create-agent-rig 0.6.1 → 0.7.0

package/templates/agent-os/universal/docs/decisions/content-blind-revalidation.md

@@ -0,0 +1,144 @@
+# Content-blind revalidation claims
+
+Status: accepted
+
+## Decision
+
+SELECT, BEFORE_PR and BEFORE_CLOSE remain the only revalidation checkpoints.
+They share one implementation and one durable baseline: a versioned JSON record
+at `.rig/claims/<ticket>.json`.
+
+The first successful SELECT creates the record and reports
+`BASELINE_CREATED`. The task branch must add it to Git. An existing but
+untracked record, or an absent tracked record, is `UNVERIFIABLE`; so is an
+absent record on a resumed SELECT, BEFORE_PR or BEFORE_CLOSE. Each case stops
+automatic progress. Pinned in the generator's
+`test/template/content-blind-revalidation.test.ts` (absent in a generated rig)
+› "creates a versioned content-blind claim and returns BASELINE_CREATED" and ›
+"refuses to resume from an existing claim until Git tracks it", › "refuses a
+deleted tracked claim in a fresh run without take-up markers", and › "refuses
+to recreate a deleted untracked baseline with a %s" (parameterized over a
+readable and a corrupt prior journal), plus
+`test/template/queue-revalidation.test.ts` (absent in a generated rig) ›
+"without a run directory it creates the durable baseline but no run evidence".
+
+The record contains SHA-256 fingerprint sets, not source content:
+
+- `scope` covers stable ticket scope, workflow state, dependency links and
+  configured paired repository facts. Workflow state is fingerprinted against
+  the state expected at each checkpoint. The first SELECT expects `open`.
+  A successful Jira or GitHub adapter `claim` then writes its observable state
+  (`in-progress`) into the same durable claim record as `workflowClaim`; only
+  that acknowledgement authorises the state at a resumed SELECT, BEFORE_PR or
+  BEFORE_CLOSE. The same state reached without the acknowledgement is external
+  drift and moves `scope`. PLAN.md remains `open` because its claim has no
+  observable workflow transition. A rollback or any other state also moves it.
+- `commentary` covers comment identifiers and count. It is observed at SELECT
+  and BEFORE_PR and becomes hold-authoritative only at BEFORE_CLOSE.
+
+Pinned in the generator suite (absent in a generated rig),
+`test/template/content-blind-revalidation.test.ts` › "stays CURRENT
+for marker-only movement and holds on changed scope", › "holds when the target
+branch SHA moves without a tracker edit", › "adapters declare their observable
+claimed workflow state", › "keeps a resumed SELECT current after the Jira
+adapter records its own claim transition", › "GitHub claim records the durable
+transition that makes in-progress CURRENT", › "holds claim:scope at resumed
+SELECT for the same transition made outside the adapter", › "accepts an
+in-progress transition performed by the Jira adapter claim operation", ›
+"holds claim:scope when an external actor moves the item to the expected
+claimed state", › "holds claim:scope when workflow state returns to open after
+the Rig claim transition", and › "defers an added comment through SELECT and
+BEFORE_PR, then holds at BEFORE_CLOSE".
+
+`.rig/revalidation.json` is the versioned detection contract. Version 1 is a
+pull model over run-state and journal evidence, with 24-hour accepted latency,
+no push channel, and an explicit list of paired facts. Preflight stops when the
+contract is absent or unsupported. Pinned in the generator suite (absent in a
+generated rig),
+`test/template/content-blind-revalidation.test.ts` › "preflight hard-refuses a
+%s contract as no-detection-contract" and › "accepts the default
+pull/run-state+journal/24h/no-push contract".
+
+`updatedAt` take-up markers remain in run state and revalidation events for
+compatibility and attribution. They do not decide drift, baseline creation or
+checkpoint action. `.claude/runs/<run-id>/decisions.jsonl` and `events.jsonl`
+remain append-only evidence for a particular run; the sibling `state.json` is a
+mutable stop-state cache, and none of them is the cross-harness claim store.
+Pinned in the generator suite (absent in a generated rig),
+`test/template/queue-revalidation.test.ts` › "a moved marker stays
+evidence-only while the tracked claim remains CURRENT". First sight versus
+resume is reconstructed from SELECT events in the current and bounded sibling
+run journals. An unreadable bounded journal cannot prove first sight and
+therefore cannot authorise recreation of a missing claim. Neither can a scan
+truncated by its entry or candidate cap: incompleteness is explicit and fails
+closed rather than turning subset absence into first sight.
