chati-dev 4.5.28 → 4.5.29

package/framework/rules/human-writing-style.md

@@ -37,6 +37,13 @@ Avoid: "comprehensive, robust, scalable solution". Use the adjective only if it
 
 ## Multilingual application
 
+This style guide does not select the output language. Article VII governs it:
+authored artifact prose, including both handoff layers, stays English; conversation
+and the terminal handoff envelope use the session language. Clearly identified
+quoted original input stays verbatim, without style edits or translation. The
+format exemptions above are style exemptions, not language exemptions for newly
+authored prose. Do not copy localized terminal summaries into artifact files.
+
 Framework supports en/pt/es/fr (Article VII). The English patterns above are EXEMPLARS, not exhaustive enumeration. When producing output in pt-BR / es / fr, apply the SAME PRINCIPLES to language-equivalent forms:
 
 - Filler verbs: pt "elucidar / alavancar / facilitar"; es "profundizar / aprovechar / facilitar"; fr "approfondir / exploiter / faciliter"

package/framework/schemas/session.schema.json

@@ -56,7 +56,9 @@
           "properties": {
             "score": { "type": "number", "minimum": 0, "maximum": 100 },
             "verdict": { "enum": ["APPROVED", "REVIEW", "NEEDS_WORK", "PASS", "FAIL", null] },
-            "completed_at": { "type": ["string", "null"], "format": "date-time" }
+            "completed_at": { "type": ["string", "null"], "format": "date-time" },
+            "execution_result_status": { "enum": ["complete"], "description": "Explicit successful routed result, required before v2 advance. Missing legacy markers are ambiguous, not success." },
+            "execution_failure": { "type": "object", "description": "Negative settlement of a legacy ambiguous result; never a completed agent or gate." }
           }
         }
       }
@@ -81,6 +83,11 @@
       "default": [],
       "description": "List of enabled CLI providers"
     },
+    "council_gates": {
+      "type": "object",
+      "default": {},
+      "description": "Content-addressed outcome for automatic cross-provider planning-quality gates."
+    },
     "current_agent": {
       "type": "string",
       "description": "Currently active agent name"
@@ -142,7 +149,23 @@
           "type": "object",
           "required": ["status", "score", "criteria_count"],
           "properties": {
-            "status": { "enum": ["pending", "in_progress", "waiting_for_user", "awaiting_advance", "completed", "skipped", "needs_revalidation"] },
+            "status": { "enum": ["pending", "pending_rework", "in_progress", "waiting_for_user", "awaiting_advance", "completed", "skipped", "needs_revalidation"] },
+            "content_review_pending": { "type": "boolean", "description": "Unapproved content feedback retained until canonical completion, including retry and interaction relays." },
+            "content_review_task_id": { "type": "string" },
+            "content_rejections": {
+              "type": "array", "maxItems": 2,
+              "description": "Bounded negative reviews of genuine complete executions. Not process failures, QA outcomes or approvals.",
+              "items": {
+                "type": "object", "required": ["kind", "reason", "rejected_at", "binding", "execution"],
+                "properties": {
+                  "kind": { "const": "content_rejection" },
+                  "reason": { "type": "string", "minLength": 1, "maxLength": 8192, "description": "Runtime also enforces an 8192 UTF-8 byte bound." },
+                  "rejected_at": { "type": "string", "format": "date-time" },
+                  "binding": { "type": "object" },
+                  "execution": { "type": "object" }
+                }
+              }
+            },
             "score": { "type": "number", "minimum": 0, "maximum": 100 },
             "criteria_count": { "type": "integer", "minimum": 0 },
             "completed_at": { "type": ["string", "null"], "format": "date-time" }

package/framework/schemas/task.schema.json

@@ -56,9 +56,35 @@
     },
     "requirement_refs": {
       "type": "array",
+      "minItems": 1,
       "items": { "type": "string" },
       "description": "PRD requirement IDs this task addresses"
     },
+    "execution_binding": {
+      "type": "object",
+      "description": "Sealed build provider, harness, model and reasoning selected from the installation catalog."
+    },
+    "review_binding": {
+      "type": "object",
+      "description": "Sealed independent review provider, harness, model and reasoning selected from the installation catalog."
+    },
+    "required_independence_level": {
+      "enum": ["A", "B", "C"],
+      "default": "A",
+      "description": "Minimum required separation between the task builder and reviewer. A is cross-provider."
+    },
+    "effort_plan": {
+      "type": "object",
+      "description": "p50/p80 estimate that separately includes AI build, review, rework reserve, human active and human wait time."
+    },
+    "routing_profile": {
+      "type": "object",
+      "required": ["risk_level"],
+      "properties": {
+        "risk_level": { "enum": ["low", "medium", "high", "critical"] }
+      },
+      "description": "Task characteristics consumed by the signed catalog router at planning seal time."
+    },
     "blocker": {
       "type": ["string", "null"],
       "description": "Blocker code (C01-C15, G01-G08) if status is blocked"

