create-agdf 0.14.2 → 0.14.3

package/generated/plugins/agdf/runtime/create-agdf/lib/delivery-path-search/state-adapter.js

@@ -1,11 +1,10 @@
-import { existsSync, readFileSync } from "node:fs";
-import { join } from "node:path";
 import {
   CONTRACT_VERSION,
   GENERATOR_CONTRACT_VERSION,
   validateGeneratorRequest,
 } from "./contracts.js";
-import { resolveRuns, verifyLegacyProjection } from "../control-state/index.js";
+import { evaluateGateCheck } from "../control-evaluation/gate-check.js";
+import { readRunState } from "../control-evaluation/run-state.js";
 
 function section(content, heading) {
   return (
@@ -15,100 +14,44 @@ function section(content, heading) {
   );
 }
 
-function tableAnswers(content) {
-  const answers = {};
-  for (const line of section(content, "Current Control State").split(/\r?\n/)) {
-    const cells = line
-      .split("|")
-      .slice(1, -1)
-      .map((cell) => cell.trim());
-    if (
-      cells.length >= 2 &&
-      cells[0] &&
-      !cells[0].startsWith("---") &&
-      cells[0] !== "Question"
-    )
-      answers[cells[0]] = cells[1];
-  }
-  return answers;
-}
-
-function statusCard(content) {
-  const card = {};
-  for (const line of section(content, "Run Status Card").split(/\r?\n/)) {
-    const cells = line
-      .split("|")
-      .slice(1, -1)
-      .map((cell) => cell.trim().replace(/^`|`$/g, ""));
-    if (
-      cells.length >= 2 &&
-      cells[0] &&
-      !cells[0].startsWith("---") &&
-      cells[0] !== "Run status"
-    )
-      card[cells[0]] = cells[1];
-  }
-  return card;
+function metaField(content, name) {
+  return content.match(new RegExp(`^- ${name}:\\s*(.+)$`, "m"))?.[1]
+    ?.replace(/^`|`$/g, "")
+    .trim() ?? "";
 }
 
