create-agent-rig 0.6.2 → 0.7.1

package/templates/agent-os/universal/docs/decisions/content-blind-revalidation.md

@@ -0,0 +1,144 @@
+# Content-blind revalidation claims
+
+Status: accepted
+
+## Decision
+
+SELECT, BEFORE_PR and BEFORE_CLOSE remain the only revalidation checkpoints.
+They share one implementation and one durable baseline: a versioned JSON record
+at `.rig/claims/<ticket>.json`.
+
+The first successful SELECT creates the record and reports
+`BASELINE_CREATED`. The task branch must add it to Git. An existing but
+untracked record, or an absent tracked record, is `UNVERIFIABLE`; so is an
+absent record on a resumed SELECT, BEFORE_PR or BEFORE_CLOSE. Each case stops
+automatic progress. Pinned in the generator's
+`test/template/content-blind-revalidation.test.ts` (absent in a generated rig)
+› "creates a versioned content-blind claim and returns BASELINE_CREATED" and ›
+"refuses to resume from an existing claim until Git tracks it", › "refuses a
+deleted tracked claim in a fresh run without take-up markers", and › "refuses
+to recreate a deleted untracked baseline with a %s" (parameterized over a
+readable and a corrupt prior journal), plus
+`test/template/queue-revalidation.test.ts` (absent in a generated rig) ›
+"without a run directory it creates the durable baseline but no run evidence".
+
+The record contains SHA-256 fingerprint sets, not source content:
+
+- `scope` covers stable ticket scope, workflow state, dependency links and
+  configured paired repository facts. Workflow state is fingerprinted against
+  the state expected at each checkpoint. The first SELECT expects `open`.
+  A successful Jira or GitHub adapter `claim` then writes its observable state
+  (`in-progress`) into the same durable claim record as `workflowClaim`; only
+  that acknowledgement authorises the state at a resumed SELECT, BEFORE_PR or
+  BEFORE_CLOSE. The same state reached without the acknowledgement is external
+  drift and moves `scope`. PLAN.md remains `open` because its claim has no
+  observable workflow transition. A rollback or any other state also moves it.
+- `commentary` covers comment identifiers and count. It is observed at SELECT
+  and BEFORE_PR and becomes hold-authoritative only at BEFORE_CLOSE.
+
+Pinned in the generator suite (absent in a generated rig),
+`test/template/content-blind-revalidation.test.ts` › "stays CURRENT
+for marker-only movement and holds on changed scope", › "holds when the target
+branch SHA moves without a tracker edit", › "adapters declare their observable
+claimed workflow state", › "keeps a resumed SELECT current after the Jira
+adapter records its own claim transition", › "GitHub claim records the durable
+transition that makes in-progress CURRENT", › "holds claim:scope at resumed
+SELECT for the same transition made outside the adapter", › "accepts an
+in-progress transition performed by the Jira adapter claim operation", ›
+"holds claim:scope when an external actor moves the item to the expected
+claimed state", › "holds claim:scope when workflow state returns to open after
+the Rig claim transition", and › "defers an added comment through SELECT and
+BEFORE_PR, then holds at BEFORE_CLOSE".
+
+`.rig/revalidation.json` is the versioned detection contract. Version 1 is a
+pull model over run-state and journal evidence, with 24-hour accepted latency,
+no push channel, and an explicit list of paired facts. Preflight stops when the
+contract is absent or unsupported. Pinned in the generator suite (absent in a
+generated rig),
+`test/template/content-blind-revalidation.test.ts` › "preflight hard-refuses a
+%s contract as no-detection-contract" and › "accepts the default
+pull/run-state+journal/24h/no-push contract".
+
+`updatedAt` take-up markers remain in run state and revalidation events for
+compatibility and attribution. They do not decide drift, baseline creation or
+checkpoint action. `.claude/runs/<run-id>/decisions.jsonl` and `events.jsonl`
+remain append-only evidence for a particular run; the sibling `state.json` is a
+mutable stop-state cache, and none of them is the cross-harness claim store.
