chati-dev 4.5.27 → 4.5.29

package/framework/i18n/es.yaml

@@ -23,6 +23,7 @@ installer:
   llm_provider_label: "Proveedor de IA"
   ide_selection_title: "Seleccione sus IDEs / CLIs (multiples permitidos):"
   provider_selection_title: "Que proveedores de IA utilizara?"
+  council_providers_required: "Seleccione al menos dos proveedores distintos capaces de revisar para el consejo de calidad obligatorio."
   editor_selection_title: "Que editores deben recibir los archivos de reglas? (opcional)"
   provider_claude_hint: "CLI oficial de Anthropic"
   provider_gemini_hint: "Agente de terminal de Google AI"

package/framework/i18n/fr.yaml

@@ -23,6 +23,7 @@ installer:
   llm_provider_label: "Fournisseur IA"
   ide_selection_title: "Selectionnez vos IDEs / CLIs (multiples autorises):"
   provider_selection_title: "Quels fournisseurs IA utiliserez-vous?"
+  council_providers_required: "Sélectionnez au moins deux fournisseurs distincts capables de réviser pour le conseil qualité obligatoire."
   editor_selection_title: "Quels editeurs doivent recevoir les fichiers de regles? (facultatif)"
   provider_claude_hint: "CLI officielle d'Anthropic"
   provider_gemini_hint: "Agent de terminal Google AI"

package/framework/i18n/pt.yaml

@@ -23,6 +23,7 @@ installer:
   llm_provider_label: "Provedor de IA"
   ide_selection_title: "Selecione suas IDEs / CLIs (multiplos permitidos):"
   provider_selection_title: "Quais provedores de IA voce vai utilizar?"
+  council_providers_required: "Selecione pelo menos dois provedores distintos capazes de revisar para o conselho de qualidade obrigatório."
   editor_selection_title: "Quais editores devem receber os arquivos de regras? (opcional)"
   provider_claude_hint: "CLI oficial da Anthropic"
   provider_gemini_hint: "Agente de terminal da Google AI"

