codex-workflow-v2 2.0.0-beta.12 → 2.0.0-beta.12.2

package/plugins/codex-workflow-gateway/references/protocol.md

@@ -1,6 +1,6 @@
 # Gateway Protocol V2
 
-## beta.12 continuable remediation, coordinator projections, and retained recovery compatibility
+## beta.12.2 compatibility transitions and continuable remediation
 
 - When fresh `next` advertises `task plan-integrity-recover`, consume its exact Task revision,
   Step, actor, and writer-token contract. This route is valid only for the Core-derived
@@ -14,6 +14,17 @@
   product commits absent from the current corrective Step are recognized only through intact passed
   strict-review plus verified reviewer-attestation chains and remain separately auditable as
   `retainedHistoricalCommits`.
+  Task-local manifest/lock fields from recorded history may differ from the base, but the candidate
+  commit must preserve them exactly while changing only the Workflow dependency entries.
+- `task stop-override-prepare` is a read-only Human gate for the exact beta.11 attempt-four stop
+  shape. `task stop-override-apply` requires the same Task revision, Step, actor, reason, Plan, HEAD,
+  evidence binding, and returned `SOO-*` code in a later user turn. It appends evidence without
+  deleting `stop-escalate`; it never applies to `split-required`.
+- After an applied stop override, one ordinary delegated `task context-refresh` may rebind the Plan
+  before attempt four. Fresh `next` returns `task run` only when Core validates an exact direct
+  Knowledge rebind, a mechanically equivalent Plan Risk Audit rebound, shared delegated authority,
+  append-only chronology, and the same Git HEAD. If C1 remains claimed but the lease was lost at the
+  Human boundary, use only the simultaneously advertised `task writer-credential-replace` action.
 - `milestone progress --id <MS-ID>` is a read-only projection and the sole source for Coordinator
   progress tables. It preserves cancelled/replacement Tasks as distinct membership rows.
 - `scripts/chat-registry.mjs` atomically allocates project-monotonic `#NNN`, builds all six title
@@ -49,6 +60,9 @@ Current capability set:
 - `corrective-plan-audit-v1`
 - `safe-update-preflight-v1`
 - `bounded-dependency-provenance-recovery-v1`
+- `task-local-dependency-provenance-recovery-v1`
+- `legacy-stop-escalate-override-v1`
+- `stop-override-context-rebind-v1`
 - `retained-reviewed-history-recovery-v1`
 - `milestone-progress-projection-v1`
 - `strict-reviewer-v1`
@@ -187,6 +201,12 @@ explicit stop or redirection decisions. They are never inferred from attempt cou
 explicit decision, another failed strict review continues the same Task through its evidence-bound
 `fix`/`replan` route.
 
+One append-only compatibility exception exists for a beta.11 policy-created attempt-four stop.
+Fresh `next` must advertise `task stop-override-prepare`; run it with exact human inputs, present the
+complete binding, and stop. A later explicit user turn may run `task stop-override-apply` with the
+same inputs and confirmation code. Any split decision, Plan/revision/HEAD drift, missing attempt-3
+continue authority, lease, transaction, or journal damage blocks the route.
+
 ## Context refresh
 
 Before `task plan-set`, compare exact Step `allowedWrites` and expected output paths with scanner

package/plugins/codex-workflow-gateway/skills/codex-workflow-gateway/SKILL.md

@@ -50,6 +50,12 @@ pending/corrupt transaction. After success run sequential `status` then `next` a
 returned lifecycle action; Knowledge reconciliation or atomic Task context refresh may legitimately
 be next because the dependency files changed.
 
+Beta.12.1 permits product-owned manifest/lock fields already present in the exact recorded Task
+history to differ from the Milestone base. Core compares candidate parent to candidate HEAD after
+removing only the Workflow dependency entries, so the dependency commit must preserve every such
+field exactly. Do not rebase, copy the base manifest over Task-local scripts, or interpret this as
+permission for product payload in the candidate commit.
+
 The beta.11 bounded Plan-integrity route prevents a known impossible check from consuming a second
 ordinary remediation attempt. Use `task plan-integrity-recover` only when fresh `next` advertises
 it for the exact failed Task/Step/revision. Require `state=eligible`, no blockers, one first
@@ -103,6 +109,24 @@ command shape or consuming a replacement Discovery. Never rebind, refresh, repla
 resume, cancel, or manually replace the historical Task. Continue only after a later P04-B/P05
 package explicitly advertises a topology-preserving replacement capability.
 
