elanous 0.2.20 → 0.2.22

package/graphs/implement-loop.yaml

@@ -38,8 +38,12 @@
 #      (파일 이름은 RFC 어휘를 남겨 둔다 — 사람이 찾는 이름과 조인 키가 다를 수 있다.)
 graph_id: self-implement
 version: 1
-entry_node: author
-terminal_nodes: [merge]
+# ⭐ HARNESS-FULL-GRAPH (0.2.21 · 대표 10-08) — 입구부터 회수까지 «여정 전체»가 노드다.
+#   📄 내부 문서 `RFC-harness-full-journey-as-graph-2026-10-08` · 코드 = src/self-dev/graph-journey-nodes.ts
+#   ⛔ 여정 노드(intake … stopped)의 id 는 원장·라이브 그래프 화면의 조인 키다 — 바꾸지 마라.
+#   🔀 분기는 «데이터»다(`on:` 상태 키 ⊕ `map:` 값→노드) — 기본 = 풀세트, 환경(substrate·freeze·queue)이 일부를 건너뛴다.
+entry_node: intake
+terminal_nodes: [cleanup, stopped]
 
 # Runner-provided inputs are declared here so contract-flow can distinguish them from undeclared gaps.
 runner_inputs: [ask_text, goal, worktree, branch, review-intent, head-sha, base-branch]
@@ -61,8 +65,13 @@ runner_inputs: [ask_text, goal, worktree, branch, review-intent, head-sha, base-
 #   🔑 ⇒ ***여기 적은 도구 권한은 「선언」이고 「제한」이 아니다.*** 자식의 실제 권한은 코드가 정한다.
 #   ⛔ 그러니 이 칸을 좁혀 「자식이 그 도구를 못 쓴다」고 읽지 마라 — 지금은 안 그렇다.
 #   🔎 반증: rg -n "readonly contract" src/self-implement/graph-templates.ts   (⇒ 0건이면 여전히 그렇다)
+# 🧩 `group:` = 나중에 `graphs/units/*.yaml` 로 들어 올릴 «한 노드로 부르는 부분 그래프» 단위(대표 10-08).
+#   entry · dispatch · author · dispatch-pod · build · verify · land · recover · end
+#   ⛔ 지금 파서는 이 칸을 «읽지 않는다»(무시) — 단위 호출은 0.2.22(RFC §6). 묶음은 «위치»가 아니라 이 태그로 정한다
+#      (오버레이가 /nodes/<번호> 로 가리켜 노드를 재배열할 수 없다).
 nodes:
   - node_id: author
+    group: author
     kind: agent
     recipe: goal-author
     max_visits: 2
@@ -74,6 +83,7 @@ nodes:
       outputs: [goal_path, goal_id, goal_type, grounding_context]
 
   - node_id: plan
+    group: author
     kind: agent
     recipe: harness-plan-rfc
     max_visits: 2
@@ -85,6 +95,7 @@ nodes:
       outputs: [rfc_path, markdown, arcs, open_questions]
 
   - node_id: decompose
+    group: author
     kind: judge
     recipe: fabric-decompose-adapter
     max_visits: 12
@@ -96,6 +107,7 @@ nodes:
       outputs: [pieces, ordering, depends_on_edges, hot_path_edges, omitted_goal_count]
 
   - node_id: implement
+    group: build
     kind: agent
     recipe: headless-goal-loop        # seams.implement → 자식 PTY
     max_visits: 12
@@ -109,6 +121,7 @@ nodes:
       outputs: [diff, summary, changed-files]
 
   - node_id: gate
+    group: verify
     kind: gate
     recipe: gate-baseline              # 변경 파일 «범위» · 새 회귀만
     max_visits: 11
@@ -122,6 +135,7 @@ nodes:
       outputs: [passed, gate-log, reflect-gate-facts]
 
   - node_id: review
+    group: verify
     kind: judge
     recipe: pr-reviewer                # agent-substrate/pr-reviewer
     max_visits: 11
@@ -135,6 +149,7 @@ nodes:
       outputs: [verdict, must-fix, should-fix, review-summary]
 
   - node_id: rework
+    group: verify
     kind: agent
     recipe: headless-goal-loop         # 같은 루프의 다음 라운드
     max_visits: 10
@@ -148,6 +163,7 @@ nodes:
       outputs: [diff, summary]
 