package/framework/manifest.json

@@ -1,29 +1,29 @@
 {
-  "createdAt": "2026-09-01T15:25:04.991Z",
+  "createdAt": "2026-09-11T10:51:50.561Z",
   "files": {
     "agents/build/dev.md": {
-      "hash": "81d82d99b9f7bc1008ea96e49c2bd420c0e128ee665cb5a7da5b6e2b2c2a6348",
-      "size": 64896,
+      "hash": "c3d8d109ff81673148882417f15dc46360a3b9d4dbc4f0c6475d81923f6f74a4",
+      "size": 64920,
       "type": "md"
     },
     "agents/deploy/devops.md": {
-      "hash": "d3a1982680deff00ed04f1230fa2add6149180eb5dfe8198883f6e3c6be04d00",
-      "size": 17932,
+      "hash": "9ac3a53e0fe69112901b156af7426cc1527fb07ddd4a61257d92277be33e1b7d",
+      "size": 17964,
       "type": "md"
     },
     "agents/discover/brief.md": {
-      "hash": "264b216a2c57743ec610e888290752fa72757b5ace17fb8fc24b3bc9188b6791",
-      "size": 26305,
+      "hash": "46a3b5efb94883d1845b59b6588f0ea89a833f20048d7531688d10cae3b72bba",
+      "size": 27494,
       "type": "md"
     },
     "agents/discover/brownfield-wu.md": {
-      "hash": "a462b00aca9b067895d351fe1a9a7eb7964a8d1f1ec2cff87daa2b75f2290d95",
-      "size": 18211,
+      "hash": "e7d066a3e599dd18bd9cbc140d9ad6e27b6aa612dabac3c9f50129e40750c77a",
+      "size": 18253,
       "type": "md"
     },
     "agents/discover/greenfield-wu.md": {
-      "hash": "d9d6a70b8eb92194642dba2e08848513b87d20e14068e2376a2e81cbcdb3a216",
-      "size": 17363,
+      "hash": "962ecbcc916e179c57da3d94dfadd253dd7d98ab83bc97e6cf47a8e57143dfc3",
+      "size": 17419,
       "type": "md"
     },
     "agents/plan/architect-data-engineer.md": {
@@ -37,28 +37,28 @@
       "type": "md"
     },
     "agents/plan/architect.md": {
-      "hash": "8f81653e2b34ed873b2b0605528dbc866fba3485ae7af7a969f089e1c4af332b",
-      "size": 13366,
+      "hash": "1f4521d3db4c0fd40ee5dee45c7ca6ee71ed5e79ace9a7e8f8bc41f38037ccd3",
+      "size": 13408,
       "type": "md"
     },
     "agents/plan/detail.md": {
-      "hash": "335e7cda417273154ea290d0b3e6ef18e9aa27cfb33ef3f836c5f28f7b6c226c",
-      "size": 19272,
+      "hash": "74baaf967e0331ca3ef67e5465b17f6a26dd526371d9fcde0eda075926ba4a84",
+      "size": 19298,
       "type": "md"
     },
     "agents/plan/phases.md": {
-      "hash": "039a108666679dea9fbc357e84be6b88d479e79dcf62d0f34ba9f1e437822716",
-      "size": 15747,
+      "hash": "3363b6349b7363c84d629c2ae487e295d4c1227b31694955077b4e8781a6ab9e",
+      "size": 15764,
       "type": "md"
     },
     "agents/plan/tasks.md": {
-      "hash": "6aab3a60f0886daf0f13d435f5fb8b133c7ffb6aa441f3b7267582045d6cf5b4",
-      "size": 27779,
+      "hash": "d94a9a420cb7dc2d3104f21ef1c1d962b78af95490870bf2a481ee18aebd1a18",
+      "size": 33566,
       "type": "md"
     },
     "agents/plan/ux-brand-architect.md": {
-      "hash": "a456acd57a4d1ec646dfe04a483fd4f2e2ac14486f58a95e2dc5f99651bc0f55",
-      "size": 28432,
+      "hash": "931adc62e8f6bf25d545a09980ada52dc62e5c0588b6593a59f6492721bad974",
+      "size": 28435,
       "type": "md"
     },
     "agents/plan/ux-component-engineer.md": {
@@ -72,23 +72,23 @@
       "type": "md"
     },
     "agents/plan/ux.md": {
-      "hash": "b31cc0567c736371775a9619f78a139dec26ce813e1f31ed15619a29a8f45e5f",
-      "size": 15329,
+      "hash": "b04bce16466695c2a4e530924b118a64cf01684c37c50fab34f9287368b2ef67",
+      "size": 16959,
       "type": "md"
     },
     "agents/quality/qa-implementation.md": {
-      "hash": "218063fc3adf6bdcfb6ca4a432d212a7c4c789c48cb24d648d6507f905dac1e7",
-      "size": 40322,
+      "hash": "660f2c2c9acb5807ae6b007d3b1d20340136cb9985eb73b2f420d2ef7e2b1e1f",
+      "size": 40432,
       "type": "md"
     },
     "agents/quality/qa-planning.md": {
-      "hash": "aa06bccbab9fdbe20b2303cb46b1a5c988274f6063efeb30f1b391e646b6ddbd",
-      "size": 25736,
+      "hash": "2b27fdea03947fae39a3b6044321db4959ae845679982a708d6b263a463c59ed",
+      "size": 29458,
       "type": "md"
     },
     "agents/quality/qa-visual.md": {
-      "hash": "922faba65034dbd3b1a5d3a6792e44b8c028f08c05a3e70025bbe0799b11ec98",
-      "size": 21704,
+      "hash": "37b6b30b1a7032697cc4a9188d2b99c124183677c3719de50803de189bb3704b",
+      "size": 21732,
       "type": "md"
     },
     "agents/shared/visualizer.md": {
@@ -97,18 +97,18 @@
       "type": "md"
     },
     "config.yaml": {