+
+Every blocking detection has a stable content-blind id. A typed outcome names
+that id, records whether action was required and clears only its matching
+run-level hold. An outcome without a boolean `actionRequired` or legacy
+`actionChanged` verdict is malformed and resolves nothing. Filesystem failures
+are reduced to stable logical evidence before they enter a detection id, so
+identical failures have identical ids across harness
+checkouts. The report joins by detection id across runs and retains the
+legacy same-run sequence join for older evidence. Pinned in the generator suite
+(absent in a generated rig),
+`test/template/content-blind-revalidation.test.ts` › "reuses a stable detection
+id for the same drift at the same checkpoint", › "journals a typed resolution
+through the existing outcome command", › "derives false-HOLD from result !=
+CURRENT and actionRequired false, only after resolution", and › "joins a typed
+resolution to its detection across run directories".
+
+The run-state hold is a cache of that append-only evidence, not a deletion
+escape hatch. Before selection, the same temporal resolver used by the report
+reconstructs the newest unresolved blocking detection from the current run
+journal when `state.json` has no hold. Revalidation-hold writers use the same
+fail-closed state reader as selection, so a corrupt, symlinked or oversized
+state file cannot be replaced while it may conceal another stop input. Contract
+and paired-fact reads classify a pathname before opening it, stay anchored to
+the opened file descriptor, and reject identity changes during validation.
+Existing claim bytes are read through a bounded no-follow
+descriptor and compared with the tracked Git object; first-baseline creation is
+anchored to the validated claim-directory working directory so a pathname swap
+cannot redirect the write outside the repository.
+The directory's real path and filesystem identity are carried into the writer
+and checked again with the persisted bytes before SELECT reports
+`BASELINE_CREATED`; redirecting it elsewhere inside the repository is refused
+too. Jira commentary declares whether its returned IDs cover `comment.total`;
+an incomplete set is `UNVERIFIABLE`, never a hash of unseen IDs. GitHub CLI's
+unpaginated `comments(first: 100)` window has no total beside it, so exactly 100
+returned comments is also `UNVERIFIABLE`; fewer than the cap proves completion.
+Pinned in the generator's
+`test/template/content-blind-revalidation.test.ts` (absent in a generated rig)
+› "stops with %s when the unresolved journal result is %s", › "%s refuses a
+present %s state instead of replacing unknown stop inputs", › "does not accept
+an external contract swapped in after containment validation", › "classifies a
+contract symlink before attempting to open it", › "rejects a tracked claim %s
+only in the worktree", and › "does not write a baseline outside
+after the claim directory passes containment", plus › "keeps a detection
+unresolved with %s state when its typed outcome has no boolean verdict", › "uses
+the same id for the same missing-contract condition in two absolute roots", ›
+"returns UNVERIFIABLE when the %s truncates prior SELECT evidence", › "refuses
+SELECT when comment.total exceeds the returned comment ids", › "refuses SELECT
+when the transport returns exactly its 100-comment window without a total", and
+› "does not write through an in-repository claim-directory symlink swapped after
+validation".
+
+BEFORE_CLOSE proves the tracker state it observed; the later tracker transition
+is a separate API operation. Without a tracker-supplied conditional transition
+or transaction token, this mechanism cannot make those two remote operations
+atomic. A future adapter may consume such a native primitive, but this decision
+does not invent one or treat `updatedAt` as a substitute authority.
+
+## Why
+
+Tracker timestamps conflate scope edits, comments and workflow transitions.
+They caused false holds on the rig's own writes and cannot survive a harness or
+run boundary as a durable semantic claim. Content-blind sets preserve privacy,
+make each kind of drift explicit and keep the existing checkpoint chain as the
+single authority.
+
+## Rollback
+
+Revert the mechanism, contract and claim records together. Do not restore
+`updatedAt` as a second authority beside claims: two engines can disagree at a
+checkpoint, which makes neither result safe to automate.

package/templates/agent-os/universal/docs/decisions/spacing-rations-mechanisms.md

@@ -116,6 +116,21 @@ with no refusal, and then **holds** the elevated item with `causes: ["spacing"]`
 It holds because `core.mjs` is the layer that reads every unrecognised value
 restrictively — the same layer that holds when `selectNext` is called directly.
