codex-workflow-v2 2.0.0-alpha.4 → 2.0.0-alpha.7

package/roles/delivery-coordinator.md

@@ -12,6 +12,26 @@ Own state transitions, dispatch envelopes, evidence collection, and recovery gui
   request the user's explicit decision, and end the turn. Never call the acceptance command
   in the same turn that produced or displayed the gate.
 - Accept a Milestone only after a later user message explicitly approves that exact
-  confirmation code. Do not infer approval from a request to validate, finish, or continue.
+  confirmation code, or through the exact active Milestone Autonomy Contract option. Do not
+  infer approval from a request to validate, finish, or continue.
+- During initial Milestone planning, materialize the complete linked Task set and record one
+  full membership Plan. When a Milestone Autonomy Contract is active, evolve only membership;
+  any outcome, success-signal, acceptance, check, discovery, or base-branch change returns to
+  the human scope-change gate.
+- Use the Milestone contract for Project Memory approval only through the exact atomic
+  content-only Task context-refresh route; never use it for standalone map approval.
 - Dispatch one Worker at a time for a concrete Step.
+- A Milestone coordinator creates one dedicated user-visible Codex Task chat for each required
+  Task. The Milestone chat owns ordering, exact delegated approvals, merge observation,
+  validation, and final acceptance; it does not accumulate implementation for every Task.
+- Before authorizing a high-risk Plan, require the Technical Planner's migration/concurrency/
+  restart/crash/provider risk review and failure-specific checks.
+- After a second failed independent Task review, require a separate corrective Plan Auditor
+  and pass its evidence through `--corrective-audit-file`. Continue only for
+  `decision=continue-fix`; replan/split/stop decisions return to the coordinator or user.
+- Use the exact derived Worker and corrective Auditor actors returned by `next`; do not pause
+  for the user to invent routing identifiers.
+- Use `task context-refresh` only when `next.contextRefresh` offers the exact delegated,
+  content-only option. Classification, authority, source-set, gap, or conflict changes still
+  require the ordinary visible Knowledge Map flow.
 - Do not make product-scope decisions or implement production changes.

package/roles/independent-reviewer.md

@@ -7,4 +7,7 @@ Compare requirements, acceptance, Plan, task-branch diff, checks, and generated
 - Operate read-only and do not fix findings.
 - Mark the review `unverified` when read-only isolation or required evidence is unavailable.
 - A failed review must contain actionable findings; a passed review contains none.
+- For migrations, concurrency, restart/replay, crash recovery, and external providers, reject
+  green happy-path evidence that omits populated upgrades, deterministic races, restart/crash
+  windows, or provider failure/default behavior required by the approved Plan.
 - Do not grant final acceptance on behalf of the user.

package/roles/technical-planner.md

@@ -6,5 +6,15 @@ Translate an approved Brief into an execution-ready Plan.
 - Declare `knowledgeImpact`, its reason, targets, and `graphUse`; do not hide missing knowledge as an implementation choice.
 - Every requirement must be covered by at least one `STEP-*`.
 - Each Step declares dependencies, outputs, allowed writes, forbidden scope, and checks.
+- Perform a risk review before `plan-set`. A Plan that touches migrations, concurrent state,
+  restart/replay, crash recovery, or an external provider must include failure-specific checks
+  in the original Steps: populated forward upgrades, deterministic races, restart/crash
+  windows, and provider failure/default behavior as applicable.
+- For every guarded failure mode, define one hostile counterexample, the expected safe result,
+  and the exact executable Step check that proves it. A happy-path check is not a proof
+  obligation for an adversarial or crash-window claim.
+- Split a Task when one acceptance slice would otherwise combine persistence migration,
+  recovery orchestration, and executable composition. Do not use arbitrary line/file limits;
+  split on independently verifiable failure boundaries.
 - Do not edit production files or silently expand the Brief.
 - Return unresolved semantic choices to the user through the Delivery Coordinator.

package/roles/worker.md

@@ -7,4 +7,8 @@ Implement exactly one dispatched Step under its context envelope.
 - Read only declared inputs and repository context needed for the Step.
 - Write only `allowedWrites`; stop on required scope expansion.
 - Run the declared checks and report limitations honestly.
+- Leave all Step changes uncommitted. Do not run `git add`, `git commit`, `git amend`,
+  reset, rebase, or another Git-history mutation. The coordinator invokes
+  `task step-complete`; Workflow core then runs the configured checks, creates the atomic
+  Step commit, and records its evidence.
 - Do not edit the Brief, Plan, acceptance, other Steps, workflow state, or Git history manually.