package/framework/tasks/orchestrator-handoff.md

@@ -77,16 +77,16 @@ Run the router's canonical completion or `advance --agent <agent> --score <score
 
 ### 7. Determine Next Agent
 Based on pipeline position and mode:
-- **DISCOVER → PLAN**: Follow sequence (wu → brief → [Planning Team: detail + architect + ux + qa-planning] → phases → tasks)
-- **BUILD**: dev → qa-implementation
-- **DEPLOY**: devops
-- Handle special transitions (e.g., qa-planning → dev requires mode switch)
+- **DISCOVER → PLAN**: Follow sequence (wu → brief → Discovery Council → [Planning Team: detail + architect + ux + qa-planning] → Planning Council → phases → tasks → Execution Design Council)
+- **RAIL**: after the Execution Design Council accepts the sealed task graph, the orchestrator returns `rail_execute`; tasks run through the project-local RAIL runtime (execute → independent review → bounded rework), not through pipeline agents
+- **RELEASE**: the Release Lane consumes RAIL completion evidence and requires explicit human authorization before any external action
+- Handle special transitions (e.g., tasks → RAIL requires the sealed handoff and council acceptance)
 
 ### 8. Check Quality Gates
 Evaluate if mode transition should occur:
-- **After QA-Planning**: If score >= 95%, eligible for planning → build
-- **After Dev**: If complete, eligible for build → validate
-- **After QA-Implementation**: If approved, eligible for validate → deploy
+- **After QA-Planning**: If score >= 95%, eligible to continue to phases → tasks
+- **After Tasks**: If the sealed graph passes the Execution Design Council, eligible for planning → rail
+- **After RAIL completion**: If every task has accepted review evidence, eligible for rail → release
 
 ### 9. Prepare Next Agent Context
 Package context for the next agent:
@@ -138,9 +138,9 @@ If expected artifacts are not present:
 
 ### Handoff Write Failure
 If handoff document can't be saved:
-- Try alternate location (`.chati/backups/handoffs/`)
-- Log to session decisions as fallback
-- Escalate with write error details
+- Return a structured `error` with the actual write failure. Do not claim completion.
+- Preserve produced artifacts. Do not write outside the agent-owned handoff directory or edit session state.
+- The router retains the original question/response for retry; a legacy ambiguous hold requires exact negative settlement, never a fabricated handoff or successful advance.
 
 ### Session Update Failure
 If the router reports a session update failure:

package/framework/tasks/orchestrator-resume.md

@@ -47,9 +47,9 @@ Find the most recent agent with `status: completed`:
 
 ### 4. Determine Next Agent
 Based on pipeline position and last completed agent:
-- **DISCOVER → PLAN pipeline**: greenfield-wu → brief → [Planning Team: detail + architect + ux + qa-planning] → phases → tasks
-- **BUILD pipeline**: dev → qa-implementation
-- **DEPLOY pipeline**: devops
+- **DISCOVER → PLAN pipeline**: greenfield-wu → brief → Discovery Council → [Planning Team: detail + architect + ux + qa-planning] → Planning Council → phases → tasks → Execution Design Council
+- **RAIL runtime**: sealed task graph → execute → independent review → bounded rework (project-local RAIL, resumed through `rail_execute`, never through pipeline agents)
+- **RELEASE lane**: completion evidence → explicit human authorization
 - Handle special cases (skipped, needs_revalidation)
 
