create-agdf 0.14.2 → 0.14.4

package/generated/submissions/openai/agdf/meta/copilot-payload-baseline.json

@@ -1,7 +1,7 @@
 {
   "schema_version": 1,
   "profile_id": "copilot-runtime-plugin",
-  "max_files": 78,
-  "max_bytes": 539607,
-  "rationale": "Reviewed Copilot-only manifest, ten prefixed skills, required contracts, exact-version runtime and evidence-plane separation. Any further increase requires review."
+  "max_files": 80,
+  "max_bytes": 568459,
+  "rationale": "Reviewed Copilot-only manifest, ten prefixed skills, required contracts, exact-version runtime, Delivery Path Search input-integrity provenance, evidence-plane separation, shared run-identity validation and the one-file distribution profile history catalogue. Measured payload is 80 files/563615 bytes; no byte-capacity increase was required. Any further increase requires review."
 }

package/generated/submissions/openai/agdf/meta/distribution-profile-history.json

@@ -0,0 +1,125 @@
+{
+  "schema_version": 1,
+  "contracts": {
+    "five-profile-v1": {
+      "distribution_profiles": {
+        "schemaVersion": 1,
+        "marketplaceIdentities": {
+          "durable": "agdf",
+          "generatedRepository": "agdf-repo"
+        },
+        "profiles": {
+          "source-development": {
+            "runtime": "absent",
+            "installable": false,
+            "machineValidation": "unavailable"
+          },
+          "runtime-plugin": {
+            "runtime": "required",
+            "installable": true,
+            "machineValidation": "local_exact_version_digest"
+          },
+          "copilot-runtime-plugin": {
+            "runtime": "required",
+            "installable": true,
+            "machineValidation": "local_exact_version_digest_inventory"
+          },
+          "opencode-config-local": {
+            "runtime": "config_local_package",
+            "installable": true,
+            "machineValidation": "local_exact_version"
+          },
+          "portable-skills": {
+            "runtime": "absent",
+            "installable": true,
+            "machineValidation": "unavailable_or_external_required"
+          }
+        }
+      },
+      "contract_digest": "0211f4e6054a23f0a3ba302e57303adcb8f5903581e99643f803647dd156fe32"
+    },
+    "four-profile-v1": {
+      "distribution_profiles": {
+        "schemaVersion": 1,
+        "marketplaceIdentities": {
+          "durable": "agdf",
+          "generatedRepository": "agdf-repo"
+        },
+        "profiles": {
+          "source-development": {
+            "runtime": "absent",
+            "installable": false,
+            "machineValidation": "unavailable"
+          },
+          "runtime-plugin": {
+            "runtime": "required",
+            "installable": true,
+            "machineValidation": "local_exact_version_digest"
+          },
+          "opencode-config-local": {
+            "runtime": "config_local_package",
+            "installable": true,
+            "machineValidation": "local_exact_version"
+          },
+          "portable-skills": {
+            "runtime": "absent",
+            "installable": true,
+            "machineValidation": "unavailable_or_external_required"
+          }
+        }
+      },
+      "contract_digest": "9987baa4ea91e28a096cac2be8daa876f1c0593e7edbfe2e96b713814aa65ce8"
+    }
+  },
+  "releases": {
+    "0.13.6": {
+      "contract_id": "four-profile-v1",
+      "provenance_schema_version": 1,
+      "profile_id": "runtime-plugin",
+      "entry_digest": "1c21c3fa99cdd788994013f25cbe606ffdcea2cc91d53c679cf061567f652bf3",
+      "status": "supported"
+    },
+    "0.13.7": {
+      "contract_id": "four-profile-v1",
+      "provenance_schema_version": 1,
+      "profile_id": "runtime-plugin",
+      "entry_digest": "6d5383537d2640dc13773f2929dd94d0e7e219e82d08418464c77786b475c3ee",
+      "status": "supported"
+    },
+    "0.13.8": {
+      "contract_id": "four-profile-v1",
+      "provenance_schema_version": 1,
+      "profile_id": "runtime-plugin",
+      "entry_digest": "405e8cfa72ec2e469354dab52197675783b3723adb969a0692e56ba7c95c85c8",
+      "status": "supported"
+    },
+    "0.14.1": {
+      "contract_id": "four-profile-v1",
+      "provenance_schema_version": 1,
+      "profile_id": "runtime-plugin",
+      "entry_digest": "1a6fd6f6a411eddb29e82d7b7abc7d5f658312f555dcf39e160a709194a8b867",
+      "status": "supported"
+    },
+    "0.14.2": {
+      "contract_id": "five-profile-v1",
+      "provenance_schema_version": 1,
+      "profile_id": "runtime-plugin",
+      "entry_digest": "f71ee26df3d4a89ecc727a1c30b40221cf062fce9f716a83453bced9503be8fd",
+      "status": "supported"
+    },
+    "0.14.3": {
+      "contract_id": "five-profile-v1",
+      "provenance_schema_version": 1,
+      "profile_id": "runtime-plugin",
+      "entry_digest": "c5dbe4044d11a976cd4ccd6de6cf1405ebfcb4a26ce5c6308c34f10142db50c9",
+      "status": "supported"
+    },
+    "0.14.4": {
+      "contract_id": "five-profile-v1",
+      "provenance_schema_version": 1,
+      "profile_id": "runtime-plugin",
+      "entry_digest": "a441d633fe11ea402c3366cfac0cec659d32eae5eb4ae6b1d25a1e366a029813",
+      "status": "supported"
+    }
+  }
+}

