chati-dev 4.5.9 → 4.5.11

package/framework/manifest.json

@@ -1,5 +1,5 @@
 {
-  "createdAt": "2026-08-27T12:53:59.633Z",
+  "createdAt": "2026-08-27T14:40:11.488Z",
   "files": {
     "agents/build/dev.md": {
       "hash": "13c2b3855c1f815154a2f4020b99fd8ee71e701b41783f5f26696222720a1466",
@@ -17,8 +17,8 @@
       "type": "md"
     },
     "agents/discover/brownfield-wu.md": {
-      "hash": "b89e20408bdb0c672d6799507b0f9679c76df7f87f183f27b325070174ac490f",
-      "size": 18120,
+      "hash": "fed8f14838b00e867bc932a3c4c212e38d7dc7c8f2e4443eb3242d19e6e3a286",
+      "size": 18172,
       "type": "md"
     },
     "agents/discover/greenfield-wu.md": {
@@ -52,8 +52,8 @@
       "type": "md"
     },
     "agents/plan/tasks.md": {
-      "hash": "d6440ac7e7ecc9a24d89f39b1786e3cb218565a16b12ecba888e8899abe57b48",
-      "size": 28257,
+      "hash": "a42a321ca2834c20364edb663619d340ac29317b236820135f07013cae9a4a82",
+      "size": 27960,
       "type": "md"
     },
     "agents/plan/ux-brand-architect.md": {
@@ -97,8 +97,8 @@
       "type": "md"
     },
     "config.yaml": {
-      "hash": "2a0de0eae5e361cc23b1777573b3dadf4676ce8c231a3022dd14ebac385eb89f",
-      "size": 2669,
+      "hash": "1b1103f17b9c2ba5820d8fae13c388bedf1bb3cceec93d3cd613b1b6e878bfce",
+      "size": 2671,
       "type": "yaml"
     },
     "constitution.md": {
@@ -107,8 +107,8 @@
       "type": "md"
     },
     "context/governance.md": {
-      "hash": "bc39df23d48c2cbb005c8e062dfda53442a91f94ccc33f068e26f98d06fe412b",
-      "size": 6200,
+      "hash": "88b3a3463fc14a26459f3202bf939dc954392642e4ac20830429dffd0f209f1f",
+      "size": 6225,
       "type": "md"
     },
     "context/protocols.md": {
@@ -117,18 +117,18 @@
       "type": "md"
     },
     "context/quality.md": {
-      "hash": "43c417d43e47ab724aa559a5edfa476f555ff8a204fb116e9c2d7ceedb47f927",
-      "size": 1997,
+      "hash": "d6cb70d274425b4385a63bd67c217038de9c12992d973b16000b370442905022",
+      "size": 2247,
       "type": "md"
     },
     "context/root.md": {
-      "hash": "b76681d1bdd7c75e79733a520fc0c929858dc9399348dbb8ba30380e77c32849",
-      "size": 1217,
+      "hash": "adb70c8b7cac6934f2650dd683e5b08a01f6d81dc6f380b0b546e05cce4963d4",
+      "size": 1218,
       "type": "md"
     },
     "data/entity-registry.yaml": {
-      "hash": "c4b2005f61055a6f1d04c674ba369dbb997dda8d7f81991d6012f25b5a89210f",
-      "size": 34605,
+      "hash": "e56261884e29b046f3c4b5f4d0a22b4fa27bceba17d669d0606ea0a25d3c8237",
+      "size": 34606,
       "type": "yaml"
     },
     "data/model-limits.json": {
@@ -302,8 +302,8 @@
       "type": "js"
     },
     "hooks/git-push-authority.js": {
-      "hash": "5f4301a95a9b2ff252dbe2df0debccbbccdf6de7eb1ccec9c1a6015bf2353f6e",
-      "size": 4243,
+      "hash": "cb296129155464438b7f3f8834eb9d62674c34c0ef12ccba8769cd2938da97d8",
+      "size": 4666,
       "type": "js"
     },
     "hooks/license-guard.js": {
@@ -377,23 +377,23 @@
       "type": "js"
     },
     "i18n/en.yaml": {
-      "hash": "b5e9bf16c930a61543b17088a7267caea0c94eb32bfe0ae2e874ba15f5cdb4aa",
-      "size": 4929,
+      "hash": "6b1ede4a442a86194d561d4a7a2fc5bf2259d23b23ae48eeaa973cf8fce79f33",
+      "size": 8046,
       "type": "yaml"
     },
     "i18n/es.yaml": {
-      "hash": "5407e4c6adba697da8bf2e2dbdf39f1fd32935326166852d5b488487148320f1",
-      "size": 5204,
+      "hash": "2542bf4a6b68883cea81021ed5ea84f5f05368be3a47b79d1b797753966a18ed",
+      "size": 8632,
       "type": "yaml"
     },
     "i18n/fr.yaml": {
-      "hash": "2e3b50c56ee5f05f81c4e48fd048c679baae2280e3a9c03c589f8f82989eded4",
-      "size": 5276,
+      "hash": "58c8d34b1d752592dbd6beb32b240475fdf297847558e8589174d713bae439c8",
+      "size": 8777,
       "type": "yaml"
     },
     "i18n/pt.yaml": {
-      "hash": "da65aff46c8f16b1c6fd6be10b89b566253eec71fea0a42094878dcc9e4671fa",
-      "size": 5147,
+      "hash": "fba6466fc35f464344d9a40d1172100d65c5e42d406285e3653c9bbad59b5607",
+      "size": 8516,
       "type": "yaml"
     },
     "intelligence/confidence.yaml": {
@@ -472,8 +472,8 @@
       "type": "md"
     },
     "orchestrator/chati.md": {
-      "hash": "8d55e3e354e7e7cf4d28ca3aba5372df0580ca3b191e2e14696363867eba567a",
-      "size": 45355,
+      "hash": "fbba2ec83ded49329dc33f674accb391cc290cd1687048967a49fc70fb62f3af",
+      "size": 46016,
       "type": "md"
     },
     "package.json": {
@@ -857,8 +857,8 @@
       "type": "json"
     },
     "schemas/session.schema.json": {
-      "hash": "57b0aa1b097b2253664a548cad42652ed3ec759feab6d0c1098062e88048cf1e",
-      "size": 19069,
+      "hash": "0c9218aeec82d4db591e87ffede20ea13eef6c549472f9471a1cee9ee637ba57",
+      "size": 19145,
       "type": "json"
     },
     "schemas/task.schema.json": {
@@ -1352,5 +1352,5 @@
       "type": "yaml"
     }
   },
-  "version": "4.5.9"
+  "version": "4.5.11"
 }

