cool-workflow 0.1.78

package/docs/pipeline-runner.7.md

@@ -0,0 +1,136 @@
+# PIPELINE-RUNNER(7)
+
+## NAME
+
+Pipeline Runner - contract-driven StateNode execution kernel for Cool Workflow
+
+## SYNOPSIS
+
+```ts
+import { createPipelineRunner } from "./pipeline-runner";
+
+const runner = createPipelineRunner();
+const contract = runner.getRunContract(run);
+const runnable = runner.findRunnablePipelineStages(run, contract);
+
+const result = runner.runPipelineStage(run, "verify", resultNode.id, {
+  outputNodeId: `${run.id}:verifier:${task.id}`,
+  outputStatus: "verified",
+  evidence: resultNode.evidence
+});
+```
+
+## DESCRIPTION
+
+`Pipeline Runner` is the small execution kernel between workflow definitions,
+pipeline contracts, state nodes, and CW operations such as dispatch, result,
+verifier, commit, and report.
+
+The runner does not implement business workflow behavior. It owns only stage
+selection, contract validation, state-node transition, parent/child linking,
+artifact and evidence attachment, and structured failure preservation.
+
+The runner uses existing CW helpers:
+
+- `validatePipelineContract`
+- `assertNodeSatisfiesContract`
+- `transitionStateNode`
+- `recordNodeError`
+- `linkStateNodes`
+- `appendRunNode`
+- `upsertRunContract`
+
+## EXECUTION MODEL
+
+The default CW pipeline is:
+
+```text
+input -> plan -> dispatch -> result -> verify -> commit -> report
+```
+
+A stage run receives a `WorkflowRun`, a `stageId`, and an input `StateNode` id.
+It resolves the active `PipelineContract`, validates the stage, creates the
+output node declared by the contract, links input and output nodes, writes node
+JSON under `nodes/`, and returns a structured result.
+
+The runner records progress in files. There is no hidden in-memory-only
+pipeline cursor.
+
+## CONTRACTS
+
+Stages come from `PipelineContract.stages`. A stage declares accepted input node
+kinds and statuses, required artifacts, required evidence, verifier gate
+requirements, and the produced output node kind.
+
+The runner does not duplicate contract validation. It uses the StateNode and
+PipelineContract helpers as the ABI boundary.
+
+## FAILURE MODES
+
+Contract failures become `StateNodeError` records. When the stage or contract
+failure policy preserves failure nodes, the runner creates an `error` node,
+records the structured error, links it to the input node, and persists it under
+`nodes/`.
+
+Unknown run ids, unknown contract ids, unknown node ids, unknown stage ids, and
+corrupt state remain hard errors because the caller cannot proceed safely.
+
+Commit stages are verifier-gated. The default contract requires a verified
+verifier node with evidence before a `committed` commit node can be created.
+Non-gated snapshots are written as `completed` checkpoint nodes outside the
+commit stage.
+
+## FILES
+
+```text
+.cw/runs/<run-id>/state.json
+.cw/runs/<run-id>/nodes/<node-id>.json
+.cw/runs/<run-id>/dispatches/*.json
+.cw/runs/<run-id>/results/*.md
+.cw/runs/<run-id>/commits/*.json
+```
+
+Inspection commands print stable JSON:
+
+```text
+cw.js contract show <run-id> [contract-id]
+cw.js node list <run-id>
+cw.js node show <run-id> <node-id>
+cw.js node graph <run-id>
+```
+
+## EXAMPLES
+
+Find runnable stages:
+
+```ts
+const stages = findRunnablePipelineStages(run);
+```
+
+Run a legal plan stage:
+
+```ts
+runPipelineStage(run, "plan", `${run.id}:input`, {
+  outputNodeId: `${run.id}:task:${task.id}`,
+  outputStatus: "pending",
+  artifacts: [{ id: "task", kind: "markdown", path: task.taskPath }]
+});
+```
+
+Preserve a failed stage:
+
+```ts
+const failed = runPipelineStage(run, "commit", taskNode.id, {
+  outputNodeId: `${run.id}:failed-commit`
+});
+```
+
+## COMPATIBILITY
+
+Pipeline Runner is introduced in CW v0.1.3. It preserves v0.1.2 run state and
+CLI behavior. New public types are plain TypeScript interfaces with optional
+fields where practical.
