gentle-pi 2.1.2 → 2.3.0

package/contracts/review-integration/v2/schemas/repair.schema.json

@@ -13,10 +13,12 @@
     "assessment": {"$ref": "../../v1/schemas/repair.schema.json#/properties/assessment"},
     "provider_inputs": {"$ref": "../../v1/schemas/repair.schema.json#/properties/provider_inputs"},
     "required_inputs": {"$ref": "../../v1/schemas/repair.schema.json#/properties/required_inputs"},
-    "execution": {"$ref": "../../v1/schemas/repair.schema.json#/properties/execution"}
+    "execution": {"$ref": "../../v1/schemas/repair.schema.json#/properties/execution"},
+    "continuation": {"$ref": "../../v1/schemas/repair.schema.json#/properties/continuation"}
   },
   "allOf": [
     {"$ref": "../../v1/schemas/repair.schema.json#/allOf/0"},
-    {"$ref": "../../v1/schemas/repair.schema.json#/allOf/1"}
+    {"$ref": "../../v1/schemas/repair.schema.json#/allOf/1"},
+    {"$ref": "../../v1/schemas/repair.schema.json#/allOf/2"}
   ]
 }

package/contracts/review-integration/v2/schemas/start.schema.json

@@ -66,8 +66,11 @@
         "capability": {"const": "review.opaque_repository_context"},
         "handle": {"type": "string", "pattern": "^rctx1_[0-9a-f]{64}$"},
         "revision": {"$ref": "#/$defs/sha256"},
-        "target_identity": {"$ref": "#/$defs/sha256"}
-      }
+        "target_identity": {"$ref": "#/$defs/sha256"},
+        "event_id": {"$ref": "#/$defs/sha256"},
+        "outcome": {"enum": ["applied", "pending", "blocked_conflict", "durability_limited"]}
+      },
+      "dependentRequired": {"event_id": ["outcome"], "outcome": ["event_id"]}
     }
   },
   "$defs": {

package/contracts/review-integration/v2/schemas/status.schema.json

@@ -38,12 +38,14 @@
         "kind": {"enum": ["execute", "collect", "stop"]},
         "reason_code": {"type": "string", "pattern": "^[a-z0-9_]+$"},
         "execute": {"$ref": "../../v1/schemas/status-v2.schema.json#/$defs/transition_execution"},
-        "collect": {"$ref": "#/$defs/transition_collection"}
+        "collect": {"$ref": "#/$defs/transition_collection"},
+        "correction_request": {"$ref": "../../v1/schemas/correction-plan-request.schema.json"}
       },
       "allOf": [
         {"if": {"properties": {"kind": {"const": "execute"}}, "required": ["kind"]}, "then": {"required": ["execute"], "not": {"required": ["collect"]}}},
         {"if": {"properties": {"kind": {"const": "collect"}}, "required": ["kind"]}, "then": {"required": ["collect"], "not": {"required": ["execute"]}}},
-        {"if": {"properties": {"kind": {"const": "stop"}}, "required": ["kind"]}, "then": {"not": {"anyOf": [{"required": ["execute"]}, {"required": ["collect"]}]}}}
+        {"if": {"properties": {"kind": {"const": "stop"}}, "required": ["kind"]}, "then": {"not": {"anyOf": [{"required": ["execute"]}, {"required": ["collect"]}]}}},
+        {"if": {"properties": {"reason_code": {"enum": ["correction_plan_required", "corrected_candidate_unavailable"]}}, "required": ["reason_code"]}, "then": {"required": ["correction_request"]}, "else": {"not": {"required": ["correction_request"]}}}
       ]
     },
     "transition_collection": {