package/framework/manifest.sig

@@ -1 +1 @@
-Hb7c+de1wUKAcc4qkLRzsVYqMzP02CNhfXf+bcp5ezJLqsH+KyZ7sOvQUpRf89mWC57jrLu/dscvchEyVdxQBQ==
+Bj1mLU/kLfzNbNJmeY/BPjrL5bTt0MdOuSyfbjFTPniA8ev8TVO7Om+EQDxO0a6V0PHMYmVXf1GcoYWz8Q/VDw==

package/framework/orchestrator/chati.md

@@ -65,7 +65,12 @@ When the user invokes `/chati`, execute this sequence:
 
 /chati providers:
   → Run: node .chati.dev/orchestrator/chati-router.js providers
-  → Display provider table and agent model assignments
+  → For v2, display three distinct blocks from JSON:
+     1. `planning_agent_models`, discovery and planning routing only
+     2. `rail_execution_pool`, eligible provider and model capabilities for task execution and review
+     3. `release_lane`, explicit authorization policy
+  → Never describe `dev`, `qa-implementation`, `qa-visual`, or `devops` as v2 pipeline agents
+  → Never infer that a provider with no planning agent assignment is unavailable to RAIL
   → Stay locked
 
 /chati resume:
@@ -75,7 +80,7 @@ When the user invokes `/chati`, execute this sequence:
   → Display:
      /chati              Start or resume session
      /chati status       Show project dashboard
-     /chati providers    List providers and agent models
+     /chati providers    Show planning routing and the RAIL execution pool
      /chati exit         Save and exit session
      /chati help         Show this help
   → Stay locked
@@ -319,7 +324,7 @@ returned `next` state. Do not treat it as an error.
 
