gentle-pi 2.1.2 → 2.2.0

package/tests/orchestrator-budget.test.ts

@@ -158,13 +158,29 @@ const DISPOSITION_MAP: DispositionRange[] = [
 	{ lines: [25, 29], target: "delegation", label: "Language Boundary LB5 (exceptions)" },
 	{ lines: [31, 40], target: "core", label: "Mental Model" },
 	{ lines: [42, 42], target: "core", label: "Work Routing Ladder heading" },
-	{ lines: [44, 110], target: "delegation", label: "Work Routing Ladder body + Pi Subagent Model Routing" },
+	{ lines: [44, 97], target: "delegation", label: "Work Routing Ladder body + Pi Subagent Model Routing" },
+	{
+		lines: [98, 107],
+		target: "obsolete",
+		label: "Size/risk-selected SDD tier replaced by explicit-request/accepted-proposal selection (#312)",
+	},
+	{ lines: [108, 108], target: "delegation", label: "SDD explicit-request trigger" },
+	{
+		lines: [109, 110],
+		target: "obsolete",
+		label: "Size-gated SDD entry replaced by explicit-selection gating (#312)",
+	},
 	{ lines: [112, 112], target: "core", label: "Delegation Rules heading" },
 	{ lines: [114, 114], target: "core", label: "Delegation Rules core question" },
 	{
-		lines: [116, 132],
+		lines: [116, 126],
+		target: "obsolete",
+		label: "Pre-canon delegation table replaced by the mirrored gentle-ai canon table (#312)",
+	},
+	{
+		lines: [128, 132],
 		target: "delegation",
-		label: "Delegation Rules table + Mandatory Triggers preamble",
+		label: "Mandatory Triggers heading + Pi trigger preamble + 4-file binding",
 	},
 	{
 		lines: [133, 133],
@@ -172,9 +188,14 @@ const DISPOSITION_MAP: DispositionRange[] = [
 		label: "Superseded no-runtime inline exception",
 	},
 	{
-		lines: [134, 181],
+		lines: [134, 167],
 		target: "delegation",
-		label: "Mandatory Triggers remainder + Cost/Context Balance + Canonical Workflows + Review Lens Selection",
+		label: "Mandatory Triggers remainder + Cost/Context Balance + Canonical Workflows",
+	},
+	{
+		lines: [169, 181],
+		target: "obsolete",
+		label: "Parent-selected review lens table replaced by native RAR lens ownership (#312)",
 	},
 	{ lines: [183, 191], target: "core", label: "SDD Workflow pointer" },
 	{ lines: [193, 193], target: "core", label: "Memory Contract heading" },
@@ -200,7 +221,11 @@ function isNormativeLine(line: string): boolean {
 const fixtureLines = readFileSync(FIXTURE_PATH, "utf8").split("\n");
 const SUPERSEDED_LIFECYCLE_REVIEW_LINES = new Set([
 	70,
+	// 74/77: the loose mode-choice background lines were replaced by the
+	// marked gentle-pi:background-subagents policy block (issue #256).
+	74,
 	76,
+	77,
 	92,
 	125,
 	126,

package/tests/package-manifest.test.ts

@@ -17,7 +17,8 @@ import { applyModelConfig } from "../extensions/gentle-ai.ts";
 import { installSddAssets } from "../lib/sdd-preflight.ts";
 
 const PACKAGE_ROOT = dirname(dirname(fileURLToPath(import.meta.url)));
-const REVIEW_REFUTER_FILE = "review-refuter.md";
+const MANAGED_EXEMPLAR_FILE = "gentle-ai-explore.md";
+const RETIRED_REFUTER_FILE = "review-refuter.md";
 const REVIEW_RISK_FILE = "review-risk.md";
 const V013_REVIEW_RISK_FIXTURE = join(
 	PACKAGE_ROOT,
@@ -49,17 +50,12 @@ const V014_MANAGED_ASSETS = join(
 	"migrations",
 	"managed-assets-v0.14.json",
 );
-const REVIEW_REFUTER_TOOLS = ["read", "grep", "find"];
-const FORBIDDEN_REFUTER_TOOLS = [
-	"bash",
-	"edit",
-	"write",
-	"task",
-	"subagent",
-	"subagent_run",
-	"mem_save",
-	"mem_update",
-];
+// gentle-pi#311 P5: the managed-asset installer mechanism tests use
+// gentle-ai-explore.md as their exemplar (packaged, absent from the v0.13
+// manifest) after review-refuter.md was retired together with every
+// Pi-authored adversarial review verdict.
+const MANAGED_EXEMPLAR_TOOLS = ["read", "grep", "find", "codegraph"];
+const RETIRED_ADVERSARIAL_AGENTS = ["review-refuter.md", "review-validator.md"];
 
 interface ManagedAssetsManifest {
 	schemaVersion: number;
@@ -270,20 +266,20 @@ test("package manifest installs pi-pretty through a wrapper without bundling nat
 	);
 });
 