+
+Older runs without `nodes` or `contracts` remain readable through the existing
+state loader, which initializes those arrays.
+0.1.51

package/docs/project-index.md

@@ -0,0 +1,261 @@
+# Cool Workflow Project Index
+
+Generated from the current repository code on 2026-06-11 by `npm run sync:project-index`.
+
+## Snapshot
+
+- Package: `cool-workflow`
+- Version: `0.1.78`
+- Source modules: `57`
+- Workflow apps: `6`
+- Docs: `46`
+- Smoke tests: `68`
+- Repository: https://github.com/coo1white/cool-workflow
+
+## Architecture
+
+```text
+workflow app -> runner -> dispatch -> isolated workers
+    -> results -> feedback/candidates -> verifier gate
+    -> commit/checkpoint -> report/trust audit
+
+multi-agent host -> topology -> blackboard/coordinator
+    -> fanout/fanin -> candidate score/select
+```
+
+## Source Map
+
+### Core runtime
+
+| Module | Responsibility |
+| --- | --- |
+| [orchestrator.ts](../src/orchestrator.ts) | Plans runs, loads workflows, records results, writes reports, and exposes runner commands. |
+| [state.ts](../src/state.ts) | Persists run checkpoints, JSON state, run paths, and state migration entrypoints. |
+| [state-node.ts](../src/state-node.ts) | Defines explicit state nodes, pipeline transitions, evidence checks, and node persistence. |
+| [pipeline-contract.ts](../src/pipeline-contract.ts) | Builds the default pipeline contract used by run state. |
+| [pipeline-runner.ts](../src/pipeline-runner.ts) | Finds runnable stages and advances/fails pipeline nodes with retry-aware errors. |
+| [types.ts](../src/types.ts) | Owns the shared workflow, run, app, evidence, worker, candidate, audit, and topology types. |
+
+### Verification and state gates
+
+| Module | Responsibility |
+| --- | --- |
+| [verifier.ts](../src/verifier.ts) | Validates result envelopes, findings, evidence, and run gate completion. |
+| [commit.ts](../src/commit.ts) | Creates verifier-gated commits and explicit manual checkpoints. |
+| [candidate-scoring.ts](../src/candidate-scoring.ts) | Registers, scores, ranks, selects, rejects, and summarizes candidate outputs. |
+| [error-feedback.ts](../src/error-feedback.ts) | Turns failures into persisted feedback records and correction tasks. |
+| [trust-audit.ts](../src/trust-audit.ts) | Records provenance, sandbox decisions, host attestations, and acceptance rationale. |
+
+### Workers and policy
+
+| Module | Responsibility |
+| --- | --- |
+| [dispatch.ts](../src/dispatch.ts) | Selects runnable tasks and writes dispatch manifests. |
+| [worker-isolation.ts](../src/worker-isolation.ts) | Allocates worker scopes, writes manifests, records worker outputs, and validates boundaries. |
+| [sandbox-profile.ts](../src/sandbox-profile.ts) | Resolves named sandbox policy contracts and validates read/write/command/network boundaries. |
+| [harness.ts](../src/harness.ts) | Renders task files for dispatched work. |
+
+### Multi-agent layer
+
+| Module | Responsibility |
+| --- | --- |
+| [multi-agent.ts](../src/multi-agent.ts) | Persists multi-agent runs, roles, groups, memberships, fanouts, and fanins. |
+| [coordinator.ts](../src/coordinator.ts) | Owns blackboard topics, messages, context, artifacts, snapshots, and coordinator decisions. |