 Planning phase agents (detail, architect, ux) run simultaneously.
 
-**NOTE (Article XXI):** When `features.agent_teams: true` in config.yaml, the orchestrator MUST attempt `spawn_team` FIRST for Planning Team (detail, architect, ux, qa-planning) and Build Team (dev, qa-implementation). Only fall back to `spawn_parallel` if team spawning is unavailable or fails. The CLI `orchestrate next` command handles this automatically - when teams are enabled, it returns `spawn_team` instead of `spawn_parallel`.
+**NOTE (Article XXI):** For v2, when `features.agent_teams: true` in config.yaml, the orchestrator MUST attempt `spawn_team` first for the Planning Team (detail, architect, ux, qa-planning). Only fall back to `spawn_parallel` if team spawning is unavailable or fails. After Tasks, RAIL owns execution and review. A Build Team is never formed in v2.
 
 1. Display naturally what is happening using user-facing language. Examples (pick one that fits the phase): "Working on the planning phase now." / "Reviewing the architecture and UX in parallel." NEVER say "spawning parallel group", "spawn_parallel", or list internal agent names like "detail, architect, ux".
 2. If `parallel_spawn_commands` is non-empty, execute every member's `command`
@@ -363,7 +368,7 @@ Parse the JSON response. Extract these values - you will need them in Step 2:
 
 If `fallback_required: true` → fall back silently to the "Action: Parallel Spawn" section. Do NOT display error messages.
 
-Display naturally what is happening. For Planning Team: "Working on the planning - designing the requirements, architecture, and user experience together." For Build Team: "Building this with continuous quality review." NEVER expose internal agent names.
+Display naturally what is happening: "Working on the planning, designing the requirements, architecture, and user experience together." Never expose internal agent names.
 
 ### MANDATORY Step 2: Spawn Teammates via Agent Tool
 
@@ -421,6 +426,7 @@ Agent tool call 4:
     Write your handoff to artifacts/handoffs/qa-planning-handoff.md when done.]
 ```
 
+<!-- CHATI_LEGACY_BUILD_START -->
 **Legacy compatibility only, installations without `.chati/v2/installation.json`: For Build Team** (BUILD phase) - Wave-Based Pipeline:
 
 For a v2 installation this section MUST NOT run. The `tasks` handoff returns
@@ -593,6 +599,8 @@ Before dissolving the team, verify both handoffs exist:
        STOP and return.]
 2. `artifacts/handoffs/qa-implementation-handoff.md` - should exist from Final QA Wave
 
+<!-- CHATI_LEGACY_BUILD_END -->
+
 ### Step 3: Collect Results
 
 When all Agent tool calls return:
@@ -700,9 +708,9 @@ The user is returning to an active session.
 
 ---
 
-## Action: User Preview
+## Action: User Preview (legacy runtime only)
 
-QA-Implementation passed. User must approve before deploy.
+This action is invalid when `.chati/v2/installation.json` exists. V2 preview evidence and external authorization belong to the RAIL Release Lane.
 
 1. Present QA results to user
 2. Options:
@@ -718,7 +726,7 @@ QA-Implementation passed. User must approve before deploy.
 
 ## Action: Complete
 
-Pipeline finished. Present final project summary. Run `orchestrate exit`.
+The RAIL Release Lane has completed or the legacy pipeline has finished. Present the final project summary. Run `orchestrate exit`.
 Congratulate the user.
 
 ---
@@ -862,12 +870,12 @@ interactive (default):
   → Agent-driven guided mode. Agent leads, user validates.
   → All 8 universal protocols apply.
 
-autonomous (Ralph Wiggum mode):
+autonomous:
   → Requires: most recent QA gate score >= 95% (Article XVII prerequisite).
   → If quality gate not met, inform user and suggest guided mode instead.
   → Agent executes without asking unless blocker encountered.
-  → Primarily for Dev agent during BUILD phase.
-  → QA gates always run regardless of mode.
+  → Primarily for dependency-ready RAIL tasks.
+  → Independent review and rework gates always run regardless of mode.
   → Activated by user request or orchestrator suggestion post-Brief.
 ```
 