package/generated/submissions/openai/agdf/skills/delivery-path-search/SKILL.md

@@ -33,7 +33,9 @@ Skip for routine questions, obvious local fixes and approved implementation with
 ## Workflow
 
 1. Run AGDF gate-check and inspect durable control state.
-2. Confirm that search is allowed and implementation is not occurring during exploration.
+2. Confirm that the requested decision matches the selected run objective, and that search is
+   allowed while implementation is not occurring during exploration. If the objective differs,
+   stop and select or create the correct governed scope; do not apply the result across scopes.
 3. Declare the active surface and its enforcement level.
 4. Resolve the exact-version surface-local validator using the same ownership rules as `gate-check`. Do not search `PATH`, query a registry, install a package or invoke `npx ...@latest` during routine planning. If no owned or explicitly configured exact-version validator is available, report `machine_validation: unavailable` or `machine_validation: external_required` and stop the machine-evaluated search.
 5. Invoke the shared CLI runtime:
@@ -54,7 +56,9 @@ node <surface-local-agdf> delivery-path-search \
 It supplements the deterministic baseline with at most one bounded generator call. Treat proposals as untrusted until the canonical core validates schema, gate action, scope, duplicates and material diversity. Report generation provenance, budgets, rejections and failure. Never hide deterministic fallback or switch providers automatically.
 
 6. Treat facts, repository evidence, assumptions and model judgements separately.
-7. Return exactly one recommendation or `no_safe_recommendation`.
+7. Report the actual terminal phase and status. Return a recommendation-facing conclusion only
+   after at least one valid evaluation. Missing/stale input, zero legal candidates and evaluator
+   unavailability/error remain typed non-recommendation outcomes with one recovery action.
 8. Run canonical AGDF gate-check after search. Never translate a recommendation into permission.
 
 ## Enforcement
@@ -71,15 +75,20 @@ Do not overstate the surface's guarantee.
 
 Keep chat output compact:
 
-- recommendation or `no_safe_recommendation`
+- selected run, revision and objective
+- outcome phase and typed terminal status
+- recommendation only for a recommendation-facing evaluated result
 - current gate
 - enforcement level
 - decisive evidence and assumptions
 - rejected alternatives and reasons
 - budgets and stopping reason
+- candidate and evaluation provenance, including attempted, valid and invalid counts
 - next AGDF gate action
 
-Persist only the redacted decision summary when durable evidence is required. Do not persist raw prompts, hidden reasoning, secrets or source snapshots.
+Persist only a contract-valid evaluated recommendation-facing summary when durable evidence is
+required. Never persist input, candidate or evaluator failure as a decision. Do not persist raw
+prompts, hidden reasoning, secrets or source snapshots.
 