+Pinned in the generator suite (absent in a generated rig),
+`test/template/queue-revalidation.test.ts` › "a moved marker stays
+evidence-only while the tracked claim remains CURRENT". First sight versus
+resume is reconstructed from SELECT events in the current and bounded sibling
+run journals. An unreadable bounded journal cannot prove first sight and
+therefore cannot authorise recreation of a missing claim. Neither can a scan
+truncated by its entry or candidate cap: incompleteness is explicit and fails
+closed rather than turning subset absence into first sight.
+
+Every blocking detection has a stable content-blind id. A typed outcome names
+that id, records whether action was required and clears only its matching
+run-level hold. An outcome without a boolean `actionRequired` or legacy
+`actionChanged` verdict is malformed and resolves nothing. Filesystem failures
+are reduced to stable logical evidence before they enter a detection id, so
+identical failures have identical ids across harness
+checkouts. The report joins by detection id across runs and retains the
+legacy same-run sequence join for older evidence. Pinned in the generator suite
+(absent in a generated rig),
+`test/template/content-blind-revalidation.test.ts` › "reuses a stable detection
+id for the same drift at the same checkpoint", › "journals a typed resolution
+through the existing outcome command", › "derives false-HOLD from result !=
+CURRENT and actionRequired false, only after resolution", and › "joins a typed
+resolution to its detection across run directories".
+
+The run-state hold is a cache of that append-only evidence, not a deletion
+escape hatch. Before selection, the same temporal resolver used by the report
+reconstructs the newest unresolved blocking detection from the current run
+journal when `state.json` has no hold. Revalidation-hold writers use the same
+fail-closed state reader as selection, so a corrupt, symlinked or oversized
+state file cannot be replaced while it may conceal another stop input. Contract
+and paired-fact reads classify a pathname before opening it, stay anchored to
+the opened file descriptor, and reject identity changes during validation.
+Existing claim bytes are read through a bounded no-follow
+descriptor and compared with the tracked Git object; first-baseline creation is
+anchored to the validated claim-directory working directory so a pathname swap
+cannot redirect the write outside the repository.
+The directory's real path and filesystem identity are carried into the writer
+and checked again with the persisted bytes before SELECT reports
+`BASELINE_CREATED`; redirecting it elsewhere inside the repository is refused
+too. Jira commentary declares whether its returned IDs cover `comment.total`;
+an incomplete set is `UNVERIFIABLE`, never a hash of unseen IDs. GitHub CLI's
+unpaginated `comments(first: 100)` window has no total beside it, so exactly 100
+returned comments is also `UNVERIFIABLE`; fewer than the cap proves completion.
+Pinned in the generator's
+`test/template/content-blind-revalidation.test.ts` (absent in a generated rig)
+› "stops with %s when the unresolved journal result is %s", › "%s refuses a
+present %s state instead of replacing unknown stop inputs", › "does not accept
+an external contract swapped in after containment validation", › "classifies a
+contract symlink before attempting to open it", › "rejects a tracked claim %s
+only in the worktree", and › "does not write a baseline outside
+after the claim directory passes containment", plus › "keeps a detection
+unresolved with %s state when its typed outcome has no boolean verdict", › "uses
+the same id for the same missing-contract condition in two absolute roots", ›
+"returns UNVERIFIABLE when the %s truncates prior SELECT evidence", › "refuses
+SELECT when comment.total exceeds the returned comment ids", › "refuses SELECT
+when the transport returns exactly its 100-comment window without a total", and
+› "does not write through an in-repository claim-directory symlink swapped after
+validation".
+
+BEFORE_CLOSE proves the tracker state it observed; the later tracker transition
+is a separate API operation. Without a tracker-supplied conditional transition
+or transaction token, this mechanism cannot make those two remote operations
+atomic. A future adapter may consume such a native primitive, but this decision
+does not invent one or treat `updatedAt` as a substitute authority.
+
+## Why
+
+Tracker timestamps conflate scope edits, comments and workflow transitions.
+They caused false holds on the rig's own writes and cannot survive a harness or
+run boundary as a durable semantic claim. Content-blind sets preserve privacy,
+make each kind of drift explicit and keep the existing checkpoint chain as the
+single authority.
+
+## Rollback
+
+Revert the mechanism, contract and claim records together. Do not restore
+`updatedAt` as a second authority beside claims: two engines can disagree at a
+checkpoint, which makes neither result safe to automate.