-function listCell(value) {
-  return String(value ?? "")
-    .split(/\s*;\s*/)
-    .map((item) => item.trim())
-    .filter(Boolean);
-}
-
-export function searchInputFromControl(targetDir, options = {}) {
-  const canonicalRoot = join(targetDir, ".agdf", "control", "runs");
-  if (existsSync(canonicalRoot)) {
-    const projection = verifyLegacyProjection(targetDir);
-    if (!["absent", "valid"].includes(projection.status)) {
-      throw new Error(`AGDF_LEGACY_PROJECTION_DRIFT:${projection.status}`);
-    }
+export function searchInputFromControl(targetDir, options = {}, dependencies = {}) {
+  const evaluate = dependencies.evaluateGateCheck ?? evaluateGateCheck;
+  const readRun = dependencies.readRunState ?? readRunState;
+  const selection = options.scopeKey ? { runId: options.scopeKey } : {};
+  const gate = evaluate(targetDir, selection);
+  const run = readRun(targetDir, selection);
+  const content = run.content ?? "";
+  const evaluatedRunId = gate.status_card?.run_id ?? "";
+  const evaluatedRevision = gate.status_presentation?.revision_id ?? "";
+  const runId = metaField(content, "run_id");
+  const runRevision = metaField(content, "revision_id");
+  const runGate = metaField(content, "current_gate");
+  let inputFailureCode = "";
+  if (!content || run.resolution_error) inputFailureCode = "canonical_control_unavailable";
+  else if (!evaluatedRunId || !evaluatedRevision) inputFailureCode = "canonical_snapshot_identity_missing";
+  else if (evaluatedRunId !== runId || evaluatedRevision !== runRevision || gate.current_gate !== runGate) {
+    inputFailureCode = "stale_control_snapshot";
+  } else if (!Array.isArray(gate.allowed) || gate.allowed.length === 0) {
+    inputFailureCode = "canonical_actions_unavailable";
   }
-  const resolved = existsSync(canonicalRoot)
-    ? resolveRuns(targetDir, {
-        runIdArg: options.scopeKey,
-        runIdEnv: process.env.AGDF_RUN_ID,
-      })
-    : null;
-  const runPath =
-    resolved?.run.path ?? join(targetDir, ".agdf", "control", "AGDF_RUN.md");
-  if (!existsSync(runPath)) throw new Error("missing AGDF run state");
-  const content = readFileSync(runPath, "utf8");
-  const meta = Object.fromEntries(
-    [...content.matchAll(/^- ([a-z_]+):\s*(.+)$/gm)].map((match) => [
-      match[1],
-      match[2].replace(/^`|`$/g, "").trim(),
-    ]),
-  );
-  const answers = tableAnswers(content);
-  const card = statusCard(content);
   const result = {
     contract_version: CONTRACT_VERSION,
-    scope_key: options.scopeKey ?? meta.run_id ?? "unknown-scope",
-    objective: section(content, "Objective").trim(),
-    current_gate: card["Current gate"] ?? meta.current_gate ?? "unknown",
-    allowed_actions: options.allowedActions ?? listCell(card["Allowed now"]),
-    forbidden_actions:
-      options.forbiddenActions ??
-      listCell(answers["What is explicitly forbidden right now?"]),
-    evidence_refs: [
-      ...content.matchAll(
-        /\|\s*([^|]+)\s*\|\s*([^|]+)\s*\|\s*([^|]+)\s*\|\s*(direct|indirect)\s*\|/g,
-      ),
-    ]
-      .slice(1)
-      .map((match) => `${match[1].trim()}: ${match[2].trim()}`),
-    risks: section(content, "Risks")
-      .split(/\r?\n/)
-      .filter(
-        (line) =>
-          line.startsWith("|") &&
-          !line.includes("---") &&
-          !line.includes("| Risk |"),
-      )
-      .map((line) => line.split("|")[1].trim()),
+    scope_key: evaluatedRunId || runId || options.scopeKey || "unknown-scope",
+    scope_revision: evaluatedRevision || runRevision || "unversioned",
+    objective: section(content, "Objective").trim() || "Canonical Delivery Path Search input unavailable",
+    current_gate: gate.current_gate || runGate || "unknown",
+    allowed_actions: inputFailureCode ? [] : [...gate.allowed],
+    forbidden_actions: Array.isArray(gate.forbidden) ? [...gate.forbidden] : [],
+    evidence_refs: Array.isArray(gate.evidence_refs)
+      ? gate.evidence_refs.map((item) => `${item.evidence}: ${item.source}`)
+      : [],
+    risks: Array.isArray(run.risks) ? run.risks.map((item) => item.risk).filter(Boolean) : [],
     enforcement: options.enforcement ?? {
       level: "instruction_only",
       evidence: ["surface instruction prohibits implementation during search"],
@@ -122,6 +65,11 @@ export function searchInputFromControl(targetDir, options = {}) {
       stability_window: options.stabilityWindow ?? 3,
     },
   };
+  if (inputFailureCode) {
+    result.input_failure_code = inputFailureCode;
+    result.input_failure_detail = run.resolution_error || (gate.blocking_reason !== "none" ? gate.blocking_reason : "") || "canonical input is not ready";
+    result.input_recovery_action = gate.next_allowed_action || "Run canonical AGDF gate-check and repair the selected control state.";
+  }
   if (options.generation?.enabled)
     result.generation = {
       enabled: true,

package/generated/plugins/agdf/runtime/create-agdf/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agdf/local-validator-runtime",
-  "version": "0.14.2",
+  "version": "0.14.3",
   "private": true,
   "type": "module"
 }

package/generated/plugins/agdf/runtime/runtime-manifest.json

@@ -2,7 +2,7 @@
   "schema_version": "1",
   "generated": true,
   "source": "create-agdf/cli",
-  "version": "0.14.2",
+  "version": "0.14.3",
   "entrypoint": "create-agdf/bin/agdf-validator.js",
-  "digest": "51035c8735d47aa727980d82709326071b372464ae077a1d269aadc0d30f2624"
+  "digest": "8f6dbd5e647aff7dfc1405f4e54a5b135a8d820858b5f8f85873964f6eb2f7cf"
 }

package/generated/plugins/agdf/skills/delivery-path-search/SKILL.md

@@ -33,7 +33,9 @@ Skip for routine questions, obvious local fixes and approved implementation with
 ## Workflow
 