 ## Boundaries
 
@@ -87,6 +96,9 @@ Persist only the redacted decision summary when durable evidence is required. Do
 - Do not modify repository files during search.
 - Do not execute evaluator-returned commands.
 - Do not invent default scores for invalid evaluator output.
+- Do not parse Run Status Card or other presentation Markdown as gate-policy input.
+- Do not describe zero valid evaluations as `no_safe_recommendation`.
+- Do not apply one selected run's result to an unrelated question.
 - Do not implement, approve or release based on search output.
 - Do not create agent-specific scoring, gate logic or skill copies.
 - Do not replace deterministic candidates with generated proposals.

package/generated/submissions/openai/agdf/skills/gate-check/SKILL.md

@@ -209,10 +209,12 @@ the primary chat card into an audit dump. Do not maintain or render a skill-loca
 
 This complete operational status table remains the status-reporting and detail
 surface. When the same response immediately requests a ready gate approval,
-render its five-field compact approval-time projection first, then the Gate
-Transition Card in the same immediately preceding assistant message, then
-invoke exactly one native question or exact-text fallback. Both cards derive
-from the same snapshot and are shown exactly once.
+render its five-field compact approval-time projection first, then the complete
+operational Run Status Card verbatim (or its localized failure line with
+diagnostic codes when undeliverable), then the Gate Transition Card in the same
+immediately preceding assistant message, then invoke exactly one native
+question or exact-text fallback. The runtime contract owns this sequence; every
+block is shown exactly once.
 
 If this skill creates or updates control artefacts, do not paste full file bodies into the chat.
 List paths, summarize the decision, name the blocker or approval needed, and keep the durable content in the files.

package/generated/submissions/openai/agdf/submission/openai/availability.md

@@ -1,6 +1,6 @@
 # Availability Decision Record
 
-- release: `0.14.2`
+- release: `0.14.4`
 - decision_state: `pending`
 - decision_owner: verified publisher
 - countries: not selected

package/generated/submissions/openai/agdf/submission/openai/capability-matrix.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "releaseVersion": "0.14.2",
+  "releaseVersion": "0.14.4",
   "evidenceStates": [
     "common",
     "codex-specific",