 ### 5. Load Latest Handoff

package/framework/workflows/brownfield-fullstack.yaml

@@ -13,6 +13,7 @@ phases:
     sequence:
       - { agent: brownfield-wu, action: deep-discovery, creates: [artifacts/0-WU/wu-operational-report.md] }
       - { agent: brief, action: problem-extraction, creates: [artifacts/1-Brief/brief-report.md] }
+      - { gate: council-discovery, action: cross-provider-council, runtime: automatic }
   - phase: 1
     name: Planning
     category: PLAN
@@ -20,14 +21,16 @@ phases:
       - { agent: architect, action: map-and-design, creates: [artifacts/3-Architecture/architecture.md] }
       - { agent: detail, action: create-prd, creates: [artifacts/2-PRD/prd.md] }
       - { agent: ux, action: define-experience, creates: [artifacts/4-UX/ux-specification.md] }
+      - { agent: qa-planning, action: validate-planning, creates: [artifacts/7-QA-Planning/qa-planning-report.md] }
+      - { gate: council-planning, action: cross-provider-council, runtime: automatic }
       - { agent: phases, action: create-roadmap, creates: [artifacts/5-Phases/phases.md] }
       - { agent: tasks, action: seal-task-graph, creates: [artifacts/6-Tasks/tasks.md] }
-      - { agent: qa-planning, action: validate-planning, creates: [artifacts/7-QA-Planning/qa-planning-report.md] }
+      - { gate: council-execution-design, action: cross-provider-council, runtime: automatic }
   - { phase: 2, name: RAIL Execution, category: RAIL, runtime: project-local-rail, contract: .chati/v2/rail/handoffs }
   - { phase: 3, name: Release Lane, category: RELEASE, requires: [rail_complete, independent_review_approved, explicit_human_authorization] }
 
 transitions:
-  discover_to_plan: { trigger: "brief.status == completed", target: plan }
-  plan_to_rail: { trigger: "qa-planning.score >= 95 && tasks.handoff == sealed", target: rail }
+  discover_to_plan: { trigger: "brief.status == completed && council.discovery.verdict == accept", target: plan }
+  plan_to_rail: { trigger: "qa-planning.score >= 95 && tasks.handoff == sealed && council.execution_design.verdict == accept", target: rail }
   rail_to_release: { trigger: "rail.all_tasks_approved == true", target: release }
   release_to_completed: { trigger: "release.receipt.status == completed", target: completed }

package/framework/workflows/brownfield-service.yaml

@@ -8,7 +8,7 @@ workflow:
   planning_focus: [api, data, security, operations]
 
 phases:
-  - { phase: 0, name: Deep Discovery, category: DISCOVER, sequence: [{ agent: brownfield-wu, action: deep-discovery }, { agent: brief, action: problem-extraction }] }
+  - { phase: 0, name: Deep Discovery, category: DISCOVER, sequence: [{ agent: brownfield-wu, action: deep-discovery }, { agent: brief, action: problem-extraction }, { gate: council-discovery, action: cross-provider-council, runtime: automatic }] }
   - phase: 1
     name: Planning
     category: PLAN
@@ -16,12 +16,14 @@ phases:
       - { agent: architect, action: service-design }
       - { agent: detail, action: create-prd }
       - { agent: ux, action: api-consumer-experience }
+      - { agent: qa-planning, action: validate-planning }
+      - { gate: council-planning, action: cross-provider-council, runtime: automatic }
       - { agent: phases, action: create-roadmap }
       - { agent: tasks, action: seal-task-graph }
-      - { agent: qa-planning, action: validate-planning }
+      - { gate: council-execution-design, action: cross-provider-council, runtime: automatic }
   - { phase: 2, name: RAIL Execution, category: RAIL, runtime: project-local-rail }
   - { phase: 3, name: Release Lane, category: RELEASE, requires: [rail_complete, independent_review_approved, explicit_human_authorization] }
 
 transitions:
-  plan_to_rail: { trigger: "qa-planning.score >= 95 && tasks.handoff == sealed", target: rail }
+  plan_to_rail: { trigger: "qa-planning.score >= 95 && tasks.handoff == sealed && council.execution_design.verdict == accept", target: rail }
   rail_to_release: { trigger: "rail.all_tasks_approved == true", target: release }

package/framework/workflows/brownfield-ui.yaml

@@ -8,7 +8,7 @@ workflow:
   planning_focus: [design-system, accessibility, responsive-behavior, visual-regression]
 