package/contracts/review-provider-contract-mirror/provider-contract.lock.json

@@ -0,0 +1,30 @@
+{
+  "schema": "gentle-pi.review-provider-contract-mirror-lock/v1",
+  "acquisition": "field-test-local",
+  "contract_semver": "1.1.0",
+  "source": {
+    "kind": "tree"
+  },
+  "tree_sha256": "364af8357c56500b417fcd98f4be5ecbe0eca36d92958eed81b89ffe6d49c4db",
+  "entries": {
+    "README.md": "d14647c8753bd85e18b8a593bef9dfcb4c9d8ea01e32ecd36847dc4304027b1d",
+    "manifest.json": "b9ccf9966592d2cdd20438b71d8fb9b84293756de63ec21824435e429d8fdcc0",
+    "schemas/lens.schema.json": "ffef79cfb763333282285ff5c795a32b5a88d840b4a8d125ce012188b04cffe1",
+    "schemas/refuter.schema.json": "36f8267c6c3f04600b8f1cb77df70d90858611af822cc81922efd6b3502fb646",
+    "schemas/targeted-validator.schema.json": "58f5efca0fb8089a51e998d5cf07209528a6b6e3782246b34ee1e825132063a8",
+    "vectors/lens.json": "7ef0b08404645eeb5dba92aba5f8e4780667b6ec775f43ed8547ff9f2a7148c8",
+    "vectors/refuter.json": "f42d71906e49c4191660b2da7e70f01f1778b23d32089005bd2d7ae9cbb73039",
+    "vectors/targeted-validator.json": "7b5a5165e3a913863fb98d2ba5387811860c21333b5c37e6ed3b4e0d121cf2fa"
+  },
+  "generated": {
+    "generated/provider-capabilities.baseline.json": "ab337e42149a7069e7a33bc0d8339620e23ca2ef1e1bbca938cd6da6094e3a9a",
+    "generated/provider-roles.baseline.json": "4768774be3404e98ac4177052bc208012bd73a6c46ef8d8ba10afeac202a5a9b"
+  },
+  "runtimes": [
+    "claude-code",
+    "codex",
+    "opencode",
+    "pi"
+  ],
+  "pi_registered": true
+}

package/contracts/review-provider-contract-mirror/v1.1.0/bundle/README.md

@@ -0,0 +1,12 @@
+# Gentle AI review provider contract
+
+This data-only bundle describes the provider result contracts admitted by Gentle AI.
+
+## Activation
+
+1. Verify the signed release checksum manifest before using this archive.
+2. Verify every listed file hash and the transport capability before activation.
+3. Confirm your runtime identity appears in the manifest's registered runtimes before trusting the layout.
+4. Pass the Go-materialized opaque prompt to the provider and return only raw output or an error.
+
+Go remains the admission authority for prompts, results, receipts, and delivery gates.

package/contracts/review-provider-contract-mirror/v1.1.0/bundle/manifest.json

@@ -0,0 +1,65 @@
+{
+  "schema": "gentle-ai.review-provider-contract-bundle/v1",
+  "contract_semver": "1.1.0",
+  "transport_capability": "gentle-ai.provider-transport/v1",
+  "runtimes": [
+    "claude-code",
+    "codex",
+    "opencode",
+    "pi"
+  ],
+  "readme": {
+    "path": "README.md",
+    "sha256": "d14647c8753bd85e18b8a593bef9dfcb4c9d8ea01e32ecd36847dc4304027b1d"
+  },
+  "roles": [
+    {
+      "id": "lens",
+      "request_schema_id": "gentle-ai.review-lens-context/v1",
+      "result_schema_id": "https://gentle-ai.dev/schema/review/reviewer/v1",
+      "required_capabilities": [
+        "gentle-ai.provider-transport/v1"
+      ],
+      "schema": {
+        "path": "schemas/lens.schema.json",
+        "sha256": "ffef79cfb763333282285ff5c795a32b5a88d840b4a8d125ce012188b04cffe1"
+      },
+      "vector": {
+        "path": "vectors/lens.json",
+        "sha256": "7ef0b08404645eeb5dba92aba5f8e4780667b6ec775f43ed8547ff9f2a7148c8"
+      }
+    },
+    {
+      "id": "refuter",
+      "request_schema_id": "gentle-ai.review-provider-refuter-request/v1",
+      "result_schema_id": "https://gentle-ai.dev/schema/review/refuter/v1",
+      "required_capabilities": [
+        "gentle-ai.provider-transport/v1"
+      ],
+      "schema": {
+        "path": "schemas/refuter.schema.json",
+        "sha256": "36f8267c6c3f04600b8f1cb77df70d90858611af822cc81922efd6b3502fb646"
+      },
+      "vector": {
+        "path": "vectors/refuter.json",
+        "sha256": "f42d71906e49c4191660b2da7e70f01f1778b23d32089005bd2d7ae9cbb73039"
+      }
+    },
+    {
+      "id": "targeted-validator",
+      "request_schema_id": "gentle-ai.review-targeted-validation-request/v1",
+      "result_schema_id": "https://gentle-ai.dev/schema/review/validator/v1",
+      "required_capabilities": [
+        "gentle-ai.provider-transport/v1"
+      ],
+      "schema": {
+        "path": "schemas/targeted-validator.schema.json",
+        "sha256": "58f5efca0fb8089a51e998d5cf07209528a6b6e3782246b34ee1e825132063a8"
+      },
+      "vector": {
+        "path": "vectors/targeted-validator.json",
+        "sha256": "7b5a5165e3a913863fb98d2ba5387811860c21333b5c37e6ed3b4e0d121cf2fa"
+      }
+    }
+  ]
+}