 1. Run AGDF gate-check and inspect durable control state.
-2. Confirm that search is allowed and implementation is not occurring during exploration.
+2. Confirm that the requested decision matches the selected run objective, and that search is
+   allowed while implementation is not occurring during exploration. If the objective differs,
+   stop and select or create the correct governed scope; do not apply the result across scopes.
 3. Declare the active surface and its enforcement level.
 4. Resolve the exact-version surface-local validator using the same ownership rules as `gate-check`. Do not search `PATH`, query a registry, install a package or invoke `npx ...@latest` during routine planning. If no owned or explicitly configured exact-version validator is available, report `machine_validation: unavailable` or `machine_validation: external_required` and stop the machine-evaluated search.
 5. Invoke the shared CLI runtime:
@@ -54,7 +56,9 @@ node <surface-local-agdf> delivery-path-search \
 It supplements the deterministic baseline with at most one bounded generator call. Treat proposals as untrusted until the canonical core validates schema, gate action, scope, duplicates and material diversity. Report generation provenance, budgets, rejections and failure. Never hide deterministic fallback or switch providers automatically.
 
 6. Treat facts, repository evidence, assumptions and model judgements separately.
-7. Return exactly one recommendation or `no_safe_recommendation`.
+7. Report the actual terminal phase and status. Return a recommendation-facing conclusion only
+   after at least one valid evaluation. Missing/stale input, zero legal candidates and evaluator
+   unavailability/error remain typed non-recommendation outcomes with one recovery action.
 8. Run canonical AGDF gate-check after search. Never translate a recommendation into permission.
 
 ## Enforcement
@@ -71,15 +75,20 @@ Do not overstate the surface's guarantee.
 
 Keep chat output compact:
 
-- recommendation or `no_safe_recommendation`
+- selected run, revision and objective
+- outcome phase and typed terminal status
+- recommendation only for a recommendation-facing evaluated result
 - current gate
 - enforcement level
 - decisive evidence and assumptions
 - rejected alternatives and reasons
 - budgets and stopping reason
+- candidate and evaluation provenance, including attempted, valid and invalid counts
 - next AGDF gate action
 
-Persist only the redacted decision summary when durable evidence is required. Do not persist raw prompts, hidden reasoning, secrets or source snapshots.
+Persist only a contract-valid evaluated recommendation-facing summary when durable evidence is
+required. Never persist input, candidate or evaluator failure as a decision. Do not persist raw
+prompts, hidden reasoning, secrets or source snapshots.
 
 ## Boundaries
 
@@ -87,6 +96,9 @@ Persist only the redacted decision summary when durable evidence is required. Do
 - Do not modify repository files during search.
 - Do not execute evaluator-returned commands.
 - Do not invent default scores for invalid evaluator output.
+- Do not parse Run Status Card or other presentation Markdown as gate-policy input.
+- Do not describe zero valid evaluations as `no_safe_recommendation`.
+- Do not apply one selected run's result to an unrelated question.
 - Do not implement, approve or release based on search output.
 - Do not create agent-specific scoring, gate logic or skill copies.
 - Do not replace deterministic candidates with generated proposals.

package/generated/plugins/agdf/submission/openai/availability.md

@@ -1,6 +1,6 @@
 # Availability Decision Record
 
-- release: `0.14.2`
+- release: `0.14.3`
 - decision_state: `pending`
 - decision_owner: verified publisher
 - countries: not selected

package/generated/plugins/agdf/submission/openai/capability-matrix.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "releaseVersion": "0.14.2",
+  "releaseVersion": "0.14.3",
   "evidenceStates": [
     "common",
     "codex-specific",

package/generated/plugins/agdf/submission/openai/release-notes.md

@@ -1,4 +1,4 @@
-# AGDF 0.14.2 — Initial OpenAI Public Plugin Candidate
+# AGDF 0.14.3 — Initial OpenAI Public Plugin Candidate
 
 This candidate packages the canonical AGDF workflow skills for public discovery in ChatGPT and
 Codex. It helps users assess delivery fit, preserve explicit human approvals, inspect existing-system
@@ -19,6 +19,12 @@ runtime or hooks, so automatic runtime checks remain unavailable in this profile
 installers also show the target and verified installed AGDF version, distinguish previous intent from
 effective host permission, explain manual mode and recover visibly from an invalid key.
 
