codex-workflow-v2 2.0.0-beta.2 → 2.0.0-beta.4

package/docs/release.md

@@ -22,10 +22,10 @@ The downstream smoke packs the actual tarball, installs it into an empty tempora
 runs the packaged CLI handshake, and proves installation created none of `.codex`, `.tasks`,
 `.increments`, or `.memory-bank` in that project.
 
-For beta.2, the release gate also relies on `npm run release:check` to fail if:
+For beta.4, the release gate also relies on `npm run release:check` to fail if:
 
 - canonical entity schema 2 shapes drift;
-- protocol 1 compatibility is no longer additive;
+- protocol 2 is not the active public contract, or intact protocol-1 adoption evidence stops being readable through the bounded compatibility window;
 - the delegated transition allow-list expands;
 - schema-2 adoption is presented as `state migrate` instead of posture sidecars;
 - alpha.7 rescue, Milestone autonomy (including guarded content refresh), derived actor, or
@@ -33,6 +33,8 @@ For beta.2, the release gate also relies on `npm run release:check` to fail if:
 - terminal Task replacement, project-level transaction recovery, secret-safe lock diagnostics,
   version/base diagnostics, or serialized maintainer validation are missing.
 - truthful initial-assembly navigation capability is absent from the packaged surface.
+- corrective-yield/replan protocol-v2 commands, closed schemas, Human gate, retained journals,
+  explicit recovery, or dual-readback capabilities are absent from the packaged surface.
 
 The separate lifecycle transcript validator fails if the real-agent log contains a mutation that
 bypasses failed `status`/`next`, an unadvertised or failed mutation, an unresolved syntax-only

package/docs/updating-existing-project.md

@@ -80,6 +80,15 @@ plugin за пределами workspace. Это ожидаемая границ
 8. `update preflight` до изменения подтвердил чистую lifecycle-границу.
 9. Для alpha.6 существующий schema 2 проект либо уже имеет `adoption-posture.jsonl`,
    либо `next`/`status` требуют `state adoption-prepare` и затем `state adoption-apply`.
+10. При переходе с protocol v1 на v2 неизменённый и криптографически целостный adoption sidecar
+    остаётся читаемым как legacy evidence. Runtime не переписывает его автоматически; неизвестная
+    версия или смешанная protocol-цепочка считаются повреждением state.
+
+Protocol v2 меняет navigation/CLI corrective-replan и lifecycle epoch, но не Task state schema.
+До обновления не должно быть `in_progress` Step, writer lease, Core Task operation mutex или
+незавершённого corrective Task journal. Такие состояния требуют штатного completion/repair старой
+версией; переносить или удалять journal вручную нельзя. Старые grants/receipts не получают authority
+в epoch 2 — новый corrective replan всегда проходит новый prepare/human-gate/execute цикл.
 
 Изменение `projectId`, исчезновение сущностей или ошибка unsupported state schema — причина
 остановиться. Не соглашайтесь на «починку» удалением state. Агент должен вернуть dependency к

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codex-workflow-v2",
-  "version": "2.0.0-beta.2",
+  "version": "2.0.0-beta.4",
   "description": "Requirements-first Codex development workflow with local state and explicit Git ownership.",
   "repository": {
     "type": "git",
@@ -48,6 +48,9 @@
     "release:check": "node scripts/release-check.mjs",
     "publish:release": "node scripts/publish.mjs"
   },
+  "dependencies": {
+    "ajv": "8.20.0"
+  },
   "devDependencies": {
     "@types/node": "24.10.1",
     "typescript": "5.9.3"

package/schemas/adoption-posture-event.schema.json

@@ -30,7 +30,7 @@
     "eventType": { "enum": ["project-registration", "adoption-apply"] },
     "actor": { "type": ["string", "null"], "minLength": 1 },
     "packageVersion": { "type": "string", "minLength": 1 },
-    "protocolVersion": { "const": 1 },
+    "protocolVersion": { "enum": [1, 2] },
     "stateSchemaVersion": { "const": 2 },
     "adoptionBoundaryAt": { "type": "string", "format": "date-time" },
     "baselineDigestHash": { "$ref": "#/$defs/hash64" },

package/schemas/context-envelope.schema.json

@@ -25,7 +25,7 @@
     "knowledgeSources"
   ],
   "properties": {
-    "protocolVersion": { "const": 1 },
+    "protocolVersion": { "const": 2 },
     "packageVersion": { "type": "string" },
     "role": {
       "enum": ["scope-lead", "technical-planner", "delivery-coordinator", "worker", "independent-reviewer"]