-      "hash": "f69b77faca7351bef3c72a4726e5480590c95cd7140de13605695b515817631d",
+      "hash": "c701f0e54ba4b7083ec2277184cd6acca602d8dd5e6c45d65851425dce991b0b",
       "size": 2638,
       "type": "yaml"
     },
     "constitution.md": {
-      "hash": "094a3b7da73fcb7bf8de016f17571597315131c8cb15e9e82090654695d65dee",
-      "size": 66166,
+      "hash": "beaf6e3c6162c6bf640b966d95904b53db5f529ad66d861ea794352ead23c5a8",
+      "size": 67106,
       "type": "md"
     },
     "context/governance.md": {
-      "hash": "4a0fcc136806543f04e815fd5825c9edc12804b9dba99b37e6c710b64de0c44a",
-      "size": 6477,
+      "hash": "1fb78f4ee590898cb5088bf6401b0cb239a27131ae2064310b33b82be221ed9e",
+      "size": 6807,
       "type": "md"
     },
     "context/protocols.md": {
@@ -122,8 +122,8 @@
       "type": "md"
     },
     "context/root.md": {
-      "hash": "34b2382e937e931b98d8055d8aea58c499191a7779293ec163778e35110ff4b9",
-      "size": 1381,
+      "hash": "2554edf895d28742072a2294df290154cdde7907a26a26a3b0ac67c136a2c97a",
+      "size": 1840,
       "type": "md"
     },
     "data/entity-registry.yaml": {
@@ -212,13 +212,13 @@
       "type": "yaml"
     },
     "domains/constitution.yaml": {
-      "hash": "95316838af958b1300b778fa1ea0921136b0dea30c1fd93eb11d6920e12fac4e",
-      "size": 7073,
+      "hash": "0704de1b3d035b4927842d4ea8adc9027abcde5e7d8883f58af5f2948087c607",
+      "size": 7225,
       "type": "yaml"
     },
     "domains/global.yaml": {
-      "hash": "b51d337cbcd9c722961aa137925a70816a06eb5b1305246c9aba110e5a32e8e9",
-      "size": 3013,
+      "hash": "4353e0e438cf5646ec681777ad21788378254896286563afa7e69b23dc70a280",
+      "size": 3138,
       "type": "yaml"
     },
     "domains/workflows/brownfield-discovery.yaml": {
@@ -252,8 +252,8 @@
       "type": "yaml"
     },
     "domains/workflows/standard-flow.yaml": {
-      "hash": "550186b773792428358acdf9ba3679d0643c26a354127709ea940fffdc6aff71",
-      "size": 1209,
+      "hash": "3bfefccc49ae6954d87d04f669a9215987cbd197eafd073ed69ac9078b13e878",
+      "size": 1055,
       "type": "yaml"
     },
     "executors/json-validate.js": {
@@ -287,13 +287,13 @@
       "type": "yaml"
     },
     "hooks/advance-trigger.js": {
-      "hash": "88badc4b3af2b6c44d0b5d1bea103dfb24a238ca3593e258e5e20832b1291f79",
-      "size": 6572,
+      "hash": "04dc82d9afde699666cfc3b202ee269316f6940c7e2cc687010271140e54e2e3",
+      "size": 6680,
       "type": "js"
     },
     "hooks/brief-validator.js": {
-      "hash": "6db38d712d8e8ca2ad3dc872498c215f3df9f3b2c5c8ee0ea45e2fafabbf46a1",
-      "size": 2788,
+      "hash": "3bb4b72ae3cdb79d55f0f66bf9eaff96be29912225cfe376d356f8b4a492b35c",
+      "size": 2810,
       "type": "js"
     },
     "hooks/constitution-guard.js": {
@@ -327,8 +327,8 @@
       "type": "json"
     },
     "hooks/post-dev.js": {
-      "hash": "e965d590b9b32049500a149b7d50742953b164810edb83c9d2bb0355c0e2d60d",
-      "size": 7091,
+      "hash": "c0f12b7d97def28dbe1eb2a5ab626520192e5550bfa316b6f2fb2131b41930dd",
+      "size": 7101,
       "type": "js"
     },
     "hooks/prism-engine.js": {
@@ -377,8 +377,8 @@
       "type": "js"
     },
     "hooks/team-quality-gate.js": {
-      "hash": "caea012a9e2b19870a5ca536af0f1a399595fa33c15ba43f7c156fdc7bf347cb",
-      "size": 7714,
+      "hash": "6ecf347effd2417daecbf7668bd6b55126b0b1399d8bac14f6950fb7bb8f1ab0",
+      "size": 7969,
       "type": "js"
     },
     "hooks/undercover-guard.js": {
@@ -387,23 +387,23 @@
       "type": "js"
     },
     "i18n/en.yaml": {
-      "hash": "c669ce19c2916b1f6dbcf582c02d8a70bf99f0148d9e8b3ab06b4e76c1e9e75c",
-      "size": 8312,
+      "hash": "db8cf18d8f59c65df0e7db7e70f371d6d0ded3ce094cd89599e794ed01ac916c",
+      "size": 8435,
       "type": "yaml"
     },
     "i18n/es.yaml": {
-      "hash": "981d8e1c3c90a83b332b8c535fb4f1b01a3c06ad5999e7e90d639f6cf1000387",
-      "size": 8976,
+      "hash": "25db07a2fb95e307ad2864314f1adccd2a91c1c547898e865f65c76ab2a924fd",
+      "size": 9113,
       "type": "yaml"
     },
     "i18n/fr.yaml": {
-      "hash": "8db26d19623b78c6d4fb095b3d274161deb65d8430b44d6dcd6d2d3e6ecf6377",
-      "size": 9114,
+      "hash": "71cfd3c4c3be9bf246463a046938c4d65ffab5ed91f5495f1b5aa3d11b6083fc",
+      "size": 9256,
       "type": "yaml"
     },
     "i18n/pt.yaml": {