+| [topology.ts](../src/topology.ts) | Defines and applies official map-reduce, debate, and judge-panel topologies. |
+| [multi-agent-host.ts](../src/multi-agent-host.ts) | Provides the preferred host loop for run, status, step, blackboard, score, and select. |
+
+### User and host surfaces
+
+| Module | Responsibility |
+| --- | --- |
+| [cli.ts](../src/cli.ts) | Routes human CLI commands to runtime, app, topology, multi-agent, and operator flows. |
+| [mcp-server.ts](../src/mcp-server.ts) | Exposes JSON-RPC/MCP tool parity for agent hosts. |
+| [operator-ux.ts](../src/operator-ux.ts) | Formats status, reports, graph, worker, candidate, feedback, commit, and trust summaries. |
+| [workflow-app-framework.ts](../src/workflow-app-framework.ts) | Validates app manifests and loads app entrypoints. |
+| [workflow-api.ts](../src/workflow-api.ts) | Provides the fluent workflow, phase, task, artifact, and input API. |
+| [daemon.ts](../src/daemon.ts) | Runs scheduled tasks through the desktop scheduler daemon. |
+| [scheduler.ts](../src/scheduler.ts) | Creates, stores, computes, and runs schedules. |
+| [triggers.ts](../src/triggers.ts) | Bridges routine triggers to explicit workflow events. |
+| [version.ts](../src/version.ts) | Defines current package and state schema versions. |
+
+### Other Source Modules
+
+- [agent-config.ts](../src/agent-config.ts)
+- [capability-core.ts](../src/capability-core.ts)
+- [capability-dispatcher.ts](../src/capability-dispatcher.ts)
+- [capability-registry.ts](../src/capability-registry.ts)
+- [collaboration.ts](../src/collaboration.ts)
+- [contract-migration.ts](../src/contract-migration.ts)
+- [drive.ts](../src/drive.ts)
+- [evidence-grounding.ts](../src/evidence-grounding.ts)
+- [evidence-reasoning.ts](../src/evidence-reasoning.ts)
+- [execution-backend.ts](../src/execution-backend.ts)
+- [multi-agent-eval.ts](../src/multi-agent-eval.ts)
+- [multi-agent-operator-ux.ts](../src/multi-agent-operator-ux.ts)
+- [multi-agent-trust.ts](../src/multi-agent-trust.ts)
+- [node-snapshot.ts](../src/node-snapshot.ts)
+- [observability.ts](../src/observability.ts)
+- [reclamation.ts](../src/reclamation.ts)
+- [result-normalize.ts](../src/result-normalize.ts)
+- [run-export.ts](../src/run-export.ts)
+- [run-registry.ts](../src/run-registry.ts)
+- [run-state-schema.ts](../src/run-state-schema.ts)
+- [scheduling.ts](../src/scheduling.ts)
+- [schema-validate.ts](../src/schema-validate.ts)
+- [state-explosion.ts](../src/state-explosion.ts)
+- [state-migrations.ts](../src/state-migrations.ts)
+- [telemetry-attestation.ts](../src/telemetry-attestation.ts)
+- [telemetry-ledger.ts](../src/telemetry-ledger.ts)
+- [verifier-registry.ts](../src/verifier-registry.ts)
+- [workbench-host.ts](../src/workbench-host.ts)
+- [workbench.ts](../src/workbench.ts)
+
+## Workflow Apps
+
+| App | Type | Inputs | Sandbox | Source |
+| --- | --- | --- | --- | --- |
+| `architecture-review` - Map a repository architecture, assess risks, verify important findings, and synthesize an evidence-backed verdict. | canonical | `repo`, `question`, `invariant`, `focus` | `readonly` | [manifest](../apps/architecture-review/app.json) / [workflow](../apps/architecture-review/workflow.js) |
