devrites 6.1.0 → 6.1.1

package/pack/generated/codex/skills/rite-autocomplete/reference/stop-conditions.md

@@ -1,10 +1,10 @@
 # Stop conditions: when autocomplete pauses
 
 On a real stop, write `state.md` as `awaiting_human` or `blocked`, persist the
-reason, and include one resume command only when an actual human/safety/access
-action can change it. Exhausted agent-owned recovery records terminal
-`Next step: none` and no runnable recovery command. `--ship` never bypasses a
-stop.
+reason, and include one resume command. Agent-owned recovery never ends the run:
+a spent strategy escalates and a fully escalated fingerprint parks while other
+work continues ([retry contract](../../devrites-lib/reference/standards/afk-hitl.md#retry-cap-no-progress-loops-and-self-resolve)).
+`--ship` never bypasses a stop.
 
 Authority: `.agents/skills/devrites-lib/reference/standards/acceptance-preserving-reslice.md`.
 
@@ -24,8 +24,8 @@ Regardless of flags or AFK ceiling:
 - external-service contract change; or
 - filesystem destruction outside the workspace.
 
-Red proof cannot advance. Run bounded Debug Recovery; stop after proven
-exhaustion unless the remaining owner is human.
+Red proof cannot advance. Run bounded Debug Recovery and escalate spent
+strategies; a fully escalated fingerprint parks unless the remaining owner is human.
 
 ## Not stops: internal technical routing
 
@@ -36,13 +36,16 @@ agent-owned.
 
 Agent-owned backtracking is not a stop condition while the exact causal
 fingerprint has budget. Invoke the earlier phase, affected Vet, remediation, and
-proof; then resume the origin. Stop only after three no-progress corrections of
-that exact fingerprint or a real human/safety/access gate. Preserve reproduction,
-attempts, and dead ends; never offer `$rite-plan unblock` or another routine
-phase command. Reinvocation with unchanged evidence does not reset the cap.
-`unchanged` means the same fingerprint already has three recorded no-progress
-corrections. Closure is progress; a separately evidenced Critical/Important
-invariant starts its own cap and cannot extend the closed one.
+proof; then resume the origin. Three no-progress corrections of that exact
+fingerprint spend only its current strategy: escalate to the next correction
+class inline (shared root cause, boundary redesign, diagnostic amplification)
+with a fresh budget, never asking permission. After three escalations in this
+activation the fingerprint parks; finish all independent work, then stop once.
+Preserve reproduction, attempts, and dead ends; never offer `$rite-plan unblock`
+or another routine phase command. A new user-issued `$rite-autocomplete`
+reopens parked fingerprints with fresh escalation; wakes and compaction do not.
+Closure is progress; a separately evidenced Critical/Important invariant starts
+its own cap and cannot extend the closed one.
 
 Spent consumptive-action authorization is not technical-recovery exhaustion.
 It blocks another execution; retained new Critical/Important evidence still
@@ -52,9 +55,8 @@ authorization and never reuse old GO.
 Past evidence being irretrievable is not by itself terminal. If an in-scope
 trusted seam can uniquely discriminate the next failure, run diagnostic-
 amplification Plan repair and narrow Vet inline, then pause for fresh GO before
-one evidence-acquisition attempt. Use terminal none only when no safe in-scope
-seam exists, a real human/risk/scope gate owns it, or bounded recovery is
-exhausted.
+one evidence-acquisition attempt. Without a safe seam, escalate to the next
+class or park; only a real human/risk/scope gate stops for a human.
 
 <!-- workflow-artifact-adapter: {"module":"devrites-lib/reference/standards/workflow-artifacts.md","entry":"classifier returns owner-busy, exhausted, or existing hard gate","action":"stop on exact WAIT_ACTIVE_OWNER, BLOCKED_EXHAUSTED, or BLOCKED_GATE result","return":"unchanged cursor plus fixed route-owned output"} -->
 ## Other stop classes
@@ -86,7 +88,8 @@ exhausted.
 - **Resource envelope:** overlapping run or missing AFK after arm still stops.
   Do not stop on `--max-slices`, `max_agents`, `max_minutes`, or `max_review_queue`.
 - **Confidence:** intent still cannot become testable acceptance after interview.
-- **Repeated failure:** the exact fingerprint's bounded recovery is exhausted.
+- **Repeated failure:** not a stop. Escalate; a fully escalated fingerprint parks,
+  and the run stops only once no independent work remains.
 - **Resolver failure:** `devrites-engine state resolve` not found, or nonzero exit.
   Never hand-edit `questions.md`/`state.md` in its place. Not found stops at once;
   nonzero allows one identical re-run (the fingerprint is command + exit code +
@@ -101,7 +104,7 @@ disclose the exact plan, and stop for literal `GO` plus native approval. Without
 one, stop at Seal GO with `$rite-ship`. Seal GO, AFK, prior approval, and flags
 never satisfy Ship approval.
 
