hadara 0.3.0-rc.2 → 0.3.1-rc.1

package/README.md

@@ -5,8 +5,8 @@
 </p>
 
 <p align="center">
-  <img alt="Published npm release" src="https://img.shields.io/badge/npm-0.3.0--rc.1-blue">
-  <img alt="Source candidate" src="https://img.shields.io/badge/source-0.3.0--rc.2-orange">
+  <img alt="Stable npm release" src="https://img.shields.io/badge/npm-0.3.0-blue">
+  <img alt="Source version" src="https://img.shields.io/badge/source-0.3.1--rc.1-orange">
   <img alt="Node.js" src="https://img.shields.io/badge/node-%3E%3D22-brightgreen">
   <img alt="License" src="https://img.shields.io/badge/license-MIT-lightgrey">
 </p>
@@ -21,37 +21,28 @@ This repository is both the HADARA source checkout and the HADARA protocol works
 
 ## Release Status
 
-Current published npm release:
+Current stable npm release:
 
 ```text
-hadara@0.3.0-rc.1
+hadara@0.3.0
 ```
 
-Current source release candidate:
+Current release candidate:
 
 ```text
-hadara@0.3.0-rc.2
+hadara@0.3.1-rc.1
 ```
 
-Previous published npm release:
+The 0.3.1-rc.1 line is the Phase 8 State Governance release candidate. It hardens status-token vocabulary, document ownership/write boundaries, handoff close-state handling, installed-package finding guidance, and state consistency verification surfaces after the stable 0.3.0 publish/recycle.
 
-```text
-hadara@0.3.0-rc.0
-```
-
-The 0.3.0 line is the Phase 7 Surface Refactor. It organizes HADARA's existing task, evidence, proof, lifecycle, release, and document surfaces so agents can distinguish primary lifecycle commands, diagnostics, advanced surfaces, canonical documents, historical documents, and safe Markdown update boundaries.
-
-Phase 7.x labels are internal implementation phases, not npm release-candidate labels. Publishing any later release still requires the approval-gated release path and explicit operator confirmation.
+Phase 8.x labels are internal implementation phases, not npm release-candidate labels. The stable `0.3.0` package remains the default install target; the `0.3.1-rc.1` package is for explicit release-candidate evaluation.
 
 | Surface | Status |
 |---|---|
-| npm package | Primary release target. |
-| `hadara@0.2.0-rc.1` | Previous published npm RC. |
-| `hadara@0.2.0-rc.2` | Previous published npm RC. |
-| `hadara@0.2.0-rc.3` | Previous published npm RC. |
-| `hadara@0.3.0-rc.0` | Previous published npm RC; package metadata lacks the intended discovery fields. |
-| `hadara@0.3.0-rc.1` | Current published npm RC; T-0301 publish evidence verified `npm view` returned `0.3.0-rc.1`. |
-| `hadara@0.3.0-rc.2` | Current source candidate prepared by T-0310; publish remains approval-gated. |
+| Current stable | [`hadara@0.3.0`](docs/RELEASE_NOTES.md#030) |
+| Current RC | [`hadara@0.3.1-rc.1`](docs/RELEASE_NOTES.md#031-rc1) |
+| Previous RC | [`hadara@0.3.0-rc.2`](docs/RELEASE_NOTES.md#030-rc2) |
+| Historical RCs | See [Release Notes](docs/RELEASE_NOTES.md). |
 | GitHub Release | Secondary target, approval-gated. |
 | Docker image | Deferred. |
 | PyPI/Python package | `hadara==0.2.0rc1` published preview bridge. |
@@ -63,10 +54,10 @@ No release command should publish, create a GitHub Release, build Docker images,
 
 Requires Node.js 22.
 
-Install the latest published RC:
+Install the stable release:
 
 ```bash
-npm install -g hadara@0.3.0-rc.1
+npm install -g hadara@0.3.0
 hadara help
 hadara doctor --json
 ```
@@ -74,10 +65,27 @@ hadara doctor --json
 Run without a global install:
 
 ```bash
-npx hadara@0.3.0-rc.1 help
-npx hadara@0.3.0-rc.1 doctor --json
+npx hadara@0.3.0 help
+npx hadara@0.3.0 doctor --json
 ```
 