package/templates/agent-os/universal/layers.json

@@ -47,9 +47,12 @@
     ".claude/scripts/revalidate.mjs",
     ".claude/scripts/revalidation-report.mjs",
     ".claude/scripts/lib/gate-coverage.mjs",
+    ".claude/scripts/lib/claim-records.mjs",
+    ".claude/scripts/lib/revalidation-evidence.mjs",
     ".claude/scripts/lib/revalidation-points.mjs",
     ".claude/scripts/lib/verdict.mjs",
     ".claude/scripts/lib/secrets.mjs",
+    ".claude/scripts/lib/shell-tools.mjs",
     ".claude/scripts/queue/core.mjs",
     ".claude/scripts/queue/plan-md.mjs",
     ".claude/scripts/queue/github-issues.mjs",
@@ -60,12 +63,14 @@
     ".claude/scripts/queue/state.mjs",
     ".claude/scripts/queue/gate-rounds.mjs",
     ".claude/queue.json",
+    ".rig/revalidation.json",
     "PLAN.md",
     "journal/README.md",
     "docs/decisions/gate-coverage.md",
     "docs/decisions/fail-open-guards.md",
     "docs/decisions/codex-adapter.md",
     "docs/decisions/closing-a-task.md",
+    "docs/decisions/content-blind-revalidation.md",
     "docs/decisions/review-lanes.md",
     "docs/decisions/run-directory.md",
     "docs/decisions/spacing-rations-mechanisms.md",

package/templates/hash-history.json

@@ -7,7 +7,9 @@
     "0.4.0",
     "0.5.0",
     "0.6.0",
-    "0.6.1"
+    "0.6.1",
+    "0.6.2",
+    "0.7.0"
   ],
   "files": {
     ".agents/skills/check-premises/SKILL.md": {
@@ -22,7 +24,9 @@
       "hashes": [
         "eb52ef41269018107534d8dc2f552c57698e1677a1e76b5e666b5d09c007cac0",
         "47922b182915cb92696f851174f2e88c4ae8c67dc119ef39a3a597ef1300fab5",
-        "57f6add0504db45e7577474f97705fe474310e4cd3310cdb348a2c64eabe88cd"
+        "57f6add0504db45e7577474f97705fe474310e4cd3310cdb348a2c64eabe88cd",
+        "18f4300de4c4c7ea380d726fb109fa224da950ef0a4cea5015ab1d408b823be5",
+        "0a1b6575f6df8139766c8e71ba7320e14d2a5a5ed8ab26b6b43f7a006153d37d"
       ]
     },
     ".agents/skills/new-invariant/SKILL.md": {
@@ -54,7 +58,8 @@
       "since": "0.5.0",
       "hashes": [
         "a2fb0d03c65701af9d2d69cbcb2582ae573f097b1e1071eb2916e5e4f7832b37",
-        "9616e4767942b2021e34ab7bb76eec9a5c280cc608a0756abb02743741d5fc8a"
+        "9616e4767942b2021e34ab7bb76eec9a5c280cc608a0756abb02743741d5fc8a",
+        "a6340b95a03000b89fb27f5357cdd9c7ec12b714054b5334b61a30da600405e8"
       ]
     },
     ".agents/skills/ro-debug/SKILL.md": {
@@ -114,7 +119,9 @@
       "since": "0.2.0",
       "hashes": [
         "c7c86de47b601dcb594ba8d8e23b5624ef8d47dafeddbc1aadd351c72e051d83",
-        "ece5a81db41bd48695a1a009239837b682d247baf6d19214eaa859a7519ab246"
+        "ece5a81db41bd48695a1a009239837b682d247baf6d19214eaa859a7519ab246",
+        "1646ed80de5268a886a2e861124cb3b871fa46df1857991a645667601f52253b",
+        "3d7bcbccd9a163f076bd1d8cc63021b7c8605d1cb1df24a3536db3e57c1d7630"
       ]
     },
     ".claude/hooks/dod-checks.json": {
@@ -130,7 +137,8 @@