-A cold-resumable stop records `state.md` status, exact reason, and either one
-human-owned resume action or `none — technical recovery exhausted`; the owning
-question/drift/seal entry explains it. The user-facing line says what stopped
+A cold-resumable stop records `state.md` status, exact reason, and one resume
+action: the human-owned action, or `$rite-autocomplete` to reopen parked
+fingerprints; the owning question/drift/seal entry explains it. The user-facing line says what stopped
 and, only when applicable, what human action resumes it.

package/pack/generated/codex/skills/rite-build/reference/afk-discipline.md

@@ -69,13 +69,16 @@ wrong contract or proof path — agent-owned recovery; never advance on broken s
 The fail-on-red path:
 
 1. Continue the same wright under `devrites-debug-recovery`, carrying exact output and dead
-   ends; cap writer + recovery at three no-progress attempts per exact causal fingerprint.
+   ends; cap writer + recovery at three no-progress attempts per exact causal fingerprint
+   and strategy.
    A correction that closes the reproduction is progress; a different evidenced
    Critical/Important invariant starts a separate fingerprint.
 2. Green → record the slice. Product-contract/irreversible ambiguity → write the genuine
    human gate. Missing human-only credential/permission → write a human-intervention gate.
-3. Any other exhausted objective failure → set `Status: blocked`, preserve the reproduction,
-   set `Next step: none — technical recovery exhausted for <causal fingerprint>; requires new evidence or changed failure conditions`, and STOP without a qid or runnable phase command. Reinvocation with the unchanged fingerprint remains blocked and does not reset the cap.
+3. Any other spent strategy → escalate inline to the next correction class; after three
+   escalations park the fingerprint and build every slice that does not depend on it,
+   per the [retry contract](../../devrites-lib/reference/standards/afk-hitl.md#retry-cap-no-progress-loops-and-self-resolve).
+   Never ask a qid or permission to retry; never hand back a routine phase command.
 4. Fire `notify:` only for an actual `awaiting_human` transition.
 
 AFK never starts the next slice while checks are red and never asks the human to approve

package/pack/generated/codex/skills/rite-build/reference/parallel-batch.md

@@ -182,11 +182,11 @@ Repair rejected work in place; never discard/rebuild while budget remains.
   exhaustion. Use plan path only if inventory proves the approach unsound.
 - Stop under the canonical retry/authority/resource conditions, or when evidence
   proves the approach unsound and no in-scope corrected decomposition exists.
-- Exhaustion is not abort: record one technical blocker (`Status: blocked`;
-  `Next step: none — technical recovery exhausted; requires new evidence or changed failure conditions`), preserve
-  lease/worktrees/branches, STOP — same fingerprint stays blocked on
-  reinvoke; new evidence resumes repair in place. Human-owned decisions use
-  the drift-guard question and wait.
+- A spent strategy is not abort: escalate per the canonical retry contract,
+  preserving lease/worktrees/branches; a fully escalated fingerprint parks and
+  the batch keeps its independent members. Repair resumes in place on
+  escalation or reinvocation. Human-owned decisions use the drift-guard
+  question and wait.
 
 ## Engine verbs
 

package/pack/generated/codex/skills/rite-plan/SKILL.md

@@ -177,7 +177,7 @@ Before classifying any Reslice, read `.agents/skills/devrites-lib/reference/stan
 
 When invoked inline by a controlling rite, return the completed Plan checkpoint
 to that caller so it can invoke Vet immediately. The phase boundary is not a
-user-facing stop unless a genuine HITL, safety/access, or exhausted-recovery
+user-facing stop unless a genuine HITL, safety/access, or parked-recovery
 condition was recorded.
 
 When invoked directly with no controlling caller and a planning artifact

package/pack/generated/codex/skills/rite-prove/SKILL.md

@@ -37,8 +37,10 @@ TTHW, and exact signal-bearing errors; never assert DX (trigger `devex`).
   validates it. Only the bounded wright fixes product source/tests.
 - **Prove remains the controlling caller** during technical backtracking. Save
   its cursor; run Plan repair, Recovery Vet, remediation, and re-proof inline;
-  consume nested boundaries; resume the failed rung. Recovery exhausts after
-  three no-progress attempts on the exact same fingerprint. Closing one or exposing a distinct
+  consume nested boundaries; resume the failed rung. A strategy is spent after
+  three no-progress attempts on the exact same fingerprint; escalate it per the
+  [retry contract](../devrites-lib/reference/standards/afk-hitl.md#retry-cap-no-progress-loops-and-self-resolve)
+  instead of stopping. Closing one or exposing a distinct
   Critical/Important invariant is progress, not a reason to hand work off.
 <!-- workflow-artifact-adapter: {"module":"devrites-lib/reference/standards/workflow-artifacts.md","entry":"Prove consumes installed Workflow Artifact or CLEANED rerun","action":"VERIFY_EXISTING or admitted proof path ending PROVE_AND_RETURN","return":"saved Prove cursor; stop before real action"} -->
 ## Released-workspace refresh

package/pack/generated/codex/skills/rite-prove/reference/failure-triage.md

@@ -47,6 +47,7 @@ loop to `devrites-debug-recovery`.
 - Three no-progress attempts on the exact same causal fingerprint consume the
   shared recovery cap. A recheck that closes the reproduction is progress; a
   different evidenced Critical/Important invariant gets its own fingerprint.
-  Preserve the reproduction and dead ends, then stop once as a technical blocker.
+  Preserve the reproduction and dead ends, then escalate or park per the
+  [retry contract](../../devrites-lib/reference/standards/afk-hitl.md#retry-cap-no-progress-loops-and-self-resolve).
   Ask only when the remaining decision is human-owned.
 - A failure you can't fix in scope is a recorded **blocker**, not a silent skip.