package/generated/submissions/openai/agdf/submission/openai/inventory.json

@@ -1,11 +1,11 @@
 {
   "schemaVersion": 1,
-  "releaseVersion": "0.14.2",
-  "digest": "0c78d217817ca7cec6cd2e8638e3a4fa678a7dc4c954119606f5f954bd1a2ca2",
+  "releaseVersion": "0.14.4",
+  "digest": "594be5be291554c4567bcd711274498d9600a896d2e6b5f85ca941e1dff77d12",
   "files": [
     {
       "path": ".codex-plugin/plugin.json",
-      "sha256": "0eccc7ed08162a4f4437c7ccfbdd9145a9034b4ab6de44f5565ca608989d5c4a"
+      "sha256": "44c8561c912ed14a44849a23597e1786612d58596e745df691e6f343c0c595f8"
     },
     {
       "path": "assets/agdf-icon.svg",
@@ -29,7 +29,7 @@
     },
     {
       "path": "meta/agdf-plugin.definition.json",
-      "sha256": "ba636c3e224125df8f2dedde215b00473174b1a02fdeecbf91da1a262dcde778"
+      "sha256": "c0b249067a3fea29e551af28ccc855bfb4e9c7ef95f418d96d7e102c53650159"
     },
     {
       "path": "meta/agdf-runtime-contract.md",
@@ -53,7 +53,7 @@
     },
     {
       "path": "meta/contracts/control-scaffold.md",
-      "sha256": "bf5773ec22013d3332cf4900d59880ebdfbaab7dee227c66b1721d0fd05aeac2"
+      "sha256": "82d298d5399c56ecbaeef78ac367556b675200c09ea96e160534ec03adb07f42"
     },
     {
       "path": "meta/contracts/gate-transition.md",
@@ -61,7 +61,7 @@
     },
     {
       "path": "meta/contracts/interaction.md",
-      "sha256": "799ff1d27f16004844775f2802a94d6d336d9130b08a6484c5f325d7ea6b0df8"
+      "sha256": "45cb0bf83af21d46e55f6fbbc934f7bf1571d0d087a0a304b629297427078ce9"
     },
     {
       "path": "meta/contracts/modes.md",
@@ -77,7 +77,11 @@
     },
     {
       "path": "meta/copilot-payload-baseline.json",
-      "sha256": "ab87e177288c36a056cccc583c78fd57b50fd82517a56276a009345e065ec1d6"
+      "sha256": "c2d5f1fe5285898d90bc9a15972bc388b485b5d212b6952f01d07c2d71f41a17"
+    },
+    {
+      "path": "meta/distribution-profile-history.json",
+      "sha256": "63a78c2659fe6ece380883d10188e7dad7373866711aeca13005193b68be1ab2"
     },
     {
       "path": "skills/brownfield-analysis/SKILL.md",
@@ -113,7 +117,7 @@
     },
     {
       "path": "skills/delivery-path-search/SKILL.md",
-      "sha256": "8c4a94c8ad86a51380f2f636d8b2fedd5a3554adf3edb19d350eb6a7c8254914"
+      "sha256": "688a0e04f6a1a39be17ded0047f88187b109f25bd9f22927a3d4261cbfdc0bd5"
     },
     {
       "path": "skills/delivery-path-search/help.md",
@@ -121,7 +125,7 @@
     },
     {
       "path": "skills/gate-check/SKILL.md",
-      "sha256": "84b83b23f18e24ebea94b5f24f1e438de2c93da7740fbc1bba95281e98b68ae0"
+      "sha256": "7f49c12942fc4312fe57f6be1c9844a9bf1ec5c7c9cce43b1c1d3e81d6c7adbb"
     },
     {
       "path": "skills/gate-check/help.md",
@@ -161,23 +165,23 @@
     },
     {
       "path": "submission/openai/availability.md",
-      "sha256": "57e428da0faf2a48f459796781b4f5b472dc10e1cea957f6078404bf6e7a184b"
+      "sha256": "f92ddfc516a7ffa9abbb847118597bdcce52b0087adbe1c3066a7821a9ad22bc"
     },
     {
       "path": "submission/openai/capability-matrix.json",
-      "sha256": "203b63da20727ac116fe816893c669725d46ff67388a934fa17cda68ea97f09a"
+      "sha256": "0839d499972d89c7d173f3193a3e54a5b82aecd280192f80bff09733998e6cd6"
     },
     {
       "path": "submission/openai/listing.json",
-      "sha256": "29c2a8865f69e227d746548b487422135b7165c4c5aa4f92ed414b220dd21151"
+      "sha256": "c5a069a9047ded702678d928014434dc0b44ead7ecf2b7b84d3d45c1d842742b"
     },
     {
       "path": "submission/openai/release-notes.md",
-      "sha256": "fcacfc5c8382ae589871359a3467dafac700822928999e680a106c484cc7044e"
+      "sha256": "30e0057bd7e0538b25ca5bcf276fb418887f2e7d1806b431c013ba0d095dabb6"
     },
     {
       "path": "submission/openai/reviewer-cases.json",
-      "sha256": "e1ffc93e955edfab9a95cfaf0437badbf5f4741763cb0161f3de6b0e23c8bb27"
+      "sha256": "f145161287a42a891734e27f6c3b8c88fb873227d4d759c0867e60c17217e715"
     }
   ]
 }

package/generated/submissions/openai/agdf/submission/openai/listing.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "releaseVersion": "0.14.2",
+  "releaseVersion": "0.14.4",
   "submissionType": "skills",
   "identity": {
     "technicalId": "agdf",

package/generated/submissions/openai/agdf/submission/openai/readiness.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "releaseVersion": "0.14.2",
+  "releaseVersion": "0.14.4",
   "candidateState": "repository_ready",
   "submissionReady": false,
   "submissionBlockers": [
@@ -16,7 +16,7 @@
     },
     "bundle": {
       "state": "pass",
-      "detail": "44 inventoried files; inventory digest 0c78d217817ca7cec6cd2e8638e3a4fa678a7dc4c954119606f5f954bd1a2ca2"
+      "detail": "45 inventoried files; inventory digest 594be5be291554c4567bcd711274498d9600a896d2e6b5f85ca941e1dff77d12"
     },
     "installed_host": {
       "state": "unverified",