         "9fb8fad4d95756fb2424a97550aa85dfab0ca8dbcf91e6d0385263ba3b929135",
         "7852205961cb1647b49de5f7e79820c1735b4be897adcf8f5bc3eeb49318ff78",
         "33edb11904e5c4f88626b41c7e649b85d20957a11ff7e1062538917647c3e7f0",
-        "19202a28355dac1d7a95d29411668cf970006b3044d89a772768ce21793931aa"
+        "19202a28355dac1d7a95d29411668cf970006b3044d89a772768ce21793931aa",
+        "d2af03ed141fadd0b1e69b230b9277e8f03169757a8e2a679767653ab7828d9a"
       ]
     },
     ".claude/hooks/guard-bash.mjs": {
@@ -138,42 +146,51 @@
       "hashes": [
         "4d396f412fc53094188b14348c5af4e79c7542a182630c20c4687d79899c5b0e",
         "e7a513216ebbceaa7f11ec8fb611de8bb5d5925dfdfd75b779dcb7c0ee6e83cc",
-        "78047f42dda65076dd2cdb73ad530553db3d4a6f3ea7f0729590ac7286323cb1"
+        "78047f42dda65076dd2cdb73ad530553db3d4a6f3ea7f0729590ac7286323cb1",
+        "5782d91c6c54155ad8bf3e107b6574b3ad4c97baa7be673a5ed252c70b387300",
+        "5ffaba69ffc9b6c39cd3c97c4f29b44627416d55793b50aa1a26ffe5efc45497"
       ]
     },
     ".claude/hooks/guard-core-purity.mjs": {
       "since": "0.2.0",
       "hashes": [
         "e36fbb92ee8395c6686fef582f29f2701747074b3b781bed42fe068f5c000bd7",
-        "282faa364c2d152808cd92ff7e39da26fd0549a5b2d0af9711d3453be2c666eb"
+        "282faa364c2d152808cd92ff7e39da26fd0549a5b2d0af9711d3453be2c666eb",
+        "4bdd9a38b1aa4050c109f7809ef924be4d411f5720b6030d57c5264ce3df556d",
+        "15de3ae9a6007270f7b10d71ff9940160aadabd8f5b0995662fc324c483807e5"
       ]
     },
     ".claude/hooks/guard-rulebook.mjs": {
       "since": "0.6.0",
       "hashes": [
         "4524d715f2e41f4cfdd3d0f9c858817f913aaca5192bda97dff876b4d8c51f19",
-        "f9e3e4b7c22c4a64f521402419707ff382b05c8deb6310f62e5545db87f7cb4f"
+        "f9e3e4b7c22c4a64f521402419707ff382b05c8deb6310f62e5545db87f7cb4f",
+        "493ae58e54b055bd13ba992ee0dbfa2cb9ce9a3637ec345ab8d7cfff95831c60"
       ]
     },
     ".claude/hooks/guard-secret-file.mjs": {
       "since": "0.5.0",
       "hashes": [
         "f6b81cb7640924d2e56aced58e6b48f65df6638fb5a9099985fe5d673245c3ad",
-        "8c333879dba1f2bf87bbb8e7b257ac51315a74a4cb45252408ca615e2a42d7b5"
+        "8c333879dba1f2bf87bbb8e7b257ac51315a74a4cb45252408ca615e2a42d7b5",
+        "5bf2896ec5e5f94fab20b52cd22418a4392778b40744602a087e320eeca3f688"
       ]
     },
     ".claude/hooks/guard-web-boundary.mjs": {
       "since": "0.2.0",
       "hashes": [
         "93d4fa0fd1c18261cc8ef2b1ae2abe3a0200cc4b5a7b1d1d4ae433ca92c514b1",
-        "8deda7061122b69d72e708222ef2d38a971bb713269ec7fd1ca3440fe0a1150f"
+        "8deda7061122b69d72e708222ef2d38a971bb713269ec7fd1ca3440fe0a1150f",
+        "df325e672793e06b8315e64b59a329775d110fc166176074ff3bb8dea557c561",
+        "60959520dbe326880d284c9e2b76a2a89f72b981ea6a2cb76e2a252b1233bdfc"
       ]
     },
     ".claude/hooks/inject-rules.mjs": {
       "since": "0.2.0",
       "hashes": [