+Evaluate the release candidate explicitly:
+
+```bash
+npm install -g hadara@0.3.1-rc.1
+npx hadara@0.3.1-rc.1 help
+```
+
+For release or recycle evidence, prefer an isolated prefix install when PATH, global installs, or `npx` cache behavior may be stale:
+
+```bash
+tmp="$(mktemp -d)"
+npm --prefix "$tmp" install hadara@0.3.0
+"$tmp/node_modules/.bin/hadara" version --json
+```
+
+`npx hadara@0.3.0 ...` remains convenient for normal use. The isolated installed-bin path is stronger proof that the published package installed and executed from the intended package tree.
+
 ## What HADARA Gives You
 
 | Capability | Purpose |
@@ -224,7 +232,7 @@ Dashboard, TUI, Hermes, MCP, installer, package, release, and run commands stay
 
 ## Safety Boundaries
 
-HADARA 0.3.0 is not:
+HADARA 0.3.1-rc.1 is not:
 
 - a full agent runtime;
 - Rack/enterprise behavior;
@@ -297,19 +305,6 @@ node dist/cli/main.js doctor --json
 npm run check
 ```
 
-For HADARA-dev itself, Docker is the preferred validation path because host `node_modules` on mounted workspaces can be unreliable:
-
-```bash
-npm run dev:docker-check
-npm run dev:docker-sync-build
-```
-
-Focused validation:
-
-```bash
-npm run test:focused -- tests/unit/release-dry-run.test.ts
-```
-
 Optional integrations are not generated by `hadara init` and are not part of the default scaffold:
 
 ```bash

package/dist/cli/init.js

@@ -571,7 +571,7 @@ function sopRequiredReadingRowsForProfile(profile) {
         rows.push(['`docs/ARCHITECTURE.md`', 'Architecture, component, or boundary work', 'Current system shape and ownership boundaries.'], ['`docs/DEVELOPMENT_SLICES.md`', 'Starting, completing, or reclassifying slices', 'Roadmap ordering and completion evidence.'], ['`docs/DECISIONS.md`', 'Project-level decision work', 'Durable decisions that affect architecture or workflow.'], ['`docs/TEST_STRATEGY.md`', 'Validation planning or completion checks', 'Routine suites and special-case smoke boundaries.']);
     }
     if (profile === 'governed') {
-        rows.push(['`docs/SECURITY_MODEL.md`', 'Security, secret, permission, or evidence-safety work', 'Project security invariants and special checks.'], ['`docs/REFACTOR_LOG.md`', 'Refactor, migration, removal, or replacement work', 'Project-level refactor history.'], ['`docs/ROADMAP.md`', 'Roadmap, milestone, or scope planning', 'Longer-term priorities and deferred work.']);
+        rows.push(['`docs/SECURITY_MODEL.md`', 'Security, secret, permission, or evidence-safety work', 'Project security invariants and special checks.'], ['`docs/ROADMAP.md`', 'Roadmap, milestone, or scope planning', 'Longer-term priorities and deferred work.']);
     }
     return rows;
 }
@@ -587,7 +587,7 @@ function agentsRequiredReadingRowsForProfile(profile) {
         rows.push({ document: '`docs/ARCHITECTURE.md`', when: 'Architecture, component, or boundary work', purpose: 'Current system shape and ownership boundaries.' }, { document: '`docs/DEVELOPMENT_SLICES.md`', when: 'Starting, completing, or reclassifying a development slice', purpose: 'Roadmap ordering, prerequisites, and completion evidence.' }, { document: '`docs/DECISIONS.md`', when: 'Project-level decision work', purpose: 'Durable project decisions.' }, { document: '`docs/TEST_STRATEGY.md`', when: 'Validation planning or completion checks', purpose: 'Routine suites and special-case checks.' });
     }
     if (profile === 'governed') {
-        rows.push({ document: '`docs/SECURITY_MODEL.md`', when: 'Security, secret, permission, or evidence-safety work', purpose: 'Project security invariants.' }, { document: '`docs/REFACTOR_LOG.md`', when: 'Refactor, migration, removal, or replacement work', purpose: 'Project-level refactor history.' }, { document: '`docs/ROADMAP.md`', when: 'Roadmap, milestone, or scope planning', purpose: 'Longer-term priorities and deferred work.' });
+        rows.push({ document: '`docs/SECURITY_MODEL.md`', when: 'Security, secret, permission, or evidence-safety work', purpose: 'Project security invariants.' }, { document: '`docs/ROADMAP.md`', when: 'Roadmap, milestone, or scope planning', purpose: 'Longer-term priorities and deferred work.' });
     }
     return rows;
 }
@@ -710,7 +710,7 @@ function requiredDocsForProfile(profile) {
         docs.push('docs/ARCHITECTURE.md', 'docs/DEVELOPMENT_SLICES.md', 'docs/DECISIONS.md', 'docs/TEST_STRATEGY.md');
     }
     if (profile === 'governed') {
-        docs.push('docs/SECURITY_MODEL.md', 'docs/REFACTOR_LOG.md', 'docs/ROADMAP.md');
+        docs.push('docs/SECURITY_MODEL.md', 'docs/ROADMAP.md');
     }
     return docs;
 }
@@ -973,9 +973,6 @@ function createImplementationSopDoc(spec) {
     if (spec.docs.securityModel) {
         requiredReadingRows.push(['`docs/SECURITY_MODEL.md`', 'Security, secret, permission, or evidence-safety work', 'Project security invariants and special checks.']);
     }
-    if (spec.docs.refactorLog) {
-        requiredReadingRows.push(['`docs/REFACTOR_LOG.md`', 'Refactor, migration, removal, or replacement work', 'Project-level refactor history.']);
-    }
     if (spec.docs.roadmap) {
         requiredReadingRows.push(['`docs/ROADMAP.md`', 'Roadmap, milestone, release, or scope planning', 'Longer-term priorities and deferred work.']);
     }
@@ -1095,6 +1092,16 @@ Keep capsule docs current as work changes:
 