package/schemas/adoption-posture-event.schema.json

@@ -0,0 +1,129 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://codex-workflow.local/schemas/adoption-posture-event.schema.json",
+  "title": "Codex Workflow V2 Alpha.6 Adoption Posture Event",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "eventId",
+    "projectId",
+    "eventType",
+    "actor",
+    "packageVersion",
+    "protocolVersion",
+    "stateSchemaVersion",
+    "adoptionBoundaryAt",
+    "baselineDigestHash",
+    "sidecarBaselineHash",
+    "confirmationCodeBindingHash",
+    "repositoryIdentity",
+    "terminalMilestones",
+    "terminalTasks",
+    "activeTasks",
+    "previousEventHash",
+    "recordedAt",
+    "eventHash"
+  ],
+  "properties": {
+    "eventId": { "type": "string", "minLength": 1 },
+    "projectId": { "type": "string", "pattern": "^[a-f0-9]{24}$" },
+    "eventType": { "enum": ["project-registration", "adoption-apply"] },
+    "actor": { "type": ["string", "null"], "minLength": 1 },
+    "packageVersion": { "type": "string", "minLength": 1 },
+    "protocolVersion": { "const": 1 },
+    "stateSchemaVersion": { "const": 2 },
+    "adoptionBoundaryAt": { "type": "string", "format": "date-time" },
+    "baselineDigestHash": { "$ref": "#/$defs/hash64" },
+    "sidecarBaselineHash": { "$ref": "#/$defs/hash64" },
+    "confirmationCodeBindingHash": { "$ref": "#/$defs/nullableHash64" },
+    "repositoryIdentity": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["repositoryRoot", "gitCommonDir"],
+      "properties": {
+        "repositoryRoot": { "type": "string", "minLength": 1 },
+        "gitCommonDir": { "type": "string", "minLength": 1 }
+      }
+    },
+    "terminalMilestones": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["milestoneId", "revision", "status"],
+        "properties": {
+          "milestoneId": { "$ref": "#/$defs/milestoneId" },
+          "revision": { "type": "integer", "minimum": 1 },
+          "status": { "enum": ["accepted", "cancelled"] }
+        }
+      }
+    },
+    "terminalTasks": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["taskId", "revision", "status"],
+        "properties": {
+          "taskId": { "$ref": "#/$defs/taskId" },
+          "revision": { "type": "integer", "minimum": 1 },
+          "status": { "enum": ["merged", "cancelled"] }
+        }
+      }
+    },
+    "activeTasks": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["taskId", "taskRevision", "status", "completedSteps", "remainingStepIds"],
+        "properties": {
+          "taskId": { "$ref": "#/$defs/taskId" },
+          "taskRevision": { "type": "integer", "minimum": 1 },
+          "status": {
+            "enum": [
+              "planning",
+              "awaiting_execution_authorization",
+              "ready",
+              "in_progress",
+              "validating",
+              "needs_fix",
+              "awaiting_final_acceptance",
+              "merging",
+              "ready_to_merge",
+              "blocked"
+            ]
+          },
+          "completedSteps": {
+            "type": "array",
+            "items": {
+              "type": "object",
+              "additionalProperties": false,
+              "required": ["stepId", "status", "evidenceHash"],
+              "properties": {
+                "stepId": { "$ref": "#/$defs/stepId" },
+                "status": { "enum": ["completed", "skipped"] },
+                "evidenceHash": { "$ref": "#/$defs/nullableHash64" }
+              }
+            }
+          },
+          "remainingStepIds": {
+            "type": "array",
+            "uniqueItems": true,
+            "items": { "$ref": "#/$defs/stepId" }
+          }
+        }
+      }
+    },
+    "previousEventHash": { "$ref": "#/$defs/nullableHash64" },
+    "recordedAt": { "type": "string", "format": "date-time" },
+    "eventHash": { "$ref": "#/$defs/hash64" }
+  },
+  "$defs": {
+    "milestoneId": { "type": "string", "pattern": "^MS-[0-9A-HJKMNP-TV-Z]{26}$" },
+    "taskId": { "type": "string", "pattern": "^TASK-[0-9A-HJKMNP-TV-Z]{26}$" },
+    "stepId": { "type": "string", "pattern": "^STEP-[0-9]{3}(?:-[A-Z0-9-]+)?$" },
+    "hash64": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+    "nullableHash64": { "type": ["string", "null"], "pattern": "^[a-f0-9]{64}$" }
+  }
+}