@@ -906,12 +914,13 @@ discover/plan phase:
   BLOCK write to: everything else
   ALLOW read: everything
 
-build/validate phase:
+RAIL execution/review:
   ALLOW write to: everything
   ALLOW read: everything
 
-deploy phase:
-  ALLOW everything + infra operations
+Release Lane:
+  ALLOW evidence preparation
+  REQUIRE explicit human authorization before external action
 ```
 
 ### Backward Transitions
@@ -923,10 +932,10 @@ If QA finds spec or architecture issues:
 
 ### Root Layer Routing (Article XXII)
 
-When QA-Implementation classifies a fault via the Fault Vector Protocol:
+When the independent RAIL reviewer classifies a fault:
 - `INTENT` → escalate to user via deviation protocol (requirement is flawed)
 - `SPEC` → backward transition to Architect, UX, or Tasks agent
-- `CODE` → Dev agent silent correction loop (existing behavior)
+- `CODE` → bounded RAIL rework using the task's sealed execution binding
 - `DEFER` → add to session backlog, do not block approval
 
 ---
@@ -936,13 +945,13 @@ When QA-Implementation classifies a fault via the Fault Vector Protocol:
 ### EXCLUSIVE (only orchestrator)
 - Route messages to agents
 - Activate/deactivate agents
-- Execute mode transitions (planning → build → validate → deploy)
+- Execute mode transitions (discovery → planning → RAIL → Release Lane)
 - Manage session lock (activate/deactivate)
 - Handle deviations and re-routing
 - Manage backlog items
 - Spawn parallel terminals
 - Decide execution mode (interactive vs autonomous)
-- Form and dissolve Agent Teams (Team Lead role, Article XXI)
+- Form and dissolve the Planning Team (Team Lead role, Article XXI)
 - Monitor shared task list and mailbox during team execution
 - Detect and respond to echo events within teams (Article XXII)
 - Route corrections to correct layer via Root Layer Routing (Article XXII)
@@ -955,11 +964,11 @@ When QA-Implementation classifies a fault via the Fault Vector Protocol:
 - Generate session digests
 
 ### BLOCKED (never do this - redirect instead)
-- Write code or implementation files → route to dev
+- Write code or implementation files outside RAIL → route through the sealed RAIL task
 - Write specification documents → route to detail
 - Make architectural decisions → route to architect
-- Write tests → route to dev
-- Deploy or configure infrastructure → route to devops
+- Write tests outside RAIL → route through the sealed RAIL task
+- Deploy or configure infrastructure directly → route to the Release Lane authorization gate
 - Modify constitution or config files
 
 ---

package/framework/schemas/session.schema.json

@@ -20,7 +20,7 @@
       "description": "Normalized active_model recorded when /chati-update last completed. Article XXIV: when active_model differs from this, the orchestrator advises a harness re-audit. The advisory is driven entirely by this comparison; there is no separate flag."
     },
     "mode": {
-      "enum": ["discover", "plan", "build", "validate", "deploy", "completed"],
+      "enum": ["discover", "plan", "rail", "release", "build", "validate", "deploy", "completed"],
       "default": "discover",
       "description": "Flat pipeline macro-phase (mirrors project.state). Read by prism-engine and mode-governance hooks."
     },
@@ -67,7 +67,7 @@
       "properties": {
         "name": { "type": "string", "description": "Project name" },
         "type": { "enum": ["greenfield", "brownfield"], "description": "Project type" },
-        "state": { "enum": ["discover", "plan", "build", "validate", "deploy", "completed"], "description": "Current pipeline macro-phase" }
+        "state": { "enum": ["discover", "plan", "rail", "release", "build", "validate", "deploy", "completed"], "description": "Current pipeline macro-phase" }
       }
     },
     "execution_mode": {
@@ -235,8 +235,8 @@
         "required": ["timestamp", "from", "to", "trigger"],
         "properties": {
           "timestamp": { "type": "string", "format": "date-time" },