package/generated/submissions/openai/agdf/submission/openai/readiness.md

@@ -1,6 +1,6 @@
 # AGDF Public Plugin Readiness
 
-- release: `0.14.2`
+- release: `0.14.4`
 - candidate_state: `repository_ready`
 - submission_ready: `false`
 
@@ -9,7 +9,7 @@
 | Class | State | Detail |
 |---|---|---|
 | repository | pass | canonical contract and deterministic source checks |
-| bundle | pass | 44 inventoried files; inventory digest 0c78d217817ca7cec6cd2e8638e3a4fa678a7dc4c954119606f5f954bd1a2ca2 |
+| bundle | pass | 45 inventoried files; inventory digest 594be5be291554c4567bcd711274498d9600a896d2e6b5f85ca941e1dff77d12 |
 | installed_host | unverified | PPD-L02 and PPD-L03 not performed |
 | portal | unverified | unverified |
 | post_publication | unverified | not published |

package/generated/submissions/openai/agdf/submission/openai/release-notes.md

@@ -1,4 +1,4 @@
-# AGDF 0.14.2 — Initial OpenAI Public Plugin Candidate
+# AGDF 0.14.4 — Initial OpenAI Public Plugin Candidate
 
 This candidate packages the canonical AGDF workflow skills for public discovery in ChatGPT and
 Codex. It helps users assess delivery fit, preserve explicit human approvals, inspect existing-system
@@ -19,6 +19,12 @@ runtime or hooks, so automatic runtime checks remain unavailable in this profile
 installers also show the target and verified installed AGDF version, distinguish previous intent from
 effective host permission, explain manual mode and recover visibly from an invalid key.
 
+Delivery Path Search now consumes canonical selected-run gate actions instead of persisted
+presentation Markdown. Its additive version-1 result fields expose run revision, objective, outcome
+phase and candidate/evaluation provenance. Missing input, zero legal candidates and evaluator
+failures no longer appear as `no_safe_recommendation`; recommendation-facing results require at
+least one valid evaluation and are the only persistable outcomes.
+
 AGDF is an independent open-source project by Arndt Gold. It is not affiliated with, endorsed by or
 sponsored by OpenAI and is not a security sandbox, legal assessment, compliance certification or
 autonomous shipping system.

package/generated/submissions/openai/agdf/submission/openai/reviewer-cases.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "releaseVersion": "0.14.2",
+  "releaseVersion": "0.14.4",
   "cases": [
     {
       "id": "positive-proportional-fit",

package/lib/cli/application.js

@@ -279,10 +279,10 @@ function runLifecyclePhase(phase, operation) {
 
 function installNextAction(surface, runtimeChecks, fallback) {
   if (surface === "codex" && runtimeChecks.requested === "enabled" && runtimeChecks.effective === "decision_required") {
-    return "Restart Codex, then approve the AGDF session hook when Codex asks.";
+    return `${fallback} Approve the AGDF session hook when the fresh Codex session asks.`;
   }
   if (surface === "copilot" && runtimeChecks.requested === "enabled" && runtimeChecks.effective === "decision_required") {
-    return "Restart GitHub Copilot, then review the AGDF session hook when Copilot asks.";
+    return `${fallback} Review the AGDF session hook when the fresh Copilot session asks.`;
   }
   return fallback;
 }
@@ -430,9 +430,11 @@ function printInstallFailure(surface, error, options, io, command = surface) {
 