 Parallelize read-only discovery, \`rg\`/file inspection, independent validation commands, package or registry metadata inspection, read-only diagnostics, and draft preparation before writes. Serialize same-file writes, evidence append, Task Capsule doc writes, Task Board writes, Project State writes, Agent Handoff writes, before-hash execute operations, \`task finish --execute\`, \`task close --execute\`, and release artifact or publish operations.
 
+## Status Token And Document Ownership Policy
+
+Use distinct token families for persistent task state, close proof state, document registry state, and evidence outcomes. \`TaskStatus\` belongs to Task Capsule metadata, \`TASK.md\` Status/Status History, and command-owned \`docs/TASK_BOARD.md\` cells. Valid persistent task tokens are \`Draft\`, \`In Progress\`, \`Blocked\`, \`Done\`, \`Partial\`, \`Superseded\`, and \`Archived\`.
+
+\`CloseState\` is derived from close evidence and \`task audit-close\`; do not write close proof values as \`TaskStatus\`, and do not persist \`CloseState\` in task-local \`HANDOFF.md\` close-source current-state tables. Canonical close-state tokens are \`not-closed\`, \`closed-valid\`, \`closed-stale\`, \`closed-invalid\`, and \`unknown\`. Compatibility diagnostics such as \`close-evidence-found-invalid\`, \`close-evidence-malformed\`, and \`closed-with-drift-warnings\` are close-state details, not task status.
+
+\`DocStatus\` belongs only to the docs registry and uses \`canonical\`, \`active\`, \`reference\`, \`historical\`, \`superseded\`, and \`archived\`. Evidence outcomes are \`passed\`, \`failed\`, \`blocked\`, and \`unknown\`; preserve failed or blocked evidence and append newer corrective evidence instead of rewriting history.
+
+Ownership boundaries follow the lifecycle command model. \`task finish --execute\` owns bounded status bookkeeping in \`TASK.md\` and command-owned \`docs/TASK_BOARD.md\` cells. \`task close --execute\` owns only close evidence append. Operators own close-source prose and shared state docs before close, then rerun ready/close/audit after any intentional close-source edit.
+
 ## Standard Task Workflow Loop
 
 The authoritative command semantics live in \`docs/TASK_WORKFLOW_COMMANDS.md\`. For ordinary implementation capsules, use this loop:
@@ -1353,6 +1360,68 @@ The close model has three separate phases: validation proves readiness, close re
 
 \`task ready\` and \`task close\` include done-level Task Capsule validation. Use \`hadara harness validate --task T-XXXX --level done --json\` directly when debugging capsule format, status-history, acceptance, evidence, or handoff validation failures.
 