package/pack/generated/codex/skills/rite-spec/reference/state-workspace.md

@@ -131,7 +131,7 @@ None.
 | slice_mode | none |
 | risk | none |
 | spec_gate | <passed <iso>; marker sweep: <n> files, <k> hits, <d> discarded — absent until $rite-spec passes> |
-| next_action | <single command + reason, or terminal: none — technical recovery exhausted for an unchanged causal fingerprint> |
+| next_action | <single command + reason; parked recovery names the invoking command> |
 | return_phase | <originating later phase; clarification or agent-owned technical backtracking only> |
 | return_next_action | <saved originating command> |
 | schema | 4 |
@@ -154,7 +154,7 @@ Before an active caller moves backward, it copies its current phase and
 non-empty action into the two return rows. Nested Plan, Vet, Build, and proof
 work preserves that valid cursor. Once the prerequisite chain is green, the
 controlling caller restores the saved phase/action and removes both rows in one
-rewrite. A real HITL or exhausted-recovery stop retains the cursor for cold
+rewrite. A real HITL or parked-recovery stop retains the cursor for cold
 resume. Never overwrite an existing valid return cursor, and preserve every
 unrelated Markdown byte. `$rite-clarify` applies its stricter native cursor protocol in `$rite-clarify`.
 

package/pack/generated/devin/skills/devrites-debug-recovery/SKILL.md

@@ -88,13 +88,14 @@ has no clear next move. Optional slug selects the active workspace; defaults to
   with that fingerprint. Reclassify only on new causal evidence. On cold resume,
   a retained fingerprint with fewer than three such attempts remains runnable
   even if the previous action wrote a terminal cursor.
-- **A maximum of three no-progress attempts per exact causal fingerprint stops the loop.**
+- **A strategy is spent after three no-progress attempts per exact causal fingerprint.**
   Count an attempt only when its recheck preserves the same decisive failure.
   Record attempt number, exact failure, hypothesis, probe, and failed idea after
   each; closure is progress and a different Critical/Important invariant is a new
   fingerprint. There is no JSONL ledger,
   counter command, or reset-on-green operation. Product/acceptance ambiguity, irreversible risk, or
-  human-only access becomes a human gate; otherwise return reproducible `blocked` with
-  `Next: none — technical recovery exhausted for <causal fingerprint>`, never request
-  attempt four. While budget remains, coupled failure requiring behavior change routes
+  human-only access becomes a human gate; otherwise return the spent strategy and
+  reproduction to the caller, which escalates or parks per the
+  [retry contract](../devrites-lib/reference/standards/afk-hitl.md#retry-cap-no-progress-loops-and-self-resolve);
+  never request attempt four of the same strategy. While budget remains, coupled failure requiring behavior change routes
   `/rite-plan repair` inline; behavior-neutral rerouting uses `unblock` inline.

package/pack/generated/devin/skills/devrites-lib/reference/reply-contract.md

@@ -10,7 +10,7 @@ When an active rite is the controlling caller, Intermediate `NEEDS_REPLAN` (the
 token for the workspace's `NEEDS REPLAN` readiness value), a nested phase `STOP`, and a
 routine Plan/Vet `Next step` are not eligible completion states. Autocomplete may
 use the shapes below only after its requested rest point or a shared genuine
-human/safety/access/exhausted-recovery stop is reached.
+human/safety/access/parked-recovery stop is reached.
 
 ```text
 Done: <result in one sentence>
@@ -104,23 +104,20 @@ Record: .devrites/archive/<slug>/ship.md
 Claims such as proved, reviewed, sealed, shipped, or complete must point to real
 output or an artifact. A NOT-RUN verification keeps its marker in `Evidence:` or `Open:`
 per [`core.md`](standards/core.md#gate-contract) § Gate contract.
-Use exactly one recommended next action except for
-terminal agent-owned technical exhaustion, which has no runnable action.
+Use exactly one recommended next action.
 
-Use that terminal case only per [`one-shot-actions.md`](standards/one-shot-actions.md):
-three recorded no-progress corrections of the exact fingerprint, or required evidence
-irretrievably absent with **no safe in-scope diagnostic-amplification seam**. A spent
-consumptive-action authorization plus a retained new fingerprint is not terminal. For a
-true terminal case use:
+Agent-owned recovery never ends with `Next: none`. Per the
+[retry contract](standards/afk-hitl.md#retry-cap-no-progress-loops-and-self-resolve),
+a spent strategy escalates inline and a fully escalated fingerprint parks while
+independent work continues; with **no safe in-scope diagnostic-amplification seam**,
+escalate or park instead of stopping. A spent consumptive-action authorization plus a
+retained new fingerprint keeps recovering. Once nothing runnable remains, use:
 