         "c472419f1076ea3707d640cd5246c0e69a94c55455f6648e2cbaf300a382c8df",
-        "17c299ea4c6202745a3f8813aaef7711eb9030bf0a220cca77b58cac98c95940"
+        "17c299ea4c6202745a3f8813aaef7711eb9030bf0a220cca77b58cac98c95940",
+        "860a5d4ba02b59971f80bf79a9081f48f11022d46fe66b0470f0abc4ed9633e4"
       ]
     },
     ".claude/hooks/lib/edit-input.mjs": {
@@ -184,6 +201,13 @@
         "572c671f8f2cad190fe2f144071954ac4d3b1357cab80a19bad584dd3b3768c8"
       ]
     },
+    ".claude/hooks/lib/hook-input.mjs": {
+      "since": "0.6.2",
+      "hashes": [
+        "c40320d90e9585a52026e074e399b6883a0dfed704115b28e8da4dea284cf85f",
+        "3be3d4af4a25536d2a2bac0441a1370be7efafb5f8aa737b195bdce77db0091b"
+      ]
+    },
     ".claude/queue.json": {
       "since": "0.3.0",
       "hashes": [
@@ -221,14 +245,16 @@
         "518d9b3d7cbae50f30c86d33b2b4bbea11ab3ba6cfef270876e92604b2af5f50",
         "389484f0846c3dd8207c0f41bd56409103fbcc7f58b94b1bf4bd1d81b5af0e87",
         "a2e10499a0bcd2cdc32f3986d27b59077c86e524d40323faabb2e5d78afc002c",
-        "c94c33d7ccbd46f191948325dfc7f68ce13b0d3a9470215de1de3f06b1499111"
+        "c94c33d7ccbd46f191948325dfc7f68ce13b0d3a9470215de1de3f06b1499111",
+        "ce90c1e697fdd444ca3fe2203d7991645f2c284c413ae187e4d6d6c618af52c9"
       ]
     },
     ".claude/rules/node-ts.md": {
       "since": "0.2.0",
       "hashes": [
         "3db68a4280cc30655be56fed9385179c378f560f3df55e21952a24066427e845",
-        "be3b7bf901ef250b5957a37815b9a339083f7a8c4ecc866aeb12e3a0797c3c09"
+        "be3b7bf901ef250b5957a37815b9a339083f7a8c4ecc866aeb12e3a0797c3c09",
+        "b74979a3a1e57b69a6e1b3ee2d0cf9fc671d4487c411dc947e9ad0a47ac56dd1"
       ]
     },
     ".claude/rules/workflow.md": {
@@ -269,12 +295,24 @@
         "b022399f287cdce1bcb07329c0aab44bf99714b5f0515f274c962f41ea072b86"
       ]
     },
+    ".claude/scripts/lib/claim-records.mjs": {
+      "since": "0.7.0",
+      "hashes": [
+        "acb1d5702a826832977e7eb01b76c50cab19292528901f1b33693e561dbb0a24"
+      ]
+    },
     ".claude/scripts/lib/gate-coverage.mjs": {
       "since": "0.6.0",
       "hashes": [
         "1ef7f355071a747d8a8d9cd5e2072a19fe3d8c11a0e2a5f884d95a33fb95f12d"
       ]
     },
+    ".claude/scripts/lib/revalidation-evidence.mjs": {
+      "since": "0.7.0",
+      "hashes": [
+        "513369213374cf2c5415c7d5ea1f6d5c67300c77cec7af3e9190e710b156969f"
+      ]
+    },
     ".claude/scripts/lib/revalidation-points.mjs": {
       "since": "0.6.0",
       "hashes": [
@@ -289,6 +327,12 @@
         "60fab2cc9f2028bccf6139e6a744406b4a86a9039d1367f3cef409902e9b327d"
       ]
     },
+    ".claude/scripts/lib/shell-tools.mjs": {
+      "since": "0.7.0",
+      "hashes": [
+        "402428f4b2c4e507652d775e43b26c1e0a74aadb2cedec3156ac186af17d667a"
+      ]
+    },
     ".claude/scripts/lib/verdict.mjs": {
       "since": "0.5.0",
       "hashes": [
@@ -302,7 +346,8 @@