   - node_id: main-sync
+    group: land
     kind: git
     recipe: seams-git-merge-main       # LLM 충돌해결 포함
     max_visits: 2
@@ -159,6 +175,7 @@ nodes:
       outputs: [synced, conflicts]
 
   - node_id: regate
+    group: land
     kind: gate
     recipe: gate-baseline              # 충돌해결 «뒤» 재-gate
     max_visits: 2
@@ -170,6 +187,7 @@ nodes:
       outputs: [passed, gate-log]
 
   - node_id: open-pr
+    group: land
     kind: git
     recipe: seams-gh-open-pr
     # 📏 실측 2026-09-08 (원장 30일 · 전 우주 · 걸음 191개 소급 계산):
@@ -185,6 +203,7 @@ nodes:
       outputs: [pr-number, pr-url]
 
   - node_id: merge
+    group: land
     kind: git
     recipe: seams-gh-merge-squash
     # 📏 실측 2026-09-08 (원장 30일 · 전 우주 · 걸음 191개 소급 계산):
@@ -199,6 +218,176 @@ nodes:
       tools: gh-pr-merge
       outputs: [merged]
 
+  # ⛔ 여정 노드는 «목록 끝»에 둔다 — 오버레이가 JSON 포인터(/nodes/<번호>)로 노드를 가리킨다(rework-patient). 앞에 끼우면 번호가 밀린다.
+  # ───────── 여정 앞단: 입구 → 대기열 → 발사 관문 → 배치 ─────────
+  - node_id: intake
+    group: entry
+    kind: observe
+    recipe: harness-entrance            # src/harness/harness-cli-command.ts (say · ask · TUI /harness)
+    max_visits: 1
+    terminal_stages: []
+    contract:
+      inputs: [ask_text]
+      tools: none
+      outputs: [entrance, journey_key]
+
+  - node_id: queue
+    group: entry
+    kind: gate
+    recipe: harness-queue               # src/harness/harness-queue.ts (directSay 플래그 · 기본 끔 → 건너뜀)
+    max_visits: 1
+    terminal_stages: []
+    contract:
+      inputs: [entrance, seat]
+      tools: queue-write
+      outputs: [queue_item, queue_outcome]
+
+  - node_id: launch-gate
+    group: entry
+    kind: gate
+    recipe: pre-launch-gate             # harness-cli-command.ts preLaunchGate (예산 · 같은 골 활성 런)
+    max_visits: 1
+    terminal_stages: []
+    contract:
+      inputs: [goal_id, budget]
+      tools: read-only
+      outputs: [launch_decision]
+
+  - node_id: dispatch
+    group: dispatch
+    kind: judge
+    recipe: harness-substrate-select    # resolveLaunchSubstrate → substrate = local | pod
+    max_visits: 2
+    terminal_stages: []
+    contract:
+      inputs: [launch_decision]
+      tools: read-only
+      outputs: [substrate]
+
+  # ───────── Pod 배치 (substrate == pod 일 때만 — local 은 건너뛴다) ─────────
+  - node_id: pool-admit
+    group: dispatch-pod
+    kind: gate
+    recipe: pod-pool-admission          # src/task-orchestrator/surfaces/self-implement-pod.ts (입장 · 멤버 슬롯 · 메모리 등급)
+    max_visits: 4
+    terminal_stages: []
+    contract:
+      inputs: [substrate, memory_tier]
+      tools: pod-lease
+      outputs: [pool_member]
+
+  - node_id: image-sync
+    group: dispatch-pod
+    kind: gate
+    recipe: pod-pool-image-sync         # src/task-orchestrator/surfaces/pod-pool.ts syncPoolImages (멤버별 · pack 한 번)
+    max_visits: 4
+    terminal_stages: []
+    contract:
+      inputs: [pool_member]
+      tools: image-ship
+      outputs: [image_current]
+
+  - node_id: credential-refresh
+    group: dispatch-pod
+    kind: gate
+    recipe: pod-credential-prerefresh   # self-implement-pod.ts podCodexCredentialWithPrerefresh
+    max_visits: 4
+    terminal_stages: []
+    contract:
+      inputs: [pool_member]
+      tools: credential-refresh
+      outputs: [usable_accounts]
+
+  # ───────── 착지: 동결 검사 → (보류) → 병합 → 회수 ─────────
+  - node_id: freeze-check
+    group: land
+    kind: gate