-          "from": { "enum": ["discover", "plan", "build", "validate", "deploy", "completed"] },
-          "to": { "enum": ["discover", "plan", "build", "validate", "deploy", "completed"] },
+          "from": { "enum": ["discover", "plan", "rail", "release", "build", "validate", "deploy", "completed"] },
+          "to": { "enum": ["discover", "plan", "rail", "release", "build", "validate", "deploy", "completed"] },
           "trigger": { "type": "string", "description": "What caused the transition (agent completion, override, backward)" },
           "type": { "enum": ["automatic", "backward", "override"], "description": "Transition classification" },
           "skipped_agents": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "chati-dev",
-  "version": "4.5.9",
+  "version": "4.5.11",
   "description": "AI-Powered Multi-Agent Orchestration System - Structured vibe coding for Full Stack Development",
   "type": "module",
   "bin": {

package/src/config/framework-adapter.js

@@ -201,11 +201,19 @@ function buildReplacementConfig(provider) {
  * @returns {string} Adapted content for the target provider
  */
 export function adaptFrameworkFile(content, filePath, provider) {
-  if (provider === 'claude') return content;
   if (!content) return content;
 
-  const config = buildReplacementConfig(provider);
   let result = content;
+  if (filePath === 'orchestrator/chati.md') {
+    result = result.replace(
+      /<!-- CHATI_LEGACY_BUILD_START -->[\s\S]*?<!-- CHATI_LEGACY_BUILD_END -->\s*/g,
+      'For installations without `.chati/v2/installation.json`, use the separately bundled legacy compatibility runtime.\n\n',
+    );
+  }
+
+  if (provider === 'claude') return result;
+
+  const config = buildReplacementConfig(provider);
 
   // 1. Apply ordered string replacements (most specific first)
   for (const [search, replace] of config.strings) {

package/src/context/layers/l1-global.js

@@ -15,7 +15,9 @@ const STATE_TO_GOVERNANCE_MODE = {
   planning: 'planning',
   build: 'build',
   validate: 'build',
+  rail: 'build',
   deploy: 'deploy',
+  release: 'deploy',
   completed: 'deploy',
 };
 

package/src/installer/core.js

@@ -560,16 +560,16 @@ Governance rules are in \`.chati.dev/constitution.md\`.
 \`\`\`
 DISCOVER: WU -> Brief
 PLAN:     [Planning Team: Detail + Architect + UX + QA-Planning] -> Phases -> Tasks
-BUILD:    [Build Team: Dev + QA-Implementation] -> QA-Visual
-DEPLOY:   DevOps
+RAIL:     Sealed task graph -> Execute -> Independent Review -> Bounded Rework
+RELEASE:  Evidence gate -> Explicit human authorization -> External action
 \`\`\`
 
 ## Agents
 - DISCOVER: .chati.dev/agents/discover/
 - PLAN: .chati.dev/agents/plan/
-- Quality: .chati.dev/agents/quality/
-- BUILD: .chati.dev/agents/build/
-- DEPLOY: .chati.dev/agents/deploy/
+- Planning Quality: .chati.dev/agents/quality/qa-planning.md
+- RAIL Runtime: .chati.dev/_cli/ and .chati/v2/rail/
+- Release Lane: RAIL completion evidence plus explicit authorization
 `;
 }
 

package/src/installer/templates.js

@@ -62,11 +62,12 @@ export function generateSessionYaml(config) {
     reasoning_escalations: [],
   };
 
-  // Initialize all 13 agent statuses
+  // V2 ends the classic agent pipeline at Tasks. RAIL owns implementation,
+  // independent review, bounded rework and the Release Lane after handoff.
   const agentNames = [
     'greenfield-wu', 'brownfield-wu', 'brief', 'detail',
     'architect', 'ux', 'phases', 'tasks',
-    'qa-planning', 'dev', 'qa-implementation', 'qa-visual', 'devops',
+    'qa-planning',
   ];
 
   for (const agent of agentNames) {

package/src/orchestrator/cli.js

@@ -53,7 +53,10 @@ import {
   recordEvent, EventType, clearTimeline,
 } from '../intelligence/timeline.js';
 import { updateClaudeMd } from '../memory/magic-docs.js';
-import { loadRuntimeInstallationV2, resolveRuntimeInvocationV2 } from './runtime-installation-v2.js';
+import {
+  loadRuntimeInstallationV2, resolveRuntimeInvocationV2,
+  describeRuntimeInstallationV2, V2_PLANNING_AGENTS,