+## Status Token And Ownership Policy
+
+HADARA uses separate token families for persistent state, derived proof state, document registry state, and evidence outcomes. Do not collapse these families into a single Markdown \`Status\` field.
+
+### TaskStatus
+
+\`TaskStatus\` is persistent task lifecycle state in \`TASK.md\` metadata, the \`## Status\` section, Status History rows, and the command-owned cells of \`docs/TASK_BOARD.md\`.
+
+| Token | Meaning | Writer |
+|---|---|---|
+| \`Draft\` | Task capsule exists but implementation is not started or not yet ready for done-level validation. | \`task create\`, worker docs |
+| \`In Progress\` | Work is actively being performed. | Worker docs |
+| \`Blocked\` | Work cannot proceed without a recorded blocker. | Worker docs |
+| \`Done\` | Scoped work is implemented and ready for done-level validation/close. | \`task finish --execute\` |
+| \`Partial\` | Deliberate partial completion with remaining scope deferred or split. | Worker/coordinator docs |
+| \`Superseded\` | Task has been replaced by another task or line. | Worker/coordinator docs |
+| \`Archived\` | Task is no longer active state and is retained only for history. | Worker/coordinator docs |
+
+Reserved non-TaskStatus strings include \`Closed\`, \`Ready\`, \`Approved\`, \`Complete\`, \`closed-valid\`, \`not-closed\`, and phrases such as \`Done pending lifecycle close\`. Use \`TaskStatus: Done\`; get close proof state from \`task status\`, \`task audit-close\`, proof status, or \`state verify\` read models.
+
+### CloseState
+
+\`CloseState\` is derived proof state from close evidence and \`task audit-close\`; it is not written as persistent \`TaskStatus\` and should not be stored in task-local \`HANDOFF.md\` current-state tables.
+
+| Canonical Token | Meaning |
+|---|---|
+| \`not-closed\` | No valid close proof has been recorded. |
+| \`closed-valid\` | Close evidence exists and audit reports current/fresh proof. |
+| \`closed-stale\` | Close evidence exists but source or validation hashes drifted after close. |
+| \`closed-invalid\` | Close-like evidence exists but audit reports invalid shape, failed result, or mismatch. |
+| \`unknown\` | The projection cannot determine close state. |
+
+Current compatibility read models may expose more specific diagnostic values such as \`close-evidence-found-invalid\`, \`close-evidence-malformed\`, or \`closed-with-drift-warnings\`. Treat those as CloseState diagnostics, not TaskStatus values.
+
+### DocStatus
+
+\`DocStatus\` is stored in the document registry only.
+
+| Token | Meaning |
+|---|---|
+| \`canonical\` | Core scaffold/current-state document. |
+| \`active\` | Active working document or task-work document. |
+| \`reference\` | Conditional reference document. |
+| \`historical\` | Historical context, never default required reading. |
+| \`superseded\` | Replaced by another registered document. |
+| \`archived\` | Retained only as archive candidate/history. |
+
+### EvidenceOutcome
+
+Evidence outcome tokens are \`passed\`, \`failed\`, \`blocked\`, and \`unknown\`. Failed or blocked evidence must remain visible; add newer evidence that explains the fix or residual risk instead of editing old records.
+
+### Write Ownership
+
+| Surface | Ownership |
+|---|---|
+| \`TASK.md\` status metadata, \`## Status\`, and Status History | Command-owned for finish bookkeeping; worker-owned before finish. |
+| \`docs/TASK_BOARD.md\` ID/title/status/capsule cells | Command-owned by \`task finish\`; Notes and extra cells are mixed/human-owned. |
+| \`EVIDENCE.md\` and \`evidence.jsonl\` | Evidence writer-owned; do not hand-edit \`evidence.jsonl\`. |
+| \`HANDOFF.md\` managed current-state table | Managed/mixed; persist \`TaskStatus\` only. \`CloseState\` is derived by status/audit/proof/state read models and should not be written into close-source handoff tables. |
+| Shared state docs | Mixed/human-owned; update before close when they are close-source relevant. |
+| \`.hadara/docs-registry.json\` and \`docs/DOC_REGISTRY.md\` | Docs registry-owned; registry mutations should stay dry-run-first or explicitly scoped. |
+
 Before close, finish all close-source edits: Task Capsule docs, acceptance/tests/handoff notes, evidence summaries, \`docs/TASK_BOARD.md\`, and tracked state docs such as \`docs/PROJECT_STATE.md\`, \`docs/AGENT_HANDOFF.md\`, and roadmap/slice docs when they apply. After \`task close --execute --json\`, changing those documents changes the close source hash and requires rerunning \`task ready\`, \`task close\`, and \`task audit-close\`. Do not paste volatile close evidence ids into close-source docs; prefer stable wording such as "close evidence appended; audit returned closed-valid".
 