-      "hash": "336ab3e8eb49a037f4304a821295c49bb268c6f3278a25cc1f9b2abcffc05c94",
-      "size": 8831,
+      "hash": "e547eb72e371188cd53194b4c0dd8ff32bd4f473ef9383f68123bb5acd8165b0",
+      "size": 8972,
       "type": "yaml"
     },
     "intelligence/confidence.yaml": {
@@ -472,8 +472,8 @@
       "type": "yaml"
     },
     "orchestrator/chati-router.js": {
-      "hash": "dec4d4eb7e591e232613ab4b9177adbb54866ba2b5568b6456cf72ba8f37f6fc",
-      "size": 34521,
+      "hash": "ac16d006e481911ce481e9564afe26ecc84c254424f4d054edd6d1cf3c824072",
+      "size": 35175,
       "type": "js"
     },
     "orchestrator/chati-update.md": {
@@ -482,8 +482,8 @@
       "type": "md"
     },
     "orchestrator/chati.md": {
-      "hash": "ed36667e35a650e8b46837cacb2d6e80f334befe0ea4aae0a4d5476134e561b4",
-      "size": 58200,
+      "hash": "1dbb3aaa0fdb849bf03e598d8783e1a90f0f8745886809ed350c0452e74164ff",
+      "size": 62477,
       "type": "md"
     },
     "package.json": {
@@ -532,8 +532,8 @@
       "type": "md"
     },
     "rules/human-writing-style.md": {
-      "hash": "faf8783c1d932ef7b761424454fc945c27e7401c3c57f815c2ca81a363cfc6fa",
-      "size": 2820,
+      "hash": "c70bde64d7046d4784acdd490e4a03b2d25f6cca6ccbcfb968fd106cbc3f09cb",
+      "size": 3298,
       "type": "md"
     },
     "scaffold/motion-premium-3d/app/(3d)/scroll-demo/page.tsx.template": {
@@ -867,13 +867,13 @@
       "type": "json"
     },
     "schemas/session.schema.json": {
-      "hash": "3b2d8f7fa2576041cd64a00947e87db48c8d8b7965f82bdedb1108b97588e97b",
-      "size": 19999,
+      "hash": "bb33b77fa504f33c02d0c04c6d21f5b61134f60adc2ff8459cce627b847dbb3c",
+      "size": 21613,
       "type": "json"
     },
     "schemas/task.schema.json": {
-      "hash": "d00ddd6f0e99a10bb8229fc69262c49f048ffd353181a34573b191767863bc92",
-      "size": 3010,
+      "hash": "ac01ffb0cfb7643bc414b865af1e4277ed46b62194b7076ecaf36d3a5b3cfe37",
+      "size": 4078,
       "type": "json"
     },
     "scripts/reference-capture.js": {
@@ -1097,8 +1097,8 @@
       "type": "md"
     },
     "tasks/orchestrator-handoff.md": {
-      "hash": "4ba402252b54f7f5a8ed3348357d5e7d0278cacfc948c8c145fc6f8dba54bba4",
-      "size": 7785,
+      "hash": "f17f046bff47d4561b17fb54cfa82ef2dd6e2e79451c28f1853e41067b3e44ad",
+      "size": 8525,
       "type": "md"
     },
     "tasks/orchestrator-health.md": {
@@ -1117,8 +1117,8 @@
       "type": "md"
     },
     "tasks/orchestrator-resume.md": {
-      "hash": "969673bf68d25868de31188c9dbddd54e4c5ffc8f833bf68841157252e9cc936",
-      "size": 5752,
+      "hash": "feaa66253cfca5ca730ec848ada02a1defe897d0457c7dc3ca7db755b147c937",
+      "size": 5995,
       "type": "md"
     },
     "tasks/orchestrator-route.md": {
@@ -1332,23 +1332,23 @@
       "type": "yaml"
     },
     "workflows/brownfield-fullstack.yaml": {
-      "hash": "19e042bc1f94282e8f21e2767cacde075bfb82df7f65239eea60f022c6976437",
-      "size": 1780,
+      "hash": "7282cfe19106667f76fe59e23e33b96ef71cf59d034cdfdeb9aca46c887f6671",
+      "size": 2135,
       "type": "yaml"
     },
     "workflows/brownfield-service.yaml": {
-      "hash": "ad4872a81676ce6d9241547e5e044e7dd8cc1d934f98e595b151792f16e3146a",
-      "size": 1243,
+      "hash": "353bd8643a1d3687fdf9bb4f9ba084d92c2c9a312da360b7a911d7c347800bdf",
+      "size": 1552,
       "type": "yaml"
     },
     "workflows/brownfield-ui.yaml": {
-      "hash": "e08767603486f3c97cb40815008eeac30698eec3a49573e1d8f5bf56e0310adb",
-      "size": 1289,
+      "hash": "da0205a8f21501848225c80f02ac83d226b5e0232abcb60f2aac3dce6c0fffcf",
+      "size": 1598,
       "type": "yaml"
     },
     "workflows/greenfield-fullstack.yaml": {
-      "hash": "2784adcb8ee79c6100e7e8d8e44af696b57f5f76fb6b475a24fd9012d2e8f2b5",
-      "size": 1788,
+      "hash": "bf21849169d780e842699edddbf82237f4938d7a629258b19bb727091e1607d9",
+      "size": 2143,
       "type": "yaml"
     },
     "workflows/quick-flow.yaml": {
@@ -1357,10 +1357,10 @@
       "type": "yaml"
     },
     "workflows/standard-flow.yaml": {
-      "hash": "04351ab5e305117a582b322f681101bf315b73b9cba031489d65d291c1c02329",
-      "size": 1426,
+      "hash": "9ae08a7e05addd5f31b9fe14d9399f9547d38096eeadc9ea2d74a73747de0c96",
+      "size": 2200,
       "type": "yaml"
     }
   },
-  "version": "4.5.27"
+  "version": "4.5.29"
 }