+} from './runtime-installation-v2.js';
 import { compilePlanningHandoff, PLANNING_V2_TASKS_PATH } from './planning-runtime.js';
 import { persistRailHandoff } from './rail-runtime.js';
 
@@ -84,6 +87,16 @@ const RESUME_MESSAGES = {
   fr: 'Session sauvee. Tapez /chati pour reprendre.',
 };
 
+function getRuntimeAgentPipeline(projectDir, session = null) {
+  if (!loadRuntimeInstallationV2(projectDir)) return AGENT_PIPELINE;
+  const projectType = session?.project_type || session?.project?.type || 'greenfield';
+  const selectedWu = projectType === 'brownfield' ? 'brownfield-wu' : 'greenfield-wu';
+  return AGENT_PIPELINE.filter(({ name }) =>
+    V2_PLANNING_AGENTS.includes(name)
+    && (!name.endsWith('-wu') || name === selectedWu)
+  );
+}
+
 // ---------------------------------------------------------------------------
 // QA-Visual scope helpers (Fase 6 — scope isolation)
 //
@@ -516,8 +529,13 @@ function errorResult(message, code) {
  */
 function sessionToPipelineState(session, projectDir) {
   const agents = {};
+  const installationV2 = loadRuntimeInstallationV2(projectDir);
+  const allowedAgents = installationV2
+    ? new Set(getRuntimeAgentPipeline(projectDir, session).map(({ name }) => name))
+    : null;
   if (session.agents) {
     for (const [name, data] of Object.entries(session.agents)) {
+      if (allowedAgents && !allowedAgents.has(name)) continue;
       agents[name] = {
         status: data.status || 'pending',
         score: data.score ?? null,
@@ -536,7 +554,9 @@ function sessionToPipelineState(session, projectDir) {
     startedAt: session.started_at || new Date().toISOString(),
     completedAt: null,
     agents,
-    completedAgents: session.completed_agents || [],
+    completedAgents: allowedAgents
+      ? (session.completed_agents || []).filter((name) => allowedAgents.has(name))
+      : (session.completed_agents || []),
     currentAgent: session.current_agent || null,
     modeTransitions: session.mode_transitions || [],
     history: [],
@@ -767,11 +787,12 @@ async function handleNext(projectDir) {
     const activating = ['activate_interactive', 'spawn_routed_interactive', 'spawn_autonomous', 'spawn_team', 'spawn_parallel'];
     if (activating.includes(result.action)) {
       try {
+        const runtimePipeline = getRuntimeAgentPipeline(projectDir, result.session);
         writeSessionLock(projectDir, result.agent, {
           phase: result.phase || 'discover',
           mode: result.session?.execution_mode || 'interactive',
           position: result.pipeline_progress?.completedAgents?.length ?? 0,
-          total: AGENT_PIPELINE.length,
+          total: runtimePipeline.length,
           progress: result.pipeline_progress?.progress ?? 0,
         });
       } catch { /* non-fatal */ }
@@ -798,6 +819,38 @@ async function _handleNextInner(projectDir) {
     return errorResult(`Session invalid: ${validation.reason}`, 'SESSION_INVALID');
   }
 
+  const installationV2 = loadRuntimeInstallationV2(projectDir);
+  const runtimePipeline = getRuntimeAgentPipeline(projectDir, session);
+  if (installationV2 && session.rail_handoff_id) {
+    const completedPlanning = runtimePipeline.length;
+    return {
+      action: 'rail_execute',
+      agent: 'rail',
+      phase: 'rail',
+      handoff_id: session.rail_handoff_id,
+      rail_state: session.rail_state || 'ready',
+      pipeline_progress: {
+        phase: 'rail', progress: 100, completedCount: completedPlanning,
+        totalAgents: completedPlanning, completedAgents: session.completed_agents || [],
+        currentAgent: 'rail', nextAgent: null,
+      },
+      session: {
+        language: session.language,
+        project_type: session.project_type || session.project?.type,
+        execution_mode: session.execution_mode,
+      },
+      status_summary: 'Planning is sealed. Resume execution through RAIL.',
+    };
+  }
+
+  const legacyExecutionAgents = new Set(['dev', 'qa-implementation', 'qa-visual', 'devops']);