+Delivery Path Search now consumes canonical selected-run gate actions instead of persisted
+presentation Markdown. Its additive version-1 result fields expose run revision, objective, outcome
+phase and candidate/evaluation provenance. Missing input, zero legal candidates and evaluator
+failures no longer appear as `no_safe_recommendation`; recommendation-facing results require at
+least one valid evaluation and are the only persistable outcomes.
+
 AGDF is an independent open-source project by Arndt Gold. It is not affiliated with, endorsed by or
 sponsored by OpenAI and is not a security sandbox, legal assessment, compliance certification or
 autonomous shipping system.

package/generated/plugins/agdf/submission/openai/reviewer-cases.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "releaseVersion": "0.14.2",
+  "releaseVersion": "0.14.3",
   "cases": [
     {
       "id": "positive-proportional-fit",

package/generated/plugins/copilot/agdf/.agdf-payload-inventory.json

@@ -1,14 +1,14 @@
 {
   "schema_version": 1,
   "profile_id": "copilot-runtime-plugin",
-  "version": "0.14.2",
+  "version": "0.14.3",
   "baseline": {
     "max_files": 78,
-    "max_bytes": 539607
+    "max_bytes": 550979
   },
   "stats": {
     "files": 78,
-    "bytes": 539607
+    "bytes": 550979
   },
   "entries": [
     {
@@ -73,9 +73,9 @@
       "rule": "copilot_name_projection",
       "requirement": "Copilot skill agdf-delivery-path-search",
       "source": "plugin/skills/delivery-path-search/SKILL.md",
-      "source_digest": "8c4a94c8ad86a51380f2f636d8b2fedd5a3554adf3edb19d350eb6a7c8254914",
-      "digest": "02daa240a02d85037d50b7eafd7524c0a18ea9b07a69d5fe70a58d11d3002478",
-      "bytes": 4001
+      "source_digest": "688a0e04f6a1a39be17ded0047f88187b109f25bd9f22927a3d4261cbfdc0bd5",
+      "digest": "986c74ab103ca04084bfc1b9fce66090988106670cd224fca43c437a7ee4705b",
+      "bytes": 4916
     },
     {
       "destination": "copilot-skills/agdf-gate-check/SKILL.md",
@@ -183,9 +183,9 @@
       "rule": "copilot_name_projection",
       "requirement": "focused runtime contract",
       "source": "plugin/meta/contracts/control-scaffold.md",
-      "source_digest": "bf5773ec22013d3332cf4900d59880ebdfbaab7dee227c66b1721d0fd05aeac2",
-      "digest": "975cca738b1856a89397d9d629077496833e63ffee7a29dfe9689dc42c7ee161",
-      "bytes": 8992
+      "source_digest": "82d298d5399c56ecbaeef78ac367556b675200c09ea96e160534ec03adb07f42",
+      "digest": "2aaa38c39d19d38575270d8bc6e8c113be3bd652f988657d53dae10613f95243",
+      "bytes": 10256
     },
     {
       "destination": "copilot-skills/contracts/gate-transition.md",
@@ -249,7 +249,7 @@
       "rule": "render_copilot_hook",
       "requirement": "consent-bound session start check",
       "source": "plugin/meta/agdf-plugin.definition.json",
-      "source_digest": "ba636c3e224125df8f2dedde215b00473174b1a02fdeecbf91da1a262dcde778",
+      "source_digest": "16b69b796510bf4f6907fd986ad64dcf8e5ac4f3860d12e0e62381ea2582b012",
       "digest": "60d7cd31d6c9483c720c5e775c10d94ba7fd214a0b15b046703ced3953bd489f",
       "bytes": 273
     },
@@ -282,8 +282,8 @@
       "rule": "copy",
       "requirement": "local validator and session orientation dependency",
       "source": "plugin/meta/agdf-plugin.definition.json",
-      "source_digest": "ba636c3e224125df8f2dedde215b00473174b1a02fdeecbf91da1a262dcde778",
-      "digest": "ba636c3e224125df8f2dedde215b00473174b1a02fdeecbf91da1a262dcde778",
+      "source_digest": "16b69b796510bf4f6907fd986ad64dcf8e5ac4f3860d12e0e62381ea2582b012",
+      "digest": "16b69b796510bf4f6907fd986ad64dcf8e5ac4f3860d12e0e62381ea2582b012",
       "bytes": 11491
     },
     {
@@ -304,8 +304,8 @@
       "rule": "render_copilot_manifest",
       "requirement": "Copilot plugin discovery",
       "source": "plugin/meta/agdf-plugin.definition.json",
-      "source_digest": "ba636c3e224125df8f2dedde215b00473174b1a02fdeecbf91da1a262dcde778",
-      "digest": "19ed3eacf4050fc0b4323d2714ea3b5b8aa0c60e67259ae9bbafd5a08e029ec4",