 ```text
-Stopped: Technical recovery exhausted
+Stopped: Technical recovery parked
 Blocking: <causal fingerprint and invariant>
-Attempts: <three failed approaches and decisive reproduction>
-No runnable recovery command: unchanged reinvocation remains blocked
-Next: none — requires new evidence or changed failure conditions
+Attempts: <each strategy, its class, and decisive reproduction>
+Completed: <independent work finished after parking>
+Next: <invoking command> — reopens parked fingerprints with fresh escalation
 Record: <artifact path>
 ```
-
-The terminal cursor marker is `Next: none` exactly as shown; a stored `Next step: none`
-names the same exhausted state.

package/pack/generated/devin/skills/devrites-lib/reference/standards/afk-hitl.md

@@ -350,7 +350,7 @@ access, safety and irreversible-action boundaries independently stop work.
   invariant + defect mechanism + minimal reproduction/decisive failure signal.
   DEC/DRIFT IDs, line numbers, wording and splitting one cause create no new budget.
 - **Cap no-progress retries:** three no-progress attempts per exact causal fingerprint
-  across wright/recovery. Only a correction whose narrow recheck leaves that cause
+  and strategy across wright/recovery. Only a correction whose narrow recheck leaves that cause
   open or reproduces its failure consumes an attempt.
   Closing a prior finding with discriminating evidence is progress: resolve it,
   do not charge. A new Critical or Important finding gets its own budget only for
@@ -384,11 +384,30 @@ access, safety and irreversible-action boundaries independently stop work.
 - **Reconcile terminal cursors.** Retained distinct Critical/Important evidence below
   cap resumes despite stale `Next step: none`; age/spent action authority is not exhaustion.
 <!-- workflow-artifact-adapter: {"module":"devrites-lib/reference/standards/workflow-artifacts.md","entry":"unattended root reaches current admitted Workflow Artifact work","action":"invoke classifier; execute returned route without wright/slice charge","return":"saved lifecycle phase/action; no intermediate reply"} -->
-- **Classify exhaustion:** human-owned contract/risk/access gaps open their gate.
-  Otherwise preserve reproduction/dead ends, set `Status: blocked` and
-  `Next step: none — technical recovery exhausted; requires new evidence or changed failure conditions`.
-  Emit no phase command, retry-permission question or `/rite-resolve`.
-  Reinvocation with unchanged cause stays blocked; it never resets the cap.
+- **Escalate a spent strategy; never stop on it.** Three no-progress attempts spend
+  the fingerprint's current *strategy*, not the work. Record that strategy and its
+  attempts under `## Dead ends`, then the controlling caller escalates inline in the
+  same invocation: re-diagnose from the reproduction and dead ends, take the first
+  class below that still has an untried strategy, run `/rite-plan repair` plus
+  narrow Vet for it, and resume with a fresh three-attempt budget. Classes, in order:
+  (1) **shared root cause**: fix the owner every failing path routes through and
+  enforce it across all callers instead of another local guard; (2) **boundary
+  redesign**: acceptance-preserving reslice or redesign of the failing seam;
+  (3) **diagnostic amplification**: add discriminating probes or fixtures, then
+  correct from that evidence. A recorded strategy, or a rewording of one, never
+  repeats. Escalation never weakens tests, validators or acceptance. Each
+  fingerprint gets at most three escalations per activation; record each in
+  `drift.md` with its class and strategy.
+- **Park, finish the rest, then stop once.** Human-owned contract/risk/access gaps
+  open their gate. Otherwise, with every escalation spent, mark the fingerprint
+  `parked` in `drift.md`, keep its reproduction and dead ends, and continue every
+  step that does not depend on it. Only when nothing runnable remains, set
+  `Status: blocked` and
+  `Next step: <invoking command> — technical recovery parked; reinvoke to reopen with fresh escalation`.
+  Emit no retry-permission question or `/rite-resolve`. A genuinely new
+  user-issued activation appends `reopened: <date>` to each parked fingerprint and
+  grants it three fresh escalations, counted from that line; wakes, compaction and
+  nested re-entry of the same run never reset counts.
 - **Resolve agent-owned questions first** from code/docs/decisions. Human communication
   is for blocked environment, handover, inaccessible critical information or missing
   credentials/permission—not writing, testing or review. Blocking/escalating/

package/pack/generated/devin/skills/devrites-lib/reference/standards/core.md

@@ -87,7 +87,7 @@ Verdict discipline — no vacuous verdicts:
 
 ## Caller-owned technical backtracking
 
-When a rite invokes an earlier rite inline to repair an agent-owned technical gap, the original rite stays the controlling caller: a nested `STOP` is a phase boundary, not user-facing. The caller re-reads `state.md`, follows the return cursor/`next_action`, and resumes unless a human-owned, safety, access, budget, or exhausted-recovery stop is active ([Persistence before stopping](#persistence-before-stopping-handoff-discipline)). Derive `exhausted-recovery` from the fingerprint's recorded no-progress attempts, not from a stale `state.md` label; one consumed authorization doesn't exhaust offline recovery from retained new evidence.