-test("package verification binds the published Gentle AI v2.2.2 runtime pin", () => {
+test("package verification binds the published Gentle AI v2.4.0 runtime pin", () => {
 	const installer = readFileSync(join(PACKAGE_ROOT, "scripts", "gentle-ai-installer.mjs"), "utf8");
 	const binary = readFileSync(join(PACKAGE_ROOT, "lib", "gentle-ai-binary.ts"), "utf8");
 	const verifier = readFileSync(join(PACKAGE_ROOT, "scripts", "verify-package-files.mjs"), "utf8");
 
-	assert.match(installer, /INSTALLER_VERSION = "2\.2\.2"/);
+	assert.match(installer, /INSTALLER_VERSION = "2\.4\.0"/);
 	assert.match(installer, /GENTLE_AI_WINDOWS_SOURCE_PACKAGE.*GENTLE_AI_WINDOWS_SOURCE_MODULE/);
-	assert.match(installer, /GENTLE_AI_WINDOWS_SOURCE_MODULE_CHECKSUM = "h1:YZcI5dRvoHm82I2CULvgBkB2M3UQQGarYO\/u\/Nt5LSc="/);
+	assert.match(installer, /GENTLE_AI_WINDOWS_SOURCE_MODULE_CHECKSUM = "h1:XKkcy\+t76cyUKQnRwL1UnqHbhh8o416I8HQ1UsdvWSI="/);
 	assert.match(installer, /GOTOOLCHAIN: "local"/);
 	assert.match(installer, /GOSUMDB: "sum\.golang\.org"/);
-	assert.match(binary, /GENTLE_AI_VERSION = "2\.2\.2"/);
+	assert.match(binary, /GENTLE_AI_VERSION = INSTALLER_VERSION/);
 	assert.match(binary, /GO_SUMDB_SOURCE_BUILD/);
 	assert.match(binary, /GENTLE_AI_WINDOWS_SOURCE_MODULE_CHECKSUM/);
-	assert.match(verifier, /v2\.2\.2/);
+	assert.match(verifier, /v2\.4\.0/);
 });
 
 
@@ -439,25 +435,52 @@ test("packaged agents use YAML list syntax for tool allowlists", () => {
 	}
 });
 
-test("package source defines review-refuter with the exact read-only boundary", () => {
-	const refuterPath = join(PACKAGE_ROOT, "assets", "agents", REVIEW_REFUTER_FILE);
-	assert.ok(existsSync(refuterPath), "gentle-pi must package review-refuter.md");
+// The Pi child-session tool registry exposes `find` for filesystem discovery
+// and has no `glob` or `webfetch` builtin (see tests/runtime-harness.mjs and
+// the working builtin `reviewer` canary in issue #62). A packaged agent that
+// declares a name the runtime cannot resolve does not fail loudly: the SDK
+// silently drops it and the child starts with a reduced allowlist, so the
+// agent reports itself blocked instead of naming the missing tool.
+const UNSUPPORTED_CHILD_SESSION_TOOLS = ["glob", "webfetch"];
 
-	const { name, tools } = readAgentDefinition(refuterPath);
-	assert.equal(name, "review-refuter");
-	assert.deepEqual(tools, REVIEW_REFUTER_TOOLS);
-	for (const tool of FORBIDDEN_REFUTER_TOOLS) {
-		assert.ok(!tools.includes(tool), `review-refuter must deny ${tool}`);
+test("packaged agents declare only tool names a Pi child session can resolve", () => {
+	const agentsDir = join(PACKAGE_ROOT, "assets", "agents");
+	const agentFiles = readdirSync(agentsDir).flatMap((entry) =>
+		entry.endsWith(".md") ? [join(agentsDir, entry)] : [],
+	);
+
+	assert.ok(agentFiles.length > 0, "gentle-pi must ship packaged agents");
+
+	for (const file of agentFiles) {
+		const { tools } = readAgentDefinition(file);
+		for (const unsupported of UNSUPPORTED_CHILD_SESSION_TOOLS) {
+			assert.ok(
+				!tools.includes(unsupported),
+				`${file} declares ${unsupported}, which no Pi child session exposes; use find for discovery`,
+			);
+		}
+	}
+});
+
+test("the retired Pi adversarial role agents are not packaged", () => {
+	// gentle-pi#311 P5: the refuter and targeted validator verdicts execute
+	// through Go-owned pi processes via provider-rendered self-contained
+	// vectors; the Pi-authored agent definitions must stay deleted.
+	for (const retired of RETIRED_ADVERSARIAL_AGENTS) {
+		assert.ok(!existsSync(join(PACKAGE_ROOT, "assets", "agents", retired)), `${retired} must stay deleted`);
 	}
 });
 