package/contracts/review-provider-contract-mirror/v1.1.0/bundle/schemas/lens.schema.json

@@ -0,0 +1,16 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://gentle-ai.dev/schema/review/reviewer/v1",
+  "title": "Gentle AI reviewer result",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["subject_hash", "inspection", "findings", "evidence"],
+  "properties": {
+    "subject_hash": {"type": "string", "pattern": "^sha256:[0-9a-f]{64}$"},
+    "inspection": {"type": "object", "additionalProperties": false, "required": ["status", "paths"], "properties": {"status": {"const": "completed"}, "paths": {"type": "array", "description": "Complete unique unordered set of every changed_path_manifest.path.", "uniqueItems": true, "items": {"type": "string", "minLength": 1}}}},
+    "lens": {"type": "string", "description": "Optional selected lens binding. Omission canonicalizes to the selected subject lens.", "enum": ["risk", "resilience", "readability", "reliability", "review-risk", "review-resilience", "review-readability", "review-reliability"]},
+    "findings": {"type": "array", "items": {"type": "object", "additionalProperties": false, "required": ["location", "severity", "claim", "proof_refs"], "allOf": [{"if": {"properties": {"severity": {"enum": ["BLOCKER", "CRITICAL"]}}, "required": ["severity"]}, "then": {"required": ["evidence_class", "causal_disposition"]}}], "properties": {"id": {"type": "string", "pattern": "^R[1-4]-[A-Za-z0-9][A-Za-z0-9._-]*$", "description": "Optional explicit ID; omit it to receive a native-assigned ID. When present it must carry the prefix bound to the selected lens, not the selection order: review-risk=R1-, review-readability=R2-, review-reliability=R3-, review-resilience=R4-."}, "lens": {"type": "string", "enum": ["risk", "resilience", "readability", "reliability", "review-risk", "review-resilience", "review-readability", "review-reliability"]}, "location": {"type": "string", "description": "One canonical repository-relative path:line or inclusive path:start-end span.", "pattern": "^.+:[1-9][0-9]*(?:-[1-9][0-9]*)?$"}, "severity": {"type": "string", "enum": ["BLOCKER", "CRITICAL", "WARNING", "SUGGESTION"]}, "claim": {"type": "string", "minLength": 1}, "proof_refs": {"type": "array", "minItems": 1, "items": {"type": "string", "pattern": "\\S", "not": {"pattern": "^\\s*(?:[nN]/[aA]|[nN][aA]|[nN][oO][nN][eE]|[tT][oO][dD][oO]|[tT][bB][dD]|[pP][aA][sS][sS]|[pP][aA][sS][sS][eE][dD]|[sS][uU][cC][cC][eE][sS][sS]|[pP][lL][aA][cC][eE][hH][oO][lL][dD][eE][rR])\\s*$"}}}, "evidence_class": {"type": "string", "enum": ["deterministic", "inferential", "insufficient"]}, "causal_disposition": {"type": "string", "enum": ["introduced", "behavior-activated", "worsened", "pre-existing", "base-only", "unknown"]}}}},
+    "evidence": {"type": "array", "minItems": 1, "items": {"type": "string", "pattern": "\\S", "not": {"pattern": "^\\s*(?:[nN]/[aA]|[nN][aA]|[nN][oO][nN][eE]|[tT][oO][dD][oO]|[tT][bB][dD]|[pP][aA][sS][sS]|[pP][aA][sS][sS][eE][dD]|[sS][uU][cC][cC][eE][sS][sS]|[pP][lL][aA][cC][eE][hH][oO][lL][dD][eE][rR])\\s*$"}}}
+  },
+  "examples": [{"subject_hash": "sha256:0000000000000000000000000000000000000000000000000000000000000000", "inspection": {"status": "completed", "paths": ["internal/example.go"]}, "findings": [], "evidence": ["reviewed the complete candidate scope"]}]
+}