 phases:
-  - { phase: 0, name: Deep Discovery, category: DISCOVER, sequence: [{ agent: brownfield-wu, action: deep-discovery }, { agent: brief, action: problem-extraction }] }
+  - { phase: 0, name: Deep Discovery, category: DISCOVER, sequence: [{ agent: brownfield-wu, action: deep-discovery }, { agent: brief, action: problem-extraction }, { gate: council-discovery, action: cross-provider-council, runtime: automatic }] }
   - phase: 1
     name: Planning
     category: PLAN
@@ -16,12 +16,14 @@ phases:
       - { agent: architect, action: frontend-design }
       - { agent: detail, action: create-prd }
       - { agent: ux, action: design-system-and-flows }
+      - { agent: qa-planning, action: validate-planning }
+      - { gate: council-planning, action: cross-provider-council, runtime: automatic }
       - { agent: phases, action: create-roadmap }
       - { agent: tasks, action: seal-task-graph }
-      - { agent: qa-planning, action: validate-planning }
+      - { gate: council-execution-design, action: cross-provider-council, runtime: automatic }
   - { phase: 2, name: RAIL Execution, category: RAIL, runtime: project-local-rail }
   - { phase: 3, name: Release Lane, category: RELEASE, requires: [rail_complete, independent_review_approved, explicit_human_authorization] }
 
 transitions:
-  plan_to_rail: { trigger: "qa-planning.score >= 95 && tasks.handoff == sealed", target: rail }
+  plan_to_rail: { trigger: "qa-planning.score >= 95 && tasks.handoff == sealed && council.execution_design.verdict == accept", target: rail }
   rail_to_release: { trigger: "rail.all_tasks_approved == true", target: release }

package/framework/workflows/greenfield-fullstack.yaml

@@ -13,6 +13,7 @@ phases:
     sequence:
       - { agent: greenfield-wu, action: operational-discovery, creates: [artifacts/0-WU/wu-operational-report.md] }
       - { agent: brief, action: problem-extraction, creates: [artifacts/1-Brief/brief-report.md] }
+      - { gate: council-discovery, action: cross-provider-council, runtime: automatic }
   - phase: 1
     name: Planning
     category: PLAN
@@ -20,14 +21,16 @@ phases:
       - { agent: detail, action: create-prd, creates: [artifacts/2-PRD/prd.md] }
       - { agent: architect, action: design-architecture, creates: [artifacts/3-Architecture/architecture.md] }
       - { agent: ux, action: define-experience, creates: [artifacts/4-UX/ux-specification.md] }
+      - { agent: qa-planning, action: validate-planning, creates: [artifacts/7-QA-Planning/qa-planning-report.md] }
+      - { gate: council-planning, action: cross-provider-council, runtime: automatic }
       - { agent: phases, action: create-roadmap, creates: [artifacts/5-Phases/phases.md] }
       - { agent: tasks, action: seal-task-graph, creates: [artifacts/6-Tasks/tasks.md] }
-      - { agent: qa-planning, action: validate-planning, creates: [artifacts/7-QA-Planning/qa-planning-report.md] }
+      - { gate: council-execution-design, action: cross-provider-council, runtime: automatic }
   - { phase: 2, name: RAIL Execution, category: RAIL, runtime: project-local-rail, contract: .chati/v2/rail/handoffs }
   - { phase: 3, name: Release Lane, category: RELEASE, requires: [rail_complete, independent_review_approved, explicit_human_authorization] }
 
 transitions:
-  discover_to_plan: { trigger: "brief.status == completed", target: plan }
-  plan_to_rail: { trigger: "qa-planning.score >= 95 && tasks.handoff == sealed", target: rail }
+  discover_to_plan: { trigger: "brief.status == completed && council.discovery.verdict == accept", target: plan }
+  plan_to_rail: { trigger: "qa-planning.score >= 95 && tasks.handoff == sealed && council.execution_design.verdict == accept", target: rail }
   rail_to_release: { trigger: "rail.all_tasks_approved == true", target: release }
   release_to_completed: { trigger: "release.receipt.status == completed", target: completed }

