holo-codex 0.1.0

package/assets/brand/holo-codex-mark.svg

@@ -0,0 +1,33 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 128 128" role="img" aria-labelledby="title desc">
+  <title id="title">HOLO-Codex mark</title>
+  <desc id="desc">A terminal prompt glyph inside a human-on-loop control ring.</desc>
+  <defs>
+    <style>
+      .ink { stroke: #111827; }
+      .gate { fill: #f59e0b; }
+    </style>
+  </defs>
+  <path
+    class="ink"
+    d="M111.3 52.6A49 49 0 1 1 84 19.2"
+    fill="none"
+    stroke-width="8"
+    stroke-linecap="round"
+  />
+  <circle class="gate" cx="98.6" cy="29.4" r="6.5" />
+  <path
+    class="ink"
+    d="M41 48L62 64L41 80"
+    fill="none"
+    stroke-width="8"
+    stroke-linecap="round"
+    stroke-linejoin="round"
+  />
+  <path
+    class="ink"
+    d="M70 81H91"
+    fill="none"
+    stroke-width="8"
+    stroke-linecap="round"
+  />
+</svg>

package/assets/brand/holo-codex-plugin-card.svg

@@ -0,0 +1,81 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 960 540" role="img" aria-labelledby="title desc">
+  <title id="title">HOLO-Codex plugin card</title>
+  <desc id="desc">Compact plugin marketplace card for HOLO-Codex.</desc>
+  <defs>
+    <linearGradient id="surface" x1="0" x2="1" y1="0" y2="1">
+      <stop offset="0" stop-color="#ffffff" />
+      <stop offset="1" stop-color="#f8fafc" />
+    </linearGradient>
+    <filter id="shadow" x="-10%" y="-20%" width="120%" height="140%">
+      <feDropShadow dx="0" dy="16" stdDeviation="22" flood-color="#0f172a" flood-opacity="0.12" />
+    </filter>
+    <style>
+      .ink { fill: #111827; }
+      .muted { fill: #475569; }
+      .accent { fill: #f59e0b; }
+      .line { stroke: #dbe4ee; }
+      .small {
+        font-family: Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+        font-size: 24px;
+        font-weight: 620;
+        fill: #475569;
+      }
+      .tag {
+        font-family: Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+        font-size: 20px;
+        font-weight: 650;
+        fill: #334155;
+      }
+    </style>
+  </defs>
+
+  <rect width="960" height="540" rx="0" fill="#eef3f8" />
+  <rect x="74" y="70" width="812" height="400" rx="38" fill="url(#surface)" filter="url(#shadow)" />
+
+  <g transform="translate(128 126)">
+    <rect x="0" y="0" width="132" height="132" rx="32" fill="#f8fafc" stroke="#e2e8f0" />
+    <g transform="translate(2 2)">
+      <path d="M111.3 52.6A49 49 0 1 1 84 19.2" fill="none" stroke="#111827" stroke-width="8" stroke-linecap="round" />
+      <circle cx="98.6" cy="29.4" r="6.5" fill="#f59e0b" />
+      <path d="M41 48L62 64L41 80" fill="none" stroke="#111827" stroke-width="8" stroke-linecap="round" stroke-linejoin="round" />
+      <path d="M70 81H91" fill="none" stroke="#111827" stroke-width="8" stroke-linecap="round" />
+    </g>
+  </g>
+
+  <g transform="translate(304 144)">
+    <text
+      x="0"
+      y="58"
+      class="ink"
+      font-family="'SF Pro Display', 'OpenAI Sans', Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif"
+      font-size="64"
+      letter-spacing="-0.2"
+    ><tspan font-weight="740">HOLO</tspan><tspan font-weight="570">_Codex</tspan></text>
+    <text
+      x="3"
+      y="102"
+      class="muted"
+      font-family="'SF Pro Text', Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif"
+      font-size="24"
+    >Human On Loop Codex</text>
+  </g>
+
+  <g transform="translate(128 318)">
+    <rect x="0" y="0" width="178" height="50" rx="25" fill="#f8fafc" stroke="#dbe4ee" />
+    <circle cx="28" cy="25" r="7" fill="#22c55e" />
+    <text x="50" y="32" class="tag">local-first</text>
+
+    <rect x="202" y="0" width="218" height="50" rx="25" fill="#fff7ed" stroke="#fed7aa" />
+    <circle cx="230" cy="25" r="7" fill="#f59e0b" />
+    <text x="252" y="32" class="tag">human-gated</text>
+
+    <rect x="444" y="0" width="218" height="50" rx="25" fill="#eff6ff" stroke="#bfdbfe" />
+    <circle cx="472" cy="25" r="7" fill="#3b82f6" />
+    <text x="494" y="32" class="tag">review evidence</text>
+  </g>
+
+  <g transform="translate(128 402)">
+    <path d="M0 0H704" class="line" stroke-width="1.5" />
+    <text x="0" y="42" class="small">Observable PR delivery for local Codex agent loops.</text>
+  </g>
+</svg>