package/schemas/corrective-replan-credentials.private.schema.json

@@ -0,0 +1,98 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "codex-workflow://schemas/private/corrective-replan-credentials/v1",
+  "$defs": {
+    "hash": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+    "id": { "type": "string", "minLength": 1, "maxLength": 256 },
+    "time": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 },
+    "ref": {
+      "type": "object", "additionalProperties": false,
+      "required": ["id", "version"],
+      "properties": { "id": { "$ref": "#/$defs/id" }, "version": { "const": 1 } }
+    },
+    "bindingValues": {
+      "type": "object", "additionalProperties": false,
+      "required": ["transitionId", "runtimeFingerprint", "catalogHash", "lifecycleEpoch", "taskId", "revision", "currentPlanHash", "briefHash", "knowledgeRevision", "knowledgeHash", "gitHead", "guardedStepId", "correctiveDecisionEventId", "correctiveDecisionHash", "attemptCount", "remediationTailHash", "candidatePlanHash", "candidateStepSetHash", "planAuthorIdentityHash", "planValidationHash", "planValidatorIdentityHash", "riskAuditHash", "riskAuditorIdentityHash", "actorIdentityHash", "actorRole", "humanPrincipalIdentityHash", "capabilityId", "capabilityVersion"],
+      "properties": {
+        "transitionId": { "const": "task.plan.corrective-replan" },
+        "runtimeFingerprint": { "$ref": "#/$defs/hash" }, "catalogHash": { "$ref": "#/$defs/hash" },
+        "lifecycleEpoch": { "const": 2 }, "taskId": { "$ref": "#/$defs/id" },
+        "revision": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "currentPlanHash": { "$ref": "#/$defs/hash" },
+        "briefHash": { "$ref": "#/$defs/hash" }, "knowledgeRevision": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 },
+        "knowledgeHash": { "$ref": "#/$defs/hash" }, "gitHead": { "type": "string", "pattern": "^(?:[a-f0-9]{40}|[a-f0-9]{64})$" },
+        "guardedStepId": { "$ref": "#/$defs/id" }, "correctiveDecisionEventId": { "$ref": "#/$defs/id" },
+        "correctiveDecisionHash": { "$ref": "#/$defs/hash" }, "attemptCount": { "type": "integer", "minimum": 2, "maximum": 9007199254740991 },
+        "remediationTailHash": { "$ref": "#/$defs/hash" }, "candidatePlanHash": { "$ref": "#/$defs/hash" },
+        "candidateStepSetHash": { "$ref": "#/$defs/hash" }, "planAuthorIdentityHash": { "$ref": "#/$defs/hash" },
+        "planValidationHash": { "$ref": "#/$defs/hash" }, "planValidatorIdentityHash": { "$ref": "#/$defs/hash" },
+        "riskAuditHash": { "$ref": "#/$defs/hash" }, "riskAuditorIdentityHash": { "$ref": "#/$defs/hash" },
+        "actorIdentityHash": { "$ref": "#/$defs/hash" }, "actorRole": { "enum": ["delivery-coordinator", "technical-planner"] },
+        "humanPrincipalIdentityHash": { "$ref": "#/$defs/hash" }, "capabilityId": { "const": "capability.task.corrective-replan" },
+        "capabilityVersion": { "const": 1 }
+      }
+    },
+    "correctiveReplanBindingV1": {
+      "type": "object", "additionalProperties": false,
+      "required": ["schemaVersion", "manifestRef", "manifestSha256", "values", "capability", "bindingSha256"],
+      "properties": {
+        "schemaVersion": { "const": 1 },
+        "manifestRef": { "$ref": "#/$defs/ref" }, "manifestSha256": { "$ref": "#/$defs/hash" },
+        "values": { "$ref": "#/$defs/bindingValues" },
+        "capability": {
+          "type": "object", "additionalProperties": false,
+          "required": ["id", "version", "issuer", "source", "scope", "delegation"],
+          "properties": {
+            "id": { "const": "capability.task.corrective-replan" }, "version": { "const": 1 },
+            "issuer": { "type": "object", "additionalProperties": false, "required": ["kind", "identityHash"], "properties": { "kind": { "const": "human" }, "identityHash": { "$ref": "#/$defs/hash" } } },
+            "source": { "const": "human-confirmation" },
+            "scope": { "type": "object", "additionalProperties": false, "required": ["transitionId", "taskId", "candidatePlanHash", "manifestSha256"], "properties": { "transitionId": { "const": "task.plan.corrective-replan" }, "taskId": { "$ref": "#/$defs/id" }, "candidatePlanHash": { "$ref": "#/$defs/hash" }, "manifestSha256": { "$ref": "#/$defs/hash" } } },