+  if (installationV2 && legacyExecutionAgents.has(session.current_agent)) {
+    return errorResult(
+      'A v2 installation cannot resume a legacy Build/Deploy agent. Re-seal Tasks to create the RAIL handoff.',
+      'V2_RAIL_HANDOFF_REQUIRED',
+    );
+  }
+
   const pipelineState = sessionToPipelineState(session, projectDir);
 
   if (isPipelineComplete(pipelineState)) {
@@ -836,7 +889,7 @@ async function _handleNextInner(projectDir) {
           handoff_status: { valid: true, missing: [], warnings: ['Resuming dev as Build Team'] },
           gate_status: { canAdvance: true, reason: 'Build Team formation (Article XXI)' },
           model_info: resolveAgentModel(agent, projectDir),
-          context_bracket: estimateContextBracket(completedAgents.length, AGENT_PIPELINE.length),
+          context_bracket: estimateContextBracket(completedAgents.length, runtimePipeline.length),
           pipeline_progress: getPipelineProgress(pipelineState),
           session: { language: session.language, project_type: session.project_type || session.project?.type, execution_mode: session.execution_mode, user_level: session.user_level || 'auto' },
           status_summary: `Forming Build Team: dev + qa-implementation.`,
@@ -858,7 +911,7 @@ async function _handleNextInner(projectDir) {
         handoff_status: { valid: true, missing: [], warnings: ['Resuming in-progress agent'] },
         gate_status: { canAdvance: true, reason: 'Agent already in progress' },
         model_info: modelInfo,
-        context_bracket: estimateContextBracket(completedAgents.length, AGENT_PIPELINE.length),
+        context_bracket: estimateContextBracket(completedAgents.length, runtimePipeline.length),
         pipeline_progress: getPipelineProgress(pipelineState),
         session: { language: session.language, project_type: session.project_type || session.project?.type, execution_mode: session.execution_mode, user_level: session.user_level || 'auto' },
         status_summary: `Resuming ${agent} (in progress).`,
@@ -887,7 +940,7 @@ async function _handleNextInner(projectDir) {
       handoff_status: { valid: true, missing: [], warnings: [] },
       gate_status: { canAdvance: true, reason: 'First agent in pipeline' },
       model_info: modelInfo,
-      context_bracket: estimateContextBracket(0, AGENT_PIPELINE.length),
+      context_bracket: estimateContextBracket(0, runtimePipeline.length),
       pipeline_progress: getPipelineProgress(pipelineState),
       session: { language: session.language, project_type: projectType, execution_mode: session.execution_mode, user_level: session.user_level || 'auto' },
       status_summary: `Starting pipeline with ${firstAgent}.`,
@@ -927,6 +980,13 @@ async function _handleNextInner(projectDir) {
   const agentDef = getAgentDefinition(nextAgent);
   const isInteractive = INTERACTIVE_AGENTS.includes(nextAgent);
 
+  if (installationV2 && legacyExecutionAgents.has(nextAgent)) {
+    return errorResult(
+      'Planning reached the v2 execution boundary without a sealed RAIL handoff. Complete or re-run Tasks instead of entering Build/Deploy.',
+      'V2_RAIL_HANDOFF_REQUIRED',
+    );
+  }
+
   // Validate handoff from previous agent
   let handoffStatus;
   try {
@@ -1011,7 +1071,7 @@ async function _handleNextInner(projectDir) {
   recordEvent(projectDir, EventType.AGENT_ACTIVATED, nextAgent, { action, phase: agentDef?.phase });
 
   const progress = getPipelineProgress(pipelineState);
-  const bracket = estimateContextBracket(completedAgents.length, AGENT_PIPELINE.length);
+  const bracket = estimateContextBracket(completedAgents.length, runtimePipeline.length);
 
   const result = {
     action,
@@ -1851,6 +1911,8 @@ async function handleAdvance(projectDir, args) {
   // the handoff identifier and must enter the project-local RAIL lifecycle.
   if (handoffData.rail_handoff) {
     const railState = {
+      mode: 'rail',
+      project: { ...session.project, state: 'rail' },