package/assets/brand/holo-codex-readme-hero.svg

@@ -0,0 +1,140 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1600 680" role="img" aria-labelledby="title desc">
+  <title id="title">HOLO-Codex README hero</title>
+  <desc id="desc">README hero banner showing the HOLO-Codex human-on-loop PR delivery workflow.</desc>
+  <defs>
+    <linearGradient id="surface" x1="0" x2="1" y1="0" y2="1">
+      <stop offset="0" stop-color="#ffffff" />
+      <stop offset="1" stop-color="#f8fafc" />
+    </linearGradient>
+    <filter id="soft-shadow" x="-8%" y="-18%" width="116%" height="136%">
+      <feDropShadow dx="0" dy="18" stdDeviation="24" flood-color="#0f172a" flood-opacity="0.10" />
+    </filter>
+    <style>
+      .ink { fill: #111827; }
+      .muted { fill: #475569; }
+      .subtle { fill: #64748b; }
+      .accent { fill: #f59e0b; }
+      .done { fill: #dcfce7; stroke: #22c55e; }
+      .active { fill: #eff6ff; stroke: #3b82f6; }
+      .gate { fill: #fff7ed; stroke: #f59e0b; }
+      .pending { fill: #f8fafc; stroke: #cbd5e1; }
+      .rail { stroke: #94a3b8; }
+      .panel-border { stroke: #dbe4ee; }
+      .tag {
+        font-family: Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+        font-size: 18px;
+        font-weight: 640;
+        fill: #334155;
+      }
+      .stage {
+        font-family: Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+        font-size: 17px;
+        font-weight: 650;
+        fill: #475569;
+      }
+      .small {
+        font-family: Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+        font-size: 16px;
+        font-weight: 560;
+        fill: #64748b;
+      }
+    </style>
+  </defs>
+
+  <rect width="1600" height="680" fill="#f1f5f9" />
+  <rect x="72" y="58" width="1456" height="564" rx="36" fill="url(#surface)" filter="url(#soft-shadow)" />
+
+  <g transform="translate(130 126)">
+    <g transform="scale(1.02)">
+      <path d="M111.3 52.6A49 49 0 1 1 84 19.2" fill="none" stroke="#111827" stroke-width="8" stroke-linecap="round" />
+      <circle cx="98.6" cy="29.4" r="6.5" fill="#f59e0b" />
+      <path d="M41 48L62 64L41 80" fill="none" stroke="#111827" stroke-width="8" stroke-linecap="round" stroke-linejoin="round" />
+      <path d="M70 81H91" fill="none" stroke="#111827" stroke-width="8" stroke-linecap="round" />
+    </g>
+    <text
+      x="150"
+      y="62"
+      class="ink"
+      font-family="'SF Pro Display', 'OpenAI Sans', Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif"
+      font-size="58"
+      letter-spacing="-0.2"
+    ><tspan font-weight="740">HOLO</tspan><tspan font-weight="570">_Codex</tspan></text>
+    <text
+      x="152"
+      y="102"
+      class="muted"
+      font-family="'SF Pro Text', Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif"
+      font-size="22"
+    >Human On Loop Codex</text>
+  </g>
+
+  <g transform="translate(130 310)">
+    <text
+      x="0"
+      y="0"
+      class="ink"
+      font-family="'SF Pro Display', Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif"
+      font-size="34"
+      font-weight="720"
+      letter-spacing="-0.4"
+    >Human-gated PR delivery.</text>
+    <text
+      x="0"
+      y="42"
+      class="muted"
+      font-family="'SF Pro Text', Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif"
+      font-size="21"
+    >Observable workflows for local Codex agents.</text>
+  </g>
+
+  <g transform="translate(760 162)">
+    <rect x="0" y="0" width="650" height="356" rx="28" fill="#ffffff" stroke="#dbe4ee" stroke-width="1.5" />
+    <rect x="28" y="28" width="594" height="62" rx="16" fill="#f8fafc" stroke="#e2e8f0" />
+    <circle cx="58" cy="59" r="8" class="accent" />
+    <text x="80" y="66" class="tag">PR Delivery Workflow Board</text>
+
+    <path d="M64 178H586" fill="none" class="rail" stroke-width="5" stroke-linecap="round" />
+    <g transform="translate(64 178)">
+      <circle r="23" class="done" stroke-width="3" />
+      <path d="M-8 0l5 6L9 -7" fill="none" stroke="#16a34a" stroke-width="4" stroke-linecap="round" stroke-linejoin="round" />
+      <text x="-39" y="56" class="stage">Work Item</text>
+    </g>
+    <g transform="translate(138 178)">
+      <circle r="23" class="done" stroke-width="3" />
+      <path d="M-8 0l5 6L9 -7" fill="none" stroke="#16a34a" stroke-width="4" stroke-linecap="round" stroke-linejoin="round" />
+      <text x="-18" y="56" class="stage">Plan</text>
+    </g>
+    <g transform="translate(212 178)">
+      <circle r="23" class="done" stroke-width="3" />
+      <path d="M-8 0l5 6L9 -7" fill="none" stroke="#16a34a" stroke-width="4" stroke-linecap="round" stroke-linejoin="round" />
+      <text x="-22" y="56" class="stage">Build</text>
+    </g>
+    <g transform="translate(286 178)">
+      <circle r="23" class="done" stroke-width="3" />
+      <path d="M-8 0l5 6L9 -7" fill="none" stroke="#16a34a" stroke-width="4" stroke-linecap="round" stroke-linejoin="round" />
+      <text x="-24" y="56" class="stage">Verify</text>
+    </g>
+    <g transform="translate(360 178)">
+      <circle r="23" class="done" stroke-width="3" />
+      <path d="M-8 0l5 6L9 -7" fill="none" stroke="#16a34a" stroke-width="4" stroke-linecap="round" stroke-linejoin="round" />
+      <text x="-9" y="56" class="stage">PR</text>
+    </g>
+    <g transform="translate(434 178)">
+      <circle r="25" class="gate" stroke-width="3" />
+      <circle r="8" class="accent" />
+      <text x="-28" y="56" class="stage">Review</text>
+    </g>
+    <g transform="translate(510 178)">
+      <circle r="23" class="active" stroke-width="3" />
+      <text x="-27" y="56" class="stage">Ready</text>
+    </g>
+    <g transform="translate(586 178)">
+      <circle r="23" class="pending" stroke-width="3" />
+      <text x="-32" y="56" class="stage">Cleanup</text>
+    </g>
+
+    <rect x="42" y="284" width="566" height="48" rx="15" fill="#fff7ed" stroke="#fed7aa" />
+    <circle cx="68" cy="308" r="7" class="accent" />
+    <text x="88" y="314" class="small">Human on loop: approve before merge.</text>
+  </g>
+</svg>