+      "source_digest": "16b69b796510bf4f6907fd986ad64dcf8e5ac4f3860d12e0e62381ea2582b012",
+      "digest": "2e60d46f88338ce119067c2681c2517572c15d66b7f3f775bb9da0b0d5048673",
       "bytes": 551
     },
     {
@@ -359,7 +359,7 @@
       "owner": "create-agdf/scripts/sync-plugin-runtime.js",
       "rule": "generated_exact_runtime",
       "requirement": "offline exact-version validator and session check",
-      "digest": "ba636c3e224125df8f2dedde215b00473174b1a02fdeecbf91da1a262dcde778",
+      "digest": "16b69b796510bf4f6907fd986ad64dcf8e5ac4f3860d12e0e62381ea2582b012",
       "bytes": 11491
     },
     {
@@ -377,8 +377,8 @@
       "owner": "create-agdf/scripts/sync-plugin-runtime.js",
       "rule": "generated_exact_runtime",
       "requirement": "offline exact-version validator and session check",
-      "digest": "0819ad3320dc1ac04d975ee8ae9fda321b0cc5accd7e9c06350aa71ce5349859",
-      "bytes": 7084
+      "digest": "cd7b9545e9629db6f6834db30669cede62161810f324a35cde322875864ca22c",
+      "bytes": 9041
     },
     {
       "destination": "runtime/create-agdf/lib/cli/parse-args.js",
@@ -575,8 +575,8 @@
       "owner": "create-agdf/scripts/sync-plugin-runtime.js",
       "rule": "generated_exact_runtime",
       "requirement": "offline exact-version validator and session check",
-      "digest": "5db0c1c433f7f08e332b203c6355a0b7ae8541c4b9f49412cd14bc8431706aea",
-      "bytes": 13000
+      "digest": "02ebfb153815d22d2e67debe7d51b09e94416b3f86966c92db4621dfb984a3a8",
+      "bytes": 15955
     },
     {
       "destination": "runtime/create-agdf/lib/delivery-path-search/evaluators/claude.js",
@@ -656,8 +656,8 @@
       "owner": "create-agdf/scripts/sync-plugin-runtime.js",
       "rule": "generated_exact_runtime",
       "requirement": "offline exact-version validator and session check",
-      "digest": "7764fcc5bd0efc51f12a2560847ef7ef8bf7f9d0fa0b909d9b8b52e6a8a8a70e",
-      "bytes": 1856
+      "digest": "9629b8ff1fda2514baf03a99590d52a9379ad2505431634fd6fa953e553af9fd",
+      "bytes": 2521
     },
     {
       "destination": "runtime/create-agdf/lib/delivery-path-search/scoring.js",
@@ -674,8 +674,8 @@
       "owner": "create-agdf/scripts/sync-plugin-runtime.js",
       "rule": "generated_exact_runtime",
       "requirement": "offline exact-version validator and session check",
-      "digest": "e51ba0fb5f66ddfe72d0f03320a80eb5669556e7aa75f7650ea8aeee387e7abb",
-      "bytes": 7168
+      "digest": "4ac4d4bb11297f684a0161b03bb0d07909ee814e2687026f4d2c8059befb5990",
+      "bytes": 11244
     },
     {
       "destination": "runtime/create-agdf/lib/delivery-path-search/state-adapter.js",
@@ -683,8 +683,8 @@
       "owner": "create-agdf/scripts/sync-plugin-runtime.js",
       "rule": "generated_exact_runtime",
       "requirement": "offline exact-version validator and session check",
-      "digest": "c26b30a48d6424d996401756fbf3dae7b0fa1d32ae0c24d1f99e7fab031f48ab",
-      "bytes": 5056
+      "digest": "8f7223d79f68c0321c502dab4c4083b08535c67c0e9d6b1420645af06f3f3d13",
+      "bytes": 4596
     },
     {
       "destination": "runtime/create-agdf/lib/delivery-path-search/surfaces/capabilities.js",
@@ -755,7 +755,7 @@
       "owner": "create-agdf/scripts/sync-plugin-runtime.js",
       "rule": "generated_exact_runtime",
       "requirement": "offline exact-version validator and session check",
-      "digest": "7e085f5f2a711a23c9a97bf3a845d30cf7ef651e8884318f6ffe62a6377d0b90",
+      "digest": "1af259f416c44d6168ce860767481fb2cd470f0041f6b8ec14cd6ef1d7120f9a",
       "bytes": 108
     },
     {
@@ -764,7 +764,7 @@
       "owner": "create-agdf/scripts/sync-plugin-runtime.js",
       "rule": "generated_exact_runtime",
       "requirement": "offline exact-version validator and session check",
-      "digest": "97dbaf03692fc43270184ea5a63c36d504093df2470d8c313ff1fc273ad75083",
+      "digest": "cd60d50cfba731efb56267ec292b0bcb978b2d7fc4bed2872c91edeb4c4e7911",
       "bytes": 236
     }
   ]