 ## Documentation Timing and Write Coordination
@@ -1415,8 +1484,6 @@ function createAgentsDoc(spec) {
         requiredReadingRows.push([String(order++), '`docs/TEST_STRATEGY.md`', 'Validation planning or completion checks', 'Routine suites and special-case checks.']);
     if (spec.docs.securityModel)
         requiredReadingRows.push([String(order++), '`docs/SECURITY_MODEL.md`', 'Security, secret, permission, or evidence-safety work', 'Project security invariants.']);
-    if (spec.docs.refactorLog)
-        requiredReadingRows.push([String(order++), '`docs/REFACTOR_LOG.md`', 'Refactor, migration, removal, or replacement work', 'Project-level refactor history.']);
     if (spec.docs.roadmap)
         requiredReadingRows.push([String(order++), '`docs/ROADMAP.md`', 'Roadmap, milestone, or scope planning', 'Longer-term priorities and deferred work.']);
     requiredReadingRows.push([String(order++), 'Active `tasks/T-*/TASK.md`', 'Working a task', 'Task-specific goal, scope, and status.'], [String(order++), 'Active Task Capsule docs', 'Working a task', 'Decisions, plan, context, acceptance, files, tests, risks, handoff, and evidence.'], [String(order++), 'Project-specific registered docs', 'When listed in `docs/IMPLEMENTATION_SOP.md`', 'Specs, contracts, or roadmap files explicitly added by this project.']);

package/dist/cli/main.js

@@ -173,6 +173,12 @@ async function main(args = process.argv.slice(2)) {
                 return;
             break;
         }
+        case 'state': {
+            const { handleStateCommand } = await Promise.resolve().then(() => __importStar(require('./state')));
+            if (handleStateCommand({ args, projectRoot: paths.projectRoot, jsonOutput }))
+                return;
+            break;
+        }
         case 'dashboard': {
             const { handleDashboardCommand } = await Promise.resolve().then(() => __importStar(require('./dashboard')));
             if (handleDashboardCommand({ args, projectRoot: paths.projectRoot }))

package/dist/cli/state.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handleStateCommand = handleStateCommand;
+const state_projection_1 = require("../services/state-projection");
+function handleStateCommand(input) {
+    if (input.args[0] !== 'state' || input.args[1] !== 'verify')
+        return false;
+    const report = (0, state_projection_1.createStateProjectionReport)(input.projectRoot);
+    if (input.jsonOutput) {
+        console.log(JSON.stringify(report, null, 2));
+    }
+    else {
+        console.log((0, state_projection_1.formatStateProjectionReport)(report));
+    }
+    return true;
+}

package/dist/cli/status.js

@@ -16,7 +16,7 @@ function handleOpsCommand(input) {
     return true;
 }
 function printStatus(projectRoot, jsonOutput) {
-    const report = (0, operations_status_service_1.createOpsStatusReport)(projectRoot);
+    const report = (0, operations_status_service_1.createOpsStatusReport)(projectRoot, { includeStateConsistency: true });
     if (jsonOutput) {
         console.log(JSON.stringify(report, null, 2));
     }

package/dist/core/schema.js

@@ -49,6 +49,7 @@ const release_gate_schema_json_1 = __importDefault(require("../schemas/release-g
 const release_publish_schema_json_1 = __importDefault(require("../schemas/release-publish.schema.json"));
 const runtime_version_schema_json_1 = __importDefault(require("../schemas/runtime-version.schema.json"));
 const smoke_evidence_summary_schema_json_1 = __importDefault(require("../schemas/smoke-evidence-summary.schema.json"));
+const state_projection_schema_json_1 = __importDefault(require("../schemas/state-projection.schema.json"));
 const task_audit_close_schema_json_1 = __importDefault(require("../schemas/task-audit-close.schema.json"));
 const task_close_schema_json_1 = __importDefault(require("../schemas/task-close.schema.json"));
 const task_complete_flow_schema_json_1 = __importDefault(require("../schemas/task-complete-flow.schema.json"));
@@ -115,6 +116,7 @@ const registeredSchemas = {
     'hadara.releasePublish.v1': release_publish_schema_json_1.default,
     'hadara.runtime.version.v1': runtime_version_schema_json_1.default,
     'hadara.smokeEvidenceSummary.v1': smoke_evidence_summary_schema_json_1.default,
+    'hadara.stateProjection.v1': state_projection_schema_json_1.default,
     'hadara.task.audit_close.v1': task_audit_close_schema_json_1.default,
     'hadara.task.close.v1': task_close_schema_json_1.default,
     'hadara.task.complete_flow.v1': task_complete_flow_schema_json_1.default,