package/framework/manifest.sig

@@ -1 +1 @@
-/CTkMqcBnUnMTmrHUa1RxsV7m5SMCIPk1uFIDPmf+0wOFJjz+N86M8Ej0vg+WlKaVAWx0j48LsOrLOEUvN4yDg==
+r4sO26MB40B3OgKHJeqWYTBKcG1tMi2gXWISO8khhYhYMkaalf63Ue/5EkhxRZ/uDz+SGqv2SXwRxFd4JTZYAA==

package/framework/orchestrator/chati-router.js

@@ -280,12 +280,13 @@ async function captureOrchestrate(mod, subCommand, args, projectDir) {
  * Route `advance` command deterministically — same reliability as `next`.
  * Called as: node chati-router.js advance --agent {name} --score {score}
  */
-async function routeAdvance(agentName, score) {
+async function routeAdvance(argv) {
+  const { agent: agentName, score } = parseFlagArgs(argv);
   const result = {
     ok: true,
     advanced: false,
     agent: agentName,
-    score: parseInt(score, 10),
+    score: Number(score),
     next: null,
     team: null,
     error: null,
@@ -301,11 +302,17 @@ async function routeAdvance(agentName, score) {
       return result;
     }
 
-    const advanceResult = await captureOrchestrate(cliMod, 'advance',
-      ['--agent', agentName, '--score', String(score)], PROJECT_DIR);
+    // Preserve the canonical command contract, including negative result
+    // status, correction target and legacy recovery identity. Rebuilding an
+    // allowlist here silently changed rejected results into completions.
+    const advanceResult = await captureOrchestrate(cliMod, 'advance', argv, PROJECT_DIR);
+    if (advanceResult.action === 'error' || advanceResult.ok === false) {
+      return { ...result, ...advanceResult, ok: false, advanced: false, next: null };
+    }
 
     result.advanced = advanceResult.advanced || false;
     result.already_advanced = advanceResult.already_advanced || false;
+    if (advanceResult.visual_applicability) result.visual_applicability = advanceResult.visual_applicability;
     if (advanceResult.status_summary) result.status_summary = advanceResult.status_summary;
     result.next = advanceResult.next || advanceResult;
 
@@ -345,7 +352,7 @@ async function routeAdvance(agentName, score) {
 
 // All orchestrate subcommands the router can dispatch locally
 const VALID_ORCHESTRATE_SUBS = new Set([
-  'next', 'advance', 'init', 'status', 'validate-handoff',
+  'next', 'advance', 'reject-result', 'revalidate-qa', 'reconcile-planning', 'revise-planning-contract', 'init', 'status', 'validate-handoff',
   'deviation', 'exit', 'providers', 'detect-flow', 'backlog',
   'qa-plan-score', 'qa-impl-score', 'qa-visual-score', 'scan',
   'spawn-team', 'team-status', 'team-dissolve',
@@ -695,12 +702,13 @@ async function main() {
         console.log(JSON.stringify({ ok: false, error: 'Missing --agent or --score' }));
         return;
       }
-      const advResult = await routeAdvance(flags.agent, flags.score);
+      const advResult = await routeAdvance(ROUTER_ARGS.slice(1));
       console.log(JSON.stringify(advResult));
       return;
     }
     // Generic dispatch for init, status, detect-flow, etc.
     const result = await dispatchOrchestrate(subCommand, ROUTER_ARGS.slice(1));
+    if (result?.action === 'error' || result?.ok === false) process.exitCode = 1;
     console.log(JSON.stringify(result));
     return;
   }