 function runDisable(options, { io, exec }) {
   try {
-    const plan = planRepositoryDisable(options.dir, options.surface);
+    const plan = planRepositoryDisable(options.dir, options.surface, { shared: options.shared, exec });
     const applied = applyLifecyclePlan(plan, exec ? { exec } : {});
-    const verified = applied.status === "success" ? verifyRepositoryDisabled(options.dir) : { status: "failed", evidence: [] };
+    const verified = applied.status === "success"
+      ? verifyRepositoryDisabled(options.dir, options.surface, { shared: options.shared })
+      : { status: "failed", evidence: [] };
     const result = applied.status === "success" && verified.status !== "healthy" ? "failed" : applied.status;
     const report = createLifecycleResult({
       operation: "disable",
@@ -440,9 +442,12 @@ function runDisable(options, { io, exec }) {
       surface: options.surface,
       scope: "repository",
       verification: { status: verified.status === "healthy" ? "healthy" : "degraded", evidence: [...applied.completed.map((item) => item.path || item.executable), ...verified.evidence] },
+      activation: { status: result === "success" ? "pending_restart" : "unknown" },
       restart: { required: result === "success", reason: result === "success" ? "host_reload" : "none" },
       next_action: result === "success"
-        ? { kind: "restart", text: "Restart the host in this repository; global AGDF availability and .agdf/control are retained." }
+        ? options.surface === "copilot"
+          ? { kind: "restart", text: "Restart GitHub Copilot in this repository, then inspect /plugin list; independent instructions remain separate." }
+          : { kind: "restart", text: "Restart the host in this repository; global AGDF availability and .agdf/control are retained." }
         : { kind: "verify", text: "Inspect the reported repository configuration failure before retrying disable." },
       changes: applied.completed,
       retained: applied.retained,
@@ -453,7 +458,20 @@ function runDisable(options, { io, exec }) {
     printLifecycleResult(report, { json: options.json, io });
     return result === "success" ? 0 : 1;
   } catch (error) {
-    io.error(error.message);
+    const report = lifecycleFailure({
+      operation: "disable",
+      surface: options.surface,
+      scope: "repository",
+      phase: "repository_preflight",
+      message: error.message,
+      evidence: [error.message],
+      nextAction: "Resolve the reported repository configuration or ignore precondition, then retry disable without changing unrelated files.",
+    });
+    if (options.json) printLifecycleResult(report, { json: true, io });
+    else {
+      io.error(error.message);
+      printLifecycleResult(report, { io });
+    }
     return 1;
   }
 }

package/lib/cli/command-registry.js

@@ -18,7 +18,7 @@ export const commandRegistry = Object.freeze([
   command("opencode-status", { preferred: [""], scaffold: [""] }),
   command("status", { preferred: [" [--surface <surface>] [--run <run_id>] [--json]"] }),
   command("runtime-checks", { preferred: [" <status|enable|manual> --surface <codex|claude|copilot|opencode> [--json]"] }),
-  command("disable", { preferred: [" --surface <surface> [--scope repository] [--dir <path>]"] }),
+  command("disable", { preferred: [" --surface <surface> [--scope repository] [--shared] [--dir <path>]"] }),
   command("uninstall", { preferred: [" --surface <surface> --scope global [--confirm]"] }),
   command("opencode-repo", { preferred: [""], scaffold: [""] }),
   command("init", { preferred: [""], scaffold: [""] }),
@@ -65,6 +65,12 @@ export function validateCommandOptions(options) {
     throw new Error("uninstall requires explicit --scope global");
   }
   if (options.confirm && options.target !== "uninstall") throw new Error("--confirm is supported only by uninstall");
+  if (options.shared && !(options.target === "disable" && options.surface === "copilot" && options.scope === "repository")) {
+    throw new Error("--shared is supported only by disable --surface copilot --scope repository");
+  }
+  if (options.target === "disable" && options.surface === "copilot" && options.scope !== "repository") {
+    throw new Error("Copilot disable requires explicit --scope repository");
+  }
   if (options.runtimeChecksDecision && !["codex", "claude", "copilot", "opencode"].includes(options.target)) {
     throw new Error("--runtime-checks is supported only by codex, claude, copilot and opencode installation commands");
   }
@@ -126,6 +132,7 @@ Options:
   --scope <repository|global>
                  Select the lifecycle mutation scope
   --confirm      Apply a previously previewed global uninstall plan
+  --shared       Apply Copilot repository disable through shared .github/copilot/settings.json
   --runtime-checks <enable|manual|cancel>
                  Make the installation-time automatic-check decision explicitly; no TTY defaults to manual
   --fixture <path>

