architect, UX, QA in scout mode.
-
+      - { agent: brownfield-wu, action: deep-discovery, creates: [artifacts/0-WU/wu-operational-report.md] }
+      - { agent: brief, action: problem-extraction, creates: [artifacts/1-Brief/brief-report.md] }
   - phase: 1
-    name: Problem Definition
-    category: DISCOVER
-    sequence:
-      - agent: brief
-        action: problem-extraction
-        creates: [artifacts/1-Brief/brief-report.md]
-        notes: "Informed by existing codebase context from WU"
-
-  - phase: 2
-    name: Architecture Assessment
-    category: PLAN
-    sequence:
-      - agent: architect
-        action: assess-architecture
-        creates: [artifacts/3-Architecture/architecture.md]
-        template: fullstack-architecture-tmpl.yaml
-        notes: >
-          Architect comes BEFORE Detail in brownfield.
-          Assesses existing architecture, proposes changes.
-
-  - phase: 3
-    name: Product Specification
-    category: PLAN
-    sequence:
-      - agent: detail
-        action: create-prd
-        creates: [artifacts/2-PRD/prd.md]
-        template: brownfield-prd-tmpl.yaml
-        notes: "PRD informed by architectural constraints"
-      - agent: ux
-        action: define-experience
-        creates: [artifacts/4-UX/ux-specification.md]
-        notes: "Includes Design System audit of existing code"
-
-  - phase: 4
-    name: Execution Planning
-    category: PLAN
-    sequence:
-      - agent: phases
-        action: create-roadmap
-        creates: [artifacts/5-Phases/phases.md]
-      - agent: tasks
-        action: create-tasks
-        creates: [artifacts/6-Tasks/tasks.md]
-        template: task-tmpl.yaml
-
-  - phase: 5
-    name: Planning Quality Gate (Planning Team)
+    name: Planning
     category: PLAN
     sequence:
-      - agent: qa-planning
-        action: validate-traceability
-        creates: [artifacts/7-QA-Planning/qa-planning-report.md]
-        template: qa-gate-tmpl.yaml
-        notes: >
-          Runs inside Planning Team (Article XXI), not as a standalone step.
-          Activates after Detail, Architect, and UX complete their tasks.
-          Score synced to session.yaml by orchestrator on team dissolution.
-
-  - phase: 6
-    name: Implementation
-    category: BUILD
-    sequence:
-      - agent: dev
-        action: implement-tasks
-      - agent: qa-implementation
-        action: validate-code
-        creates: [artifacts/9-QA-Implementation/qa-implementation-report.md]
-
-  - phase: 7
-    name: Deployment
-    category: DEPLOY
-    sequence:
-      - agent: devops
-        action: deploy
-        creates: [artifacts/10-Deploy/deploy-report.md]
+      - { agent: architect, action: map-and-design, creates: [artifacts/3-Architecture/architecture.md] }
+      - { agent: detail, action: create-prd, creates: [artifacts/2-PRD/prd.md] }
+      - { agent: ux, action: define-experience, creates: [artifacts/4-UX/ux-specification.md] }
+      - { agent: phases, action: create-roadmap, creates: [artifacts/5-Phases/phases.md] }
+      - { agent: tasks, action: seal-task-graph, creates: [artifacts/6-Tasks/tasks.md] }
+      - { agent: qa-planning, action: validate-planning, creates: [artifacts/7-QA-Planning/qa-planning-report.md] }
+  - { phase: 2, name: RAIL Execution, category: RAIL, runtime: project-local-rail, contract: .chati/v2/rail/handoffs }
+  - { phase: 3, name: Release Lane, category: RELEASE, requires: [rail_complete, independent_review_approved, explicit_human_authorization] }
 
 transitions:
-  discover_to_plan:
-    trigger: "brief.status == completed"
-    type: automatic
-    action: "Update project.state = plan"
-  plan_to_build:
-    trigger: "qa-planning.score >= 95"
-    type: automatic
-    action: "Update project.state = build"
-  build_to_validate:
-    trigger: "dev.status == completed"
-    type: automatic
-    action: "Update project.state = validate"
-  validate_to_preview:
-    trigger: "qa-implementation.status == approved"
-    type: automatic
-    action: "Launch user preview (orchestrator-preview task)"
-    notes: "User must approve preview before advancing to deploy"
-  preview_to_deploy:
-    trigger: "user_preview.decision in [approve_keep, approve_kill]"
-    type: manual
-    action: "Update project.state = deploy"
-    notes: "User explicitly approves the preview"
-  deploy_to_completed:
-    trigger: "devops.status == completed"
-    type: automatic
-    action: "Update project.state = completed"
-  backward_to_plan:
-    trigger: "qa-implementation.issue_type in [spec, architecture]"
-    type: backward
-    action: "Update project.state = plan, route to responsible agent"
-  backward_to_discover:
-    trigger: "qa-implementation.issue_type in [requirements, scope]"
-    type: backward
-    action: "Update project.state = discover, route to brief or wu agent"
+  discover_to_plan: { trigger: "brief.status == completed", target: plan }
+  plan_to_rail: { trigger: "qa-planning.score >= 95 && tasks.handoff == sealed", target: rail }
+  rail_to_release: { trigger: "rail.all_tasks_approved == true", target: release }
+  release_to_completed: { trigger: "release.receipt.status == completed", target: completed }