package/schemas/corrective-decision-event.schema.json

@@ -0,0 +1,55 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://codex-workflow.local/schemas/corrective-decision-event.schema.json",
+  "title": "Codex Workflow V2 Alpha.6 Corrective Decision Event",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "eventId",
+    "taskId",
+    "stepId",
+    "triggeringAttemptCount",
+    "decision",
+    "auditor",
+    "coveredFindingIds",
+    "coveredEventIds",
+    "planHash",
+    "previousEventHash",
+    "recordedAt",
+    "eventHash"
+  ],
+  "properties": {
+    "eventId": { "type": "string", "minLength": 1 },
+    "taskId": { "$ref": "#/$defs/taskId" },
+    "stepId": { "$ref": "#/$defs/stepId" },
+    "triggeringAttemptCount": { "type": "integer", "minimum": 3 },
+    "decision": {
+      "enum": ["continue-fix", "replan-required", "split-required", "stop-escalate"]
+    },
+    "auditor": { "type": "string", "minLength": 1 },
+    "coveredFindingIds": {
+      "type": "array",
+      "uniqueItems": true,
+      "items": { "type": "string", "minLength": 1 }
+    },
+    "coveredEventIds": {
+      "type": "array",
+      "uniqueItems": true,
+      "items": { "type": "string", "minLength": 1 }
+    },
+    "planHash": { "$ref": "#/$defs/hash64" },
+    "previousEventHash": { "$ref": "#/$defs/nullableHash64" },
+    "recordedAt": { "type": "string", "format": "date-time" },
+    "eventHash": { "$ref": "#/$defs/hash64" }
+  },
+  "anyOf": [
+    { "properties": { "coveredFindingIds": { "minItems": 1 } } },
+    { "properties": { "coveredEventIds": { "minItems": 1 } } }
+  ],
+  "$defs": {
+    "taskId": { "type": "string", "pattern": "^TASK-[0-9A-HJKMNP-TV-Z]{26}$" },
+    "stepId": { "type": "string", "pattern": "^STEP-[0-9]{3}(?:-[A-Z0-9-]+)?$" },
+    "hash64": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+    "nullableHash64": { "type": ["string", "null"], "pattern": "^[a-f0-9]{64}$" }
+  }
+}

package/schemas/corrective-plan-audit.schema.json

@@ -0,0 +1,20 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://codex-workflow.local/schemas/corrective-plan-audit.schema.json",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["auditor", "summary", "decision", "reviewedFindingIds"],
+  "properties": {
+    "auditor": { "type": "string", "minLength": 1 },
+    "summary": { "type": "string", "minLength": 1 },
+    "decision": {
+      "enum": ["continue-fix", "replan-required", "split-required", "stop-escalate"]
+    },
+    "reviewedFindingIds": {
+      "type": "array",
+      "minItems": 1,
+      "uniqueItems": true,
+      "items": { "type": "string", "minLength": 1 }
+    }
+  }
+}

package/schemas/milestone-autonomy-event.schema.json

@@ -0,0 +1,45 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://codex-workflow.local/schemas/milestone-autonomy-event.schema.json",
+  "title": "Codex Workflow V2 Alpha.7 Milestone Autonomy Event",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "eventId",
+    "previousEventHash",
+    "recordedAt",
+    "eventHash",
+    "eventType",
+    "projectId",
+    "milestoneId",
+    "milestoneRevision",
+    "principal",
+    "delegate",
+    "issuedAt",
+    "expiresAt",
+    "semanticScopeHash",
+    "delegationGrantId",
+    "delegationPolicyHash"
+  ],
+  "properties": {
+    "eventId": { "type": "string", "pattern": "^MAC-[0-9A-HJKMNP-TV-Z]{26}$" },
+    "previousEventHash": { "$ref": "#/$defs/nullableHash64" },
+    "recordedAt": { "type": "string", "format": "date-time" },
+    "eventHash": { "$ref": "#/$defs/hash64" },
+    "eventType": { "const": "issued" },
+    "projectId": { "type": "string", "minLength": 1 },
+    "milestoneId": { "type": "string", "pattern": "^MS-[0-9A-HJKMNP-TV-Z]{26}$" },
+    "milestoneRevision": { "type": "integer", "minimum": 1 },
+    "principal": { "type": "string", "minLength": 1 },
+    "delegate": { "type": "string", "pattern": "^agent:.+" },
+    "issuedAt": { "type": "string", "format": "date-time" },
+    "expiresAt": { "type": "string", "format": "date-time" },
+    "semanticScopeHash": { "$ref": "#/$defs/hash64" },
+    "delegationGrantId": { "type": "string", "pattern": "^DGR-[0-9A-HJKMNP-TV-Z]{26}$" },
+    "delegationPolicyHash": { "$ref": "#/$defs/hash64" }
+  },
+  "$defs": {
+    "hash64": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+    "nullableHash64": { "type": ["string", "null"], "pattern": "^[a-f0-9]{64}$" }
+  }
+}