package/contracts/review-provider-contract-mirror/v1.1.0/bundle/schemas/refuter.schema.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","$id":"https://gentle-ai.dev/schema/review/refuter/v1","title":"Gentle AI refuter result","type":"object","additionalProperties":false,"required":["refuter_request_hash","results"],"properties":{"refuter_request_hash":{"$ref":"#/$defs/sha256"},"results":{"type":"array","items":{"type":"object","additionalProperties":false,"required":["finding_id","outcome","proof_refs"],"properties":{"finding_id":{"type":"string"},"outcome":{"type":"string","enum":["corroborated","refuted","inconclusive"]},"proof_refs":{"type":"array","minItems":1,"items":{"type":"string","pattern":"\\S"}}}}}},"$defs":{"sha256":{"type":"string","pattern":"^sha256:[0-9a-f]{64}$"}},"examples":[{"refuter_request_hash":"sha256:0000000000000000000000000000000000000000000000000000000000000000","results":[]}]}

package/contracts/review-provider-contract-mirror/v1.1.0/bundle/schemas/targeted-validator.schema.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","$id":"https://gentle-ai.dev/schema/review/validator/v1","title":"Gentle AI targeted validator result","type":"object","additionalProperties":false,"required":["targeted_validation_request_hash","correction_target_identity","original_criteria","correction_regression","follow_ups"],"properties":{"targeted_validation_request_hash":{"$ref":"#/$defs/sha256"},"correction_target_identity":{"$ref":"#/$defs/sha256"},"original_criteria":{"$ref":"#/$defs/check"},"correction_regression":{"$ref":"#/$defs/check"},"follow_ups":{"type":"array","items":{"type":"object","additionalProperties":false,"required":["observation","proof_refs"],"properties":{"observation":{"type":"string"},"proof_refs":{"type":"array","minItems":1,"items":{"type":"string","pattern":"\\S"}}}}}},"$defs":{"sha256":{"type":"string","pattern":"^sha256:[0-9a-f]{64}$"},"check":{"type":"object","additionalProperties":false,"required":["passed","evidence"],"properties":{"passed":{"type":"boolean"},"evidence":{"type":"array","minItems":1,"items":{"type":"string"}}}}},"examples":[{"targeted_validation_request_hash":"sha256:0000000000000000000000000000000000000000000000000000000000000000","correction_target_identity":"sha256:1111111111111111111111111111111111111111111111111111111111111111","original_criteria":{"passed":true,"evidence":["acceptance test passed"]},"correction_regression":{"passed":true,"evidence":["regression test passed"]},"follow_ups":[]}]}

package/contracts/review-provider-contract-mirror/v1.1.0/bundle/vectors/lens.json