+When a rite invokes an earlier rite inline to repair an agent-owned technical gap, the original rite stays the controlling caller: a nested `STOP` is a phase boundary, not user-facing. The caller re-reads `state.md`, follows the return cursor/`next_action`, and resumes unless a human-owned, safety, access, budget, or parked-recovery stop is active ([Persistence before stopping](#persistence-before-stopping-handoff-discipline)). Derive `parked-recovery` from the fingerprint's recorded no-progress attempts and escalations, not from a stale `state.md` label; one consumed authorization doesn't exhaust offline recovery from retained new evidence.
 
 An intermediate `Next step` is cold-resume metadata. Do not ask the human to
 copy routine `/rite-plan repair`, `/rite-vet`, `/rite-build`, or proof-rerun

package/pack/generated/devin/skills/devrites-lib/reference/standards/one-shot-actions.md

@@ -73,8 +73,9 @@ Keep two budgets separate:
 Cold resume does not make that fingerprint old or exhausted. Derive its offline
 no-progress count from `drift.md` and `evidence.md`; while the count is below the
 cap, resume recovery even if a prior writer stored `blocked` / `Next step: none`.
-That terminal cursor is valid only for a human/safety gate, an actually exhausted
-fingerprint, or a proven absence of any safe retention/amplification design.
+A blocked cursor is valid only for a human/safety gate or a parked fingerprint
+with no independent work left; a missing safe retention/amplification design
+escalates to the next correction class.
 
 A new real attempt is normally admissible only after the affected plan and fixtures
 are re-vetted, the failure condition is shown changed, and any required fresh
@@ -98,7 +99,7 @@ claim the runtime failure condition changed: the independently proven change is
 evidence-acquisition invariant, and the attempt's acceptance signal is the promised
 unique retained boundary (or action success).
 
-Terminal `Next: none` is valid only when no safe in-scope diagnostic-amplification
-seam exists, the required change is human/risk/scope owned, or the exact evidence-gap
-fingerprint exhausts bounded recovery. A missing old artifact alone is not terminal,
-and an amplification attempt never inherits authorization from the failed action.
+When no safe in-scope diagnostic-amplification seam exists, escalate or park per
+[`afk-hitl.md`](afk-hitl.md#retry-cap-no-progress-loops-and-self-resolve); only a
+human/risk/scope-owned change stops for a human. A missing old artifact alone is not
+terminal, and an amplification attempt never inherits authorization from the failed action.

package/pack/generated/devin/skills/rite-autocomplete/SKILL.md

@@ -48,14 +48,16 @@ executable controller/harness/bundle bytes or a missing writer, read
   likewise internal when current authority resolves it.
 - Always follow agent-owned backward edges through repair, affected Vet,
   correction, and proof. A nested `STOP`/`Next step` is not a user handoff.
-  Pause only for a shared human/safety/access/exhaustion condition.
+  Pause only for a shared human/safety/access condition.
 - **Do not confuse an action budget with recovery exhaustion.** Spent action
   authority blocks another real execution, not offline correction of retained
   Critical/Important evidence. Stop for fresh GO only after changed conditions
   and READY Vet.
-- Every exact causal fingerprint gets at most three no-progress corrections.
-  Closing one is progress; a distinct Critical/Important invariant has its own
-  budget. Lower severity cannot prolong recovery.
+- Every exact causal fingerprint gets three no-progress corrections per strategy.
+  A spent strategy escalates to a new correction class inline; after three
+  escalations it parks while independent work continues. Never ask permission to
+  retry. Closing one is progress; a distinct Critical/Important invariant has its
+  own budget. Lower severity cannot prolong recovery.
 - Do not stop on `--max-slices`, sentinel `max_slices`, `max_agents`,
   `max_minutes`, or `max_review_queue`. Count failed, malformed, and
   unavailable leaf calls.
@@ -78,7 +80,7 @@ executable controller/harness/bundle bytes or a missing writer, read
    Before honoring `blocked` with terminal `next_action`,
    reconcile retained consumptive evidence and fingerprint attempts from
    `drift.md`/`evidence.md`; a retained fingerprint below its cap resumes offline
-   recovery.
+   recovery, and this new invocation reopens each parked fingerprint.
 <!-- workflow-artifact-adapter: {"module":"devrites-lib/reference/standards/workflow-artifacts.md","entry":"lifecycle cursor encounters admitted set or resumable journal","action":"invoke classifier; execute returned route internally","return":"saved phase/action; zero intermediate reply"} -->
    Reconstruct a missing return cursor only from
    the current phase and exact approved action in `test-plan.md`/evidence, never
@@ -117,15 +119,15 @@ executable controller/harness/bundle bytes or a missing writer, read
    route agent-owned red results through bounded recovery.
    Red gates block forward advancement and enter caller-owned recovery. Stop on
    hard risk, escalating, irreversible-risk, access, blocking with no