+            "delegation": { "const": "forbidden" }
+          }
+        },
+        "bindingSha256": { "$ref": "#/$defs/hash" }
+      }
+    },
+    "validationSource": {
+      "type": "object", "additionalProperties": false,
+      "required": ["taskId", "revision", "currentPlanHash", "briefHash", "knowledgeRevision", "knowledgeHash", "gitHead", "guardedStepId", "correctiveDecisionHash", "remediationTailHash"],
+      "properties": { "taskId": { "$ref": "#/$defs/id" }, "revision": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "currentPlanHash": { "$ref": "#/$defs/hash" }, "briefHash": { "$ref": "#/$defs/hash" }, "knowledgeRevision": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "knowledgeHash": { "$ref": "#/$defs/hash" }, "gitHead": { "type": "string", "pattern": "^(?:[a-f0-9]{40}|[a-f0-9]{64})$" }, "guardedStepId": { "$ref": "#/$defs/id" }, "correctiveDecisionHash": { "$ref": "#/$defs/hash" }, "remediationTailHash": { "$ref": "#/$defs/hash" } }
+    },
+    "passedCoverage": { "type": "object", "additionalProperties": false, "required": ["sourceHash", "coverageHash", "passed"], "properties": { "sourceHash": { "$ref": "#/$defs/hash" }, "coverageHash": { "$ref": "#/$defs/hash" }, "passed": { "const": true } } },
+    "finding": { "type": "object", "additionalProperties": false, "required": ["findingId", "severity", "requirementRef", "evidenceHash"], "properties": { "findingId": { "$ref": "#/$defs/id" }, "severity": { "enum": ["low", "medium", "high"] }, "requirementRef": { "$ref": "#/$defs/id" }, "evidenceHash": { "$ref": "#/$defs/hash" } } },
+    "disposition": { "type": "object", "additionalProperties": false, "required": ["findingId", "decision", "evidenceHash"], "properties": { "findingId": { "$ref": "#/$defs/id" }, "decision": { "enum": ["resolved", "accepted-documented-limitation"] }, "evidenceHash": { "$ref": "#/$defs/hash" } } },
+    "planValidationAttestationV1": {
+      "type": "object", "additionalProperties": false,
+      "required": ["schemaVersion", "attestationId", "bindingSha256", "source", "candidate", "requirements", "acceptance", "architecture", "planAuthor", "plannerContext", "validator", "validatorContext", "freshContext", "passed", "findings", "dispositions", "validatedAtMs", "expiresAtMs", "attestationHash"],
+      "properties": {
+        "schemaVersion": { "const": 1 }, "attestationId": { "$ref": "#/$defs/id" }, "bindingSha256": { "$ref": "#/$defs/hash" }, "source": { "$ref": "#/$defs/validationSource" },
+        "candidate": { "type": "object", "additionalProperties": false, "required": ["planHash", "stepSetHash"], "properties": { "planHash": { "$ref": "#/$defs/hash" }, "stepSetHash": { "$ref": "#/$defs/hash" } } },
+        "requirements": { "$ref": "#/$defs/passedCoverage" }, "acceptance": { "$ref": "#/$defs/passedCoverage" },
+        "architecture": { "type": "object", "additionalProperties": false, "required": ["sourceHash", "compatibilityHash", "passed"], "properties": { "sourceHash": { "$ref": "#/$defs/hash" }, "compatibilityHash": { "$ref": "#/$defs/hash" }, "passed": { "const": true } } },
+        "planAuthor": { "type": "object", "additionalProperties": false, "required": ["identityHash"], "properties": { "identityHash": { "$ref": "#/$defs/hash" } } },
+        "plannerContext": { "$ref": "#/$defs/context" }, "validator": { "type": "object", "additionalProperties": false, "required": ["identityHash"], "properties": { "identityHash": { "$ref": "#/$defs/hash" } } }, "validatorContext": { "$ref": "#/$defs/context" },
+        "freshContext": { "type": "object", "additionalProperties": false, "required": ["sourceSnapshotHash", "plannerContextHash", "validatorContextHash", "passed"], "properties": { "sourceSnapshotHash": { "$ref": "#/$defs/hash" }, "plannerContextHash": { "$ref": "#/$defs/hash" }, "validatorContextHash": { "$ref": "#/$defs/hash" }, "passed": { "const": true } } },
+        "passed": { "const": true }, "findings": { "type": "array", "maxItems": 128, "items": { "$ref": "#/$defs/finding" } }, "dispositions": { "type": "array", "maxItems": 128, "items": { "$ref": "#/$defs/disposition" } },