         "21083ff7baeebf8aedbdf85679a353f671276a9e0201a58a8235ae63f55f081c",
         "ceb6d35fa028f9c5e5e2d5965c627095d5ba80c37191a584627b4bc645b6be15",
         "efa193dc543237d82dcb371fa1df6483ccd43c1db88d0e218f5d89769564974c",
-        "bed44df40412a7edac96914de21edc796df604ddc275ff1a02764dfcc4d4ede7"
+        "bed44df40412a7edac96914de21edc796df604ddc275ff1a02764dfcc4d4ede7",
+        "b3893c365de37ef6d9d04ab933296b9fcf09a0886197d7e12313fa63eacdbd89"
       ]
     },
     ".claude/scripts/queue/as-of.mjs": {
@@ -324,7 +369,8 @@
         "214f36e39f3809da5a121f404005d16a694280ca672ed10150b1b07d47912f6a",
         "d8a5916bae71efcc6a21978af713112c9ec33a7554fd07f5978bdf2c3633b560",
         "1804c2351a4f3042dc6a3fb4203f96e98ae12bec32569b99bda77d002d6ba5f2",
-        "b81ae3181e02b9c1c3f0e954688490ab3db3961381c2dc397c47c651c9d07f88"
+        "b81ae3181e02b9c1c3f0e954688490ab3db3961381c2dc397c47c651c9d07f88",
+        "c9902da15d06de3e952352115db0288433520eae2caac1f70ee6e06753d1f444"
       ]
     },
     ".claude/scripts/queue/gate-rounds.mjs": {
@@ -339,7 +385,8 @@
         "f473f0ee5fc469f47b2b21ee601310944faa1abed21942e97ed251aba826cd5d",
         "86489ac7fcd06e43e31fb3d0ac9ab23174ef9c95196b08f127f1ae74da620c0c",
         "f84148fee47109a388a248c51d3eb40919ce341785b561dd4135b69c6fedabf3",
-        "5ab8f741f17efb935b11caf245edf2b562cb887020c2a43d45464158342c933a"
+        "5ab8f741f17efb935b11caf245edf2b562cb887020c2a43d45464158342c933a",
+        "b5349837d16de0966139f5b65e2800486592f1b24d7e87087c2b7212cead479d"
       ]
     },
     ".claude/scripts/queue/index.mjs": {
@@ -348,7 +395,8 @@
         "cd149245dc29ef7489ae0e5394fa5a063dea2cc017bd3cbbface1ace6f8d7b46",
         "7db3c17b781e6876b4822afd09e6affa97e46607b63d443975d987daf1f14464",
         "9edd70b5960f367958e8e7500150b4edd285c99869cca803e40e0537d2d347b0",
-        "4cf917ac06708e1068dfe9f8bbebc9376c4748526bd669b9bea32929ba996d0a"
+        "4cf917ac06708e1068dfe9f8bbebc9376c4748526bd669b9bea32929ba996d0a",
+        "b4a0789be7ad4b401de872edb06665bca349048178b4dd6c5db848ca44f7c977"
       ]
     },
     ".claude/scripts/queue/jira.mjs": {
@@ -358,7 +406,9 @@
         "86591a48b9264d641c2530238ea3720705f12e17af2ec8dccecabfa3a742a2e7",
         "13c301f828d4402fcf81e7e0b2b1d22472cbdb50f6fd606770056af4ec215e51",
         "b8be5855809c0d44ece94858456098663296c17c5ad9abb1ea2cf1a8f48ca491",
-        "3fc8ff9a06a2e22355a660a31e2943a97f50869f7e5726f768a7931d17b64b5b"
+        "3fc8ff9a06a2e22355a660a31e2943a97f50869f7e5726f768a7931d17b64b5b",
+        "f44203af187e855b9f738f8dbedfd313abf9d6a5cc29182fb46cd58d70698d7a",
+        "c2f2af8ac5eadd8d35a15bcdeffe585e32c6f99b4e6ab9ace0f9d7fd9d694943"
       ]
     },
     ".claude/scripts/queue/plan-md.mjs": {
@@ -367,7 +417,8 @@
         "d137dad23f263b1a12b04b46625247fea648ded36d0fea7c5b4e4f2211a142eb",
         "07eab69bd86b19b7a1f01eb14efe4f8c007481806cbe029d4014fe9bf0703000",