+| `end-to-end-golden-path` - Deterministic one-worker workflow app for proving the CW integration chain. | userland | `question` | `readonly` | [manifest](../apps/end-to-end-golden-path/app.json) / [workflow](../apps/end-to-end-golden-path/workflow.js) |
+| `pr-review-fix-ci` - Review a pull request or branch, inspect CI failures, diagnose actionable issues, optionally patch, verify, and summarize with evidence. | canonical | `repo`, `pr`, `branch`, `base`, `ci`, `mode` | `readonly`, `workspace-write` | [manifest](../apps/pr-review-fix-ci/app.json) / [workflow](../apps/pr-review-fix-ci/workflow.js) |
+| `release-cut` - Prepare a release with checklist discipline: version checks, changelog, tests, packaging, release notes, and final verification. | canonical | `repo`, `version`, `previousVersion`, `releaseBranch`, `dryRun` | `readonly`, `workspace-write` | [manifest](../apps/release-cut/app.json) / [workflow](../apps/release-cut/workflow.js) |
+| `research-synthesis` - Split a research question into claims, investigate sources, cross-check evidence, verify claims, and synthesize a concise answer. | canonical | `question`, `source`, `scope`, `freshness` | `readonly`, `locked-down` | [manifest](../apps/research-synthesis/app.json) / [workflow](../apps/research-synthesis/workflow.js) |
+| `workflow-app-framework-demo` - Small framework app showing inputs, phases, evidence gates, and sandbox profile hints. | example | `question` | `readonly`, `workspace-write` | [manifest](../apps/workflow-app-framework-demo/app.json) / [workflow](../apps/workflow-app-framework-demo/workflow.js) |
+
+## Documentation Map
+
+- [Agent Delegation Drive](agent-delegation-drive.7.md)
+- [Workflow App framework](agent-framework.md)
+- [CANDIDATE-SCORING(7)](candidate-scoring.7.md)
+- [Canonical Workflow Apps](canonical-workflow-apps.7.md)
+- [CAPABILITY-TOPOLOGY-REGISTRY(7) — Cool Workflow Agent-Driven Self-Evolution](capability-topology-registry.7.md)
+- [CLI ↔ MCP Parity](cli-mcp-parity.7.md)
+- [Contract Migration Tooling](contract-migration-tooling.7.md)
+- [Control-Plane Scheduling](control-plane-scheduling.7.md)
+- [Coordinator / Blackboard](coordinator-blackboard.7.md)
+- [Dogfood One Real Repo](dogfood-one-real-repo.7.md)
+- [Durable State & Locking](durable-state-and-locking.7.md)
+- [End-to-End Golden Path](end-to-end-golden-path.7.md)
+- [ERROR-FEEDBACK(7)](error-feedback.7.md)
+- [Evidence Adoption Reasoning Chain](evidence-adoption-reasoning-chain.7.md)
+- [EXECUTION-BACKENDS(7)](execution-backends.7.md)
+- [Getting Started](getting-started.md)
+- [Cool Workflow Docs](index.md)
+- [MCP App Surface](mcp-app-surface.7.md)
+- [Multi-Agent CLI + MCP Surface](multi-agent-cli-mcp-surface.7.md)
+- [Multi-Agent Eval & Replay Harness](multi-agent-eval-replay-harness.7.md)
+- [Multi-Agent Operator UX](multi-agent-operator-ux.7.md)
+- [Multi-Agent Runtime Core](multi-agent-runtime-core.7.md)
+- [Multi-Agent Topologies](multi-agent-topologies.7.md)
+- [Multi-Agent Trust / Policy / Audit](multi-agent-trust-policy-audit.7.md)
+- [Node Snapshot / Diff / Replay](node-snapshot-diff-replay.7.md)
+- [Observability + Cost Accounting](observability-cost-accounting.7.md)