 
+## A board switch does not reset repository risk
+
+`lastCompletedTier` is intentionally checkout-global, not board-scoped. Boards
+partition ownership and selection; they do not partition the repository a merge
+changes. If switching the selector chose a fresh tier slot, a run could land an
+unreviewed mechanism from one board, switch to an independent queue, and land a
+second mechanism in the same checkout — exactly the back-to-back chain the
+ration exists to stop.
+
+The selector therefore changes only the adapter options. The tier stays in the
+one `.claude/queue.state.json` paired with the checkout's config, and the next
+selection reads it whichever board is active. This is pinned in the generator's
+`test/template/queue-board.test.ts` (absent in a generated rig) › "keeps
+completed-tier spacing repository-global when the active board switches".
+
 ## What this does not fix
 
 The livelock where *every* remaining item is elevated-by-mechanism still exists —

package/templates/agent-os/universal/layers.json

@@ -17,6 +17,7 @@
     ".claude/hooks/guard-secret-file.mjs",
     ".claude/hooks/guard-rulebook.mjs",
     ".claude/hooks/lib/edit-input.mjs",
+    ".claude/hooks/lib/hook-input.mjs",
     ".claude/skills/pr-ship/SKILL.md",
     ".claude/skills/loop/SKILL.md",
     ".claude/skills/check-premises/SKILL.md",
@@ -46,9 +47,12 @@
     ".claude/scripts/revalidate.mjs",
     ".claude/scripts/revalidation-report.mjs",
     ".claude/scripts/lib/gate-coverage.mjs",
+    ".claude/scripts/lib/claim-records.mjs",
+    ".claude/scripts/lib/revalidation-evidence.mjs",
     ".claude/scripts/lib/revalidation-points.mjs",
     ".claude/scripts/lib/verdict.mjs",
     ".claude/scripts/lib/secrets.mjs",
+    ".claude/scripts/lib/shell-tools.mjs",
     ".claude/scripts/queue/core.mjs",
     ".claude/scripts/queue/plan-md.mjs",
     ".claude/scripts/queue/github-issues.mjs",
@@ -59,12 +63,14 @@
     ".claude/scripts/queue/state.mjs",
     ".claude/scripts/queue/gate-rounds.mjs",
     ".claude/queue.json",
+    ".rig/revalidation.json",
     "PLAN.md",
     "journal/README.md",
     "docs/decisions/gate-coverage.md",
     "docs/decisions/fail-open-guards.md",
     "docs/decisions/codex-adapter.md",
     "docs/decisions/closing-a-task.md",
+    "docs/decisions/content-blind-revalidation.md",
     "docs/decisions/review-lanes.md",
     "docs/decisions/run-directory.md",
     "docs/decisions/spacing-rations-mechanisms.md",

package/templates/hash-history.json

@@ -6,7 +6,9 @@
     "0.3.2",
     "0.4.0",
     "0.5.0",
-    "0.6.0"
+    "0.6.0",
+    "0.6.1",
+    "0.6.2"
   ],
   "files": {
     ".agents/skills/check-premises/SKILL.md": {
@@ -20,7 +22,9 @@
       "since": "0.5.0",
       "hashes": [
         "eb52ef41269018107534d8dc2f552c57698e1677a1e76b5e666b5d09c007cac0",
-        "47922b182915cb92696f851174f2e88c4ae8c67dc119ef39a3a597ef1300fab5"
+        "47922b182915cb92696f851174f2e88c4ae8c67dc119ef39a3a597ef1300fab5",
+        "57f6add0504db45e7577474f97705fe474310e4cd3310cdb348a2c64eabe88cd",
+        "18f4300de4c4c7ea380d726fb109fa224da950ef0a4cea5015ab1d408b823be5"