package/framework/workflows/standard-flow.yaml

@@ -13,18 +13,23 @@ phases:
     category: DISCOVER
     sequence:
       - { agent: brief, action: problem-extraction, creates: [artifacts/1-Brief/brief-report.md] }
+      - { gate: council-discovery, action: cross-provider-council, runtime: automatic, creates: [.chati/v2/council/discovery-<content-addressed>.json] }
   - phase: 1
     name: Planning
     category: PLAN
     sequence:
       - { agent: detail, action: create-prd, creates: [artifacts/2-PRD/prd.md] }
       - { agent: architect, action: focused-architecture, creates: [artifacts/3-Architecture/architecture.md] }
-      - { agent: tasks, action: seal-task-graph, creates: [artifacts/6-Tasks/tasks.md] }
+      - { agent: ux, action: define-experience, creates: [artifacts/4-UX/ux-specification.md] }
       - { agent: qa-planning, action: validate-planning, creates: [artifacts/7-QA-Planning/qa-planning-report.md] }
+      - { gate: council-planning, action: cross-provider-council, runtime: automatic, creates: [.chati/v2/council/planning-<content-addressed>.json] }
+      - { agent: phases, action: create-roadmap, creates: [artifacts/5-Phases/phases.md] }
+      - { agent: tasks, action: seal-task-graph, creates: [artifacts/6-Tasks/tasks.md, .chati/v2/planning/tasks.json] }
+      - { gate: council-execution-design, action: cross-provider-council, runtime: automatic, creates: [.chati/v2/council/execution-design-<content-addressed>.json] }
   - { phase: 2, name: RAIL Execution, category: RAIL, runtime: project-local-rail }
   - { phase: 3, name: Release Lane, category: RELEASE, requires: [rail_complete, independent_review_approved, explicit_human_authorization] }
 
 transitions:
-  discover_to_plan: { trigger: "brief.status == completed", target: plan }
-  plan_to_rail: { trigger: "qa-planning.score >= 95 && tasks.handoff == sealed", target: rail }
+  discover_to_plan: { trigger: "brief.status == completed && council.discovery.verdict == accept", target: plan }
+  plan_to_rail: { trigger: "qa-planning.score >= 95 && tasks.handoff == sealed && council.execution_design.verdict == accept", target: rail }
   rail_to_release: { trigger: "rail.all_tasks_approved == true", target: release }

package/node_modules/@chati/core/native/browser-proof-wire.h

@@ -0,0 +1,29 @@
+#ifndef CHATI_BROWSER_PROOF_WIRE_H
+#define CHATI_BROWSER_PROOF_WIRE_H
+#include <stdint.h>
+#include <string.h>
+
+#define CHATI_BROWSER_REQUEST_SIZE 104
+#define CHATI_BROWSER_RESPONSE_SIZE 116
+
+static int chati_browser_hex(const unsigned char *bytes, size_t length) {
+  for (size_t i = 0; i < length; i++) {
+    if (!((bytes[i] >= '0' && bytes[i] <= '9') || (bytes[i] >= 'a' && bytes[i] <= 'f'))) return 0;
+  }
+  return 1;
+}
+static unsigned int chati_browser_port(const unsigned char *bytes) {
+  return ((unsigned int)bytes[0] << 8) | bytes[1];
+}
+static int chati_browser_request_valid(const unsigned char *request, const char *nonce, const unsigned char *previous) {
+  return !memcmp(request, "CBP1", 4) && !memcmp(request + 4, nonce, 64)
+    && chati_browser_hex(request + 68, 32) && memcmp(request + 68, previous, 32) > 0
+    && chati_browser_port(request + 100) > 0 && chati_browser_port(request + 102) >= 1024;
+}
+static void chati_browser_response(unsigned char *response, const unsigned char *request, int proved, uint64_t generation) {
+  memcpy(response, request, CHATI_BROWSER_REQUEST_SIZE);
+  response[104] = proved ? 1 : 0;
+  memset(response + 105, 0, 3);
+  for (int i = 0; i < 8; i++) response[108 + i] = (unsigned char)(generation >> (56 - 8 * i));
+}
+#endif