+- [Operator UX](operator-ux.7.md)
+- [PIPELINE-RUNNER(7)](pipeline-runner.7.md)
+- [Cool Workflow Project Index](project-index.md)
+- [Real Execution Backend Integrations](real-execution-backends.7.md)
+- [Release And Migration Discipline](release-and-migration.7.md)
+- [Release Tooling](release-tooling.7.md)
+- [Routines](routines.md)
+- [Run Registry / Control Plane](run-registry-control-plane.7.md)
+- [Run Retention & Provable Reclamation](run-retention-reclamation.7.md)
+- [SANDBOX-PROFILES(7)](sandbox-profiles.7.md)
+- [Scheduled Tasks](scheduled-tasks.md)
+- [Security / Trust Hardening](security-trust-hardening.7.md)
+- [State Explosion Management](state-explosion-management.7.md)
+- [STATE-NODE(7)](state-node.7.md)
+- [Team Collaboration](team-collaboration.7.md)
+- [Unix-Inspired Workflow Principles](unix-principles.md)
+- [VERIFIER-GATED-COMMIT(7)](verifier-gated-commit.7.md)
+- [Web / Desktop Workbench](web-desktop-workbench.7.md)
+- [WORKER-ISOLATION(7)](worker-isolation.7.md)
+- [Workflow App framework](workflow-app-framework.7.md)
+
+## Test Surface
+
+Smoke tests mirror the public contracts. The high-signal suites are:
+
+- [agent-delegation-drive-smoke.js](../test/agent-delegation-drive-smoke.js)
+- [artifact-integrity-smoke.js](../test/artifact-integrity-smoke.js)
+- [backend-registry-smoke.js](../test/backend-registry-smoke.js)
+- [block-unapproved-tag-smoke.js](../test/block-unapproved-tag-smoke.js)
+- [candidate-scoring-smoke.js](../test/candidate-scoring-smoke.js)
+- [canonical-workflow-apps-smoke.js](../test/canonical-workflow-apps-smoke.js)
+- [claude-p-agent-wrapper-smoke.js](../test/claude-p-agent-wrapper-smoke.js)
+- [cli-mcp-parity-smoke.js](../test/cli-mcp-parity-smoke.js)
+- [concurrent-failure-semantics-smoke.js](../test/concurrent-failure-semantics-smoke.js)
+- [concurrent-workflow-dsl-smoke.js](../test/concurrent-workflow-dsl-smoke.js)
+- [contract-migration-tooling-smoke.js](../test/contract-migration-tooling-smoke.js)
+- [control-plane-scheduling-smoke.js](../test/control-plane-scheduling-smoke.js)
+- [coordinator-blackboard-smoke.js](../test/coordinator-blackboard-smoke.js)
+- [dogfood-release-smoke.js](../test/dogfood-release-smoke.js)
+- [durable-atomic-write-smoke.js](../test/durable-atomic-write-smoke.js)
+- [end-to-end-demo-smoke.js](../test/end-to-end-demo-smoke.js)
+- [end-to-end-golden-path-smoke.js](../test/end-to-end-golden-path-smoke.js)
+- [error-feedback-resolution-smoke.js](../test/error-feedback-resolution-smoke.js)
+- [error-feedback-smoke.js](../test/error-feedback-smoke.js)
+- [evidence-adoption-reasoning-smoke.js](../test/evidence-adoption-reasoning-smoke.js)
+- [evidence-content-extraction-smoke.js](../test/evidence-content-extraction-smoke.js)
+- [execution-backends-smoke.js](../test/execution-backends-smoke.js)
+- [mcp-app-surface-smoke.js](../test/mcp-app-surface-smoke.js)
+- [multi-agent-cli-mcp-surface-smoke.js](../test/multi-agent-cli-mcp-surface-smoke.js)
+- [multi-agent-eval-replay-harness-smoke.js](../test/multi-agent-eval-replay-harness-smoke.js)
+- [multi-agent-eval-replay-smoke.js](../test/multi-agent-eval-replay-smoke.js)
+- [multi-agent-operator-ux-smoke.js](../test/multi-agent-operator-ux-smoke.js)