       ]
     },
     ".agents/skills/new-invariant/SKILL.md": {
@@ -90,7 +94,8 @@
       "hashes": [
         "8d5762849afd328fdc1aabf053ad207f2e306e013665e3ff934b06cbb1bbda38",
         "0e4307cd9cf8ef723d79e98b1af46a34c6912a6aa925e2179d939cb83c8f2a44",
-        "7e8eaa2b4af9d65e1d10bf50c32c1d138fb2f8b9ba6e6d0880cade0524324d9d"
+        "7e8eaa2b4af9d65e1d10bf50c32c1d138fb2f8b9ba6e6d0880cade0524324d9d",
+        "ed1c05d3938c0b4f277f1bf4af8641460def830569049ff0697c9bda14518b78"
       ]
     },
     ".claude/agents/security-scanner.md": {
@@ -111,7 +116,8 @@
       "since": "0.2.0",
       "hashes": [
         "c7c86de47b601dcb594ba8d8e23b5624ef8d47dafeddbc1aadd351c72e051d83",
-        "ece5a81db41bd48695a1a009239837b682d247baf6d19214eaa859a7519ab246"
+        "ece5a81db41bd48695a1a009239837b682d247baf6d19214eaa859a7519ab246",
+        "1646ed80de5268a886a2e861124cb3b871fa46df1857991a645667601f52253b"
       ]
     },
     ".claude/hooks/dod-checks.json": {
@@ -126,54 +132,72 @@
         "de1f331eaf93bad6ef0e1734789fd3c4ab07550a85ed2d8ff8888bc6f0bcfb0f",
         "9fb8fad4d95756fb2424a97550aa85dfab0ca8dbcf91e6d0385263ba3b929135",
         "7852205961cb1647b49de5f7e79820c1735b4be897adcf8f5bc3eeb49318ff78",
-        "33edb11904e5c4f88626b41c7e649b85d20957a11ff7e1062538917647c3e7f0"
+        "33edb11904e5c4f88626b41c7e649b85d20957a11ff7e1062538917647c3e7f0",
+        "19202a28355dac1d7a95d29411668cf970006b3044d89a772768ce21793931aa",
+        "d2af03ed141fadd0b1e69b230b9277e8f03169757a8e2a679767653ab7828d9a"
       ]
     },
     ".claude/hooks/guard-bash.mjs": {
       "since": "0.3.0",
       "hashes": [
         "4d396f412fc53094188b14348c5af4e79c7542a182630c20c4687d79899c5b0e",
-        "e7a513216ebbceaa7f11ec8fb611de8bb5d5925dfdfd75b779dcb7c0ee6e83cc"
+        "e7a513216ebbceaa7f11ec8fb611de8bb5d5925dfdfd75b779dcb7c0ee6e83cc",
+        "78047f42dda65076dd2cdb73ad530553db3d4a6f3ea7f0729590ac7286323cb1",
+        "5782d91c6c54155ad8bf3e107b6574b3ad4c97baa7be673a5ed252c70b387300"
       ]
     },
     ".claude/hooks/guard-core-purity.mjs": {
       "since": "0.2.0",
       "hashes": [
         "e36fbb92ee8395c6686fef582f29f2701747074b3b781bed42fe068f5c000bd7",
-        "282faa364c2d152808cd92ff7e39da26fd0549a5b2d0af9711d3453be2c666eb"
+        "282faa364c2d152808cd92ff7e39da26fd0549a5b2d0af9711d3453be2c666eb",
+        "4bdd9a38b1aa4050c109f7809ef924be4d411f5720b6030d57c5264ce3df556d"
       ]
     },
     ".claude/hooks/guard-rulebook.mjs": {
       "since": "0.6.0",
       "hashes": [
-        "4524d715f2e41f4cfdd3d0f9c858817f913aaca5192bda97dff876b4d8c51f19"
+        "4524d715f2e41f4cfdd3d0f9c858817f913aaca5192bda97dff876b4d8c51f19",
+        "f9e3e4b7c22c4a64f521402419707ff382b05c8deb6310f62e5545db87f7cb4f",
+        "493ae58e54b055bd13ba992ee0dbfa2cb9ce9a3637ec345ab8d7cfff95831c60"
       ]
     },
     ".claude/hooks/guard-secret-file.mjs": {
       "since": "0.5.0",
       "hashes": [
-        "f6b81cb7640924d2e56aced58e6b48f65df6638fb5a9099985fe5d673245c3ad"