-   recommended option, remaining NO-GO, or the exact fingerprint's proven
-   exhaustion. An open blocking question that already names a ranked recommended
+   recommended option, remaining NO-GO, or parked fingerprints with no
+   independent work left. An open blocking question that already names a ranked recommended
    option (`proposed` or option 1 labelled Recommended) auto-resolves through
    `devrites-engine state resolve` and continues (a missing or failing resolver is
    the bounded resolver-failure stop); do not emit `/rite-resolve` as
    a user handoff. Exception: a question whose answer would add acceptance or
    product scope is never auto-resolved by a recommended option; it stops for a human.
-   Technical exhaustion records terminal
-   `Next step: none`, never a routine phase command. **Completion:** no stop is active, or its cursor and reason are durable.
+   A spent strategy escalates; parked recovery records
+   `Next step: /rite-autocomplete`, never a routine phase command. **Completion:** no stop is active, or its cursor and reason are durable.
 6. **Seal boundary.** Without a ship flag, leave the sealed workspace unshipped and
    open the next recorded continuation
    ([loop.md § Sequence continuation](reference/loop.md#sequence-continuation))

package/pack/generated/devin/skills/rite-autocomplete/reference/loop.md

@@ -108,7 +108,7 @@ parent's counter (same values, never a second charge); a child with no recorded
 parent/position is not a sequence member and the chain stops.
 
 Stop instead when: no recorded next entry; the cap or review-queue bound is
-reached; a human-owned, safety, access, or exhaustion condition fires; or Seal returns
+reached; a human-owned, safety, access, or parked-recovery stop fires; or Seal returns
 `NO-GO`. On stop, report the sequence position, the sealed-but-unshipped workspaces, and
 the single release command (`/rite-autocomplete <release milestone> --ship`, or
 `/rite-ship` for the current sealed workspace when the sequence is complete).
@@ -140,14 +140,16 @@ agent-owned earlier-phase gap:
 Ask only for a human-owned decision or mandatory safety/access action. An open
 blocking question with `proposed` or option 1 labelled Recommended is not that
 decision: resolve it and continue. Three no-progress corrections of one exact
-fingerprint exhaust; preserve its reproduction and dead ends without another
-Plan/Vet command.
+fingerprint spend only its strategy: escalate inline per the
+[retry contract](../../devrites-lib/reference/standards/afk-hitl.md#retry-cap-no-progress-loops-and-self-resolve),
+and park it after three escalations while independent work continues.
 
 ## Continuous caller obligation
 
 No user-facing reply is permitted while durable state contains agent-owned
 `NEEDS_REPLAN`, an intermediate Plan/Vet action, a distinct retained
-Critical/Important fingerprint below its cap, or an open blocking question that
+Critical/Important fingerprint below its cap or with an escalation left, runnable
+work independent of a parked fingerprint, or an open blocking question that
 already names a ranked recommended option. Invoke the next internal repair or
 `devrites-engine state resolve` immediately, unless that writer already hit the
 [resolver-failure stop](stop-conditions.md#other-stop-classes). **Failing case:**
@@ -157,4 +159,4 @@ Critical/Important invariant is progress, not exhaustion.
 The number of completed repair/Vet cycles is not a stop condition. Context
 pressure, compaction, session duration, and nested completion do not convert an
 internal checkpoint into a handoff. Persist it and resume until the requested
-rest point or a shared human/safety/access/exhaustion condition.
+rest point or a shared human/safety/access/parked-recovery condition.

package/pack/generated/devin/skills/rite-autocomplete/reference/stop-conditions.md

@@ -1,10 +1,10 @@
 # Stop conditions: when autocomplete pauses
 
 On a real stop, write `state.md` as `awaiting_human` or `blocked`, persist the
-reason, and include one resume command only when an actual human/safety/access
-action can change it. Exhausted agent-owned recovery records terminal
-`Next step: none` and no runnable recovery command. `--ship` never bypasses a
-stop.
+reason, and include one resume command. Agent-owned recovery never ends the run:
+a spent strategy escalates and a fully escalated fingerprint parks while other
+work continues ([retry contract](../../devrites-lib/reference/standards/afk-hitl.md#retry-cap-no-progress-loops-and-self-resolve)).
+`--ship` never bypasses a stop.
 
 Authority: `.devin/skills/devrites-lib/reference/standards/acceptance-preserving-reslice.md`.
 
@@ -24,8 +24,8 @@ Regardless of flags or AFK ceiling:
 - external-service contract change; or
 - filesystem destruction outside the workspace.
 
-Red proof cannot advance. Run bounded Debug Recovery; stop after proven
-exhaustion unless the remaining owner is human.
+Red proof cannot advance. Run bounded Debug Recovery and escalate spent
+strategies; a fully escalated fingerprint parks unless the remaining owner is human.
 
 ## Not stops: internal technical routing
 
@@ -36,13 +36,16 @@ agent-owned.
 
 Agent-owned backtracking is not a stop condition while the exact causal
 fingerprint has budget. Invoke the earlier phase, affected Vet, remediation, and