+- [multi-agent-runtime-core-smoke.js](../test/multi-agent-runtime-core-smoke.js)
+- [multi-agent-topologies-smoke.js](../test/multi-agent-topologies-smoke.js)
+- [multi-agent-trust-policy-audit-smoke.js](../test/multi-agent-trust-policy-audit-smoke.js)
+- [no-false-green-smoke.js](../test/no-false-green-smoke.js)
+- [node-snapshot-diff-replay-smoke.js](../test/node-snapshot-diff-replay-smoke.js)
+- [observability-cost-accounting-smoke.js](../test/observability-cost-accounting-smoke.js)
+- [one-way-boundary-smoke.js](../test/one-way-boundary-smoke.js)
+- [operator-ux-smoke.js](../test/operator-ux-smoke.js)
+- [parallel-onramp-smoke.js](../test/parallel-onramp-smoke.js)
+- [pipeline-auto-advance-smoke.js](../test/pipeline-auto-advance-smoke.js)
+- [pipeline-runner-smoke.js](../test/pipeline-runner-smoke.js)
+- [project-index-sync-smoke.js](../test/project-index-sync-smoke.js)
+- [quickstart-smoke.js](../test/quickstart-smoke.js)
+- [real-execution-backends-smoke.js](../test/real-execution-backends-smoke.js)
+- [release-flow-smoke.js](../test/release-flow-smoke.js)
+- [release-gate-smoke.js](../test/release-gate-smoke.js)
+- [release-tooling-smoke.js](../test/release-tooling-smoke.js)
+- [result-normalize-smoke.js](../test/result-normalize-smoke.js)
+- [robustness-hardening-smoke.js](../test/robustness-hardening-smoke.js)
+- [run-export-import-smoke.js](../test/run-export-import-smoke.js)
+- [run-fixture-compat-smoke.js](../test/run-fixture-compat-smoke.js)
+- [run-registry-control-plane-smoke.js](../test/run-registry-control-plane-smoke.js)
+- [run-retention-reclamation-smoke.js](../test/run-retention-reclamation-smoke.js)
+- [sandbox-profile-smoke.js](../test/sandbox-profile-smoke.js)
+- [schema-validation-smoke.js](../test/schema-validation-smoke.js)
+- [security-trust-hardening-smoke.js](../test/security-trust-hardening-smoke.js)
+- [self-audit-hardening-smoke.js](../test/self-audit-hardening-smoke.js)
+- [state-explosion-management-smoke.js](../test/state-explosion-management-smoke.js)
+- [state-node-smoke.js](../test/state-node-smoke.js)
+- [team-collaboration-smoke.js](../test/team-collaboration-smoke.js)
+- [telemetry-attest-wrap-smoke.js](../test/telemetry-attest-wrap-smoke.js)
+- [telemetry-attestation-smoke.js](../test/telemetry-attestation-smoke.js)
+- [telemetry-fail-closed-smoke.js](../test/telemetry-fail-closed-smoke.js)
+- [telemetry-ledger-smoke.js](../test/telemetry-ledger-smoke.js)
+- [telemetry-metrics-coverage-smoke.js](../test/telemetry-metrics-coverage-smoke.js)
+- [token-budget-enforcement-smoke.js](../test/token-budget-enforcement-smoke.js)
+- [verifier-gated-commit-smoke.js](../test/verifier-gated-commit-smoke.js)
+- [web-desktop-workbench-smoke.js](../test/web-desktop-workbench-smoke.js)
+- [worker-isolation-smoke.js](../test/worker-isolation-smoke.js)
+- [worker-retry-count-smoke.js](../test/worker-retry-count-smoke.js)
+- [workflow-app-framework-smoke.js](../test/workflow-app-framework-smoke.js)
+
+## Sync Targets
+
+- Repository docs: [docs/project-index.md](project-index.md)
+- Obsidian vault (optional): set `CW_OBSIDIAN_VAULT` to your local vault path.
+- GitHub Wiki: the `cool-workflow.wiki` working tree (override with `CW_GITHUB_WIKI_DIR`).