+        "f6b81cb7640924d2e56aced58e6b48f65df6638fb5a9099985fe5d673245c3ad",
+        "8c333879dba1f2bf87bbb8e7b257ac51315a74a4cb45252408ca615e2a42d7b5",
+        "5bf2896ec5e5f94fab20b52cd22418a4392778b40744602a087e320eeca3f688"
       ]
     },
     ".claude/hooks/guard-web-boundary.mjs": {
       "since": "0.2.0",
       "hashes": [
         "93d4fa0fd1c18261cc8ef2b1ae2abe3a0200cc4b5a7b1d1d4ae433ca92c514b1",
-        "8deda7061122b69d72e708222ef2d38a971bb713269ec7fd1ca3440fe0a1150f"
+        "8deda7061122b69d72e708222ef2d38a971bb713269ec7fd1ca3440fe0a1150f",
+        "df325e672793e06b8315e64b59a329775d110fc166176074ff3bb8dea557c561"
       ]
     },
     ".claude/hooks/inject-rules.mjs": {
       "since": "0.2.0",
       "hashes": [
         "c472419f1076ea3707d640cd5246c0e69a94c55455f6648e2cbaf300a382c8df",
-        "17c299ea4c6202745a3f8813aaef7711eb9030bf0a220cca77b58cac98c95940"
+        "17c299ea4c6202745a3f8813aaef7711eb9030bf0a220cca77b58cac98c95940",
+        "860a5d4ba02b59971f80bf79a9081f48f11022d46fe66b0470f0abc4ed9633e4"
       ]
     },
     ".claude/hooks/lib/edit-input.mjs": {
       "since": "0.5.0",
       "hashes": [
         "4f836bc3ff75a868ffe035b179ac9e7dc1ad7715d520677ff9f6aa5bfdb200eb",
-        "0c191d326a7bb0bbfc110e2210f44b4aa39276e8db3779aaa4545cffd4e11863"
+        "0c191d326a7bb0bbfc110e2210f44b4aa39276e8db3779aaa4545cffd4e11863",
+        "572c671f8f2cad190fe2f144071954ac4d3b1357cab80a19bad584dd3b3768c8"
+      ]
+    },
+    ".claude/hooks/lib/hook-input.mjs": {
+      "since": "0.6.2",
+      "hashes": [
+        "c40320d90e9585a52026e074e399b6883a0dfed704115b28e8da4dea284cf85f"
       ]
     },
     ".claude/queue.json": {
@@ -194,7 +218,8 @@
         "c3aa6ea4487adf6d542174f491bf469d8f8563ec7c8c4de63fcd82d6a5ca4fba",
         "ce2104ce697d3e5ed9210e85fe0daeb66b432a36868493f06fec54073a5fff31",
         "530f63a4b29a5cc67867fa7b23575db81d42609ae401bfc4089b05194c586c21",
-        "a7359408d56e6bdbf268019ad9193d5fbf4a872385a65ba08564204e6a8f5b5f"
+        "a7359408d56e6bdbf268019ad9193d5fbf4a872385a65ba08564204e6a8f5b5f",
+        "619999500386b3d2867bbd4799f86a800fe7e168083c6e35fb2e629a2c926c5f"
       ]
     },
     ".claude/rules/aws-cdk.md": {
@@ -211,7 +236,8 @@
         "b24bbf3e596033719eff463d317ba1e933d0661e48bfa8eafba8d6dca1453a59",
         "518d9b3d7cbae50f30c86d33b2b4bbea11ab3ba6cfef270876e92604b2af5f50",
         "389484f0846c3dd8207c0f41bd56409103fbcc7f58b94b1bf4bd1d81b5af0e87",
-        "a2e10499a0bcd2cdc32f3986d27b59077c86e524d40323faabb2e5d78afc002c"
+        "a2e10499a0bcd2cdc32f3986d27b59077c86e524d40323faabb2e5d78afc002c",
+        "c94c33d7ccbd46f191948325dfc7f68ce13b0d3a9470215de1de3f06b1499111"
       ]
     },
     ".claude/rules/node-ts.md": {
@@ -233,7 +259,8 @@
       "since": "0.5.0",
       "hashes": [
         "783b5b455a56c6a3e3723f3c6da861e0a945562acb686b86ab9d0e16dbd552a6",
-        "c7a045d3687429c5047f09b4033ffffcecfede2edba736106f5e1048eb3cf27f"
+        "c7a045d3687429c5047f09b4033ffffcecfede2edba736106f5e1048eb3cf27f",
+        "8e9fe877949955e8f698701f969784b288bc95943c3bcea3bd4368db82e8e43e"
