codex-workflow-v2 2.0.0-alpha.7 → 2.0.0-alpha.7.2

package/references/state-machine.md

@@ -37,11 +37,16 @@ bindings, supersedes execution authorization, and returns the Task to
 `awaiting_execution_authorization`. It cannot run while a Step is `in_progress` or while the
 Task is `blocked`; unrelated blocks must be resolved through their owning transition.
 
-For guarded remediation, two ordinary remediation attempts are allowed. A third
+For guarded remediation, two ordinary remediation attempts are allowed. Corrective posture is
+derived from the guarded Step, current Plan Risk Audit, remediation history, and
+corrective-decision history rather than from `Task.status` alone, so the same gate survives
+content-only Knowledge refresh, Task Knowledge rebind, and later reauthorization. A third
 ordinary retry is blocked until a current corrective decision exists for the same Step and
-Plan binding. `continue-fix` allows bounded continuation; `replan-required`,
-`split-required`, and `stop-escalate` stop ordinary execution. A failed third corrective
-attempt is a hard stop: no fourth run or new continue/replan decision is accepted.
+Plan binding. `continue-fix` allows exactly the third corrective attempt; `replan-required`
+requires an actual new Plan posture before execution; `split-required` and `stop-escalate`
+stop ordinary execution. A failed third corrective attempt is a hard stop: `next` must
+report the stop without throwing, no fourth run is allowed, and no new `continue-fix` or
+`replan-required` decision is accepted.
 
 Milestone authorization is bound to its Plan and membership revision. Plan amendments
 supersede authorization. Milestone validation and acceptance are bound to the current base
@@ -62,8 +67,14 @@ After that boundary, semantic updates use human-only `milestone scope-change-pre
 `milestone scope-change-apply`. A human-confirmed, expiring Milestone Autonomy Contract may
 use `milestone autonomy-evolve` only for membership changes while outcome, success signal,
 acceptance, checks, discovery, and base branch remain fixed. It may also approve Project Memory
-only within an atomic content-only context refresh for a Task in that Milestone; standalone map
-approval remains forbidden. Both update paths journal
+only within an atomic context refresh for a Task in that Milestone; standalone map approval
+remains forbidden. In addition to content-only drift, that composite transition may accept a new
+supporting source only when its exact normalized path and scanner category were declared by the
+current execution-authorized Task Plan under `knowledgeImpact: create`. The Task must belong to
+the grant's Milestone. Every added source must match the Plan, and removals, canonical additions,
+wildcard or directory targets, existing source category/scope/authority changes, gaps, and
+conflicts fail closed before any state write. `next` exposes the composite option only when the
+full predicate passes and otherwise reports concrete unsafe differences. Both update paths journal
 `state.json`, `plan.json`, and `scope-change-events.jsonl` together. Membership integrity is validated
 before scheduling, Task start, Milestone validation, scope change, and repository `next`.
 The same guard scans in reverse and blocks every live Task whose `milestoneId` is absent from

package/schemas/corrective-decision-recovery-event.schema.json

@@ -0,0 +1,71 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://codex-workflow.local/schemas/corrective-decision-recovery-event.schema.json",
+  "title": "Codex Workflow V2 Alpha.7.2 Corrective Decision Recovery Event",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "eventId",
+    "taskId",
+    "stepId",
+    "triggeringAttemptCount",
+    "correctiveDecisionEventId",
+    "correctiveDecisionEventHash",
+    "decisionPlanHash",
+    "reboundPlanHash",
+    "semanticPlanHash",
+    "fromKnowledgeMapRevision",
+    "fromKnowledgeMapHash",
+    "toKnowledgeMapRevision",
+    "toKnowledgeMapHash",
+    "rebindRecordedAt",
+    "sourcePlanRiskAuditEventId",
+    "sourcePlanRiskAuditEventHash",
+    "reboundPlanRiskAuditEventId",
+    "reboundPlanRiskAuditEventHash",
+    "knowledgeMapApprovalFingerprint",
+    "taskAuthorizationFingerprint",
+    "delegationGrantFingerprint",
+    "c1EvidenceFingerprint",
+    "evidenceFingerprint",
+    "actor",
+    "previousEventHash",
+    "recordedAt",
+    "eventHash"
+  ],
+  "properties": {
+    "eventId": { "type": "string", "pattern": "^CDR-[0-9A-HJKMNP-TV-Z]{26}$" },
+    "taskId": { "$ref": "#/$defs/taskId" },
+    "stepId": { "$ref": "#/$defs/stepId" },
+    "triggeringAttemptCount": { "const": 3 },
+    "correctiveDecisionEventId": { "type": "string", "pattern": "^CRD-[0-9A-HJKMNP-TV-Z]{26}$" },
+    "correctiveDecisionEventHash": { "$ref": "#/$defs/hash64" },
+    "decisionPlanHash": { "$ref": "#/$defs/hash64" },
+    "reboundPlanHash": { "$ref": "#/$defs/hash64" },
+    "semanticPlanHash": { "$ref": "#/$defs/hash64" },
+    "fromKnowledgeMapRevision": { "type": "integer", "minimum": 1 },
+    "fromKnowledgeMapHash": { "$ref": "#/$defs/hash64" },
+    "toKnowledgeMapRevision": { "type": "integer", "minimum": 1 },
+    "toKnowledgeMapHash": { "$ref": "#/$defs/hash64" },
+    "rebindRecordedAt": { "type": "string", "format": "date-time" },
+    "sourcePlanRiskAuditEventId": { "type": "string", "pattern": "^PRA-[0-9A-HJKMNP-TV-Z]{26}$" },
+    "sourcePlanRiskAuditEventHash": { "$ref": "#/$defs/hash64" },
+    "reboundPlanRiskAuditEventId": { "type": "string", "pattern": "^PRA-[0-9A-HJKMNP-TV-Z]{26}$" },
+    "reboundPlanRiskAuditEventHash": { "$ref": "#/$defs/hash64" },
+    "knowledgeMapApprovalFingerprint": { "$ref": "#/$defs/hash64" },
+    "taskAuthorizationFingerprint": { "$ref": "#/$defs/hash64" },
+    "delegationGrantFingerprint": { "$ref": "#/$defs/hash64" },
+    "c1EvidenceFingerprint": { "$ref": "#/$defs/hash64" },
+    "evidenceFingerprint": { "$ref": "#/$defs/hash64" },
+    "actor": { "type": "string", "minLength": 1 },
+    "previousEventHash": { "$ref": "#/$defs/nullableHash64" },
+    "recordedAt": { "type": "string", "format": "date-time" },
+    "eventHash": { "$ref": "#/$defs/hash64" }
+  },
+  "$defs": {
+    "taskId": { "type": "string", "pattern": "^TASK-[0-9A-HJKMNP-TV-Z]{26}$" },
+    "stepId": { "type": "string", "pattern": "^STEP-[0-9]{3}(?:-[A-Z0-9-]+)?$" },
+    "hash64": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+    "nullableHash64": { "type": ["string", "null"], "pattern": "^[a-f0-9]{64}$" }
+  }
+}