+
+## Maintenance
+
+Run this after changing source modules, workflow app manifests, public docs, or smoke test coverage:
+
+```bash
+cd plugins/cool-workflow
+npm run sync:project-index
+```
+
+Then review the Obsidian page and GitHub Wiki working tree before publishing wiki changes.

package/docs/real-execution-backends.7.md

@@ -0,0 +1,142 @@
+# Real Execution Backend Integrations
+
+CW v0.1.34 makes the delegating execution backends REAL. v0.1.29 shipped the
+driver layer (`src/execution-backend.ts`) with `node`/`bun`/`shell` really
+executing and `container`/`remote`/`ci` as contract-conformant stubs: `delegate()`
+built a handle and returned `status: "completed"` with `delegated:`/`handle:`
+evidence without running anything. v0.1.34 replaces that no-op so the three
+delegating drivers actually drive a container runtime, a remote runner, and a CI
+job — opt-in, fail-closed, and recording the SAME canonical evidence as `node`.
+
+The driver model and the sandbox contract are unchanged; only HOW/WHERE a
+delegated task runs becomes real.
+
+## Identical Evidence, Any Backend
+
+A real delegated run records the SAME canonical evidence `executeLocal` produces:
+
+```text
+command:<command + args>
+exitCode:<code>
+stdoutSha256:sha256:<hex>
+```
+
+The execution handle (`image@digest`, `endpoint#jobId`) lives in
+`provenance.handle` and the sandbox attestation in `provenance.attestation` —
+NEVER in `evidence`. So a `container` run of the same task is byte-stable against
+`node` after stripping provenance: only `provenance.backendId`/`handle`/
+`attestation` and ISO timestamps differ. Eval/replay, the verifier gates, the
+v0.1.28 registry, and the v0.1.30 Workbench stay backend-agnostic.
+
+## container
+
+Runs `docker` (or `podman`) really, under the sandbox contract:
+
+```text
+<runtime> run --rm [--network none] -v <cwd>:<cwd>:ro -w <cwd> [-e NAME=VALUE ...] <image[@digest]> <command> <args>
+```
+
+- **network** — `--network none` when the profile restricts it (`network.mode !=
+  any`); a container network namespace genuinely enforces this (the dimension is
+  declared `enforce`).
+- **read/write** — the workspace is mounted read-only at the same path; CW's
+  worker-output acceptance still bounds writes. (Write-through mounts are a later
+  refinement.)
+- **env** — only the profile's explicitly exposed names cross into the container;
+  the image supplies its own `PATH`/`HOME`, so host-specific base env is never
+  injected.
+
+Selection supplies the image via `--image` / `CW_CONTAINER_IMAGE` (+ optional
+`CW_CONTAINER_DIGEST`).
+
+## remote / ci
+
+Real HTTP delegation. The job `{ command, args, env, sandboxProfileId, jobId? }`
+is POSTed to the configured endpoint by a self-contained Node child (global
+`fetch`, so the driver stays portable and synchronous from CW's view); a returned
+`jobId` is polled until `done`. The runner's `{ exitCode, stdout }` becomes the
+canonical evidence. Endpoints come from `--endpoint`/`--job` or
+`CW_REMOTE_ENDPOINT`/`CW_REMOTE_JOB` / `CW_CI_ENDPOINT`/`CW_CI_JOB`.
+
+## Fail Closed
+
+A delegated run NEVER fabricates a completion. It returns `status: "refused"`
+(`attestation.status: "refused"`, a `refused:<code>` evidence line, no
+`stdoutSha256:`) when:
+
+- `delegation-target-missing` — no image (container) or no endpoint (remote/ci).
+- `no-command` — a delegating backend was asked to run with no command.
+- `runtime-unavailable` — no `docker`/`podman` on PATH, or the daemon is
+  **unreachable**. A present CLI with a dead daemon is detected by a pre-flight
+  `<runtime> version --format {{.Server.Version}}` (which returns the server
+  version only when reachable) — the container run's own exit code is NOT a
+  reliable daemon-down signal across runtimes, so it is not relied upon.