+When beta.12.2 `next` advertises `task stop-override-prepare`, the route is limited to the exact
+beta.11 attempt-four policy stop: two ordinary failures, one corrective failure, a matching
+attempt-3 `continue-fix`, and a matching attempt-4 `stop-escalate` under the unchanged Plan. Invoke
+prepare with the exact Task/Step/revision, explicit human actor, and user-supplied reason. It is
+read-only. Show the returned binding and `SOO-*` code, then stop. Only a later explicit user turn may
+invoke `task stop-override-apply` with the identical inputs and code. Never delegate the gate,
+override `split-required`, edit either journal, or reuse a code after Task revision, Plan, HEAD, or
+evidence changes. Successful apply preserves the original stop, appends
+`stop-escalate-overrides.jsonl`, and requires fresh sequential `status` then `next` before attempt
+four runs through the normal strict-review cycle.
+
+After an applied override, one ordinary delegated `task context-refresh` may change only the Plan's
+canonical Knowledge Map binding. Continue only when fresh `next` advertises `task run` with
+`stopOverrideContextRebind.state=validated` for the exact override and stop decision. If C1 remains
+claimed but the lease was lost at the Human boundary, first use the simultaneously advertised
+`task writer-credential-replace` action for the exact claimant. A doctor route, semantic Plan drift,
+second rebind, different HEAD, missing delegated authority, or damaged chronology is a hard stop.
+
 When `next` returns `milestone initial-assembly`, execution is unavailable. Follow only the
 advertised `linked-task-assembly.commands` (`discovery start` and `discovery materialize`) until all
 intended linked Tasks exist. The closing `milestone plan-set` option appears only after at least one

package/schemas/stop-escalate-override-event.schema.json

@@ -0,0 +1,45 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://codex-workflow.local/schemas/stop-escalate-override-event.schema.json",
+  "title": "Codex Workflow V2 Stop-Escalate Override Event",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "eventId", "taskId", "taskRevision", "stepId", "stopDecisionEventId",
+    "stopDecisionEventHash", "priorContinueDecisionEventId", "priorContinueDecisionEventHash",
+    "triggeringAttemptCount", "coveredEventIds", "planHash", "headCommit", "actor", "reason",
+    "packageVersion", "confirmationCodeBindingHash", "policy", "previousEventHash", "recordedAt", "eventHash"
+  ],
+  "properties": {
+    "eventId": { "type": "string", "pattern": "^SOO-[0-9A-HJKMNP-TV-Z]{26}$" },
+    "taskId": { "type": "string", "pattern": "^TASK-[0-9A-HJKMNP-TV-Z]{26}$" },
+    "taskRevision": { "type": "integer", "minimum": 1 },
+    "stepId": { "type": "string", "pattern": "^STEP-[0-9]{3}(?:-[A-Z0-9-]+)?$" },
+    "stopDecisionEventId": { "type": "string", "pattern": "^CRD-[0-9A-HJKMNP-TV-Z]{26}$" },
+    "stopDecisionEventHash": { "$ref": "#/$defs/hash64" },
+    "priorContinueDecisionEventId": { "type": "string", "pattern": "^CRD-[0-9A-HJKMNP-TV-Z]{26}$" },
+    "priorContinueDecisionEventHash": { "$ref": "#/$defs/hash64" },
+    "triggeringAttemptCount": { "const": 4 },
+    "coveredEventIds": {
+      "type": "array",
+      "minItems": 3,
+      "maxItems": 3,
+      "uniqueItems": true,
+      "items": { "type": "string", "pattern": "^RME-[0-9A-HJKMNP-TV-Z]{26}$" }
+    },
+    "planHash": { "$ref": "#/$defs/hash64" },
+    "headCommit": { "type": "string", "pattern": "^[a-f0-9]{40}$" },
+    "actor": { "type": "string", "minLength": 1 },
+    "reason": { "type": "string", "minLength": 1 },
+    "packageVersion": { "type": "string", "minLength": 1 },
+    "confirmationCodeBindingHash": { "$ref": "#/$defs/hash64" },
+    "policy": { "const": "beta11-attempt4-stop-compatibility-v1" },
+    "previousEventHash": { "$ref": "#/$defs/nullableHash64" },
+    "recordedAt": { "type": "string", "format": "date-time" },
+    "eventHash": { "$ref": "#/$defs/hash64" }
+  },
+  "$defs": {
+    "hash64": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+    "nullableHash64": { "type": ["string", "null"], "pattern": "^[a-f0-9]{64}$" }
+  }
+}