@@ -0,0 +1 @@
+{"subject_hash":"sha256:0000000000000000000000000000000000000000000000000000000000000000","inspection":{"status":"completed","paths":["internal/example.go"]},"findings":[],"evidence":["reviewed the complete candidate scope"]}

package/contracts/review-provider-contract-mirror/v1.1.0/bundle/vectors/refuter.json

@@ -0,0 +1 @@
+{"refuter_request_hash":"sha256:0000000000000000000000000000000000000000000000000000000000000000","results":[]}

package/contracts/review-provider-contract-mirror/v1.1.0/bundle/vectors/targeted-validator.json

@@ -0,0 +1 @@
+{"targeted_validation_request_hash":"sha256:0000000000000000000000000000000000000000000000000000000000000000","correction_target_identity":"sha256:1111111111111111111111111111111111111111111111111111111111111111","original_criteria":{"passed":true,"evidence":["acceptance test passed"]},"correction_regression":{"passed":true,"evidence":["regression test passed"]},"follow_ups":[]}

package/contracts/review-provider-contract-mirror/v1.1.0/generated/provider-capabilities.baseline.json

@@ -0,0 +1,15 @@
+{
+  "schema": "gentle-pi.provider-contract-capabilities-baseline/v1",
+  "contract_semver": "1.1.0",
+  "transport_capability": "gentle-ai.provider-transport/v1",
+  "mandatory_capabilities": [
+    "gentle-ai.provider-transport/v1"
+  ],
+  "runtimes": [
+    "claude-code",
+    "codex",
+    "opencode",
+    "pi"
+  ],
+  "pi_registered": true
+}

package/contracts/review-provider-contract-mirror/v1.1.0/generated/provider-roles.baseline.json

@@ -0,0 +1,42 @@
+{
+  "schema": "gentle-pi.provider-contract-roles-baseline/v1",
+  "contract_semver": "1.1.0",
+  "roles": [
+    {
+      "id": "lens",
+      "request_schema_id": "gentle-ai.review-lens-context/v1",
+      "result_schema_id": "https://gentle-ai.dev/schema/review/reviewer/v1",
+      "required_capabilities": [
+        "gentle-ai.provider-transport/v1"
+      ],
+      "schema_path": "schemas/lens.schema.json",
+      "schema_sha256": "ffef79cfb763333282285ff5c795a32b5a88d840b4a8d125ce012188b04cffe1",
+      "vector_path": "vectors/lens.json",
+      "vector_sha256": "7ef0b08404645eeb5dba92aba5f8e4780667b6ec775f43ed8547ff9f2a7148c8"
+    },
+    {
+      "id": "refuter",
+      "request_schema_id": "gentle-ai.review-provider-refuter-request/v1",
+      "result_schema_id": "https://gentle-ai.dev/schema/review/refuter/v1",
+      "required_capabilities": [
+        "gentle-ai.provider-transport/v1"
+      ],
+      "schema_path": "schemas/refuter.schema.json",
+      "schema_sha256": "36f8267c6c3f04600b8f1cb77df70d90858611af822cc81922efd6b3502fb646",
+      "vector_path": "vectors/refuter.json",
+      "vector_sha256": "f42d71906e49c4191660b2da7e70f01f1778b23d32089005bd2d7ae9cbb73039"
+    },
+    {
+      "id": "targeted-validator",
+      "request_schema_id": "gentle-ai.review-targeted-validation-request/v1",
+      "result_schema_id": "https://gentle-ai.dev/schema/review/validator/v1",
+      "required_capabilities": [
+        "gentle-ai.provider-transport/v1"
+      ],
+      "schema_path": "schemas/targeted-validator.schema.json",
+      "schema_sha256": "58f5efca0fb8089a51e998d5cf07209528a6b6e3782246b34ee1e825132063a8",
+      "vector_path": "vectors/targeted-validator.json",
+      "vector_sha256": "7b5a5165e3a913863fb98d2ba5387811860c21333b5c37e6ed3b4e0d121cf2fa"
+    }
+  ]
+}

package/docs/native-authority-architecture.md

@@ -2,18 +2,17 @@
 
 ← [Back to README](../README.md)
 