+- `delegation-failed` — the runtime errored (e.g. `docker` exit 125 for a bad
+  image), the HTTP POST/poll failed or was unreachable, or the runner returned an
+  unparseable response or no `exitCode`.
+
+A container command that genuinely runs and exits non-zero is `failed` (a real
+result), distinct from `refused` (never ran).
+
+## Compatibility
+
+The default backend stays `node`; the dispatch path stays a `delegate-host`
+execution reproducing pre-v0.1.29 behavior exactly. With no container runtime, no
+endpoint, and no credentials, every existing probe and test output is unchanged —
+real execution is strictly opt-in. The `ResultEnvelope` schema is unchanged.
+
+## See Also
+
+execution-backends(7), sandbox-profiles(7), cli-mcp-parity(7),
+run-registry-control-plane(7)
+
+## Node Snapshot / Diff / Replay (v0.1.35)
+
+per-node snapshot, structural diff, and isolated deterministic replay over StateNode, reusing the v0.1.23 eval harness; fail-closed on source drift (valid|stale|absent). See node-snapshot-diff-replay(7).
+
+## Contract Migration Tooling (v0.1.36)
+
+first-class declared migration registry (run-state + workflow-app) with per-edge compatibility proofs, fail-closed reachability, and a round-trip/non-destruction prover. See contract-migration-tooling(7).
+
+## Control-Plane Scheduling (v0.1.37)
+
+priority + concurrency limits + lease lifecycle + retry/backoff + fail-closed park over the v0.1.28 Run Registry queue; policy-as-data, deterministic. See control-plane-scheduling(7).
+
+## Agent Delegation Drive (v0.1.38)
+
+spawn an external agent process per worker, capture result.md + attestation, auto-drive plan->dispatch->fulfill->accept->commit
+
+## Run Retention & Provable Reclamation (v0.1.39)
+
+tiered, append-only, cryptographically-verifiable run reclamation: seal the audit skeleton, free the reconstructable bulk, prove it
+
+## Durable State & Locking (v0.1.40)
+
+atomic temp->rename writes + fsync-durability for authoritative stores; portable stale-stealing file lock serializing the cross-process read-modify-write stores
+
+## Self-Audit Hardening & Pure-Router Decomposition (v0.1.41)
+
+evidence grounding + durable audit append + symlink-hardened containment + deterministic worker ids + recursive redaction; BackendRegistry self-describing drivers (no per-id switches); orchestrator god-object decomposed into per-domain operation modules (pure loadRun->delegate router)
+
+## Robust Result Ingest (v0.1.42)
+
+capture findings/evidence from any reasonable agent shape (alt keys + prose), CW derives grounded evidence itself, warn on empty capture — closes the v0.1.41 live-drive 'accepted with 0 captured' failure
+
+## No-False-Green Gate & Launch Prep (v0.1.43)
+
+Hard gate blocking empty-capture verifier-gated commits, plus quickstart and launch-prep docs.
+
+## Release-Gate Determinism & Agents Vendor (v0.1.44)
+
+Release-readiness checks now validate the committed blob (`git show HEAD:<path>`) instead of the mutable working tree — eliminating false-red/false-green from concurrent working-tree writes (iCloud/Spotlight/editor). Adds the `agents` vendor manifest target: a generated `.agents/plugins/cool-workflow/` adapter giving any non-Claude AI agent one common interface to CW.
+
+## P1-P2 Fixes & CI Content Surfaces (v0.1.49)
+
+Migration DAG with reversible edges (v0.1.45), capability auto-discovery (v0.1.46), vendor-adapter registry (v0.1.47), state auto-compaction and P2 fixes (v0.1.48), plus CI content-surface determinism hardening (v0.1.49).
+0.1.51
+
+0.1.76
+
+0.1.77
+
+0.1.78