       ]
     },
     ".claude/scripts/detect-missed-gate.mjs": {
@@ -247,13 +274,15 @@
     ".claude/scripts/doctor.mjs": {
       "since": "0.6.0",
       "hashes": [
-        "eb31d2726ab95d6b8fd091b1daf8a21f403a46c801590baf4fecee5c1bec64b9"
+        "eb31d2726ab95d6b8fd091b1daf8a21f403a46c801590baf4fecee5c1bec64b9",
+        "5154ad9abdcb37fea58b0da78fd71842c705774ffe48fd8050c302da17e73913"
       ]
     },
     ".claude/scripts/git-env.mjs": {
       "since": "0.5.0",
       "hashes": [
-        "ff9f3c848a3881b67a8f795a4d172f407d896447e21dd3a9c4903365977d4519"
+        "ff9f3c848a3881b67a8f795a4d172f407d896447e21dd3a9c4903365977d4519",
+        "b022399f287cdce1bcb07329c0aab44bf99714b5f0515f274c962f41ea072b86"
       ]
     },
     ".claude/scripts/lib/gate-coverage.mjs": {
@@ -265,13 +294,15 @@
     ".claude/scripts/lib/revalidation-points.mjs": {
       "since": "0.6.0",
       "hashes": [
-        "41c4f70e5914636bccec7995172c322c875774027e0c626abb7c593c43fddd65"
+        "41c4f70e5914636bccec7995172c322c875774027e0c626abb7c593c43fddd65",
+        "b48e4959862906e279eca481f484f07a7fd4aa082f2778224a6574a7871bc9d8"
       ]
     },
     ".claude/scripts/lib/secrets.mjs": {
       "since": "0.5.0",
       "hashes": [
-        "dc4a300646f12459c0c37e380b325451474e1ec113482381e0fad80aceb88049"
+        "dc4a300646f12459c0c37e380b325451474e1ec113482381e0fad80aceb88049",
+        "60fab2cc9f2028bccf6139e6a744406b4a86a9039d1367f3cef409902e9b327d"
       ]
     },
     ".claude/scripts/lib/verdict.mjs": {
@@ -332,7 +363,8 @@
       "hashes": [
         "cd149245dc29ef7489ae0e5394fa5a063dea2cc017bd3cbbface1ace6f8d7b46",
         "7db3c17b781e6876b4822afd09e6affa97e46607b63d443975d987daf1f14464",
-        "9edd70b5960f367958e8e7500150b4edd285c99869cca803e40e0537d2d347b0"
+        "9edd70b5960f367958e8e7500150b4edd285c99869cca803e40e0537d2d347b0",
+        "4cf917ac06708e1068dfe9f8bbebc9376c4748526bd669b9bea32929ba996d0a"
       ]
     },
     ".claude/scripts/queue/jira.mjs": {
@@ -341,7 +373,9 @@
         "13e187a4005136a9a1fae5fb5a3d2a61c3cf5dc097b467c12622ad82a0fd5d52",
         "86591a48b9264d641c2530238ea3720705f12e17af2ec8dccecabfa3a742a2e7",
         "13c301f828d4402fcf81e7e0b2b1d22472cbdb50f6fd606770056af4ec215e51",
-        "b8be5855809c0d44ece94858456098663296c17c5ad9abb1ea2cf1a8f48ca491"
+        "b8be5855809c0d44ece94858456098663296c17c5ad9abb1ea2cf1a8f48ca491",
+        "3fc8ff9a06a2e22355a660a31e2943a97f50869f7e5726f768a7931d17b64b5b",
+        "f44203af187e855b9f738f8dbedfd313abf9d6a5cc29182fb46cd58d70698d7a"
       ]
     },
     ".claude/scripts/queue/plan-md.mjs": {
@@ -368,13 +402,15 @@
     ".claude/scripts/revalidate.mjs": {
       "since": "0.6.0",
       "hashes": [
-        "32f847a2a3a5136cabcb42f6447da9f8cf98e2d20512212ee5201461128d7798"
+        "32f847a2a3a5136cabcb42f6447da9f8cf98e2d20512212ee5201461128d7798",
+        "b62348a27bcaa1d62a0e4ddd53873fab6cb75f9af8e8c69d24f6ce81c592c4e3"
       ]
     },
     ".claude/scripts/revalidation-report.mjs": {
       "since": "0.6.0",
       "hashes": [