+        "validatedAtMs": { "$ref": "#/$defs/time" }, "expiresAtMs": { "$ref": "#/$defs/time" }, "attestationHash": { "$ref": "#/$defs/hash" }
+      }
+    },
+    "context": { "type": "object", "additionalProperties": false, "required": ["contextHash", "capturedAtMs"], "properties": { "contextHash": { "$ref": "#/$defs/hash" }, "capturedAtMs": { "$ref": "#/$defs/time" } } },
+    "humanConfirmationInputV1": { "type": "object", "additionalProperties": false, "required": ["kind", "version", "challengeId", "confirmationCode"], "properties": { "kind": { "const": "corrective-replan-human-confirmation" }, "version": { "const": 1 }, "challengeId": { "$ref": "#/$defs/id" }, "confirmationCode": { "type": "string", "pattern": "^[0-9]{6}$" } } },
+    "receiptValidation": { "type": "object", "additionalProperties": false, "required": ["attestationId", "attestationHash", "planValidationHash", "snapshotBindingHash", "planAuthorIdentityHash", "planValidatorIdentityHash", "findingsHash", "dispositionsHash", "validatedAtMs", "expiresAtMs"], "properties": { "attestationId": { "$ref": "#/$defs/id" }, "attestationHash": { "$ref": "#/$defs/hash" }, "planValidationHash": { "$ref": "#/$defs/hash" }, "snapshotBindingHash": { "$ref": "#/$defs/hash" }, "planAuthorIdentityHash": { "$ref": "#/$defs/hash" }, "planValidatorIdentityHash": { "$ref": "#/$defs/hash" }, "findingsHash": { "$ref": "#/$defs/hash" }, "dispositionsHash": { "$ref": "#/$defs/hash" }, "validatedAtMs": { "$ref": "#/$defs/time" }, "expiresAtMs": { "$ref": "#/$defs/time" } } },
+    "correctiveReplanReceiptV1": {
+      "type": "object", "additionalProperties": false,
+      "required": ["schemaVersion", "receiptId", "domain", "binding", "validation", "audit", "human", "supersession", "issuedAtMs", "expiresAtMs", "domainHash", "receiptHash"],
+      "properties": {
+        "schemaVersion": { "const": 1 }, "receiptId": { "$ref": "#/$defs/id" }, "domain": { "const": "codex-workflow/corrective-replan-receipt/v1" }, "binding": { "$ref": "#/$defs/correctiveReplanBindingV1" }, "validation": { "$ref": "#/$defs/receiptValidation" },
+        "audit": { "type": "object", "additionalProperties": false, "required": ["riskAuditHash", "riskAuditorIdentityHash"], "properties": { "riskAuditHash": { "$ref": "#/$defs/hash" }, "riskAuditorIdentityHash": { "$ref": "#/$defs/hash" } } },
+        "human": { "type": "object", "additionalProperties": false, "required": ["challengeId", "challengeHash", "humanPrincipalIdentityHash", "confirmedAtMs"], "properties": { "challengeId": { "$ref": "#/$defs/id" }, "challengeHash": { "$ref": "#/$defs/hash" }, "humanPrincipalIdentityHash": { "$ref": "#/$defs/hash" }, "confirmedAtMs": { "$ref": "#/$defs/time" } } },
+        "supersession": { "type": "object", "additionalProperties": false, "required": ["priorGrantHash", "disposition"], "properties": { "priorGrantHash": { "$ref": "#/$defs/hash" }, "disposition": { "const": "superseded" } } },
+        "issuedAtMs": { "$ref": "#/$defs/time" }, "expiresAtMs": { "$ref": "#/$defs/time" }, "domainHash": { "$ref": "#/$defs/hash" }, "receiptHash": { "$ref": "#/$defs/hash" }
+      }
+    },
+    "storedPlanValidationEventV1": {
+      "type": "object", "additionalProperties": false,
+      "required": ["schemaVersion", "eventId", "previousEventHash", "taskId", "candidatePlanHash", "attestationId", "attestationHash", "receiptId", "receiptHash", "receiptDomainHash", "challengeId", "challengeHash", "recordedAt", "recordedAtMs", "eventHash"],
+      "properties": { "schemaVersion": { "const": 1 }, "eventId": { "$ref": "#/$defs/id" }, "previousEventHash": { "oneOf": [{ "type": "null" }, { "$ref": "#/$defs/hash" }] }, "taskId": { "$ref": "#/$defs/id" }, "candidatePlanHash": { "$ref": "#/$defs/hash" }, "attestationId": { "$ref": "#/$defs/id" }, "attestationHash": { "$ref": "#/$defs/hash" }, "receiptId": { "$ref": "#/$defs/id" }, "receiptHash": { "$ref": "#/$defs/hash" }, "receiptDomainHash": { "$ref": "#/$defs/hash" }, "challengeId": { "$ref": "#/$defs/id" }, "challengeHash": { "$ref": "#/$defs/hash" }, "recordedAt": { "type": "string", "format": "date-time" }, "recordedAtMs": { "$ref": "#/$defs/time" }, "eventHash": { "$ref": "#/$defs/hash" } }
+    }
+  }
+}