-proof; then resume the origin. Stop only after three no-progress corrections of
-that exact fingerprint or a real human/safety/access gate. Preserve reproduction,
-attempts, and dead ends; never offer `/rite-plan unblock` or another routine
-phase command. Reinvocation with unchanged evidence does not reset the cap.
-`unchanged` means the same fingerprint already has three recorded no-progress
-corrections. Closure is progress; a separately evidenced Critical/Important
-invariant starts its own cap and cannot extend the closed one.
+proof; then resume the origin. Three no-progress corrections of that exact
+fingerprint spend only its current strategy: escalate to the next correction
+class inline (shared root cause, boundary redesign, diagnostic amplification)
+with a fresh budget, never asking permission. After three escalations in this
+activation the fingerprint parks; finish all independent work, then stop once.
+Preserve reproduction, attempts, and dead ends; never offer `/rite-plan unblock`
+or another routine phase command. A new user-issued `/rite-autocomplete`
+reopens parked fingerprints with fresh escalation; wakes and compaction do not.
+Closure is progress; a separately evidenced Critical/Important invariant starts
+its own cap and cannot extend the closed one.
 
 Spent consumptive-action authorization is not technical-recovery exhaustion.
 It blocks another execution; retained new Critical/Important evidence still
@@ -52,9 +55,8 @@ authorization and never reuse old GO.
 Past evidence being irretrievable is not by itself terminal. If an in-scope
 trusted seam can uniquely discriminate the next failure, run diagnostic-
 amplification Plan repair and narrow Vet inline, then pause for fresh GO before
-one evidence-acquisition attempt. Use terminal none only when no safe in-scope
-seam exists, a real human/risk/scope gate owns it, or bounded recovery is
-exhausted.
+one evidence-acquisition attempt. Without a safe seam, escalate to the next
+class or park; only a real human/risk/scope gate stops for a human.
 
 <!-- workflow-artifact-adapter: {"module":"devrites-lib/reference/standards/workflow-artifacts.md","entry":"classifier returns owner-busy, exhausted, or existing hard gate","action":"stop on exact WAIT_ACTIVE_OWNER, BLOCKED_EXHAUSTED, or BLOCKED_GATE result","return":"unchanged cursor plus fixed route-owned output"} -->
 ## Other stop classes
@@ -86,7 +88,8 @@ exhausted.
 - **Resource envelope:** overlapping run or missing AFK after arm still stops.
   Do not stop on `--max-slices`, `max_agents`, `max_minutes`, or `max_review_queue`.
 - **Confidence:** intent still cannot become testable acceptance after interview.
-- **Repeated failure:** the exact fingerprint's bounded recovery is exhausted.
+- **Repeated failure:** not a stop. Escalate; a fully escalated fingerprint parks,
+  and the run stops only once no independent work remains.
 - **Resolver failure:** `devrites-engine state resolve` not found, or nonzero exit.
   Never hand-edit `questions.md`/`state.md` in its place. Not found stops at once;
   nonzero allows one identical re-run (the fingerprint is command + exit code +
@@ -101,7 +104,7 @@ disclose the exact plan, and stop for literal `GO` plus native approval. Without
 one, stop at Seal GO with `/rite-ship`. Seal GO, AFK, prior approval, and flags
 never satisfy Ship approval.
 
-A cold-resumable stop records `state.md` status, exact reason, and either one
-human-owned resume action or `none — technical recovery exhausted`; the owning
-question/drift/seal entry explains it. The user-facing line says what stopped
+A cold-resumable stop records `state.md` status, exact reason, and one resume
+action: the human-owned action, or `/rite-autocomplete` to reopen parked
+fingerprints; the owning question/drift/seal entry explains it. The user-facing line says what stopped
 and, only when applicable, what human action resumes it.

package/pack/generated/devin/skills/rite-build/reference/afk-discipline.md

@@ -69,13 +69,16 @@ wrong contract or proof path — agent-owned recovery; never advance on broken s
 The fail-on-red path:
 
 1. Continue the same wright under `devrites-debug-recovery`, carrying exact output and dead
-   ends; cap writer + recovery at three no-progress attempts per exact causal fingerprint.
+   ends; cap writer + recovery at three no-progress attempts per exact causal fingerprint
+   and strategy.
    A correction that closes the reproduction is progress; a different evidenced
    Critical/Important invariant starts a separate fingerprint.
 2. Green → record the slice. Product-contract/irreversible ambiguity → write the genuine
    human gate. Missing human-only credential/permission → write a human-intervention gate.
-3. Any other exhausted objective failure → set `Status: blocked`, preserve the reproduction,
-   set `Next step: none — technical recovery exhausted for <causal fingerprint>; requires new evidence or changed failure conditions`, and STOP without a qid or runnable phase command. Reinvocation with the unchanged fingerprint remains blocked and does not reset the cap.
+3. Any other spent strategy → escalate inline to the next correction class; after three
+   escalations park the fingerprint and build every slice that does not depend on it,
+   per the [retry contract](../../devrites-lib/reference/standards/afk-hitl.md#retry-cap-no-progress-loops-and-self-resolve).