package/framework/orchestrator/chati.md

@@ -1,5 +1,9 @@
 # /chati - Orchestrator v2
 
+## Execution role boundary
+
+This document assigns the user-facing coordinator role, not the role of a provider subprocess already delegated an agent/task by the parent runtime. A delegated worker uses the supplied canonical context, executes only its assignment and returns the required result envelope to the parent. It must not recursively activate the entry skill/router, dispatch pipeline agents, advance/recover session state or take over the coordinator role below. Missing information or an ambiguous delegated assignment goes back to the parent as a structured result. This distinction does not authenticate a process, grant permissions or waive any runtime gate.
+
 You are the **Chati.dev Orchestrator**, the single entry point for the Chati.dev system. You route requests, manage sessions, handle deviations, track backlog, and guide users through the development pipeline. You **never** write code, specs, or artifacts - those belong to specialized agents.
 
 ---
@@ -253,16 +257,49 @@ is already running in another CLI and keep the canonical session unchanged.
 
 ## Action: Awaiting Agent Advance
 
-The routed process finished successfully, but its exact result has not yet
-been committed through canonical `advance`.
+The routed process ended, but its result has not yet been settled by the router.
+A zero process exit is not proof of successful agent work. Only an explicit
+`result_status: complete` can proceed through canonical `advance`.
 
 1. Do not dispatch the agent again and do not synthesize a replacement result.
-2. If this CLI owns the completed process result, immediately submit that exact
+2. If this CLI owns an explicitly complete process result, submit that exact
    handoff and score through `orchestrate advance`.
 3. If another CLI owns the result, present `status_summary` and wait for that
    CLI to finish canonical advance. A different CLI may resume only through an
    explicit recovery path that preserves the original execution evidence.
-4. Run `next` again only after canonical advance succeeds.
+4. `error`, `partial` and `unknown` never advance, regardless of score. New
+   failed runs preserve a pending question and its exact response for retry.
+5. An old hold with `requires_recovery: true` has no trustworthy success marker.
+   Inspect the original result. To reject that ambiguous hold, use
+   `orchestrate advance --agent <agent> --status error --score <reported-score> --execution-finished-at <exact-value-from-next>`.
+   This is negative settlement, not approval: it returns `advanced: false` and
+   `retry_ready: true`, preserves artifacts and pipeline progress, and refuses
+   stale identities or a new explicitly complete hold. Do not reconstruct a
+   previously lost response or invent a replacement handoff.
+6. For current unapproved Detail, Architect, UX or QA-Planning content that completed but
+   failed review, use the exact `content_rejection_command` returned by `next`,
+   replacing its reason placeholder with the evidence-based review reason.
+   `reject-result --agent <agent> --execution-claim-id <exact-id> --execution-finished-at <exact-time> --reason <reason>`
+   preserves the complete execution as a content rejection, not a process error.
+   It changes only that agent to pending rework, never resolves findings, changes
+   scope, advances gates, or spawns a worker. The reason is limited to 8192 UTF-8
+   bytes and is retained for the next validated execution, including failures
+   and user-input relays. Never put credentials in a review reason. Two content
+   rejections per agent are the maximum; on refusal, inspect the actual blocker,
+   do not manufacture another identity or alter the count. Other claims,
+   dependent work, approved agents and sealed RAIL must be settled first.
+   This is not rollback permission for Brief, WU or an approved phase.
+7. If a signed Planning council requires new QA after both content rejections,
+   correct the upstream inputs while preserving the held QA report, then use
+   `revalidate-qa --agent qa-planning --execution-claim-id <exact-id> --execution-finished-at <exact-time> --council-gate-id <blocking-gate-id>`.
+   This separate, one-time authorization archives the historical verdict and
+   reserves one fresh QA execution with the installation-selected binding.
+   Execute its returned `spawn_command`; this is not an approval. Input digests
+   are checked at reservation, start, relay and completion. A cancelled process
+   uses ordinary `next` recovery without resetting the authorization budget.
+   After genuine QA, call `advance` for a fresh council. Further rejection must
+   be adjudicated, never retried by changing identities or counters.
+8. Run `next` again after successful completion or negative settlement.
 
 ## Action: Pending Interaction In Flight
 
@@ -419,7 +456,7 @@ returned `next` state. Do not treat it as an error.
 
 Planning phase agents (detail, architect, ux) run simultaneously.
 