package/schemas/corrective-replan-execution-event.private.schema.json

@@ -0,0 +1,53 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "codex-workflow://schemas/private/corrective-replan-execution-event/v1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schemaVersion", "kind", "eventId", "previousEventHash", "recordedAt", "taskId", "taskRevision",
+    "taskStatus", "transitionId", "executionKeyHash", "runtimeFingerprint", "catalogHash", "lifecycleEpoch",
+    "bindingManifest", "bindingSha256", "receiptId", "receiptHash", "receiptDomainHash", "candidatePlanHash",
+    "planValidationEventHash", "planRiskAuditEventHash", "actorIdentityHash", "humanPrincipalIdentityHash",
+    "priorGrantHash", "taskStateSha256", "planBytesSha256", "eventHash"
+  ],
+  "properties": {
+    "schemaVersion": { "const": 1 },
+    "kind": { "const": "corrective-replan-execution-recorded" },
+    "eventId": { "type": "string", "pattern": "^CRE-[a-f0-9]{64}$" },
+    "previousEventHash": { "oneOf": [{ "type": "null" }, { "$ref": "#/$defs/hash" }] },
+    "recordedAt": { "type": "string", "format": "date-time" },
+    "taskId": { "type": "string", "pattern": "^TASK-[0-9A-HJKMNP-TV-Z]{26}$" },
+    "taskRevision": { "type": "integer", "minimum": 2, "maximum": 9007199254740991 },
+    "taskStatus": { "const": "awaiting_execution_authorization" },
+    "transitionId": { "const": "task.plan.corrective-replan" },
+    "executionKeyHash": { "$ref": "#/$defs/hash" },
+    "runtimeFingerprint": { "$ref": "#/$defs/hash" },
+    "catalogHash": { "$ref": "#/$defs/hash" },
+    "lifecycleEpoch": { "type": "integer", "minimum": 1, "maximum": 9007199254740991 },
+    "bindingManifest": {
+      "type": "object", "additionalProperties": false,
+      "required": ["id", "version", "manifestSha256"],
+      "properties": {
+        "id": { "const": "binding-manifest.corrective-replan.exact-v1" },
+        "version": { "const": 1 },
+        "manifestSha256": { "$ref": "#/$defs/hash" }
+      }
+    },
+    "bindingSha256": { "$ref": "#/$defs/hash" },
+    "receiptId": { "type": "string", "minLength": 1, "maxLength": 256 },
+    "receiptHash": { "$ref": "#/$defs/hash" },
+    "receiptDomainHash": { "$ref": "#/$defs/hash" },
+    "candidatePlanHash": { "$ref": "#/$defs/hash" },
+    "planValidationEventHash": { "$ref": "#/$defs/hash" },
+    "planRiskAuditEventHash": { "$ref": "#/$defs/hash" },
+    "actorIdentityHash": { "$ref": "#/$defs/hash" },
+    "humanPrincipalIdentityHash": { "$ref": "#/$defs/hash" },
+    "priorGrantHash": { "$ref": "#/$defs/hash" },
+    "taskStateSha256": { "$ref": "#/$defs/hash" },
+    "planBytesSha256": { "$ref": "#/$defs/hash" },
+    "eventHash": { "$ref": "#/$defs/hash" }
+  },
+  "$defs": {
+    "hash": { "type": "string", "pattern": "^[a-f0-9]{64}$" }
+  }
+}