+    recipe: landing-freeze-admission    # src/self-implement/frozen-merges.ts admitLandingMerge (병합 직전 한 곳)
+    max_visits: 4
+    terminal_stages: []
+    contract:
+      inputs: [pr-number]
+      tools: read-only
+      outputs: [freeze]
+
+  - node_id: hold
+    group: land
+    kind: hitl
+    recipe: frozen-merge-queue          # frozen-merges.ts queueFrozenMerge → sweepFrozenMerges 가 해제 뒤 재개
+    max_visits: 4
+    terminal_stages: []
+    contract:
+      inputs: [pr-number, head-sha]
+      tools: queue-write
+      outputs: [held]
+
+  - node_id: cleanup
+    group: land
+    kind: git
+    recipe: post-merge-cleanup          # src/self-implement/orchestrator.ts (워크트리 ⊕ 브랜치 회수)
+    max_visits: 1
+    terminal_stages: []
+    contract:
+      inputs: [worktree, branch]
+      tools: git-write
+      outputs: [cleaned]
+
+  # ───────── 실패 쪽: 결과 해석 → 수확 → heal → 다음 한 수 ─────────
+  - node_id: result-parse
+    group: recover
+    kind: observe
+    recipe: pod-failure-reason          # src/task-orchestrator/surfaces/pod-failure-reason.ts
+    max_visits: 4
+    terminal_stages: []
+    contract:
+      inputs: [pod_log]
+      tools: read-only
+      outputs: [failure_reason]
+
+  - node_id: salvage
+    group: recover
+    kind: git
+    recipe: salvage-branch              # salvage/si-task-<job>/… (Pod Job 이 push · salvage-branches.ts 가 읽는다)
+    max_visits: 4
+    terminal_stages: []
+    contract:
+      inputs: [worktree]
+      tools: git-write
+      outputs: [salvage_ref]
+
+  - node_id: heal
+    group: recover
+    kind: judge
+    recipe: heal-intake                 # src/self-implement/heal-intake.ts (호스트에서만)
+    max_visits: 4
+    terminal_stages: []
+    contract:
+      inputs: [failure_reason, salvage_ref]
+      tools: read-only
+      outputs: [heal_signature]
+
+  - node_id: next-move
+    group: recover
+    kind: judge
+    recipe: task-agent-judge            # src/task-agent/judge.ts (판단부 → 실행부)
+    max_visits: 4
+    terminal_stages: []
+    contract:
+      inputs: [heal_signature]
+      tools: read-only
+      outputs: [next_action]
+
+  - node_id: stopped
+    group: end
+    kind: observe
+    recipe: journey-stopped             # 거절·포기 — 종결
+    max_visits: 1
+    terminal_stages: []
+    contract:
+      inputs: []
+      tools: none
+      outputs: []
+
 # ═══════════════════════════════════════════════════════════════════════
 # 엣지 — ⛔ 출처는 «코드 선언 ⊕ 원장 실측» 둘 다다. 어느 하나만 보면 틀린다.
 #   📏 2026-09-08 실측 (pipeline-traversal-shadow 182 걸음 · 판정 함수가 «실제로 본» 것):
@@ -207,14 +396,83 @@ nodes:
 #         gate→main-sync · gate→open-pr · review→open-pr
 #   🔑 그래서 엣지마다 `observed` 를 «값으로» 적는다 — 「선언했다」와 「돈다」를 가른다.
 edges:
+  # ───── 여정 앞단 — 분기는 «데이터»(on/map). 값은 코드가 낸다(RFC §4.3 ⑵) ─────
+  - from: intake
+    on: queue
+    map:
+      queued: queue                    # harness.queue.directSay 켬 ⊕ 자리 있음
+      direct: launch-gate              # 기본(플래그 끔) — 대기열을 건너뛴다
+
+  - from: queue
+    on: queue_outcome
+    map:
+      launched: launch-gate            # 대기열이 발사한 자식이 다시 intake 를 밟는다(queueLaunchId 로 잇는다)
+      waiting: stopped                 # 이 프로세스는 여기서 끝난다(발사는 대기열 tick 의 몫)
+      refused: stopped                 # 같은 요청이 이미 대기열에 있다
+
+  - from: launch-gate
+    on: outcome
+    map:
+      pass: dispatch
+      refuse: stopped
+
+  - from: dispatch
+    to: author
+
   - from: author
     to: plan
 