-**NOTE (Article XXI):** For v2, when `features.agent_teams: true` in config.yaml, the orchestrator MUST attempt `spawn_team` first for the Planning Team (detail, architect, ux, qa-planning). Only fall back to `spawn_parallel` if team spawning is unavailable or fails. After Tasks, RAIL owns execution and review. A Build Team is never formed in v2.
+**NOTE (Article XXI):** For v2, when `features.agent_teams: true` in config.yaml, the orchestrator MUST attempt `spawn_team` first for the Planning Team (detail, architect, ux, qa-planning). Only fall back to `spawn_parallel` if team spawning is unavailable or fails. The automatic cross-provider council validates the accepted Brief, Planning Team output, and sealed Execution Design before the pipeline moves across each boundary. After Tasks and the execution-design council accept, RAIL owns execution and review. A Build Team is never formed in v2.
 
 1. Display naturally what is happening using user-facing language. Examples (pick one that fits the phase): "Working on the planning phase now." / "Reviewing the architecture and UX in parallel." NEVER say "spawning parallel group", "spawn_parallel", or list internal agent names like "detail, architect, ux".
 2. If `parallel_spawn_commands` is non-empty, execute every member's `command`
@@ -476,9 +513,9 @@ Agent tool call 1:
     Read shared task list at {task_list_path} - your task is TT-PLN-001.
     Mailbox directory: {mailbox_path}
     Cross-review target: architect (send cross_review_request after completing PRD).
-    Previous agent handoff: artifacts/handoffs/brief-handoff.md
+    Previous agent handoff: artifacts/handoffs/brief/brief-handoff.md
     CRITICAL: Produce your PRD INDEPENDENTLY first (sealed-bid). Only read teammates' outputs during cross-review.
-    Write your handoff to artifacts/handoffs/detail-handoff.md when done.]
+    Write your handoff to artifacts/handoffs/detail/detail-handoff.md when done.]
 
 Agent tool call 2:
   description: "Architect agent - design architecture"
@@ -487,9 +524,9 @@ Agent tool call 2:
     Read shared task list at {task_list_path} - your task is TT-PLN-002.
     Mailbox directory: {mailbox_path}
     Cross-review target: ux (send cross_review_request after completing architecture).
-    Previous agent handoff: artifacts/handoffs/brief-handoff.md
+    Previous agent handoff: artifacts/handoffs/brief/brief-handoff.md
     CRITICAL: Produce your architecture INDEPENDENTLY first (sealed-bid).
-    Write your handoff to artifacts/handoffs/architect-handoff.md when done.]
+    Write your handoff to artifacts/handoffs/architect/architect-handoff.md when done.]
 
 Agent tool call 3:
   description: "UX agent - design UX specification"
@@ -498,9 +535,9 @@ Agent tool call 3:
     Read shared task list at {task_list_path} - your task is TT-PLN-003.
     Mailbox directory: {mailbox_path}
     Cross-review target: detail (send cross_review_request after completing UX spec).
-    Previous agent handoff: artifacts/handoffs/brief-handoff.md
+    Previous agent handoff: artifacts/handoffs/brief/brief-handoff.md
     CRITICAL: Produce your UX specification INDEPENDENTLY first (sealed-bid).
-    Write your handoff to artifacts/handoffs/ux-handoff.md when done.]
+    Write your handoff to artifacts/handoffs/ux/ux-handoff.md when done.]
 
 Agent tool call 4:
   description: "QA-Planning agent - validate planning artifacts"
@@ -515,7 +552,7 @@ Agent tool call 4:
     If ERROR-level findings: send qa_review_finding via mailbox to ALL THREE team members (detail, architect, AND ux) - not just the responsible agent. The correction may affect cross-artifact consistency, so all agents must review the findings together, re-validate their own work against the corrections, and cross-review again before QA-Planning re-validates.
     If all artifacts pass validation: approve with score >= 95%.
     Write your report to artifacts/7-QA-Planning/qa-planning-report.md when done.
-    Write your handoff to artifacts/handoffs/qa-planning-handoff.md when done.]
+    Write your handoff to artifacts/handoffs/qa-planning/qa-planning-handoff.md when done.]
 ```
 
 <!-- CHATI_LEGACY_BUILD_START -->
@@ -557,7 +594,7 @@ Agent tool call 2:
     WAVE 0 - No completed tasks to review yet. Instead:
     1. Run baseline lint + typecheck on the project
     2. Set up any test infrastructure needed
-    3. Review artifacts/handoffs/qa-planning-handoff.md to prepare your review checklist
+    3. Review artifacts/handoffs/qa-planning/qa-planning-handoff.md to prepare your review checklist
     4. Write a qa_baseline_ready JSON to the mailbox when done
     STOP and return when baseline is complete.]
 ```
@@ -621,7 +658,7 @@ Agent tool call 1 - Dev:
     CLEANUP WAVE: Read ALL task_review_findings in mailbox with verdict=warn.
     Fix each warning. Write task_ready_for_review for each fixed task.
     When ALL warns are addressed, write your handoff to
-    artifacts/handoffs/dev-handoff.md - this is MANDATORY.
+    artifacts/handoffs/dev/dev-handoff.md - this is MANDATORY.
     STOP and return.]
 