package/schemas/corrective-replan-public.schema.json

@@ -0,0 +1,142 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "codex-workflow://schemas/public/corrective-replan/v2",
+  "$defs": {
+    "hash": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+    "id": { "type": "string", "minLength": 1, "maxLength": 256 },
+    "time": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 },
+    "candidateV1": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["plan", "validation", "riskAudit", "authority"],
+      "properties": {
+        "plan": { "$ref": "https://codex-workflow.local/schemas/transition-payloads.schema.json#/$defs/taskPlanInput" },
+        "validation": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["validatorContextHash", "findings", "dispositions"],
+          "properties": {
+            "validatorContextHash": { "$ref": "#/$defs/hash" },
+            "findings": {
+              "type": "array",
+              "maxItems": 128,
+              "items": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": ["findingId", "severity", "requirementRef", "evidenceHash"],
+                "properties": {
+                  "findingId": { "$ref": "#/$defs/id" },
+                  "severity": { "enum": ["low", "medium", "high"] },
+                  "requirementRef": { "$ref": "#/$defs/id" },
+                  "evidenceHash": { "$ref": "#/$defs/hash" }
+                }
+              }
+            },
+            "dispositions": {
+              "type": "array",
+              "maxItems": 128,
+              "items": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": ["findingId", "decision", "evidenceHash"],
+                "properties": {
+                  "findingId": { "$ref": "#/$defs/id" },
+                  "decision": { "enum": ["resolved", "accepted-documented-limitation"] },
+                  "evidenceHash": { "$ref": "#/$defs/hash" }
+                }
+              }
+            }
+          }
+        },
+        "riskAudit": { "$ref": "https://codex-workflow.local/schemas/transition-payloads.schema.json#/$defs/planRiskAuditInput" },
+        "authority": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["planAuthorIdentityHash", "planValidatorIdentityHash", "riskAuditorIdentityHash", "actorIdentityHash", "actorRole", "humanPrincipalIdentityHash"],
+          "properties": {
+            "planAuthorIdentityHash": { "$ref": "#/$defs/hash" },
+            "planValidatorIdentityHash": { "$ref": "#/$defs/hash" },
+            "riskAuditorIdentityHash": { "$ref": "#/$defs/hash" },
+            "actorIdentityHash": { "$ref": "#/$defs/hash" },
+            "actorRole": { "enum": ["delivery-coordinator", "technical-planner"] },
+            "humanPrincipalIdentityHash": { "$ref": "#/$defs/hash" }
+          }
+        }
+      }
+    },
+    "humanGateV1": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["kind", "version", "taskId", "preparedAtMs", "expiresAtMs", "candidatePlanHash", "bindingSha256", "attestationId", "attestationHash", "challengeId", "runtimeFingerprint", "catalogHash", "lifecycleEpoch", "preparationSha256"],
+      "properties": {
+        "kind": { "const": "corrective-replan-human-gate" },
+        "version": { "const": 1 },
+        "taskId": { "$ref": "#/$defs/id" },
+        "preparedAtMs": { "$ref": "#/$defs/time" },
+        "expiresAtMs": { "$ref": "#/$defs/time" },
+        "candidatePlanHash": { "$ref": "#/$defs/hash" },
+        "bindingSha256": { "$ref": "#/$defs/hash" },
+        "attestationId": { "$ref": "#/$defs/id" },
+        "attestationHash": { "$ref": "#/$defs/hash" },
+        "challengeId": { "$ref": "#/$defs/id" },
+        "runtimeFingerprint": { "$ref": "#/$defs/hash" },
+        "catalogHash": { "$ref": "#/$defs/hash" },
+        "lifecycleEpoch": { "const": 2 },
+        "preparationSha256": { "$ref": "#/$defs/hash" }
+      }
+    },
+    "humanGateResultV1": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["kind", "gate", "delivery"],
+      "properties": {
+        "kind": { "const": "corrective-replan-human-gate-result" },
+        "gate": { "$ref": "#/$defs/humanGateV1" },
+        "delivery": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["kind", "version", "challengeId", "confirmationCode", "expiresAtMs"],
+          "properties": {
+            "kind": { "const": "corrective-replan-human-challenge-delivery" },
+            "version": { "const": 1 },
+            "challengeId": { "$ref": "#/$defs/id" },
+            "confirmationCode": { "type": "string", "pattern": "^[0-9]{6}$" },
+            "expiresAtMs": { "$ref": "#/$defs/time" }
+          }
+        }
+      }
+    },
+    "credentialV1": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["kind", "version", "gate", "receipt", "planValidationEvent"],
+      "properties": {
+        "kind": { "const": "corrective-replan-public-credential" },
+        "version": { "const": 1 },
+        "gate": { "$ref": "#/$defs/humanGateV1" },
+        "receipt": { "$ref": "codex-workflow://schemas/private/corrective-replan-credentials/v1#/$defs/correctiveReplanReceiptV1" },
+        "planValidationEvent": { "$ref": "codex-workflow://schemas/private/corrective-replan-credentials/v1#/$defs/storedPlanValidationEventV1" }
+      }
+    },
+    "executionResultV1": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["kind", "disposition", "taskId", "transactionId", "resultSha256"],
+      "properties": {
+        "kind": { "const": "corrective-replan-execution-result" },
+        "disposition": { "enum": ["executed", "recovered", "replayed"] },
+        "taskId": { "$ref": "#/$defs/id" },
+        "transactionId": { "$ref": "#/$defs/hash" },
+        "resultSha256": { "$ref": "#/$defs/hash" }
+      }
+    },
+    "responseV2": {
+      "oneOf": [
+        { "$ref": "#/$defs/humanGateResultV1" },
+        { "$ref": "#/$defs/credentialV1" },
+        { "$ref": "#/$defs/executionResultV1" }
+      ]
+    }
+  },
+  "$ref": "#/$defs/responseV2"
+}