   - from: plan
     to: decompose
 
+  # ⭐ 실행 칸(substrate)이 «Pod 쪽 세 노드»를 켜고 끈다 — local 은 곧장 구현.
   - from: decompose
-    to: implement
+    on: substrate
+    map:
+      local: implement
+      pod: pool-admit
+
+  - from: pool-admit
+    on: outcome
+    map:
+      admitted: image-sync
+      refused: stopped
+
+  - from: image-sync
+    to: credential-refresh
+
+  - from: credential-refresh
+    on: outcome
+    map:
+      usable: implement
+      exhausted: stopped
+
+  # 실패 쪽 — Pod 구현이 rc≠0 이면 결과 해석으로.
+  - from: implement
+    on: pod_result
+    map:
+      failed: result-parse
+
+  - from: result-parse
+    to: salvage
+
+  # ⚠️ heal 은 실패 사건 «접수»다 — 호스트에서만(Pod 안에서는 시작 안 함 · POD-RESULT-PARSE).
+  - from: salvage
+    to: heal
+
+  - from: heal
+    to: next-move
+
+  # 출구 라벨 = task-agent 판단부의 수(TaskMove · src/task-agent/judge.ts). 관측 배선은 0.2.22(판단이 카드 단위라 런 조인 먼저).
+  - from: next-move
+    on: move
+    map:
+      narrow-relaunch: dispatch
+      salvage-relaunch: dispatch
+      alternative: dispatch
+      wait-retry: dispatch
+      decision-card: stopped
+      wait: stopped
 
   - from: implement
     to: gate
@@ -264,6 +522,20 @@ edges:
     to: open-pr
     observed: 80
 
+  # ⭐ HARNESS-FULL-GRAPH — 코드 간선 open-pr→merge 사이에 «동결 검사»가 늘 끼어 있었다(병합 직전 한 곳).
   - from: open-pr
-    to: merge
-    observed: 80
+    to: freeze-check
+    observed: 80                       # 옛 open-pr→merge 관측 — 그 사이에 동결 검사가 늘 있었다
+
+  - from: freeze-check
+    on: freeze
+    map:
+      open: merge
+      frozen: hold
+      taken: stopped                   # 다른 착지자(재개 sweep)가 그 PR 을 쥐었다
+
+  - from: hold
+    to: freeze-check                   # 해제 뒤 재검사
+
+  - from: merge
+    to: cleanup

package/graphs/test-diet/recipes.yaml

@@ -10,3 +10,6 @@ audit:
 record:
   command: 'bun scripts/test-diet/node.ts record'
   timeout_ms: 300000
+main-failures:
+  command: 'bun scripts/test-diet/node.ts main-failures'
+  timeout_ms: 2400000

package/graphs/test-diet/test-diet.yaml

@@ -14,9 +14,11 @@ nodes:
   - { node_id: pick, kind: judge, recipe: 'cmd:pick', max_visits: 1 }
   - { node_id: measure, kind: gate, recipe: 'cmd:measure', max_visits: 1 }
   - { node_id: record, kind: judge, recipe: 'cmd:record', max_visits: 1 }
+  - { node_id: main-failures, kind: judge, recipe: 'cmd:main-failures', max_visits: 1 }
   - { node_id: done, kind: gate, max_visits: 1 }
   - { node_id: failed, kind: gate, max_visits: 1 }
 edges:
   - { from: pick, on: outcome, map: { ok: measure, fail: failed, error: failed } }
   - { from: measure, on: outcome, map: { ok: record, fail: failed, error: failed } }
-  - { from: record, on: outcome, map: { ok: done, fail: failed, error: failed } }
+  - { from: record, on: outcome, map: { ok: main-failures, fail: failed, error: failed } }
+  - { from: main-failures, on: outcome, map: { ok: done, fail: failed, error: failed } }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "elanous",
   "mcpName": "io.github.ElanvitalAI/elanous",
-  "version": "0.2.20",
+  "version": "0.2.22",
   "description": "Self-healing coding harness where eyes, hands, and memory all turn on one sentence — it authors its own goals, implements them in isolated worktrees, and reviews its own work.",
   "license": "Apache-2.0",
   "author": "Elanvital AI",