package/dist/harness/validate.js

@@ -25,6 +25,8 @@ const REQUIRED_TASK_FILES = [
 const EVIDENCE_KINDS = new Set(['test-log', 'command-log', 'diff-summary', 'screenshot', 'note']);
 const EVIDENCE_RESULTS = new Set(['passed', 'failed', 'blocked', 'unknown']);
 const EVIDENCE_VISIBILITIES = new Set(['public', 'private']);
+const TASK_STATUS_TOKENS = new Set(['draft', 'in progress', 'blocked', 'done', 'partial', 'superseded', 'archived']);
+const STALE_PENDING_CLOSE_PATTERN = /\b(?:done\s+pending\s+lifecycle\s+close|pending\s+lifecycle\s+close)\b/i;
 const DONE_SEMANTIC_EVIDENCE_CODES = new Set([
     'TASK_DONE_WITHOUT_SUBSTANTIVE_EVIDENCE',
     'TASK_DONE_WITH_FAILED_EVIDENCE',
@@ -338,6 +340,8 @@ function validateDoneLevel(projectRoot, task, issues, checkedFiles) {
     validateEvidenceIndexHasRecords(projectRoot, task, issues);
     validateEvidenceSemanticGates(projectRoot, task, issues);
     validateHandoffDone(projectRoot, task, issues);
+    validateHandoffCurrentStateTokens(projectRoot, task, issues);
+    validatePlanStatusDrift(projectRoot, task, issues);
     validateTaskBoardDone(projectRoot, task, issues, checkedFiles);
 }
 function validateTaskMetadataComplete(projectRoot, task, issues) {
@@ -645,6 +649,112 @@ function validateHandoffDone(projectRoot, task, issues) {
         });
     }
 }
+function validateHandoffCurrentStateTokens(projectRoot, task, issues) {
+    const handoffPath = node_path_1.default.join(task.dir, 'HANDOFF.md');
+    if (!node_fs_1.default.existsSync(handoffPath))
+        return;
+    const relativePath = toPortablePath(node_path_1.default.relative(projectRoot, handoffPath));
+    const currentState = readSectionBody(handoffPath, '## Current State');
+    const fields = handoffCurrentStateFields(currentState);
+    const taskStatus = fields.get('taskstatus') ?? fields.get('task status');
+    const legacyStatus = fields.get('status');
+    const closeState = fields.get('closestate') ?? fields.get('close state');
+    if (taskStatus && !isTaskStatusToken(taskStatus)) {
+        issues.push(handoffStatusIssue(relativePath, `HANDOFF.md TaskStatus uses non-canonical value "${taskStatus}".`));
+    }
+    if (legacyStatus) {
+        if (STALE_PENDING_CLOSE_PATTERN.test(legacyStatus)) {
+            issues.push(handoffStatusIssue(relativePath, 'HANDOFF.md legacy Status mixes lifecycle state with pending close proof wording.'));
+        }
+        else if (!isTaskStatusToken(legacyStatus)) {
+            issues.push(handoffStatusIssue(relativePath, `HANDOFF.md legacy Status uses non-canonical value "${legacyStatus}".`));
+        }
+    }
+    if (STALE_PENDING_CLOSE_PATTERN.test(currentState) && (!legacyStatus || !STALE_PENDING_CLOSE_PATTERN.test(legacyStatus))) {
+        issues.push(handoffStatusIssue(relativePath, 'HANDOFF.md Current State contains stale pending lifecycle close wording.'));
+    }
+    if (closeState) {
+        issues.push({
+            severity: 'error',
+            code: 'TASK_HANDOFF_CLOSE_STATE_PERSISTED',
+            message: `HANDOFF.md persists derived CloseState value "${closeState}".`,
+            path: relativePath,
+            heading: 'Current State',
+            fixHint: 'Remove the CloseState row from task-local HANDOFF.md; use task status, audit-close, proof status, or state verify read models for derived close state.',
+            example: '| TaskStatus | Done |',
+            remediationHint: {