 Agent tool call 2 - QA:
@@ -648,10 +685,10 @@ Agent tool call:
     Phase 2: Spawn the Visualizer sub-agent using its router-provided binding to analyze build screenshots and compare with references.
     Phase 3-4: Verify animation libraries and brandbook compliance from report.json.
     Scoring: Run qa-visual-score CLI for deterministic score.
-    Write your handoff to artifacts/handoffs/qa-visual-handoff.md when done.]
+    Write your handoff to artifacts/handoffs/qa-visual/qa-visual-handoff.md when done.]
 
 When QA-Visual returns:
-1. Read artifacts/handoffs/qa-visual-handoff.md
+1. Read artifacts/handoffs/qa-visual/qa-visual-handoff.md
 2. Check score and findings:
    - If score < 90% OR any ERROR findings (Lenis missing, GSAP missing, em-dashes):
      a. Spawn Dev to fix visual issues (provide the specific findings)
@@ -676,20 +713,20 @@ Agent tool call:
     3. PRD requirement coverage vs artifacts/2-PRD/prd.md
     4. Security scan
     5. Performance review
-    Write your final handoff to artifacts/handoffs/qa-implementation-handoff.md
+    Write your final handoff to artifacts/handoffs/qa-implementation/qa-implementation-handoff.md
     with overall score and any remaining findings.]
 ```
 
 **Handoff Verification (after Final QA Wave):**
 
 Before dissolving the team, verify both handoffs exist:
-1. `artifacts/handoffs/dev-handoff.md` - if missing, spawn Dev one more time:
+1. `artifacts/handoffs/dev/dev-handoff.md` - if missing, spawn Dev one more time:
    Agent tool call:
      description: "Dev agent - write handoff"
-     prompt: [Write your implementation handoff to artifacts/handoffs/dev-handoff.md.
+     prompt: [Write your implementation handoff to artifacts/handoffs/dev/dev-handoff.md.
        Summarize: tasks completed, architecture decisions, known issues, tech stack.
        STOP and return.]
-2. `artifacts/handoffs/qa-implementation-handoff.md` - should exist from Final QA Wave
+2. `artifacts/handoffs/qa-implementation/qa-implementation-handoff.md` - should exist from Final QA Wave
 
 <!-- CHATI_LEGACY_BUILD_END -->
 
@@ -737,8 +774,9 @@ Team member {agent} appears stuck in a repetition loop (Article XXII Echo Detect
 
 After Planning Team (detail + architect + ux + qa-planning) completes and user approves:
 1. Dissolve Planning Team: `team-dissolve --team-id {planning-team-id}`
-2. Continue pipeline normally through Phases, Tasks (these are NOT parallelizable and run sequentially as interactive or autonomous agents). QA-Planning already ran inside the Planning Team.
-3. After Tasks seals a v2 handoff, follow **Action: RAIL Execution**. Do not form a Build Team.
+2. The automatic Planning Council validates the completed Planning Team on its frozen artifacts. Any accepted high or critical finding sends rework to the owning planning artifact. Low and medium findings remain recorded without blocking.
+3. Continue pipeline through Phases, Tasks (these are NOT parallelizable and run sequentially as interactive or autonomous agents). QA-Planning already ran inside the Planning Team.
+4. The automatic Execution Design Council validates phases, task graph, dependency design, routing profile and effort plan. Only an accepted content-addressed decision allows the v2 handoff to enter **Action: RAIL Execution**. Do not form a Build Team.
 4. Only a pre-v2 installation may activate the legacy Build Team wave mode.
 
 **Team cleanup order:** Dissolve current team BEFORE creating next team. Never two teams active simultaneously.
@@ -942,7 +980,7 @@ TEAMS (if active):
 
 ## Session Lock Protocol
 
-Session lock is written by `orchestrate init` and removed by `orchestrate exit`. While active, ALL messages route through the orchestrator and the active agent. The user never "falls out" of the system.
+Session lock is written by `orchestrate init` and removed by `orchestrate exit`. While active, ALL user messages in the user-facing coordinator route through the orchestrator and the active agent. These coordinator rules do not restart routing inside an already-delegated provider subprocess. The user never "falls out" of the system.
 
 ### Lock Rules