package/node_modules/@chati/core/native/darwin-browser-listener.c

@@ -0,0 +1,36 @@
+/* Included by the Node-API boundary, never by the application. */
+#include "darwin-browser-listener.h"
+
+static napi_value create_darwin_browser_listener(napi_env env, napi_callback_info info) {
+  napi_value args[2], result;
+  int port;
+  if (!arguments(env, info, 1, args) || !integer(env, args[0], &port)) return NULL;
+  if (port < 1024 || port > 65535) return failure(env, "browser listener port", EINVAL);
+  int fd = socket(AF_INET, SOCK_STREAM, IPPROTO_TCP);
+  if (fd < 0) return failure(env, "browser listener socket", errno);
+  struct sockaddr_in address = { .sin_len = sizeof(address), .sin_family = AF_INET,
+    .sin_port = htons((uint16_t)port), .sin_addr.s_addr = htonl(INADDR_LOOPBACK) };
+  uint64_t generation;
+  int saved = 0;
+  if (fcntl(fd, F_SETFD, FD_CLOEXEC) < 0
+      || bind(fd, (struct sockaddr *)&address, sizeof(address)) < 0
+      || listen(fd, 128) < 0) saved = errno;
+  else if (!chati_darwin_listener(getpid(), fd, (unsigned int)port, &generation)) saved = EINVAL;
+  if (saved) { close(fd); return failure(env, "create exact browser listener", saved); }
+  if (napi_create_int32(env, fd, &result) != napi_ok) {
+    close(fd); napi_throw_error(env, "NATIVE_STORAGE_API_ERROR", "could not return browser listener"); return NULL;
+  }
+  return result;
+}
+
+static napi_value inspect_darwin_browser_listener(napi_env env, napi_callback_info info) {
+  napi_value args[3], result;
+  int fd, port;
+  uint64_t generation;
+  if (!arguments(env, info, 2, args) || !integer(env, args[0], &fd) || !integer(env, args[1], &port)) return NULL;
+  if (!chati_darwin_listener(getpid(), fd, (unsigned int)port, &generation)) {
+    return failure(env, "invalid exact browser listener", EINVAL);
+  }
+  CHECK(napi_create_bigint_uint64(env, generation, &result));
+  return result;
+}

package/node_modules/@chati/core/native/darwin-browser-listener.h

@@ -0,0 +1,32 @@
+/* Exact loopback listener capability. Seatbelt's localhost bind filter is not
+ * an address restriction. Only the trusted parent may create this socket. */
+#ifndef CHATI_DARWIN_BROWSER_LISTENER_H
+#define CHATI_DARWIN_BROWSER_LISTENER_H
+#include <errno.h>
+#include <libproc.h>
+#include <netinet/in.h>
+#include <stdint.h>
+#include <string.h>
+#include <sys/socket.h>
+#include <sys/proc_info.h>
+
+static int chati_darwin_listener(pid_t owner, int fd, unsigned int port, uint64_t *generation) {
+  struct socket_fdinfo info;
+  memset(&info, 0, sizeof(info));
+  if (port < 1024 || port > 65535 || fd < 0
+      || proc_pidfdinfo(owner, fd, PROC_PIDFDSOCKETINFO, &info, sizeof(info)) != (int)sizeof(info)) return 0;
+  const struct socket_info *socket = &info.psi;
+  const struct tcp_sockinfo *tcp = &socket->soi_proto.pri_tcp;
+  const struct in_sockinfo *ip = &tcp->tcpsi_ini;
+  // Darwin does not implement getsockopt(SO_ACCEPTCONN). The kernel socket
+  // record provides the real TCP state, not a JavaScript readiness assertion.
+  if (socket->soi_kind != SOCKINFO_TCP || socket->soi_family != AF_INET
+      || socket->soi_type != SOCK_STREAM || socket->soi_protocol != IPPROTO_TCP
+      || (socket->soi_options & SO_REUSEPORT) || tcp->tcpsi_state != TSI_S_LISTEN
+      || ip->insi_vflag != INI_IPV4 || ip->insi_lport != htons((uint16_t)port)
+      || ip->insi_laddr.ina_46.i46a_addr4.s_addr != htonl(INADDR_LOOPBACK)
+      || ip->insi_gencnt == 0) return 0;
+  *generation = ip->insi_gencnt;
+  return 1;
+}
+#endif