package/lib/cli/delivery-path-search-command.js

@@ -12,21 +12,25 @@ import { enforcementForSurface } from '../delivery-path-search/surfaces/capabili
 import { persistSearchResult } from '../delivery-path-search/persistence.js';
 
 function unavailableOpenCodeResult({ options, preflight, input = null, error = null }) {
+  const surface = options.surface ?? "opencode";
   const mutation = error?.code === "OPENCODE_EVALUATOR_MUTATION_DETECTED";
-  const attempted = Boolean(input);
+  const attempted = Boolean(input && error);
   const nextAction = mutation
     ? "Investigate and revert the detected repository mutation before any evaluator fallback or retry."
     : "Repair the reported OpenCode capability and retry, or use the existing instruction-only Delivery Path Search workflow.";
   return {
     contract_version: "1",
-    surface: "opencode",
+    surface,
     scope_key: input?.scope_key ?? options.runId ?? null,
+    scope_revision: input?.scope_revision ?? "unversioned",
+    objective: input?.objective ?? "Delivery Path Search evaluator capability",
     current_gate: input?.current_gate ?? null,
+    outcome_phase: "evaluation",
     status: mutation ? "evaluator_error" : "evaluator_unavailable",
     recommendation: null,
-    enforcement: enforcementForSurface("opencode"),
+    enforcement: enforcementForSurface(surface),
     evaluator: {
-      name: "opencode",
+      name: surface,
       preflight: preflight?.code ?? "not_run",
       failure_code: error?.code ?? preflight?.code,
       detail: error?.message ?? preflight?.detail,
@@ -38,6 +42,16 @@ function unavailableOpenCodeResult({ options, preflight, input = null, error = n
       failure_code: error?.code ?? preflight?.code,
       evidence: preflight?.evidence ?? [],
     },
+    provenance: {
+      baseline_candidates: Math.min(input?.allowed_actions?.length ?? 0, input?.budgets?.max_candidates ?? 0),
+      generated_candidates: 0,
+      legal_candidates: attempted ? 1 : 0,
+      rejected_candidates: 0,
+      evaluation_attempts: attempted ? 1 : 0,
+      valid_evaluations: 0,
+      invalid_evaluations: attempted ? 1 : 0,
+    },
+    failure_code: error?.code ?? preflight?.code,
     stopping_reason: mutation ? "opencode_mutation_detected" : attempted ? "opencode_evaluator_failed" : "opencode_preflight_failed",
     next_action: nextAction,
     next_gate_action: nextAction,
@@ -46,11 +60,26 @@ function unavailableOpenCodeResult({ options, preflight, input = null, error = n
 