-U8 closed the U1-U7 slimming work. Issue [#191](https://github.com/Gentleman-Programming/gentle-pi/issues/191) then extracted Pi command projection and publication revalidation from graph-v1 authority storage. New ordinary review authority is native; Pi retains permanent consumer infrastructure and explicit graph-v1 Judgment Day.
+U8 closed the U1-U7 slimming work. New ordinary review authority is native; Pi retains permanent consumer infrastructure and explicit graph-v1 Judgment Day. Delivery commands remain ordinary repository-policy operations, not review gates.
 
 ## Current Ownership
 
 | Surface | Owner after #191 |
 | --- | --- |
-| Ordinary START, FINALIZE, target status, validation, SDD binding, recovery, and reconciliation | Package-local Gentle AI v2.2.1 through `gentle-ai.review-integration/v1` (migrating to `/v2`, see below) |
+| Ordinary START, FINALIZE, target status, validation, SDD binding, recovery, and reconciliation | Package-local Gentle AI v2.4.0 through `gentle-ai.review-integration/v2` (migration complete, see below) |
 | Canonical consumer identities | Permanent Pi module `lib/review-canonical.ts` |
 | Git common-directory and repository identity | Permanent Pi module `lib/review-repository.ts` |
 | Immutable reviewer candidate views | Permanent Pi module `lib/review-candidate-view.ts` |
-| Typed command targets, remote binding, release projection, and publication rechecks | Permanent Pi module `lib/review-publication-gate.ts` |
-| Direct commit transaction and dangerous-command safety | Pi; independent of review authority |
+| Dangerous-command safety | Pi; independent of review authority and delivery decisions |
 | Explicit Judgment Day and historical graph semantic replay | Pi graph-v1 until a separately proven replacement exists |
 | Historical graph receipt validation | Pi graph-v1 transaction, reachable only for historical graph authority and explicit Judgment Day |
 
@@ -21,7 +20,7 @@ Pi no longer owns an ordinary compact store, compact gate, compatibility facade,
 
 ## Naming note: "compact-v2" is not contract v2
 
-This document and `gentle_review`'s recovery/maintenance commands use "compact-v2" to name Pi's own internal review-authority storage generation (`lib/review-compact.ts`, `lib/review-compact-contract.ts`), predating and unrelated to gentle-ai's negotiated protocol contract `gentle-ai.review-integration/v2`. The two share a digit and nothing else: "compact-v2" is Pi-internal authority-state vocabulary; `review-integration/v2` is gentle-ai's wire contract replacing the Base64 `candidate_diff` transport with immutable `base_tree`/`candidate_tree` and an ordered `changed_path_manifest`. Do not conflate them when reading the maintenance-boundary section below.
+This document and `gentle_review`'s recovery/maintenance commands use "compact-v2" to name Pi's own internal review-authority storage generation (historically `lib/review-compact.ts`, now only the reduced `lib/review-compact-contract.ts` after gentle-pi#311 P5), predating and unrelated to gentle-ai's negotiated protocol contract `gentle-ai.review-integration/v2`. The two share a digit and nothing else: "compact-v2" is Pi-internal authority-state vocabulary; `review-integration/v2` is gentle-ai's wire contract replacing the Base64 `candidate_diff` transport with immutable `base_tree`/`candidate_tree` and an ordered `changed_path_manifest`. Do not conflate them when reading the maintenance-boundary section below.
 
 ## Contract migration status: `review-integration/v1` → `/v2` (complete)
 
@@ -43,7 +42,6 @@ The permanent modules have direct production consumers after #191:
 | `review-canonical.ts` | `extensions/gentle-ai.ts` and eight live review modules |
 | `review-repository.ts` | `extensions/gentle-ai.ts`, graph object store, legacy detector, snapshot, and transaction |
 | `review-candidate-view.ts` | `extensions/gentle-ai.ts` |
-| `review-publication-gate.ts` | `extensions/gentle-ai.ts` and graph-v1 receipt validation in `review-transaction.ts` |
 
 The remaining ordinary reducer is not dead authority. Historical graph event replay calls it to validate semantic adjacency. Deleting it would weaken graph integrity even though controller mutation is read-only.
 