package/schemas/milestone-scope-change-event.schema.json

@@ -0,0 +1,70 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://codex-workflow.local/schemas/milestone-scope-change-event.schema.json",
+  "title": "Codex Workflow V2 Alpha.7 Milestone Scope Change Event",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "eventId",
+    "milestoneId",
+    "previousMilestoneRevision",
+    "previousPlanHash",
+    "previousMembershipRevision",
+    "candidatePlanHash",
+    "candidateMembershipRevision",
+    "before",
+    "after",
+    "actor",
+    "confirmationCodeBindingHash",
+    "previousEventHash",
+    "recordedAt",
+    "eventHash"
+  ],
+  "properties": {
+    "eventId": { "type": "string", "minLength": 1 },
+    "milestoneId": { "$ref": "#/$defs/milestoneId" },
+    "previousMilestoneRevision": { "type": "integer", "minimum": 1 },
+    "previousPlanHash": { "$ref": "#/$defs/nullableHash64" },
+    "previousMembershipRevision": { "type": "integer", "minimum": 0 },
+    "candidatePlanHash": { "$ref": "#/$defs/hash64" },
+    "candidateMembershipRevision": { "type": "integer", "minimum": 0 },
+    "before": { "$ref": "#/$defs/scopeSnapshot" },
+    "after": { "$ref": "#/$defs/scopeSnapshot" },
+    "actor": { "type": "string", "minLength": 1 },
+    "confirmationCodeBindingHash": { "$ref": "#/$defs/hash64" },
+    "authorizationMode": { "enum": ["human", "milestone-autonomy"] },
+    "autonomyContractEventHash": { "$ref": "#/$defs/nullableHash64" },
+    "previousEventHash": { "$ref": "#/$defs/nullableHash64" },
+    "recordedAt": { "type": "string", "format": "date-time" },
+    "eventHash": { "$ref": "#/$defs/hash64" }
+  },
+  "$defs": {
+    "milestoneId": { "type": "string", "pattern": "^MS-[0-9A-HJKMNP-TV-Z]{26}$" },
+    "taskId": { "type": "string", "pattern": "^TASK-[0-9A-HJKMNP-TV-Z]{26}$" },
+    "hash64": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+    "nullableHash64": { "type": ["string", "null"], "pattern": "^[a-f0-9]{64}$" },
+    "membership": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["taskId", "disposition", "reason"],
+      "properties": {
+        "taskId": { "$ref": "#/$defs/taskId" },
+        "disposition": { "enum": ["required", "waived", "cancelled"] },
+        "reason": { "type": "string" }
+      }
+    },
+    "scopeSnapshot": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["outcome", "successSignal", "acceptance", "checks", "taskIds", "memberships"],
+      "properties": {
+        "outcome": { "type": "string" },
+        "successSignal": { "type": "string" },
+        "acceptance": { "type": "array", "items": { "type": "string", "minLength": 1 } },
+        "checks": { "type": "array", "items": { "type": "string", "minLength": 1 } },
+        "taskIds": { "type": "array", "uniqueItems": true, "items": { "$ref": "#/$defs/taskId" } },
+        "memberships": { "type": "array", "items": { "$ref": "#/$defs/membership" } }
+      }
+    }
+  }
+}