-        "b99a3537158c2851698bfac027f7061811d7d428c3eea57f3ce0f58ea75dc249"
+        "b99a3537158c2851698bfac027f7061811d7d428c3eea57f3ce0f58ea75dc249",
+        "78adac5c8f696f2c9cc86f404abf1d55604ccb10f11dd612501c14d4cf5935b1"
       ]
     },
     ".claude/scripts/run-journal.mjs": {
@@ -400,7 +436,9 @@
     ".claude/scripts/unattended-flag.mjs": {
       "since": "0.6.0",
       "hashes": [
-        "060b001927d8b471f1c1a8c8851fbb4266d3b2edd674cccbd6c16c44b57b91dd"
+        "060b001927d8b471f1c1a8c8851fbb4266d3b2edd674cccbd6c16c44b57b91dd",
+        "7721ee19fd1bcf6902be3d359def40742d79b88f5d83e7e3ca22ba45ca3211aa",
+        "250292c9959916240bfc0fdf5987a864f6d54799de3d932dc6b85b776e62eaa9"
       ]
     },
     ".claude/scripts/verdict.mjs": {
@@ -435,7 +473,9 @@
         "8f687f92fa60d4cc679fa13bff997cec92227f6bc0b90c1dc5b8a5400f2abef0",
         "e442ca58c4249ac10d5759bba2d8360544642e03b2b158e6253e71f5be3767fb",
         "eb52ef41269018107534d8dc2f552c57698e1677a1e76b5e666b5d09c007cac0",
-        "47922b182915cb92696f851174f2e88c4ae8c67dc119ef39a3a597ef1300fab5"
+        "47922b182915cb92696f851174f2e88c4ae8c67dc119ef39a3a597ef1300fab5",
+        "57f6add0504db45e7577474f97705fe474310e4cd3310cdb348a2c64eabe88cd",
+        "18f4300de4c4c7ea380d726fb109fa224da950ef0a4cea5015ab1d408b823be5"
       ]
     },
     ".claude/skills/new-invariant/SKILL.md": {
@@ -503,7 +543,8 @@
       "since": "0.5.0",
       "hashes": [
         "80b4631502d95c619ad060ce02cc8702b12574758ba7df8337ed63efa15d764d",
-        "cfd516f72acdfd197c59ac3cbdd39d7b175976dbd3d9eef52825dfdc4f1e5b60"
+        "cfd516f72acdfd197c59ac3cbdd39d7b175976dbd3d9eef52825dfdc4f1e5b60",
+        "8687eacf0ad707a4f887e0714e82fca23fd005fa9ec8824faedfe99ca46333e1"
       ]
     },
     ".codex/agents/security-scanner.toml": {
@@ -523,7 +564,8 @@
       "since": "0.5.0",
       "hashes": [
         "c676647d585ec87427545a391598706ecaa74dfe413a7e05877e336bf8942874",
-        "89d999c068ef5b6e48913c15a165359e66b1f505b9f97c145d8c730cbf42d09a"
+        "89d999c068ef5b6e48913c15a165359e66b1f505b9f97c145d8c730cbf42d09a",
+        "1fc2fc35b04fa4ad0859841af72f45695bc346d1a1a9b20ba5d971d48888a910"
       ]
     },
     "AGENTS.md": {
@@ -591,7 +633,8 @@
     "docs/decisions/spacing-rations-mechanisms.md": {
       "since": "0.5.0",
       "hashes": [
-        "883852ffc14b9f0b6101f67b7045567056d2c5630e79391a6e542d6d3854095a"
+        "883852ffc14b9f0b6101f67b7045567056d2c5630e79391a6e542d6d3854095a",
+        "5894f8aa613fbbba0f125c871b2a91d9cc5bd9dd6a3fe4c8fd9d8a06aa8839b8"
       ]
     },
     "docs/decisions/stop-conditions-in-a-file.md": {

package/templates/release-ledger.json

@@ -6,5 +6,7 @@
   "0.3.2": "bbcb24fd8ff5290826ee3b152b5130f6bd4697da",
   "0.4.0": "c77c6c3e5d991a55b733a05a3b5ae01e2a55e578",
   "0.5.0": "d78d0e77307a2be128de46ff4f64e3c146b5df2b",
-  "0.6.0": "29ca0543368e922349945e52541a92b46ddcc5bd"
+  "0.6.0": "29ca0543368e922349945e52541a92b46ddcc5bd",
+  "0.6.1": "f1d1e3dbd2161545d77ee5e7f90fa8e74b8a9f3e",
+  "0.6.2": "2a1fc8e10cd2b65deb5c95d937fd7de39f2c92a2"
 }