 export async function executeDeliveryPathSearch(options, io = console, dependencies = {}) {
   const fixture = options.fixture ? JSON.parse(readFileSync(options.fixture, "utf8")) : null;
+  const fixtureGeneration = fixture?.generator_response;
+  const generationEnabled = Boolean(fixtureGeneration || options.generateCandidates);
+  const initialEnforcement = fixture?.input?.enforcement ?? enforcementForSurface(options.surface);
+  const initialInput = fixture?.input ?? (dependencies.searchInputFromControl ?? searchInputFromControl)(options.dir, {
+    scopeKey: options.runId,
+    enforcement: initialEnforcement,
+    generation: generationEnabled ? {
+      enabled: true,
+      maxProposals: options.maxGeneratedCandidates,
+      maxDurationMs: options.generationTimeoutMs,
+      maxCostUnits: options.generationCostUnits,
+    } : undefined,
+  });
   const preflight = !fixture && options.surface === "opencode"
     ? (dependencies.preflightOpenCodeEvaluator ?? preflightOpenCodeEvaluator)({ cwd: options.dir })
     : null;
   if (preflight?.status === "failed") {
-    const result = unavailableOpenCodeResult({ options, preflight });
+    const result = initialInput.input_failure_code
+      ? await runDeliveryPathSearch(initialInput, { name: "not-invoked", async evaluate() { throw new Error("input failure must stop before evaluation"); } })
+      : unavailableOpenCodeResult({ options, preflight, input: initialInput });
     printDeliveryPathSearchResult(result, options, io);
     return result;
   }
@@ -58,18 +87,7 @@ export async function executeDeliveryPathSearch(options, io = console, dependenc
     ?? (preflight
       ? enforcementForSurface("opencode", preflight.evidence, { preflight })
       : enforcementForSurface(options.surface));
-  const fixtureGeneration = fixture?.generator_response;
-  const generationEnabled = Boolean(fixtureGeneration || options.generateCandidates);
-  const baseInput = fixture?.input ?? (dependencies.searchInputFromControl ?? searchInputFromControl)(options.dir, {
-    scopeKey: options.runId,
-    enforcement,
-    generation: generationEnabled ? {
-      enabled: true,
-      maxProposals: options.maxGeneratedCandidates,
-      maxDurationMs: options.generationTimeoutMs,
-      maxCostUnits: options.generationCostUnits,
-    } : undefined,
-  });
+  const baseInput = fixture ? initialInput : { ...initialInput, enforcement };
   const input = generationEnabled && !baseInput.generation ? {
     ...baseInput,
     generation: {
@@ -90,7 +108,13 @@ export async function executeDeliveryPathSearch(options, io = console, dependenc
           ? (dependencies.openCodeEvaluator ?? openCodeEvaluator)({ cwd: options.dir, model: options.model, preflight })
           : null;
   if (!evaluator) {
-    throw new Error(`${options.surface} has no executable evaluator in this release. Codex, Claude and preflight-qualified OpenCode are the executable adapters; --fixture is available for deterministic contract testing.`);
+    const detail = `${options.surface} has no executable evaluator in this release. Codex, Claude and preflight-qualified OpenCode are the executable adapters; --fixture is available for deterministic contract testing.`;
+    const result = {
+      ...unavailableOpenCodeResult({ options, preflight: { code: "surface_evaluator_unavailable", detail, evidence: [] }, input }),
+      surface: options.surface,
+    };
+    printDeliveryPathSearchResult(result, options, io);
+    return result;
   }
   const generator = fixtureGeneration
     ? fixtureGenerator(fixtureGeneration)
@@ -125,15 +149,23 @@ function printDeliveryPathSearchResult(result, options, io) {
     return;
   }
   io.log(`AGDF Delivery Path Search: ${result.status}`);
+  io.log(`Scope: ${result.scope_key ?? "unknown"} @ ${result.scope_revision ?? "unversioned"}`);
+  if (result.objective) io.log(`Objective: ${result.objective}`);
   io.log(`Current gate: ${result.current_gate ?? "unknown"}`);
+  io.log(`Outcome phase: ${result.outcome_phase ?? "unknown"}`);
   io.log(`Enforcement: ${result.enforcement.level}`);
   io.log(`Recommendation: ${result.recommendation?.action ?? "none"}`);
   if (result.budgets) io.log(`Evaluations: ${result.budgets.evaluations}`);
+  if (result.provenance) {
+    io.log(`Candidates: ${result.provenance.legal_candidates} legal, ${result.provenance.rejected_candidates} rejected`);
+    io.log(`Evaluation provenance: ${result.provenance.valid_evaluations}/${result.provenance.evaluation_attempts} valid, ${result.provenance.invalid_evaluations} invalid`);
+  }
   if (result.generation) {
     io.log(`Generation: ${result.generation.status} (${result.generation.accepted}/${result.generation.returned} accepted)`);
     io.log(`Generation budget: ${result.generation.cost_units} cost units, ${result.generation.duration_ms} ms`);
     if (result.generation.failure_code) io.log(`Generation failure: ${result.generation.failure_code}`);
   }
   io.log(`Stopping reason: ${result.stopping_reason}`);
-  io.log(result.next_gate_action);
+  if (result.failure_code) io.log(`Failure: ${result.failure_code}`);
+  io.log(result.next_action ?? result.next_gate_action);
 }