package/generated/plugins/copilot/agdf/copilot-skills/agdf-delivery-path-search/SKILL.md

@@ -33,7 +33,9 @@ Skip for routine questions, obvious local fixes and approved implementation with
 ## Workflow
 
 1. Run AGDF gate-check and inspect durable control state.
-2. Confirm that search is allowed and implementation is not occurring during exploration.
+2. Confirm that the requested decision matches the selected run objective, and that search is
+   allowed while implementation is not occurring during exploration. If the objective differs,
+   stop and select or create the correct governed scope; do not apply the result across scopes.
 3. Declare the active surface and its enforcement level.
 4. Resolve the exact-version surface-local validator using the same ownership rules as `agdf-gate-check`. Do not search `PATH`, query a registry, install a package or invoke `npx ...@latest` during routine planning. If no owned or explicitly configured exact-version validator is available, report `machine_validation: unavailable` or `machine_validation: external_required` and stop the machine-evaluated search.
 5. Invoke the shared CLI runtime:
@@ -54,7 +56,9 @@ node <surface-local-agdf> delivery-path-search \
 It supplements the deterministic baseline with at most one bounded generator call. Treat proposals as untrusted until the canonical core validates schema, gate action, scope, duplicates and material diversity. Report generation provenance, budgets, rejections and failure. Never hide deterministic fallback or switch providers automatically.
 
 6. Treat facts, repository evidence, assumptions and model judgements separately.
-7. Return exactly one recommendation or `no_safe_recommendation`.
+7. Report the actual terminal phase and status. Return a recommendation-facing conclusion only
+   after at least one valid evaluation. Missing/stale input, zero legal candidates and evaluator
+   unavailability/error remain typed non-recommendation outcomes with one recovery action.
 8. Run canonical AGDF gate-check after search. Never translate a recommendation into permission.
 
 ## Enforcement
@@ -71,15 +75,20 @@ Do not overstate the surface's guarantee.
 
 Keep chat output compact:
 
-- recommendation or `no_safe_recommendation`
+- selected run, revision and objective
+- outcome phase and typed terminal status
+- recommendation only for a recommendation-facing evaluated result
 - current gate
 - enforcement level
 - decisive evidence and assumptions
 - rejected alternatives and reasons
 - budgets and stopping reason
+- candidate and evaluation provenance, including attempted, valid and invalid counts
 - next AGDF gate action
 
-Persist only the redacted decision summary when durable evidence is required. Do not persist raw prompts, hidden reasoning, secrets or source snapshots.
+Persist only a contract-valid evaluated recommendation-facing summary when durable evidence is
+required. Never persist input, candidate or evaluator failure as a decision. Do not persist raw
+prompts, hidden reasoning, secrets or source snapshots.
 