-test("forced package installation preserves same-path user-authored agents and separate shadows", () => {
+test("forced package installation preserves same-path user-authored agents and separate shadows, including on retired asset paths", () => {
+	// The user-authored file below sits on the RETIRED review-refuter.md path:
+	// this also pins that gentle-pi#311 P5 asset retirement deletes only
+	// hash-proven package-managed copies, never user content.
 	const temporaryAgentHome = mkdtempSync(join(tmpdir(), "gentle-pi-refuter-home-"));
 	const temporaryProject = mkdtempSync(join(tmpdir(), "gentle-pi-refuter-project-"));
 	const previousAgentHome = process.env.GENTLE_PI_AGENT_HOME;
-	const samePathUserAgent = join(temporaryAgentHome, "agents", REVIEW_REFUTER_FILE);
-	const userShadow = join(temporaryAgentHome, "subagents", REVIEW_REFUTER_FILE);
-	const projectOverride = join(temporaryProject, ".pi", "agents", REVIEW_REFUTER_FILE);
+	const samePathUserAgent = join(temporaryAgentHome, "agents", RETIRED_REFUTER_FILE);
+	const userShadow = join(temporaryAgentHome, "subagents", RETIRED_REFUTER_FILE);
+	const projectOverride = join(temporaryProject, ".pi", "agents", RETIRED_REFUTER_FILE);
 	const userAgentSource = [
 		"---",
 		"name: review-refuter",
@@ -538,7 +561,7 @@ test("first forced sync migrates untouched v0.13 assets, preserves routing, and
 	const temporaryAgentHome = mkdtempSync(join(tmpdir(), "gentle-pi-v013-upgrade-"));
 	const previousAgentHome = process.env.GENTLE_PI_AGENT_HOME;
 	const installedReviewRisk = join(temporaryAgentHome, "agents", REVIEW_RISK_FILE);
-	const installedRefuter = join(temporaryAgentHome, "agents", REVIEW_REFUTER_FILE);
+	const installedExemplar = join(temporaryAgentHome, "agents", MANAGED_EXEMPLAR_FILE);
 	const managedAssetsManifest = join(
 		temporaryAgentHome,
 		"gentle-ai",
@@ -572,8 +595,8 @@ test("first forced sync migrates untouched v0.13 assets, preserves routing, and
 			"migration must update the package body without losing user routing",
 		);
 		assert.equal(
-			readFileSync(installedRefuter, "utf8"),
-			readFileSync(join(PACKAGE_ROOT, "assets", "agents", REVIEW_REFUTER_FILE), "utf8"),
+			readFileSync(installedExemplar, "utf8"),
+			readFileSync(join(PACKAGE_ROOT, "assets", "agents", MANAGED_EXEMPLAR_FILE), "utf8"),
 			"an asset missing from v0.13 must install normally",
 		);
 
@@ -582,8 +605,8 @@ test("first forced sync migrates untouched v0.13 assets, preserves routing, and
 		) as ManagedAssetsManifest;
 		assert.equal(manifest.assets[`agents/${REVIEW_RISK_FILE}`], sha256(migrated));
 		assert.equal(
-			manifest.assets[`agents/${REVIEW_REFUTER_FILE}`],
-			sha256(readFileSync(installedRefuter, "utf8")),
+			manifest.assets[`agents/${MANAGED_EXEMPLAR_FILE}`],
+			sha256(readFileSync(installedExemplar, "utf8")),
 		);
 