+                path: relativePath,
+                heading: 'Current State',
+                requiredChange: 'Remove persistent CloseState from this close-source handoff table.',
+                example: '| TaskStatus | Done |',
+                blocking: true
+            }
+        });
+    }
+}
+function handoffCurrentStateFields(currentState) {
+    const fields = new Map();
+    for (const cells of (0, markdown_table_1.parseMarkdownRows)(currentState)) {
+        if (cells.length < 2 || /^field$/i.test(cells[0] ?? ''))
+            continue;
+        fields.set(normalizeFieldName(cells[0] ?? ''), cells[1]?.trim() ?? '');
+    }
+    return fields;
+}
+function handoffStatusIssue(relativePath, message) {
+    return {
+        severity: 'error',
+        code: 'TASK_HANDOFF_STATUS_DRIFT',
+        message,
+        path: relativePath,
+        heading: 'Current State',
+        fixHint: 'Use `TaskStatus` for lifecycle state only; close proof state is derived from audit-close/proof/status read models.',
+        example: '| TaskStatus | Done |',
+        remediationHint: {
+            path: relativePath,
+            heading: 'Current State',
+            requiredChange: 'Replace ambiguous Status wording with canonical TaskStatus and remove close-proof wording from HANDOFF.md.',
+            example: '| TaskStatus | Done |',
+            blocking: true
+        }
+    };
+}
+function validatePlanStatusDrift(projectRoot, task, issues) {
+    const planPath = node_path_1.default.join(task.dir, 'PLAN.md');
+    if (!node_fs_1.default.existsSync(planPath))
+        return;
+    const relativePath = toPortablePath(node_path_1.default.relative(projectRoot, planPath));
+    const rows = (0, markdown_table_1.parseMarkdownRows)(node_fs_1.default.readFileSync(planPath, 'utf8'));
+    const inProgressRows = rows.filter((cells) => {
+        if (/^step$/i.test(cells[0] ?? ''))
+            return false;
+        return (cells[2] ?? '').trim().toLowerCase() === 'in progress';
+    });
+    if (inProgressRows.length === 0)
+        return;
+    issues.push({
+        severity: 'error',
+        code: 'TASK_PLAN_STATUS_DRIFT',
+        message: `PLAN.md has ${inProgressRows.length} row(s) still marked In Progress while the task is Done.`,
+        path: relativePath,
+        heading: 'Plan',
+        fixHint: 'Before closing a Done task, mark completed plan rows Done or split/defer unfinished work explicitly instead of leaving rows In Progress.',
+        example: '| 3 | Commit the pre-publish preparation. | Done | `command:T-XXXX:check` |',
+        remediationHint: {
+            path: relativePath,
+            heading: 'Plan',
+            requiredChange: 'Update PLAN.md rows that are no longer active from In Progress to Done, Blocked, Partial, or a task-specific final status with evidence.',
+            example: '| 3 | Commit the pre-publish preparation. | Done | `command:T-XXXX:check` |',
+            blocking: true
+        }
+    });
+}
+function isTaskStatusToken(value) {
+    return TASK_STATUS_TOKENS.has(value.trim().toLowerCase());
+}
+function normalizeFieldName(value) {
+    return value.trim().toLowerCase().replace(/\s+/g, ' ');
+}
 function validateTaskBoardDone(projectRoot, task, issues, checkedFiles) {
     const taskBoardPath = node_path_1.default.join(projectRoot, 'docs', 'TASK_BOARD.md');
     const relativePath = toPortablePath(node_path_1.default.relative(projectRoot, taskBoardPath));