package/scripts/coord-channel-watch.sh

@@ -240,15 +240,42 @@ lsof_fd1() {
   return 0
 }
 
+# 🐧 lsof 가 없는 리눅스(게이트 Pod 이미지 · 0.2.20 컷 실측)에서는 /proc/<pid>/fd/1 을 읽어
+#   lsof -Ftn 과 «같은 모양»(t<type>\nn<name>)으로 낸다 — 아래 판정 표를 그대로 쓴다.
+#   ⛔ 못 읽으면(죽은 pid·권한) 1 을 돌려 「모름」으로 끝낸다.
+proc_fd1() {
+  local pid="$1" target
+  target=$(readlink "/proc/$pid/fd/1" 2>/dev/null) || return 1
+  [ -n "$target" ] || return 1
+  case "$target" in
+    pipe:*)   printf 'tPIPE\nn%s\n' "$target" ;;
+    socket:*) printf 'tunix\nn%s\n' "$target" ;;
+    *)
+      if [ -c "$target" ]; then printf 'tCHR\nn%s\n' "$target"
+      elif [ -f "$target" ]; then printf 'tREG\nn%s\n' "$target"
+      else printf 'tunknown\nn%s\n' "$target"
+      fi ;;
+  esac
+  return 0
+}
+
 delivery_of() {
   local pid="$1" out t n
   case "$pid" in
     ''|*[!0-9]*) printf '⚠️ «못 쟀다»(감시자 pid 를 «증명하지 못했다») — 「정상」이 아니라 «모름»이다'; return 0 ;;
   esac
-  command -v lsof >/dev/null 2>&1 || { printf '⚠️ «못 쟀다»(lsof 없음) — 「정상」이 아니라 «모름»이다'; return 0; }
-  if ! out=$(lsof_fd1 "$pid"); then
-    printf '⚠️ «못 쟀다»(lsof 가 %s틱 안에 안 끝나 죽였다) — 「정상」이 아니라 «모름»이다' "$LSOF_WAIT_TICKS"
-    return 0
+  if command -v lsof >/dev/null 2>&1; then
+    if ! out=$(lsof_fd1 "$pid"); then
+      printf '⚠️ «못 쟀다»(lsof 가 %s틱 안에 안 끝나 죽였다) — 「정상」이 아니라 «모름»이다' "$LSOF_WAIT_TICKS"
+      return 0
+    fi
+  elif command -v readlink >/dev/null 2>&1 && [ -d /proc/self/fd ]; then
+    if ! out=$(proc_fd1 "$pid"); then
+      printf '⚠️ «못 쟀다»(/proc/%s/fd/1 을 못 읽었다 · lsof 없음) — 「정상」이 아니라 «모름»이다' "$pid"
+      return 0
+    fi
+  else
+    printf '⚠️ «못 쟀다»(lsof 없음) — 「정상」이 아니라 «모름»이다'; return 0
   fi
   t=$(printf '%s\n' "$out" | sed -n 's/^t//p' | head -1)
   n=$(printf '%s\n' "$out" | sed -n 's/^n//p' | head -1)

package/scripts/docs-lint.ts

@@ -13,6 +13,7 @@ import {
 } from '../src/autopilot/discovery/doc-lint.js';
 import { parseIndexLinks } from '../src/autopilot/discovery/doc-inventory.js';
 import { execFileSync } from 'node:child_process';
+import { runGitCommand } from '../src/git-fs/runner.js';
 import { existsSync, readFileSync, readdirSync, statSync } from 'node:fs';
 import { basename, join, relative } from 'node:path';
 import { sourceIdentifierInventory, inlineCodeIdentifiers } from '../src/autopilot/discovery/source-identifiers.js';
@@ -80,7 +81,9 @@ const readText = (relPath: string): string | null => { try { return readFileSync
 //   전부 「못 읽음」이 되어 이 규칙이 통째로 잡음이 된다. 그래서 파일명 → repo 경로를 «한 번» 만든다.
 //   ⛔ 같은 파일명이 둘 이상이면 «해석하지 않는다** — 틀린 파일을 대면 「어긋남」이 거짓으로 난다.
 const sourcePathsByBasename = new Map<string, string | null>();
-for (const relPath of execFileSync('git', ['ls-files', '*.ts', '*.tsx'], { cwd: repoRoot, encoding: 'utf-8' }).split('\n')) {
+const lsFiles = runGitCommand(repoRoot, ['ls-files', '*.ts', '*.tsx'], { encoding: 'utf-8', maxBuffer: 64 * 1024 * 1024 });
+if (lsFiles.status !== 0) throw new Error(`git ls-files failed: ${lsFiles.stderr.trim() || `rc=${lsFiles.status}`}`);
+for (const relPath of lsFiles.stdout.split('\n')) {
   if (relPath === '') continue;
   const base = basename(relPath);
   sourcePathsByBasename.set(base, sourcePathsByBasename.has(base) ? null : relPath);