       current_agent: 'rail',
       last_handoff: agent,
       pipeline_position: (session.completed_agents || []).length + 1,
@@ -1860,12 +1922,28 @@ async function handleAdvance(projectDir, args) {
     };
     const saved = await updateSession(projectDir, railState);
     if (saved && saved.saved === false) return errorResult(`Session update failed: ${saved.error}`, 'SESSION_WRITE_FAILED');
+    const runtimePipeline = getRuntimeAgentPipeline(projectDir, session);
+    try {
+      writeSessionLock(projectDir, 'rail', {
+        phase: 'rail', mode: session.execution_mode || 'interactive',
+        position: runtimePipeline.length, total: runtimePipeline.length, progress: 100,
+      });
+      updateClaudeMd(projectDir, {
+        currentAgent: 'rail',
+        progress: { progress: 100, completedCount: runtimePipeline.length, totalAgents: runtimePipeline.length },
+      });
+    } catch { /* non-fatal: the canonical session state has already been persisted */ }
     return {
       advanced: true,
       agent_completed: agent,
       score,
       rail_ready: true,
       rail_handoff: handoffData.rail_handoff,
+      pipeline_progress: {
+        phase: 'rail', progress: 100, completedCount: runtimePipeline.length,
+        totalAgents: runtimePipeline.length, completedAgents: [...(session.completed_agents || []), agent],
+        currentAgent: 'rail', nextAgent: null,
+      },
       next: {
         action: 'rail_execute',
         handoff_id: handoffData.rail_handoff.handoff.handoff_id,
@@ -2277,8 +2355,10 @@ async function handleStatus(projectDir) {
   }
 
   // Build model map for all agents
+  const runtimePipeline = getRuntimeAgentPipeline(projectDir, session);
+  const runtimeAgentNames = new Set(runtimePipeline.map(({ name }) => name));
   const agentModels = {};
-  for (const agentDef of AGENT_PIPELINE) {
+  for (const agentDef of runtimePipeline) {
     agentModels[agentDef.name] = resolveAgentModel(agentDef.name, projectDir);
   }
 
@@ -2309,9 +2389,9 @@ async function handleStatus(projectDir) {
     handoff_history: handoffHistory,
     deviation_count: (session.deviations || []).length,
     backlog: session.backlog || [],
-    agents: session.agents || {},
+    agents: Object.fromEntries(Object.entries(session.agents || {}).filter(([name]) => runtimeAgentNames.has(name))),
     agent_models: agentModels,
-    context_bracket: estimateContextBracket((session.completed_agents || []).length, AGENT_PIPELINE.length),
+    context_bracket: estimateContextBracket((session.completed_agents || []).length, runtimePipeline.length),
     context: {
       model:             activeModel,
       provider:          activeProvider,
@@ -2434,15 +2514,25 @@ async function handleExit(projectDir, args) {
 }
 
 async function handleProviders(projectDir) {
+  const artifact = loadRuntimeInstallationV2(projectDir);
+  if (artifact) {
+    const { session } = loadSession(projectDir);
+    const planningAgentModels = {};
+    for (const { name } of getRuntimeAgentPipeline(projectDir, session)) {
+      planningAgentModels[name] = resolveAgentModel(name, projectDir);
+    }
+    return {
+      ...describeRuntimeInstallationV2(artifact),
+      planning_agent_models: planningAgentModels,
+    };
+  }
+
   const agentModels = {};
   for (const agentDef of AGENT_PIPELINE) {
     agentModels[agentDef.name] = resolveAgentModel(agentDef.name, projectDir);
   }
 
-  const artifact = loadRuntimeInstallationV2(projectDir);
-  const enabledProviders = artifact
-    ? artifact.installation.enabled_providers.map(({ provider_id, harness_id }) => ({ provider_id, harness_id }))
-    : [...new Set(Object.values(agentModels).map(({ provider }) => provider).filter(Boolean))].map((harness_id) => ({ harness_id }));
+  const enabledProviders = [...new Set(Object.values(agentModels).map(({ provider }) => provider).filter(Boolean))].map((harness_id) => ({ harness_id }));
 
   return {
     enabled_providers: enabledProviders,