package/schemas/milestone-transaction-journal.schema.json

@@ -0,0 +1,95 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://codex-workflow.local/schemas/milestone-transaction-journal.schema.json",
+  "title": "Codex Workflow V2 Alpha.6 Milestone Transaction Journal",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "transactionId",
+    "milestoneId",
+    "expectedMilestoneRevision",
+    "actor",
+    "confirmationCodeBindingHash",
+    "phase",
+    "targetFiles",
+    "preparedAt",
+    "updatedAt"
+  ],
+  "properties": {
+    "transactionId": { "type": "string", "minLength": 1 },
+    "milestoneId": { "$ref": "#/$defs/milestoneId" },
+    "expectedMilestoneRevision": { "type": "integer", "minimum": 1 },
+    "actor": { "type": "string", "minLength": 1 },
+    "confirmationCodeBindingHash": { "$ref": "#/$defs/hash64" },
+    "phase": { "enum": ["prepared", "applying", "applied", "rolled_back"] },
+    "targetFiles": {
+      "type": "array",
+      "minItems": 1,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["path", "preimage", "staged"],
+        "properties": {
+          "path": { "type": "string", "minLength": 1 },
+          "preimage": { "$ref": "#/$defs/fileSnapshot" },
+          "staged": { "$ref": "#/$defs/fileSnapshot" }
+        }
+      }
+    },
+    "preparedAt": { "type": "string", "format": "date-time" },
+    "updatedAt": { "type": "string", "format": "date-time" }
+  },
+  "$defs": {
+    "milestoneId": { "type": "string", "pattern": "^MS-[0-9A-HJKMNP-TV-Z]{26}$" },
+    "hash64": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+    "fileSnapshot": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["exists", "contentHash", "contentBase64", "contentPath"],
+      "properties": {
+        "exists": { "type": "boolean" },
+        "contentHash": { "type": ["string", "null"], "pattern": "^[a-f0-9]{64}$" },
+        "contentBase64": { "type": ["string", "null"], "minLength": 1 },
+        "contentPath": { "type": ["string", "null"], "minLength": 1 }
+      },
+      "allOf": [
+        {
+          "if": {
+            "properties": { "exists": { "const": true } },
+            "required": ["exists"]
+          },
+          "then": {
+            "properties": {
+              "contentHash": { "$ref": "#/$defs/hash64" }
+            },
+            "anyOf": [
+              {
+                "properties": {
+                  "contentBase64": { "type": "string", "minLength": 1 }
+                }
+              },
+              {
+                "properties": {
+                  "contentPath": { "type": "string", "minLength": 1 }
+                }
+              }
+            ]
+          }
+        },
+        {
+          "if": {
+            "properties": { "exists": { "const": false } },
+            "required": ["exists"]
+          },
+          "then": {
+            "properties": {
+              "contentHash": { "const": null },
+              "contentBase64": { "const": null },
+              "contentPath": { "const": null }
+            }
+          }
+        }
+      ]
+    }
+  }
+}

package/schemas/plan-risk-audit-event.schema.json

@@ -0,0 +1,107 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://codex-workflow.local/schemas/plan-risk-audit-event.schema.json",
+  "title": "Codex Workflow V2 Alpha.7 Plan Risk Audit Event",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "eventId",
+    "taskId",
+    "taskRevision",
+    "briefHash",
+    "planHash",
+    "knowledgeMapRevision",
+    "knowledgeMapHash",
+    "planner",
+    "auditor",
+    "summary",
+    "decision",
+    "splitRationale",
+    "stepClassifications",
+    "previousEventHash",
+    "recordedAt",
+    "eventHash"
+  ],
+  "properties": {
+    "eventId": { "type": "string", "minLength": 1 },
+    "taskId": { "$ref": "#/$defs/taskId" },
+    "taskRevision": { "type": "integer", "minimum": 1 },
+    "briefHash": { "$ref": "#/$defs/hash64" },
+    "planHash": { "$ref": "#/$defs/hash64" },
+    "knowledgeMapRevision": { "type": "integer", "minimum": 1 },
+    "knowledgeMapHash": { "$ref": "#/$defs/hash64" },
+    "planner": { "type": "string", "minLength": 1 },
+    "auditor": { "type": "string", "minLength": 1 },
+    "summary": { "type": "string", "minLength": 1 },
+    "decision": { "enum": ["approved", "approved-with-rationale", "split-required", "stop-escalate"] },
+    "splitRationale": { "type": ["string", "null"], "minLength": 1 },
+    "stepClassifications": {
+      "type": "array",
+      "minItems": 1,
+      "items": { "$ref": "#/$defs/stepClassification" }
+    },
+    "previousEventHash": { "$ref": "#/$defs/nullableHash64" },
+    "recordedAt": { "type": "string", "format": "date-time" },
+    "eventHash": { "$ref": "#/$defs/hash64" }
+  },
+  "$defs": {
+    "taskId": { "type": "string", "pattern": "^TASK-[0-9A-HJKMNP-TV-Z]{26}$" },
+    "stepId": { "type": "string", "pattern": "^STEP-[0-9]{3}(?:-[A-Z0-9-]+)?$" },
+    "hash64": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+    "nullableHash64": { "type": ["string", "null"], "pattern": "^[a-f0-9]{64}$" },
+    "guardedRiskCategory": {
+      "enum": ["migration", "concurrency", "restart-replay", "crash-window", "external-provider", "runtime-composition", "security-boundary", "auth-secrets", "irreversible-execution"]
+    },
+    "stepClassification": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["stepId", "categories", "reviewRequired", "failureModes", "requiredEvidence"],
+      "properties": {
+        "stepId": { "$ref": "#/$defs/stepId" },
+        "categories": {
+          "type": "array",
+          "uniqueItems": true,
+          "items": { "$ref": "#/$defs/guardedRiskCategory" }
+        },
+        "reviewRequired": { "type": "boolean" },
+        "failureModes": { "type": "array", "uniqueItems": true, "items": { "type": "string", "minLength": 1 } },
+        "requiredEvidence": { "type": "array", "uniqueItems": true, "items": { "type": "string", "minLength": 1 } },
+        "proofObligations": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/proofObligation" }
+        }
+      },
+      "oneOf": [
+        {
+          "properties": {
+            "categories": { "maxItems": 0 },
+            "reviewRequired": { "const": false },
+            "failureModes": { "maxItems": 0 },
+            "requiredEvidence": { "maxItems": 0 },
+            "proofObligations": { "maxItems": 0 }
+          }
+        },
+        {
+          "properties": {
+            "categories": { "minItems": 1 },
+            "reviewRequired": { "const": true },
+            "failureModes": { "minItems": 1 },
+            "requiredEvidence": { "minItems": 1 },
+            "proofObligations": { "minItems": 1 }
+          }
+        }
+      ]
+    },
+    "proofObligation": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["failureMode", "counterexample", "expectedResult", "evidence"],
+      "properties": {
+        "failureMode": { "type": "string", "minLength": 1 },
+        "counterexample": { "type": "string", "minLength": 1 },
+        "expectedResult": { "type": "string", "minLength": 1 },
+        "evidence": { "type": "string", "minLength": 1 }
+      }
+    }
+  }
+}