package/schemas/corrective-replan-task-transaction.private.schema.json

@@ -0,0 +1,151 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "codex-workflow://schemas/private/corrective-replan-task-transaction/v1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schemaVersion", "kind", "transactionId", "projectId", "taskId", "transitionId",
+    "executionKeyHash", "runtimeFingerprint", "catalogHash", "lifecycleEpoch", "bindingManifest",
+    "bindingSha256", "receiptHash", "actorIdentityHash", "humanPrincipalIdentityHash", "admittedAt",
+    "intentSha256", "phase", "phaseRevision", "nextTargetOrdinal", "targets", "phaseHistory", "completedResult",
+    "updatedAt"
+  ],
+  "properties": {
+    "schemaVersion": { "const": 1 },
+    "kind": { "const": "corrective-replan-task-transaction" },
+    "transactionId": { "$ref": "#/$defs/hash" },
+    "projectId": { "type": "string", "pattern": "^[a-f0-9]{24}$" },
+    "taskId": { "type": "string", "pattern": "^TASK-[0-9A-HJKMNP-TV-Z]{26}$" },
+    "transitionId": { "const": "task.plan.corrective-replan" },
+    "executionKeyHash": { "$ref": "#/$defs/hash" },
+    "runtimeFingerprint": { "$ref": "#/$defs/hash" },
+    "catalogHash": { "$ref": "#/$defs/hash" },
+    "lifecycleEpoch": { "type": "integer", "minimum": 1, "maximum": 9007199254740991 },
+    "bindingManifest": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["id", "version", "manifestSha256"],
+      "properties": {
+        "id": { "const": "binding-manifest.corrective-replan.exact-v1" },
+        "version": { "const": 1 },
+        "manifestSha256": { "$ref": "#/$defs/hash" }
+      }
+    },
+    "bindingSha256": { "$ref": "#/$defs/hash" },
+    "receiptHash": { "$ref": "#/$defs/hash" },
+    "actorIdentityHash": { "$ref": "#/$defs/hash" },
+    "humanPrincipalIdentityHash": { "$ref": "#/$defs/hash" },
+    "admittedAt": { "$ref": "#/$defs/time" },
+    "intentSha256": { "$ref": "#/$defs/hash" },
+    "phase": { "enum": ["intent", "applying", "published-pending-readback", "completed"] },
+    "phaseRevision": { "type": "integer", "minimum": 1, "maximum": 9007199254740991 },
+    "nextTargetOrdinal": { "type": "integer", "minimum": 0, "maximum": 5 },
+    "targets": {
+      "type": "array",
+      "minItems": 5,
+      "maxItems": 5,
+      "items": { "$ref": "#/$defs/target" }
+    },
+    "phaseHistory": {
+      "type": "array",
+      "minItems": 1,
+      "maxItems": 64,
+      "items": { "$ref": "#/$defs/phaseEntry" }
+    },
+    "completedResult": {
+      "oneOf": [
+        { "type": "null" },
+        {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["resultSha256"],
+          "properties": { "resultSha256": { "$ref": "#/$defs/hash" } }
+        }
+      ]
+    },
+    "updatedAt": { "$ref": "#/$defs/time" }
+  },
+  "$defs": {
+    "hash": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+    "time": { "type": "string", "format": "date-time" },
+    "snapshot": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["exists", "contentSha256", "byteLength", "contentPath"],
+      "properties": {
+        "exists": { "type": "boolean" },