package/scripts/f-session-monitor.ts

@@ -479,6 +479,75 @@ function collectChannel(anchor: Anchor, advance: boolean): Cell<{ pr: number; co
 
 // ── 관문표 ────────────────────────────────
 export type Verdict = "pass" | "fail" | "unknown";
+
+/** TECHBLOG1 판정은 호출자가 제공한 근거만 읽는다. 스냅숏·출력·원장에는 연결하지 않는다. */
+export interface Techblog1Entry {
+  readonly installment: number;
+  readonly publishedAt: string;
+}
+
+export interface Techblog1Candidate {
+  readonly installment: number;
+  readonly publishAt: string;
+  readonly measurements: readonly { readonly value: number; readonly source: string; readonly measuredAt: string }[];
+  readonly exposure: {
+    readonly publicBeforePublish: boolean;
+    readonly approved: boolean;
+    readonly revealsProtectedDetails: boolean;
+    readonly attorneyReviewed: boolean;
+  };
+}
+
+export interface Techblog1Verdict {
+  readonly verdict: Verdict;
+  readonly reasons: readonly string[];
+}
+
+/** 순번은 1부터 빠짐없이, 게시 간격은 직전 게시에서 48시간 이상이어야 한다. */
+export function evaluateTechblog1(
+  published: readonly Techblog1Entry[],
+  candidate: Techblog1Candidate,
+): Techblog1Verdict {
+  const reasons: string[] = [];
+  const validPublicationDate = (iso: string) => {
+    if (typeof iso !== "string") return false;
+    const match = /^(\d{4})-(\d{2})-(\d{2})T\d{2}:\d{2}:\d{2}(?:\.\d{1,3})?(?:Z|[+-](?:0\d|1\d|2[0-3]):[0-5]\d)$/.exec(iso);
+    if (!match || !Number.isFinite(Date.parse(iso))) return false;
+    const day = new Date(`${match[1]}-${match[2]}-${match[3]}T00:00:00Z`);
+    return day.getUTCFullYear() === Number(match[1])
+      && day.getUTCMonth() + 1 === Number(match[2])
+      && day.getUTCDate() === Number(match[3]);
+  };
+  const history = [...published].sort((a, b) => a.installment - b.installment);
+  if (history.some((entry, index) => entry.installment !== index + 1 || !validPublicationDate(entry.publishedAt))
+      || candidate.installment !== history.length + 1) {
+    reasons.push("TECHBLOG1 연재 순서 또는 이전 게시 시각이 유효하지 않음");
+  }
+  if (history.some((entry, index) => index > 0 && validPublicationDate(entry.publishedAt)
+      && validPublicationDate(history[index - 1]!.publishedAt)
+      && Date.parse(entry.publishedAt) - Date.parse(history[index - 1]!.publishedAt) < 48 * 60 * 60 * 1000)) {
+    reasons.push("TECHBLOG1 이전 연재의 이틀 간격이 지켜지지 않음");
+  }
+  if (!validPublicationDate(candidate.publishAt)) {
+    reasons.push("TECHBLOG1 게시 시각을 확인할 수 없음");
+  } else if (history.length > 0 && validPublicationDate(history[history.length - 1]!.publishedAt)
+      && Date.parse(candidate.publishAt) - Date.parse(history[history.length - 1]!.publishedAt) < 48 * 60 * 60 * 1000) {
+    reasons.push("TECHBLOG1 직전 게시에서 이틀이 지나지 않음");
+  }
+  if (candidate.measurements.length === 0 || candidate.measurements.some((m) =>
+    !Number.isFinite(m.value) || !m.source.trim() || !validPublicationDate(m.measuredAt)
+    || (validPublicationDate(candidate.publishAt) && Date.parse(m.measuredAt) > Date.parse(candidate.publishAt)))) {
+    reasons.push("TECHBLOG1 실측 수치·출처·측정 시각이 확인되지 않음");
+  }
+  if (candidate.exposure.revealsProtectedDetails && !candidate.exposure.attorneyReviewed) {
+    reasons.push("TECHBLOG1 보호 대상 상세는 변리사 검토 전 노출 불가");
+  }
+  if (candidate.exposure.publicBeforePublish && !candidate.exposure.approved) {
+    reasons.push("TECHBLOG1 공개 전 노출 승인 없음");
+  }
+  return { verdict: reasons.length === 0 ? "pass" : "fail", reasons };
+}
+
 export interface Gate {
   phase: string;
   name: string;