package/schemas/remediation-event.schema.json

@@ -0,0 +1,53 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://codex-workflow.local/schemas/remediation-event.schema.json",
+  "title": "Codex Workflow V2 Alpha.6 Remediation Event",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "eventId",
+    "taskId",
+    "stepId",
+    "guardedCategory",
+    "failureKind",
+    "failureEvidence",
+    "attemptOrdinal",
+    "mode",
+    "previousEventHash",
+    "recordedAt",
+    "eventHash"
+  ],
+  "properties": {
+    "eventId": { "type": "string", "minLength": 1 },
+    "taskId": { "$ref": "#/$defs/taskId" },
+    "stepId": { "$ref": "#/$defs/stepId" },
+    "guardedCategory": { "$ref": "#/$defs/guardedRiskCategory" },
+    "failureKind": { "enum": ["checks-failed", "review-failed", "review-unverified"] },
+    "failureEvidence": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["completionCommit", "checksHash", "reviewEventHash", "reviewerAttestationHash"],
+      "properties": {
+        "completionCommit": { "$ref": "#/$defs/gitHash" },
+        "checksHash": { "$ref": "#/$defs/hash64" },
+        "reviewEventHash": { "$ref": "#/$defs/nullableHash64" },
+        "reviewerAttestationHash": { "$ref": "#/$defs/nullableHash64" }
+      }
+    },
+    "attemptOrdinal": { "type": "integer", "minimum": 1 },
+    "mode": { "enum": ["ordinary", "corrective"] },
+    "previousEventHash": { "$ref": "#/$defs/nullableHash64" },
+    "recordedAt": { "type": "string", "format": "date-time" },
+    "eventHash": { "$ref": "#/$defs/hash64" }
+  },
+  "$defs": {
+    "taskId": { "type": "string", "pattern": "^TASK-[0-9A-HJKMNP-TV-Z]{26}$" },
+    "stepId": { "type": "string", "pattern": "^STEP-[0-9]{3}(?:-[A-Z0-9-]+)?$" },
+    "guardedRiskCategory": {
+      "enum": ["migration", "concurrency", "restart-replay", "crash-window", "external-provider"]
+    },
+    "hash64": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+    "nullableHash64": { "type": ["string", "null"], "pattern": "^[a-f0-9]{64}$" },
+    "gitHash": { "type": "string", "pattern": "^[a-f0-9]{40,64}$" }
+  }
+}