 		const userEditedMigration = migrated.replace(
@@ -684,23 +707,23 @@ test("first forced sync preserves a body-edited v0.13 asset byte-for-byte", () =
 test("forced package installation refreshes an asset recorded as package-managed", () => {
 	const temporaryAgentHome = mkdtempSync(join(tmpdir(), "gentle-pi-malformed-refuter-"));
 	const previousAgentHome = process.env.GENTLE_PI_AGENT_HOME;
-	const installedRefuter = join(temporaryAgentHome, "agents", REVIEW_REFUTER_FILE);
+	const installedExemplar = join(temporaryAgentHome, "agents", MANAGED_EXEMPLAR_FILE);
 	const managedAssetsManifest = join(
 		temporaryAgentHome,
 		"gentle-ai",
 		"managed-assets.json",
 	);
 	const previousPackageSource =
-		"---\nname: review-refuter\ntools:\n  - read\n  - bash\n---\nprevious package version\n";
+		"---\nname: gentle-ai-explore\ntools:\n  - read\n  - bash\n---\nprevious package version\n";
 	const routedPreviousPackageSource = previousPackageSource.replace(
-		"name: review-refuter\n",
-		"name: review-refuter\nmodel: openai/previous-package\nthinking: high\n",
+		"name: gentle-ai-explore\n",
+		"name: gentle-ai-explore\nmodel: openai/previous-package\nthinking: high\n",
 	);
 
 	try {
 		process.env.GENTLE_PI_AGENT_HOME = temporaryAgentHome;
 		installSddAssets(PACKAGE_ROOT, true);
-		assert.ok(existsSync(installedRefuter), "a missing package asset must install");
+		assert.ok(existsSync(installedExemplar), "a missing package asset must install");
 		assert.ok(
 			existsSync(managedAssetsManifest),
 			"the installer must record ownership independently from the filename",
@@ -709,16 +732,16 @@ test("forced package installation refreshes an asset recorded as package-managed
 		const manifest = JSON.parse(
 			readFileSync(managedAssetsManifest, "utf8"),
 		) as ManagedAssetsManifest;
-		writeFileSync(installedRefuter, routedPreviousPackageSource);
-		manifest.assets[`agents/${REVIEW_REFUTER_FILE}`] = sha256(
+		writeFileSync(installedExemplar, routedPreviousPackageSource);
+		manifest.assets[`agents/${MANAGED_EXEMPLAR_FILE}`] = sha256(
 			routedPreviousPackageSource,
 		);
 		writeFileSync(managedAssetsManifest, JSON.stringify(manifest, null, 2));
 
 		installSddAssets(PACKAGE_ROOT, true);
 
-		const refreshed = readAgentDefinition(installedRefuter);
-		assert.deepEqual(refreshed.tools, REVIEW_REFUTER_TOOLS);
+		const refreshed = readAgentDefinition(installedExemplar);
+		assert.deepEqual(refreshed.tools, MANAGED_EXEMPLAR_TOOLS);
 		assert.doesNotMatch(refreshed.source, /^  - bash$/m);
 	} finally {
 		if (previousAgentHome === undefined) {
@@ -736,7 +759,7 @@ function assertManagedAgentUserEditIsPreserved(
 ): void {
 	const temporaryAgentHome = mkdtempSync(join(tmpdir(), "gentle-pi-managed-edit-"));
 	const previousAgentHome = process.env.GENTLE_PI_AGENT_HOME;
-	const installedRefuter = join(temporaryAgentHome, "agents", REVIEW_REFUTER_FILE);
+	const installedExemplar = join(temporaryAgentHome, "agents", MANAGED_EXEMPLAR_FILE);
 	const managedAssetsManifest = join(
 		temporaryAgentHome,
 		"gentle-ai",
@@ -746,15 +769,15 @@ function assertManagedAgentUserEditIsPreserved(
 	try {
 		process.env.GENTLE_PI_AGENT_HOME = temporaryAgentHome;
 		installSddAssets(PACKAGE_ROOT, true);
-		const installedSource = readFileSync(installedRefuter, "utf8");
+		const installedSource = readFileSync(installedExemplar, "utf8");
 		const userEditedSource = editSource(installedSource);
 		assert.notEqual(userEditedSource, installedSource, `${editLabel} must alter the asset`);
-		writeFileSync(installedRefuter, userEditedSource);
+		writeFileSync(installedExemplar, userEditedSource);
 
 		installSddAssets(PACKAGE_ROOT, true);
 