+   Never ask a qid or permission to retry; never hand back a routine phase command.
 4. Fire `notify:` only for an actual `awaiting_human` transition.
 
 AFK never starts the next slice while checks are red and never asks the human to approve

package/pack/generated/devin/skills/rite-build/reference/parallel-batch.md

@@ -182,11 +182,11 @@ Repair rejected work in place; never discard/rebuild while budget remains.
   exhaustion. Use plan path only if inventory proves the approach unsound.
 - Stop under the canonical retry/authority/resource conditions, or when evidence
   proves the approach unsound and no in-scope corrected decomposition exists.
-- Exhaustion is not abort: record one technical blocker (`Status: blocked`;
-  `Next step: none — technical recovery exhausted; requires new evidence or changed failure conditions`), preserve
-  lease/worktrees/branches, STOP — same fingerprint stays blocked on
-  reinvoke; new evidence resumes repair in place. Human-owned decisions use
-  the drift-guard question and wait.
+- A spent strategy is not abort: escalate per the canonical retry contract,
+  preserving lease/worktrees/branches; a fully escalated fingerprint parks and
+  the batch keeps its independent members. Repair resumes in place on
+  escalation or reinvocation. Human-owned decisions use the drift-guard
+  question and wait.
 
 ## Engine verbs
 

package/pack/generated/devin/skills/rite-plan/SKILL.md

@@ -176,7 +176,7 @@ Before classifying any Reslice, read `.devin/skills/devrites-lib/reference/stand
 
 When invoked inline by a controlling rite, return the completed Plan checkpoint
 to that caller so it can invoke Vet immediately. The phase boundary is not a
-user-facing stop unless a genuine HITL, safety/access, or exhausted-recovery
+user-facing stop unless a genuine HITL, safety/access, or parked-recovery
 condition was recorded.
 
 When invoked directly with no controlling caller and a planning artifact

package/pack/generated/devin/skills/rite-prove/SKILL.md

@@ -36,8 +36,10 @@ TTHW, and exact signal-bearing errors; never assert DX (trigger `devex`).
   validates it. Only the bounded wright fixes product source/tests.
 - **Prove remains the controlling caller** during technical backtracking. Save
   its cursor; run Plan repair, Recovery Vet, remediation, and re-proof inline;
-  consume nested boundaries; resume the failed rung. Recovery exhausts after
-  three no-progress attempts on the exact same fingerprint. Closing one or exposing a distinct
+  consume nested boundaries; resume the failed rung. A strategy is spent after
+  three no-progress attempts on the exact same fingerprint; escalate it per the
+  [retry contract](../devrites-lib/reference/standards/afk-hitl.md#retry-cap-no-progress-loops-and-self-resolve)
+  instead of stopping. Closing one or exposing a distinct
   Critical/Important invariant is progress, not a reason to hand work off.
 <!-- workflow-artifact-adapter: {"module":"devrites-lib/reference/standards/workflow-artifacts.md","entry":"Prove consumes installed Workflow Artifact or CLEANED rerun","action":"VERIFY_EXISTING or admitted proof path ending PROVE_AND_RETURN","return":"saved Prove cursor; stop before real action"} -->
 ## Released-workspace refresh

package/pack/generated/devin/skills/rite-prove/reference/failure-triage.md

@@ -47,6 +47,7 @@ loop to `devrites-debug-recovery`.
 - Three no-progress attempts on the exact same causal fingerprint consume the
   shared recovery cap. A recheck that closes the reproduction is progress; a
   different evidenced Critical/Important invariant gets its own fingerprint.
-  Preserve the reproduction and dead ends, then stop once as a technical blocker.
+  Preserve the reproduction and dead ends, then escalate or park per the
+  [retry contract](../../devrites-lib/reference/standards/afk-hitl.md#retry-cap-no-progress-loops-and-self-resolve).
   Ask only when the remaining decision is human-owned.
 - A failure you can't fix in scope is a recorded **blocker**, not a silent skip.

package/pack/generated/devin/skills/rite-spec/reference/state-workspace.md

@@ -131,7 +131,7 @@ None.
 | slice_mode | none |
 | risk | none |
 | spec_gate | <passed <iso>; marker sweep: <n> files, <k> hits, <d> discarded — absent until /rite-spec passes> |
-| next_action | <single command + reason, or terminal: none — technical recovery exhausted for an unchanged causal fingerprint> |
+| next_action | <single command + reason; parked recovery names the invoking command> |
 | return_phase | <originating later phase; clarification or agent-owned technical backtracking only> |
 | return_next_action | <saved originating command> |
 | schema | 4 |
@@ -154,7 +154,7 @@ Before an active caller moves backward, it copies its current phase and
 non-empty action into the two return rows. Nested Plan, Vet, Build, and proof
 work preserves that valid cursor. Once the prerequisite chain is green, the
 controlling caller restores the saved phase/action and removes both rows in one
-rewrite. A real HITL or exhausted-recovery stop retains the cursor for cold
+rewrite. A real HITL or parked-recovery stop retains the cursor for cold
 resume. Never overwrite an existing valid return cursor, and preserve every
 unrelated Markdown byte. `/rite-clarify` applies its stricter native cursor protocol in `/rite-clarify`.