         "27d7ae3832a32219d5c0ab136bc542388eb686e9f34053c3058104cdeea1574d",
-        "1320909605824b2cd1ff57878e463ef360463b2b175d2152638eda2dff72f5ea"
+        "1320909605824b2cd1ff57878e463ef360463b2b175d2152638eda2dff72f5ea",
+        "816aec4cb84492370972f71813a9fec7c0309e5f501951a93620a37cb318ac39"
       ]
     },
     ".claude/scripts/queue/state.mjs": {
@@ -386,14 +437,16 @@
       "since": "0.6.0",
       "hashes": [
         "32f847a2a3a5136cabcb42f6447da9f8cf98e2d20512212ee5201461128d7798",
-        "b62348a27bcaa1d62a0e4ddd53873fab6cb75f9af8e8c69d24f6ce81c592c4e3"
+        "b62348a27bcaa1d62a0e4ddd53873fab6cb75f9af8e8c69d24f6ce81c592c4e3",
+        "b151045e8083c398e94571b35dc9568dfa0102abcb847cdf764f6f694914d53e"
       ]
     },
     ".claude/scripts/revalidation-report.mjs": {
       "since": "0.6.0",
       "hashes": [
         "b99a3537158c2851698bfac027f7061811d7d428c3eea57f3ce0f58ea75dc249",
-        "78adac5c8f696f2c9cc86f404abf1d55604ccb10f11dd612501c14d4cf5935b1"
+        "78adac5c8f696f2c9cc86f404abf1d55604ccb10f11dd612501c14d4cf5935b1",
+        "fed627d2c8f0f5e6a4524b7015ac7a1cb5051a8c316ff4544af18be9c61eb163"
       ]
     },
     ".claude/scripts/run-journal.mjs": {
@@ -406,7 +459,8 @@
       "since": "0.5.0",
       "hashes": [
         "5682b4ef1e63b83e1398da4959d8b34f52aede38f896557c041687d101df015f",
-        "82c83fe9a66ff1a48c9e23fdfe84eef7da0de337c420e8d870085e7078d6f5e2"
+        "82c83fe9a66ff1a48c9e23fdfe84eef7da0de337c420e8d870085e7078d6f5e2",
+        "c502cefafdc720d178de685e8372d2c140cb2663517c9d88b5345a9f0c50d0de"
       ]
     },
     ".claude/scripts/stop-flag.mjs": {
@@ -420,7 +474,8 @@
       "since": "0.6.0",
       "hashes": [
         "060b001927d8b471f1c1a8c8851fbb4266d3b2edd674cccbd6c16c44b57b91dd",
-        "7721ee19fd1bcf6902be3d359def40742d79b88f5d83e7e3ca22ba45ca3211aa"
+        "7721ee19fd1bcf6902be3d359def40742d79b88f5d83e7e3ca22ba45ca3211aa",
+        "250292c9959916240bfc0fdf5987a864f6d54799de3d932dc6b85b776e62eaa9"
       ]
     },
     ".claude/scripts/verdict.mjs": {
@@ -436,7 +491,8 @@
         "48212660b2823725c2c9ee785ad739701e4c0e4733b275201a544df1abba28d0",
         "55a6938b4d9967291a26e93301e34e5ffdef74a88f8c773a4d11b5d87d864fff",
         "713718fbb2cda132f05665b29b8f1108a6305729b5e7c789d2053d117c13e08e",
-        "e588ab05bee707a099c80c9ea399008be31488e616f3db3c0598f66f3d1b3a52"
+        "e588ab05bee707a099c80c9ea399008be31488e616f3db3c0598f66f3d1b3a52",
+        "a180578d6e6de6a21900ff2f8a8ade2242170d16d2dd95574e5004435d870b9b"
       ]
     },
     ".claude/skills/check-premises/SKILL.md": {
@@ -456,7 +512,9 @@
         "e442ca58c4249ac10d5759bba2d8360544642e03b2b158e6253e71f5be3767fb",
         "eb52ef41269018107534d8dc2f552c57698e1677a1e76b5e666b5d09c007cac0",
         "47922b182915cb92696f851174f2e88c4ae8c67dc119ef39a3a597ef1300fab5",
-        "57f6add0504db45e7577474f97705fe474310e4cd3310cdb348a2c64eabe88cd"