 		assert.deepEqual(
-			readFileSync(installedRefuter),
+			readFileSync(installedExemplar),
 			Buffer.from(userEditedSource),
 			`${editLabel} must invalidate ownership and survive force refresh byte-for-byte`,
 		);
@@ -762,7 +785,7 @@ function assertManagedAgentUserEditIsPreserved(
 			readFileSync(managedAssetsManifest, "utf8"),
 		) as ManagedAssetsManifest;
 		assert.equal(
-			manifest.assets[`agents/${REVIEW_REFUTER_FILE}`],
+			manifest.assets[`agents/${MANAGED_EXEMPLAR_FILE}`],
 			undefined,
 			`${editLabel} must remove package ownership`,
 		);
@@ -779,8 +802,8 @@ function assertManagedAgentUserEditIsPreserved(
 test("forced package installation preserves a model-only edit to a managed agent", () => {
 	assertManagedAgentUserEditIsPreserved("a model-only user edit", (source) =>
 		source.replace(
-			"name: review-refuter\n",
-			"name: review-refuter\nmodel: private/user-model\n",
+			"name: gentle-ai-explore\n",
+			"name: gentle-ai-explore\nmodel: private/user-model\n",
 		),
 	);
 });
@@ -788,8 +811,8 @@ test("forced package installation preserves a model-only edit to a managed agent
 test("forced package installation preserves a thinking-only edit to a managed agent", () => {
 	assertManagedAgentUserEditIsPreserved("a thinking-only user edit", (source) =>
 		source.replace(
-			"name: review-refuter\n",
-			"name: review-refuter\nthinking: xhigh\n",
+			"name: gentle-ai-explore\n",
+			"name: gentle-ai-explore\nthinking: xhigh\n",
 		),
 	);
 });
@@ -797,8 +820,8 @@ test("forced package installation preserves a thinking-only edit to a managed ag
 test("forced package installation preserves an ordinary body edit to a managed agent", () => {
 	assertManagedAgentUserEditIsPreserved("an ordinary body edit", (source) =>
 		source.replace(
-			"Challenge the supplied inferential claims",
-			"Preserve this user-authored body change and challenge the supplied inferential claims",
+			"You are the read-only explorer for generic non-SDD work.",
+			"Preserve this user-authored body change. You are the read-only explorer for generic non-SDD work.",
 		),
 	);
 });
@@ -806,7 +829,7 @@ test("forced package installation preserves an ordinary body edit to a managed a
 test("package model assignment keeps only package-managed agents owned", () => {
 	const temporaryAgentHome = mkdtempSync(join(tmpdir(), "gentle-pi-model-ownership-"));
 	const previousAgentHome = process.env.GENTLE_PI_AGENT_HOME;
-	const installedRefuter = join(temporaryAgentHome, "agents", REVIEW_REFUTER_FILE);
+	const installedExemplar = join(temporaryAgentHome, "agents", MANAGED_EXEMPLAR_FILE);
 	const userAgent = join(temporaryAgentHome, "agents", "user-router.md");
 	const managedAssetsManifest = join(
 		temporaryAgentHome,
@@ -821,14 +844,14 @@ test("package model assignment keeps only package-managed agents owned", () => {
 		writeFileSync(userAgent, userAgentSource);
 
 		applyModelConfig(PACKAGE_ROOT, {
-			"review-refuter": { model: "package/selected-model", thinking: "high" },
+			"gentle-ai-explore": { model: "package/selected-model", thinking: "high" },
 			"user-router": { model: "user/selected-model", thinking: "low" },
 		});
 
-		const routedRefuter = readFileSync(installedRefuter, "utf8");
+		const routedExemplar = readFileSync(installedExemplar, "utf8");
 		const routedUserAgent = readFileSync(userAgent, "utf8");
-		assert.match(routedRefuter, /^model: package\/selected-model$/m);
-		assert.match(routedRefuter, /^thinking: high$/m);
+		assert.match(routedExemplar, /^model: package\/selected-model$/m);
+		assert.match(routedExemplar, /^thinking: high$/m);
 		assert.match(routedUserAgent, /^model: user\/selected-model$/m);
 		assert.match(routedUserAgent, /^thinking: low$/m);
 