package/scripts/hq/standby-snapshot.ts

@@ -85,7 +85,8 @@ export function planSnapshot(root: string, tier: Tier): PlanItem[] {
 
 const sha256 = (path: string) => createHash('sha256').update(readFileSync(path)).digest('hex');
 
-/** Consistent copy: SQLite through `.backup` (never a live-file copy), other files byte-for-byte. */
+/** Consistent copy: SQLite through `VACUUM INTO` (never a live-file copy), other files byte-for-byte. */
+export const SQLITE_SNAPSHOT_TIMEOUT_MS = 600_000;
 /** Host-specific settings that must never ride a replicated `config.json` (OP 10-04 12:02 · drill step 5:
  *  mbp's `hq.hostName=mbp` reached node-b's promoted universe and made node-b call itself mbp). */
 export const HOST_LOCAL_CONFIG_KEYS = ['hq'] as const;
@@ -105,8 +106,11 @@ export function snapshotItem(root: string, out: string, item: PlanItem, sqlite3
   const dest = join(out, item.rel);
   mkdirSync(dirname(dest), { recursive: true });
   if (item.kind === 'sqlite') {
-    const r = spawnSync(sqlite3, [join(root, item.rel), `.backup '${dest.replace(/'/g, "''")}'`], { encoding: 'utf8' });
-    if (r.status !== 0) throw new Error(`sqlite backup failed: ${item.rel}: ${(r.stderr || '').trim()}`);
+    // `VACUUM INTO` copies one read transaction. The CLI `.backup` restarts from page 1 whenever another connection
+    // writes the source — on a busy logs.db (written every second) it ran 85+ minutes without finishing (10-09 00:43 obs tier).
+    rmSync(dest, { force: true });
+    const r = spawnSync(sqlite3, [join(root, item.rel), `VACUUM INTO '${dest.replace(/'/g, "''")}'`], { encoding: 'utf8', timeout: SQLITE_SNAPSHOT_TIMEOUT_MS });
+    if (r.status !== 0) throw new Error(`sqlite backup failed: ${item.rel}: ${(r.error ? String(r.error) : (r.stderr || '').trim()) || `rc=${r.status}`}`);
   } else if (item.rel === 'config.json') {
     const original = readFileSync(join(root, item.rel), 'utf8');
     const stripped = stripHostLocalConfig(original);

package/scripts/knowledge-compress.ts

@@ -0,0 +1,11 @@
+import { readFileSync } from 'node:fs';
+import { compressConclusions, type ConclusionBatch } from '../src/knowledge/conclusion-compress.js';
+
+/** bun scripts/knowledge-compress.ts <batch.json> (UTC day, version, explicitly verified conclusions and full originals). */
+if (import.meta.main) {
+  const path = process.argv[2];
+  if (!path || process.argv.length !== 3) throw new Error('usage: bun scripts/knowledge-compress.ts <batch.json>');
+  const batch = JSON.parse(readFileSync(path, 'utf8')) as ConclusionBatch;
+  const receipt = compressConclusions(batch);
+  console.log(JSON.stringify(receipt));
+}

package/scripts/marketing/generate-ax-brief.ts

@@ -1,10 +1,11 @@
 import { readFileSync, writeFileSync } from 'node:fs';
-import { resolve } from 'node:path';
+import { basename, resolve } from 'node:path';
 import { FEATURE_MATURITY } from '../../src/maturity/feature-maturity.js';
 import type { ChecklistItem } from '../../src/release-loop/checklist.js';
 import type { ReleaseSchedule } from '../../src/release-loop/release-schedule.js';
 import type { MergedRunLedgerQuery } from '../../src/self-implement/run-ledger.js';
 import { generateFeatureMap } from './generate-feature-map.js';
+import { draftReleaseStory } from '../release-story/draft.js';
 
 const MAP = resolve(import.meta.dir, '../../docs/marketing/MAP-value-props-to-features.md');
 const AUTONOMY = new Set(['ORCH1', 'ORCH2', 'LOOP-LIVE1', 'AUTOQ-LOOP', 'AUTHOR-PAR', 'RUN-HELPER', 'FINISH-RATE']);
@@ -110,6 +111,22 @@ export function generateAxBrief(version: string, sources: AxBriefSources): strin
   ].join('\n');
 }
 