package/dist/schemas/schema-index.json

@@ -274,6 +274,13 @@
             "owner": "runtime/version",
             "notes": "Documents read-only CLI origin, package, git, Node, and build freshness reports from hadara version --verbose."
         },
+        {
+            "id": "hadara.stateProjection.v1",
+            "path": "src/schemas/state-projection.schema.json",
+            "status": "fixture",
+            "owner": "services/state-projection",
+            "notes": "Documents the Phase 8.4 read-only state consistency projection over Task Board, Task Capsules, handoff, close evidence, docs registry, and release readiness state."
+        },
         {
             "id": "hadara.releaseGate.v1",
             "path": "src/schemas/release-gate.schema.json",

package/dist/schemas/state-projection.schema.json

@@ -0,0 +1,115 @@
+{
+    "$schema": "https://json-schema.org/draft/2020-12/schema",
+    "$id": "hadara.stateProjection.v1",
+    "x-hadara-schema-id": "hadara.stateProjection.v1",
+    "type": "object",
+    "additionalProperties": true,
+    "required": ["schemaVersion", "command", "ok", "generatedAt", "projectRoot", "summary", "sources", "tasks", "issues"],
+    "properties": {
+        "schemaVersion": {
+            "const": "hadara.stateProjection.v1"
+        },
+        "command": {
+            "const": "state.projection"
+        },
+        "ok": {
+            "type": "boolean"
+        },
+        "generatedAt": {
+            "type": "string"
+        },
+        "projectRoot": {
+            "type": "string"
+        },
+        "summary": {
+            "type": "object",
+            "required": ["consistent", "issueCounts", "latestDoneTaskId", "activeTaskIds", "checkedTasks"],
+            "additionalProperties": true,
+            "properties": {
+                "consistent": {
+                    "type": "boolean"
+                },
+                "issueCounts": {
+                    "type": "object"
+                },
+                "latestDoneTaskId": {
+                    "type": ["string", "null"]
+                },
+                "activeTaskIds": {
+                    "type": "array",
+                    "items": {
+                        "type": "string"
+                    }
+                },
+                "checkedTasks": {
+                    "type": "number"
+                }
+            }
+        },
+        "sources": {
+            "type": "object"
+        },
+        "tasks": {
+            "type": "array",
+            "items": {
+                "type": "object",
+                "required": ["id", "title", "capsule", "task", "taskBoard", "handoff", "plan", "closeProof"],
+                "additionalProperties": true,
+                "properties": {
+                    "id": {
+                        "type": "string"
+                    },
+                    "title": {
+                        "type": "string"
+                    },
+                    "capsule": {
+                        "type": "string"
+                    },
+                    "task": {
+                        "type": "object"
+                    },
+                    "taskBoard": {
+                        "type": "object"
+                    },
+                    "handoff": {
+                        "type": "object"
+                    },
+                    "plan": {
+                        "type": "object"
+                    },
+                    "closeProof": {
+                        "type": "object"
+                    }
+                }
+            }
+        },
+        "issues": {
+            "type": "array",
+            "items": {
+                "type": "object",
+                "required": ["severity", "code", "message", "fixHint"],
+                "additionalProperties": true,
+                "properties": {
+                    "severity": {
+                        "enum": ["error", "warning", "info"]
+                    },
+                    "code": {
+                        "type": "string"
+                    },
+                    "message": {
+                        "type": "string"
+                    },
+                    "path": {
+                        "type": "string"
+                    },
+                    "taskId": {
+                        "type": "string"
+                    },
+                    "fixHint": {
+                        "type": "string"
+                    }
+                }
+            }
+        }
+    }
+}

package/dist/services/capability-registry.js

@@ -600,7 +600,7 @@ exports.HADARA_COMMAND_REGISTRY = [
     {
         id: 'ci.gate',
         command: 'hadara ci gate [--mode advisory|strict] [--task <task-id>] [--allow-empty] [--json]',
-        summary: 'Evaluate CI-style task proof gates.',
+        summary: 'Evaluate CI-style task proof gates with advisory state consistency signals.',
         canonical: true,
         appearsInDefaultHelp: false,
         family: 'proof-diagnostics',
@@ -614,7 +614,28 @@ exports.HADARA_COMMAND_REGISTRY = [
         status: 'stable',
         docs: ['docs/IMPLEMENTATION_SOP.md'],
         examples: [example('Run strict CI gate', 'hadara ci gate --mode strict --task T-0001 --json', 'In automated validation paths.')],
-        related: ['task.ready', 'proof.status'],
+        related: ['task.ready', 'proof.status', 'state.verify'],
+        conflictsWith: []
+    },
+    {
+        id: 'state.verify',
+        command: 'hadara state verify [--json]',
+        summary: 'Read the state consistency projection and concise drift issues.',
+        canonical: true,
+        appearsInDefaultHelp: false,
+        family: 'proof-diagnostics',
+        scope: 'project',
+        lifecycleStage: 'ready',
+        requiredness: 'diagnostic',
+        writeBoundary: 'read-only',
+        readOnly: true,
+        risk: 'low',
+        actor: 'agent-worker',
+        status: 'stable',
+        schemaVersion: 'hadara.stateProjection.v1',
+        docs: ['docs/COMMAND_SURFACE.md', 'docs/SCHEMAS.md'],
+        examples: [example('Verify state drift', 'hadara state verify --json', 'Before close or when shared-doc state looks inconsistent.')],
+        related: ['status', 'protocol.doctor', 'ci.gate'],
         conflictsWith: []
     },
     commandEntry({
@@ -677,7 +698,7 @@ exports.HADARA_COMMAND_REGISTRY = [
         schemaVersion: 'hadara.protocol.consistency.v1',
         docs: ['docs/IMPLEMENTATION_SOP.md'],
         examples: [example('Run protocol doctor', 'hadara protocol doctor --scope all --json', 'When project protocol files may be inconsistent.')],
-        related: ['protocol.remediate', 'doctor'],
+        related: ['protocol.remediate', 'doctor', 'state.verify'],
         conflictsWith: []
     }),
     commandEntry({
@@ -1185,7 +1206,7 @@ exports.HADARA_COMMAND_REGISTRY = [
         schemaVersion: 'hadara.ops.status.v1',
         docs: ['docs/PROJECT_STATE.md'],
         examples: [example('Read status', 'hadara status --json', 'When checking project health and active task signals.')],
-        related: ['ops.status', 'doctor'],
+        related: ['ops.status', 'doctor', 'state.verify'],
         conflictsWith: []
     }),
     commandEntry({