@@ -836,8 +859,8 @@ test("package model assignment keeps only package-managed agents owned", () => {
 			readFileSync(managedAssetsManifest, "utf8"),
 		) as ManagedAssetsManifest;
 		assert.equal(
-			manifest.assets[`agents/${REVIEW_REFUTER_FILE}`],
-			sha256(routedRefuter),
+			manifest.assets[`agents/${MANAGED_EXEMPLAR_FILE}`],
+			sha256(routedExemplar),
 			"package-controlled routing must update the managed asset hash coherently",
 		);
 		assert.equal(
@@ -848,8 +871,8 @@ test("package model assignment keeps only package-managed agents owned", () => {
 
 		installSddAssets(PACKAGE_ROOT, true);
 		assert.equal(
-			readFileSync(installedRefuter, "utf8"),
-			readFileSync(join(PACKAGE_ROOT, "assets", "agents", REVIEW_REFUTER_FILE), "utf8"),
+			readFileSync(installedExemplar, "utf8"),
+			readFileSync(join(PACKAGE_ROOT, "assets", "agents", MANAGED_EXEMPLAR_FILE), "utf8"),
 			"a routed package-managed agent must remain eligible for package refresh",
 		);
 		assert.equal(
@@ -1137,18 +1160,21 @@ test("pi-pretty wrapper uses real package path resolution for pnpm symlink insta
 	assert.match(wrapper, /quietToolsEnabled/);
 });
 
-test("v2.1.2 release package and runtime stop before publication", () => {
+test("v2.2.0 release package and runtime stop before publication", () => {
 	const packageJson = readPackageJson();
-	assert.equal(packageJson.version, "2.1.2", "the release manifest must remain explicitly pinned to v2.1.2");
+	assert.equal(packageJson.version, "2.2.0", "the release manifest must remain explicitly pinned to v2.2.0");
 	assert.equal(
 		packageJson.scripts?.test,
-		"node --experimental-strip-types --test tests/*.test.ts && pnpm run test:harness",
+		"node --experimental-strip-types --test tests/*.test.ts && pnpm run check:provider-contract && pnpm run test:harness",
 	);
 	assert.ok(packageJson.files?.includes("assets/"));
 	assert.ok(packageJson.files?.includes("contracts/"));
 
 	const verifier = readFileSync(join(PACKAGE_ROOT, "scripts", "verify-package-files.mjs"), "utf8");
-	assert.match(verifier, /assets\/agents\/review-refuter\.md/);
+	// gentle-pi#311 P5: the retired adversarial role agents must not be pinned
+	// as required package files, while the append-only migration history stays.
+	assert.doesNotMatch(verifier, /assets\/agents\/review-refuter\.md/);
+	assert.doesNotMatch(verifier, /assets\/agents\/review-validator\.md/);
 	assert.match(verifier, /assets\/migrations\/managed-assets-v0\.13\.json/);
 	assert.match(verifier, /assets\/migrations\/managed-assets-v0\.14\.json/);
 
@@ -1157,13 +1183,13 @@ test("v2.1.2 release package and runtime stop before publication", () => {
 	assert.doesNotMatch(runtime, /execFileSync\("(?:npm|pnpm)", \["publish"/);
 });
 
-test("bounded review keeps the Judgment Day skill contract at metadata version 1.4", () => {
+test("bounded review keeps the Judgment Day skill contract at canon metadata version 1.7", () => {
 	const frontmatter = readAgentFrontmatter(
 		join(PACKAGE_ROOT, "skills", "judgment-day", "SKILL.md"),
 	);
 
-	assert.match(frontmatter, /^  version: "1\.4"$/m);
-	assert.doesNotMatch(frontmatter, /^  version: "1\.5"$/m);
+	assert.match(frontmatter, /^  version: "1\.7"$/m);
+	assert.doesNotMatch(frontmatter, /^  version: "1\.4"$/m);
 });
 
 test("README documents bounded review transactions and the honest installed permission boundary", () => {
@@ -1173,9 +1199,9 @@ test("README documents bounded review transactions and the honest installed perm
 		"Native compact gate validation is read-only.",
 		"Release from protected `main` may bypass receipt validation only when the tag targets the current immutable `origin/main` SHA, required CI for that exact SHA is successful, the remote head is rechecked before tag push, and no fresh risk evidence exists; otherwise release fails closed through native receipt validation.",
 		"Dangerous-command safety remains independent and authoritative.",
-		"`review-refuter` uses exactly `read`, `grep`, and `find`",
+		"Adversarial review roles (the refuter and the targeted validator) are never Pi-authored",
 		"package-managed isolated installation",
-		"Project and user overrides may shadow the package asset",
+		"Project and user overrides may shadow a package asset",
 	]) {
 		assert.ok(readme.includes(clause), `README missing review v2 clause: ${clause}`);
 	}