@@ -56,7 +54,7 @@ node scripts/measure-native-authority-slimming.mjs origin/main HEAD WORKTREE
 git diff --shortstat origin/main..HEAD
 git diff --shortstat HEAD
 git diff --shortstat origin/main
-wc -l docs/native-authority-architecture.md scripts/measure-native-authority-slimming.mjs lib/review-publication-gate.ts
+wc -l docs/native-authority-architecture.md scripts/measure-native-authority-slimming.mjs
 ```
 
 The measurement script defines package footprint as unpacked bytes selected by `package.json#files` plus npm's always-included `package.json`, `README.md`, and `LICENSE`. Source LOC is physical lines in `extensions/**/*.ts`, `lib/**/*.ts`, `runtime/**/*.mjs`, and `scripts/**/*.mjs`. Test LOC is physical lines in `tests/**/*.ts` and `tests/**/*.mjs`.
@@ -74,10 +72,10 @@ The committed U1-U4 baseline is `origin/main..HEAD`. U5-U8 and #191 are in the u
 | Diff boundary | Files | Additions | Deletions |
 | --- | ---: | ---: | ---: |
 | Committed U1-U4: `git diff --shortstat origin/main..HEAD` | 21 | 770 | 2,027 |
-| Unstaged U5-#191, including three untracked delivery artifacts | 33 | 1,591 | 6,940 |
-| Accumulated U1-#191, including three untracked delivery artifacts | 46 | 2,302 | 8,908 |
+| Unstaged U5-#191, including two untracked delivery artifacts | 33 | 1,591 | 6,940 |
+| Accumulated U1-#191, including two untracked delivery artifacts | 46 | 2,302 | 8,908 |
 
-The two unit ranges are intentionally reported separately. `git diff --shortstat` excludes untracked files, so the architecture report, measurement script, and publication-gate module contribute 726 added lines to the reported U5-#191 and accumulated totals. Unit-range additions and deletions are not arithmetically additive because U5-#191 also edits or removes paths already changed by U1-U4; the accumulated comparison is Git's final origin-to-worktree result.
+The two unit ranges are intentionally reported separately. `git diff --shortstat` excludes untracked files, so the architecture report and measurement script are outside the tracked shortstat totals. Unit-range additions and deletions are not arithmetically additive because U5-#191 also edits or removes paths already changed by U1-U4; the accumulated comparison is Git's final origin-to-worktree result.
 
 ## Retired Modules
 
@@ -88,15 +86,15 @@ U1-U8 retire nine review modules present on `origin/main`:
 | U1-U4 | `review-bundle`, `review-checkpoint`, `review-graph-reducer`, `review-mirror`, `review-reset` |
 | U5-U8 | `review-authority-supersession`, `review-compact-gate`, `review-compact-store`, `review-facade` |
 
-U8 found no additional zero-consumer code module. Remaining graph, ordinary-policy, compact-contract, runtime-contract, snapshot, trigger, risk, and refuter modules retain production, contract, or semantic-replay consumers.
+U8 found no additional zero-consumer code module at the time. gentle-pi#311 P5 later retired the Pi-owned review semantics that had kept several of those modules alive: `review-compact`, `review-refuter-adapter`, and `review-runtime-contract` are deleted (adversarial roles now execute through Go-owned pi processes via provider-rendered self-contained vectors, and FINALIZE follows the provider's negotiated captured-results transition). The reduced `review-compact-contract` keeps only the negotiated collection answers (correction forecast, targeted validation document, final evidence); graph, ordinary-policy, snapshot, trigger, and risk modules retain production, contract, or semantic-replay consumers.
 
 The packaged `contracts/review-integration/v1/` schemas and fixtures plus `docs/review-integration.md` are byte-identical provider artifacts for negotiated contract `review-integration/v1`, not dead Pi compatibility documentation; the newer `contracts/review-integration/v2/` schemas and fixtures are a second byte-identical mirror, for contract `review-integration/v2`, whose schemas `$ref` into the `/v1` fragments — which is why the `/v1` directory stays packaged even after Pi migrates its active decoder. Package verification proves both directories' hashes.
 