package/node_modules/@chati/core/native/darwin-browser-proof.h

@@ -0,0 +1,86 @@
+/* Included only by the Darwin launcher. The helper owns child and never reaps
+ * it while this service is open. A request cannot choose a process or address.
+ * fd9=request, fd10=reply. Neither descriptor reaches the application/reaper.
+ */
+#ifndef CHATI_DARWIN_BROWSER_PROOF_H
+#define CHATI_DARWIN_BROWSER_PROOF_H
+#include <libproc.h>
+#include <netinet/in.h>
+#include <sys/proc_info.h>
+#include "browser-proof-wire.h"
+
+static int chati_browser_child_state(pid_t child, siginfo_t *exited) {
+  memset(exited, 0, sizeof(*exited));
+  int status;
+  do { status = waitid(P_PID, (id_t)child, exited, WEXITED | WNOHANG | WNOWAIT); } while (status < 0 && errno == EINTR);
+  if (status < 0) return -1;
+  if (exited->si_pid != 0 && exited->si_pid != child) { errno = EIO; return -1; }
+  return exited->si_pid == child ? 1 : 0;
+}
+
+static int chati_browser_peer(pid_t child, unsigned int local_port, unsigned int remote_port, uint64_t *generation) {
+  struct proc_fdinfo descriptors[4097];
+  int size = proc_pidinfo(child, PROC_PIDLISTFDS, 0, descriptors, sizeof(descriptors));
+  if (size <= 0 || size >= (int)sizeof(descriptors) || size % sizeof(descriptors[0])) return 0;
+  long long started = chati_admission_monotonic_ms();
+  if (started < 0) return 0;
+  for (size_t i = 0; i < (size_t)size / sizeof(descriptors[0]); i++) {
+    long long now = chati_admission_monotonic_ms();
+    if (now < started || now - started > 250) return 0;
+    if (descriptors[i].proc_fdtype != PROX_FDTYPE_SOCKET) continue;
+    struct socket_fdinfo info;
+    memset(&info, 0, sizeof(info));
+    if (proc_pidfdinfo(child, descriptors[i].proc_fd, PROC_PIDFDSOCKETINFO, &info, sizeof(info)) != (int)sizeof(info)) continue;
+    const struct socket_info *socket = &info.psi;
+    const struct tcp_sockinfo *tcp = &socket->soi_proto.pri_tcp;
+    const struct in_sockinfo *ip = &tcp->tcpsi_ini;
+    if (socket->soi_kind != SOCKINFO_TCP || socket->soi_family != AF_INET
+      || socket->soi_type != SOCK_STREAM || socket->soi_protocol != IPPROTO_TCP
+      || tcp->tcpsi_state != TSI_S_ESTABLISHED || ip->insi_vflag != INI_IPV4
+      || ip->insi_lport != htons((uint16_t)remote_port) || ip->insi_fport != htons((uint16_t)local_port)
+      || ip->insi_laddr.ina_46.i46a_addr4.s_addr != htonl(INADDR_LOOPBACK)
+      || ip->insi_faddr.ina_46.i46a_addr4.s_addr != htonl(INADDR_LOOPBACK)
+      || ip->insi_gencnt == 0) continue;
+    *generation = ip->insi_gencnt;
+    return 1;
+  }
+  return 0;
+}
+
+/* Serial queries and waitid run in the original helper, never in a competing
+ * reaper thread. The caller MUST close fd9/fd10 before any waitpid, including
+ * every failure path. A dead child can never authorize a recycled PID.
+ */
+static int chati_browser_wait(pid_t child, const char *nonce, siginfo_t *exited) {
+  unsigned char request[CHATI_BROWSER_REQUEST_SIZE], response[CHATI_BROWSER_RESPONSE_SIZE];
+  unsigned char previous[32]; memset(previous, '0', sizeof(previous));
+  size_t offset = 0;
+  while (1) {
+    int state = chati_browser_child_state(child, exited);
+    if (state != 0) return state < 0 ? -1 : 0;
+    struct pollfd input = { .fd = 9, .events = POLLIN | POLLHUP };
+    int available = poll(&input, 1, 25);
+    if (available < 0) { if (errno == EINTR) continue; return -1; }
+    if (available == 0) continue;
+    if (input.revents & (POLLHUP | POLLERR | POLLNVAL)) { errno = EPIPE; return -1; }
+    if (!(input.revents & POLLIN)) continue;
+    ssize_t count = read(9, request + offset, sizeof(request) - offset);
+    if (count < 0 && errno == EINTR) continue;
+    if (count <= 0) { if (count == 0) errno = EPIPE; return -1; }
+    offset += (size_t)count;
+    if (offset < sizeof(request)) continue;
+    if (!chati_browser_request_valid(request, nonce, previous)) { errno = EINVAL; return -1; }
+    memcpy(previous, request + 68, sizeof(previous)); offset = 0;
+    state = chati_browser_child_state(child, exited);
+    if (state != 0) return state < 0 ? -1 : 0;
+    uint64_t generation = 0;
+    int proved = chati_browser_peer(child, chati_browser_port(request + 100), chati_browser_port(request + 102), &generation);
+    state = chati_browser_child_state(child, exited);
+    if (state != 0) return state < 0 ? -1 : 0;
+    chati_browser_response(response, request, proved, generation);
+    // One bounded PIPE_BUF-sized write, never stdout and never caller payload.
+    do { count = write(10, response, sizeof(response)); } while (count < 0 && errno == EINTR);
+    if (count != (ssize_t)sizeof(response)) { if (count >= 0) errno = EIO; return -1; }
+  }
+}
+#endif