+        "contentSha256": { "oneOf": [{ "type": "null" }, { "$ref": "#/$defs/hash" }] },
+        "byteLength": { "type": "integer", "minimum": 0, "maximum": 268435456 },
+        "contentPath": { "oneOf": [{ "type": "null" }, { "type": "string", "pattern": "^preimages/[0-4]\\.bin$" }] }
+      }
+    },
+    "postimage": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["contentSha256", "byteLength", "contentPath"],
+      "properties": {
+        "contentSha256": { "$ref": "#/$defs/hash" },
+        "byteLength": { "type": "integer", "minimum": 1, "maximum": 268435456 },
+        "contentPath": { "type": "string", "pattern": "^targets/[0-4]\\.bin$" }
+      }
+    },
+    "sidecarAnchors": {
+      "oneOf": [
+        { "type": "null" },
+        {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["previousEventHash", "resultEventHash", "previousLineCount", "resultLineCount"],
+          "properties": {
+            "previousEventHash": { "oneOf": [{ "type": "null" }, { "$ref": "#/$defs/hash" }] },
+            "resultEventHash": { "$ref": "#/$defs/hash" },
+            "previousLineCount": { "type": "integer", "minimum": 0 },
+            "resultLineCount": { "type": "integer", "minimum": 1 }
+          }
+        }
+      ]
+    },
+    "taskCas": {
+      "oneOf": [
+        { "type": "null" },
+        {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["expectedRevision", "resultRevision"],
+          "properties": {
+            "expectedRevision": { "type": "integer", "minimum": 1 },
+            "resultRevision": { "type": "integer", "minimum": 2 }
+          }
+        }
+      ]
+    },
+    "target": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["targetId", "ordinal", "relativePath", "writeMode", "preimage", "postimage", "sidecarAnchors", "taskCas"],
+      "properties": {
+        "targetId": { "enum": ["task-state", "plan", "plan-validation", "plan-risk-audit", "execution-evidence"] },
+        "ordinal": { "type": "integer", "minimum": 0, "maximum": 4 },
+        "relativePath": { "enum": ["state.json", "plan.md", "plan-validations.jsonl", "plan-risk-audits.jsonl", "corrective-replan-executions.jsonl"] },
+        "writeMode": { "enum": ["replace-exact", "append-exact"] },
+        "preimage": { "$ref": "#/$defs/snapshot" },
+        "postimage": { "$ref": "#/$defs/postimage" },
+        "sidecarAnchors": { "$ref": "#/$defs/sidecarAnchors" },
+        "taskCas": { "$ref": "#/$defs/taskCas" }
+      }
+    },
+    "phaseEntry": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["sequence", "phase", "nextTargetOrdinal", "recordedAt", "previousEntryHash", "entryHash"],
+      "properties": {
+        "sequence": { "type": "integer", "minimum": 0, "maximum": 63 },
+        "phase": { "enum": ["intent", "applying", "published-pending-readback", "completed"] },
+        "nextTargetOrdinal": { "type": "integer", "minimum": 0, "maximum": 5 },
+        "recordedAt": { "$ref": "#/$defs/time" },
+        "previousEntryHash": { "oneOf": [{ "type": "null" }, { "$ref": "#/$defs/hash" }] },
+        "entryHash": { "$ref": "#/$defs/hash" }
+      }
+    }
+  }
+}