+/** Derive the next release's internal brief from its ledgers and the RELEASE-STORY version-note draft.
+ * The release loop supplies its version, ledger sources and isolated story paths; the standalone CLI stays unchanged. */
+export function generateNextVersionAxBrief(
+  nextVersion: string,
+  sources: AxBriefSources,
+  storyOptions: Omit<Parameters<typeof draftReleaseStory>[0], 'version'> = {},
+): string {
+  const brief = generateAxBrief(nextVersion, sources);
+  const story = draftReleaseStory({ ...storyOptions, version: nextVersion });
+  const announcementFile = story.files.find((file) => basename(file) === 'announcement.md');
+  const announcement = story.status === 'drafted' && announcementFile
+    ? readFileSync(announcementFile, 'utf8').replace(/^# [^\r\n]*\r?\n/, '').trim()
+    : '사용자 대상 변경 없음 — RELEASE-STORY 초안을 건너뜀';
+  return `${brief}\n## 5. 다음 판 변화·근거 (RELEASE-STORY 초안)\n\n> 공개 전 CMO 확인 필요 · 원천: release/next.md, 해당 판의 green 칸, 연결된 검증 소구점 원장\n\n${announcement}\n`;
+}
+
 if (import.meta.main) {
   const args = process.argv.slice(2);
   const option = (name: string) => {

package/scripts/measure-nl-routing-corpus.ts

@@ -3,7 +3,7 @@ import { readFileSync, writeFileSync } from 'node:fs';
 import { resolve } from 'node:path';
 import { buildEvalPromptToolSurface, EVAL_PROMPT_TOOL_SURFACES, isEvalPromptToolSurface, resolveReproModelId, runEvalPrompt, type EvalPromptToolSurface } from '../src/eval-prompt-cli.js';
 import { getModelFamily } from '../src/models/prompts.js';
-import { resolveDefaultProvider } from '../src/llm.js';
+import { NoLlmProviderAvailableError, resolveDefaultProvider } from '../src/llm.js';
 import { filterToolsByDeny } from '../src/tool-runtime/tool-deny.js';
 import { getUserConfig } from '../src/user-config.js';
 import { resolveObserveOnlyDecision, type ObserveOnlyDecision } from '../src/self-implement/observe-only.js';
@@ -80,8 +80,16 @@ function formatMachineLoad(load: MachineLoad): string {
 
 function authoritativeSurfaceToolNames(surface: EvalPromptToolSurface): string[] {
   const cfg = getUserConfig();
-  const provider = resolveDefaultProvider();
-  const modelFamily = getModelFamily(resolveReproModelId(undefined, provider.defaultModel));
+  // ⛔ 안전 관문(노출된 변이 툴)은 «provider 해석보다 먼저» 닫혀야 한다 — 자격이 없는 기계(게이트 Pod)에서
+  //   provider 해석이 먼저 던지면 관문이 안내 대신 「No LLM provider」로 끝났다(0.2.20 컷 pod-7·pod-22).
+  //   provider 가 없으면 러너의 마지막 기본 모델로 서피스를 재서 관문을 그대로 판정한다(런은 어차피 못 돈다).
+  let providerDefaultModel: string | undefined;
+  try {
+    providerDefaultModel = resolveDefaultProvider().defaultModel;
+  } catch (error) {
+    if (!(error instanceof NoLlmProviderAvailableError)) throw error;
+  }
+  const modelFamily = getModelFamily(resolveReproModelId(undefined, providerDefaultModel));
   const { specs } = buildEvalPromptToolSurface(surface, modelFamily, cfg);
   const tools = filterToolsByDeny(specs, cfg.chat.toolDeny) ?? specs;
   return tools.map((tool) => tool.name);