+        "57f6add0504db45e7577474f97705fe474310e4cd3310cdb348a2c64eabe88cd",
+        "18f4300de4c4c7ea380d726fb109fa224da950ef0a4cea5015ab1d408b823be5",
+        "0a1b6575f6df8139766c8e71ba7320e14d2a5a5ed8ab26b6b43f7a006153d37d"
       ]
     },
     ".claude/skills/new-invariant/SKILL.md": {
@@ -491,7 +549,8 @@
         "368a50be809f7be865d6d29ab3e54b9d69acd2ea3ba7929c0edeef161c2521b7",
         "75adb84414a330db621ff4f1363b3926f537133199236a9e25bb9880b935e02e",
         "a2fb0d03c65701af9d2d69cbcb2582ae573f097b1e1071eb2916e5e4f7832b37",
-        "9616e4767942b2021e34ab7bb76eec9a5c280cc608a0756abb02743741d5fc8a"
+        "9616e4767942b2021e34ab7bb76eec9a5c280cc608a0756abb02743741d5fc8a",
+        "a6340b95a03000b89fb27f5357cdd9c7ec12b714054b5334b61a30da600405e8"
       ]
     },
     ".claude/skills/ro-debug/SKILL.md": {
@@ -545,7 +604,15 @@
       "since": "0.5.0",
       "hashes": [
         "c676647d585ec87427545a391598706ecaa74dfe413a7e05877e336bf8942874",
-        "89d999c068ef5b6e48913c15a165359e66b1f505b9f97c145d8c730cbf42d09a"
+        "89d999c068ef5b6e48913c15a165359e66b1f505b9f97c145d8c730cbf42d09a",
+        "1fc2fc35b04fa4ad0859841af72f45695bc346d1a1a9b20ba5d971d48888a910",
+        "fa9a34eb9f889910e55269b76172608b989d553583de38af34316a31f4ad570b"
+      ]
+    },
+    ".rig/revalidation.json": {
+      "since": "0.7.0",
+      "hashes": [
+        "312b59f80fcbcf2897ef80fb54be236fb6b2b1745f705dae8e66c58f0bbd3099"
       ]
     },
     "AGENTS.md": {
@@ -583,7 +650,14 @@
     "docs/decisions/codex-adapter.md": {
       "since": "0.5.0",
       "hashes": [
-        "30e55d866d9a2c7359e594181070c63b1974d9df36e000caf419229284303a2e"
+        "30e55d866d9a2c7359e594181070c63b1974d9df36e000caf419229284303a2e",
+        "ebf0ef61407944373c862d37e6a80d4965ece72304b931428c6b3fcc5d9527c4"
+      ]
+    },
+    "docs/decisions/content-blind-revalidation.md": {
+      "since": "0.7.0",
+      "hashes": [
+        "d640a152428ea4cc6a5f0a19be58e0d23f3a99c44b0ad0b72152ec7b48fe5bfd"
       ]
     },
     "docs/decisions/fail-open-guards.md": {
@@ -613,7 +687,8 @@
     "docs/decisions/spacing-rations-mechanisms.md": {
       "since": "0.5.0",
       "hashes": [
-        "883852ffc14b9f0b6101f67b7045567056d2c5630e79391a6e542d6d3854095a"
+        "883852ffc14b9f0b6101f67b7045567056d2c5630e79391a6e542d6d3854095a",
+        "5894f8aa613fbbba0f125c871b2a91d9cc5bd9dd6a3fe4c8fd9d8a06aa8839b8"
       ]
     },
     "docs/decisions/stop-conditions-in-a-file.md": {

package/templates/release-ledger.json

@@ -7,5 +7,7 @@
   "0.4.0": "c77c6c3e5d991a55b733a05a3b5ae01e2a55e578",
   "0.5.0": "d78d0e77307a2be128de46ff4f64e3c146b5df2b",
   "0.6.0": "29ca0543368e922349945e52541a92b46ddcc5bd",
-  "0.6.1": "f1d1e3dbd2161545d77ee5e7f90fa8e74b8a9f3e"
+  "0.6.1": "f1d1e3dbd2161545d77ee5e7f90fa8e74b8a9f3e",
+  "0.6.2": "2a1fc8e10cd2b65deb5c95d937fd7de39f2c92a2",
+  "0.7.0": "6589db36e1daa63a99ec595191db1cccf7373196"
 }