 ## Published Maintenance Boundary
 
-Gentle AI has exposed explicit, audited maintenance commands outside negotiated ordinary review since v2.1.11; the currently pinned v2.2.1 keeps them available under the same legacy version table. Pi invokes `review abandon`, `review quarantine-legacy`, and `review reconcile-authority` only after fresh interactive approval of exact LF-only authorization text; headless execution and absent, malformed, or stale bindings fail closed.
+Gentle AI has exposed explicit, audited maintenance commands outside negotiated ordinary review since v2.1.11; the currently pinned v2.4.0 keeps them available under the same legacy version table. Pi invokes `review abandon`, `review quarantine-legacy`, and `review reconcile-authority` only after fresh interactive approval of exact LF-only authorization text; headless execution and absent, malformed, or stale bindings fail closed.
 
-`abandon` is restricted by native re-derivation to a caller-named pristine compact-v2 reviewing or invalidated lineage. `quarantine-legacy` accepts only the published malformed freeze-findings diagnostic and disposition. Reconciliation accepts the exact dual anomaly suffix `anomalies=unchanged_target,malformed_recovery_authorization` only in that order. `repair-legacy-alias` derives repository, revision, diagnostic, and disposition from freshly read native inventory before its own approval and can only quarantine one qualified historical alias chain. `review dispose-result` remains unexposed pending design. Recovery routes only the provider-selected negotiated `action_disposition`.
+`abandon` is restricted by native re-derivation to a caller-named non-terminal compact-v2 lineage; its `gentle-ai.review-abandon-authorization/v2` binding additionally names the exact discarded work (captured lens results, findings presence, evidence-record presence) that the native gate re-derives before accepting. `quarantine-legacy` accepts only the published malformed freeze-findings diagnostic and disposition. Reconciliation accepts the exact dual anomaly suffix `anomalies=unchanged_target,malformed_recovery_authorization` only in that order. `repair-legacy-alias` derives repository, revision, diagnostic, and disposition from freshly read native inventory before its own approval and can only quarantine one qualified historical alias chain. `review dispose-result` remains unexposed pending design. Recovery routes only the provider-selected negotiated `action_disposition`.
 
 ## Windows Evidence
 
@@ -114,10 +112,10 @@ The only platform-specific repository test is skipped outside Windows. U8 theref
 
 ## #191 Outcome
 
-#191 moved typed command targets, configured push destinations, push-ref probes, release projection, release fast-path evaluation, and publication rechecks into `review-publication-gate.ts`. The extension imports that module directly for ordinary native publication. `review-publication-gate.ts` imports no graph transaction, object store, graph schema, lock, or snapshot module.
+Issue #191 removed Pi-owned delivery authorization and publication-target revalidation from ordinary review. The extension does not import a publication-gate module or consult review authority to decide commit, push, pull-request, or release delivery.
 
-`review-transaction.ts` imports the shared target primitives only for historical graph receipt validation. Its reducer, replay, object-store, lock, snapshot, and ordinary semantic-replay dependencies remain reachable from explicit graph-v1 Judgment Day, so no additional module deletion is justified.
+`review-transaction.ts` retains its reducer, replay, object-store, lock, snapshot, and semantic-replay dependencies for explicit graph-v1 Judgment Day and historical compatibility; no additional module deletion is justified.
 
-The next delivery boundary is one branch-wide High-tier 4R, followed by the size-exception PR, merge readiness, and release.
+Review outcomes are informational: commit, push, PR, and release delivery follow ordinary repository policy. Dangerous-command safety and destructive-review consent remain independent.
 
 ← [Back to README](../README.md)