 ## Boundaries
 
@@ -87,6 +96,9 @@ Persist only the redacted decision summary when durable evidence is required. Do
 - Do not modify repository files during search.
 - Do not execute evaluator-returned commands.
 - Do not invent default scores for invalid evaluator output.
+- Do not parse Run Status Card or other presentation Markdown as gate-policy input.
+- Do not describe zero valid evaluations as `no_safe_recommendation`.
+- Do not apply one selected run's result to an unrelated question.
 - Do not implement, approve or release based on search output.
 - Do not create agent-specific scoring, gate logic or skill copies.
 - Do not replace deterministic candidates with generated proposals.

package/generated/plugins/copilot/agdf/copilot-skills/contracts/control-scaffold.md

@@ -4,11 +4,24 @@
 
 Delivery Path Search is an optional read-only planning step for high-impact decisions with several materially different next actions.
 
-- It consumes current AGDF state and must reject gate-illegal candidates before model evaluation.
-- It returns one advisory recommendation or `no_safe_recommendation`.
+- It consumes the canonical selected-run `agdf-gate-check` evaluation for run, revision, current gate and
+  legal actions. Persisted presentation Markdown such as the Run Status Card is never policy input.
+- It binds the selected `scope_key`, `scope_revision` and objective to one control snapshot. A stale
+  or incomplete snapshot fails before candidate generation or evaluation.
+- It reports the phase that actually ran: `input | candidate | evaluation | search`. A phase that
+  did not run cannot produce a later-phase conclusion.
+- Terminal status is `input_unavailable | no_legal_candidates | evaluator_unavailable |
+  evaluator_error | recommendation | no_safe_recommendation`. Recommendation-facing statuses
+  require at least one contract-valid evaluation. `candidate_queue_exhausted` is a stopping reason,
+  not recommendation evidence.
+- It reports baseline/generated/legal/rejected candidate counts and attempted/valid/invalid
+  evaluation counts. Zero valid evaluations must never be presented or persisted as an evaluated
+  recommendation conclusion.
 - It must report budgets, stopping reason and `full | tool_enforced | instruction_only` enforcement.
 - Model scores are judgements, not measurements.
 - Search output is evidence only. Canonical `agdf-gate-check` independently decides what may proceed.
+- Search applies only to the selected run objective. An unrelated decision needs the correct
+  governed scope; Delivery Path Search is not a second task-target resolver.
 - The bounded first-release algorithm must not be labelled MCTS.
 - Surface adapters may translate transport and presentation, but must not fork scoring, search or gate semantics.
 - Optional AI-native candidate generation supplements the deterministic candidate baseline; it never replaces it.
@@ -19,6 +32,8 @@ Delivery Path Search is an optional read-only planning step for high-impact deci
 - Codex and Claude Code may provide tool-enforced generator transports. Copilot, OpenCode and generic surfaces remain instruction-only without conforming evidence.
 - OpenCode may provide a tool-enforced evaluator only for an invocation whose capability preflight proves `opencode run --pure --agent`, the owned evaluator agent and effective executable-tool denies. Preflight or transport failure must return `evaluator_unavailable` with `instruction_only` enforcement and point to the existing instruction-only workflow; it must not continue through a weaker subprocess.
 - OpenCode candidate generation remains unavailable.
+- Persistence accepts only contract-valid `recommendation` or `no_safe_recommendation` results with
+  at least one valid evaluation. Input, candidate and evaluator failure results remain transient.
 
 The field names above are the stable machine-readable contract used by JSON
 reports and automation. Human-facing Markdown must present the same projection

package/generated/plugins/copilot/agdf/meta/agdf-plugin.definition.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
   "id": "agdf",
-  "version": "0.14.2",
+  "version": "0.14.3",
   "displayName": "AI Governance & Delivery Framework",
   "developerName": "Arndt Gold",
   "description": "Control layer for governed AI-assisted delivery.",

package/generated/plugins/copilot/agdf/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agdf",
-  "version": "0.14.2",
+  "version": "0.14.3",
   "description": "Control layer for governed AI-assisted delivery.",
   "author": {
     "name": "Arndt Gold",

package/generated/plugins/copilot/agdf/runtime/create-agdf/generated/plugins/agdf/meta/agdf-plugin.definition.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
   "id": "agdf",
-  "version": "0.14.2",
+  "version": "0.14.3",
   "displayName": "AI Governance & Delivery Framework",
   "developerName": "Arndt Gold",
   "description": "Control layer for governed AI-assisted delivery.",