package/node_modules/@chati/core/native/darwin-code-identity.h

@@ -0,0 +1,35 @@
+#ifndef CHATI_DARWIN_CODE_IDENTITY_H
+#define CHATI_DARWIN_CODE_IDENTITY_H
+#include <errno.h>
+#include <stdint.h>
+#include <string.h>
+#include <sys/types.h>
+
+/* XNU csops ABI, also used by Security's cskernel implementation. The SDK does
+ * not expose this declaration consistently. No pathname-derived hash fallback.
+ * https://github.com/apple-oss-distributions/xnu/blob/main/bsd/kern/kern_proc.c
+ * https://github.com/apple-oss-distributions/xnu/blob/main/osfmk/kern/cs_blobs.h
+ */
+extern int csops(pid_t, unsigned int, void *, size_t);
+enum { CHATI_CS_OPS_STATUS = 0, CHATI_CS_OPS_CDHASH = 5 };
+#define CHATI_CS_VALID UINT32_C(0x00000001)
+#define CHATI_CS_KILLED UINT32_C(0x01000000)
+
+/* Only for our own suspended, unreaped child and an expected CDHASH produced
+ * by full static validation of its immutable snapshot outside the sandbox.
+ * This is not general signature validation for mutable or arbitrary code. */
+static int chati_darwin_code_identity(pid_t child, const char *expected) {
+  if (child <= 1 || !expected || strlen(expected) != 40
+      || strspn(expected, "0123456789abcdef") != 40) return EINVAL;
+  unsigned char hash[20];
+  uint32_t status = 0;
+  if (csops(child, CHATI_CS_OPS_CDHASH, hash, sizeof(hash)) != 0) return errno ? errno : EIO;
+  if (csops(child, CHATI_CS_OPS_STATUS, &status, sizeof(status)) != 0) return errno ? errno : EIO;
+  if (!(status & CHATI_CS_VALID) || (status & CHATI_CS_KILLED)) return EACCES;
+  static const char hex[] = "0123456789abcdef";
+  for (size_t i = 0; i < sizeof(hash); i++) {
+    if (expected[i * 2] != hex[hash[i] >> 4] || expected[i * 2 + 1] != hex[hash[i] & 15]) return EACCES;
+  }
+  return 0;
+}
+#endif

package/node_modules/@chati/core/native/darwin-launch-messages.h

@@ -0,0 +1,37 @@
+/* Exact private wire format used by the native Darwin supervisor. This is
+ * serialization only, not process observation, signing or admission policy. */
+#ifndef CHATI_DARWIN_LAUNCH_MESSAGES_H
+#define CHATI_DARWIN_LAUNCH_MESSAGES_H
+#include <stdio.h>
+
+static int chati_format_darwin_ready(char *message, size_t capacity,
+    const char *nonce, int helper, int provider, const char *cdhash) {
+  return snprintf(message, capacity,
+    "{\"schema_version\":1,\"phase\":\"ready\",\"nonce\":\"%s\","
+    "\"helper_pid\":%d,\"provider_pid\":%d,\"verified_cdhash\":\"%s\","
+    "\"lifetime_kind\":\"darwin_process_group_v1\"}\n",
+    nonce, helper, provider, cdhash);
+}
+
+struct chati_darwin_completion {
+  long long elapsed_ms;
+  int exit_code;
+  int signal;
+  int supervisor_signal;
+  int reaper_acknowledged;
+};
+
+static int chati_format_darwin_completion(char *message, size_t capacity,
+    const char *nonce, int helper, int provider, const char *cdhash,
+    const struct chati_darwin_completion *result) {
+  return snprintf(message, capacity,
+    "{\"schema_version\":1,\"phase\":\"completed\",\"nonce\":\"%s\","
+    "\"helper_pid\":%d,\"provider_pid\":%d,\"verified_cdhash\":\"%s\","
+    "\"lifetime_kind\":\"darwin_process_group_v1\",\"elapsed_ms\":%lld,"
+    "\"exit_code\":%d,\"signal\":%d,\"supervisor_signal\":%d,"
+    "\"reaper_result\":\"%s\",\"process_group_empty\":true,\"detached_descendants\":\"unknown\"}\n",
+    nonce, helper, provider, cdhash, result->elapsed_ms, result->exit_code,
+    result->signal, result->supervisor_signal,
+    result->reaper_acknowledged ? "acknowledged" : "eperm_then_group_empty");
+}
+#endif