package/assets/brand/holo-codex-social-preview.svg

@@ -0,0 +1,130 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1280 640" role="img" aria-labelledby="title desc">
+  <title id="title">HOLO-Codex social preview</title>
+  <desc id="desc">GitHub social preview for HOLO-Codex, a human-on-loop Codex workflow cockpit.</desc>
+  <defs>
+    <linearGradient id="panel" x1="0" x2="1" y1="0" y2="1">
+      <stop offset="0" stop-color="#ffffff" />
+      <stop offset="1" stop-color="#f8fafc" />
+    </linearGradient>
+    <filter id="soft-shadow" x="-10%" y="-20%" width="120%" height="140%">
+      <feDropShadow dx="0" dy="18" stdDeviation="20" flood-color="#0f172a" flood-opacity="0.10" />
+    </filter>
+    <style>
+      .ink { fill: #111827; }
+      .muted { fill: #475569; }
+      .line { stroke: #cbd5e1; }
+      .rail { stroke: #94a3b8; }
+      .accent { fill: #f59e0b; }
+      .done { fill: #dcfce7; stroke: #22c55e; }
+      .active { fill: #eff6ff; stroke: #3b82f6; }
+      .blocked { fill: #fff7ed; stroke: #f59e0b; }
+      .pending { fill: #f8fafc; stroke: #cbd5e1; }
+      .label {
+        font-family: Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+        font-size: 22px;
+        font-weight: 650;
+        fill: #111827;
+      }
+      .small {
+        font-family: Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+        font-size: 16px;
+        font-weight: 560;
+        fill: #64748b;
+      }
+    </style>
+  </defs>
+
+  <rect width="1280" height="640" fill="#f1f5f9" />
+  <rect x="60" y="52" width="1160" height="536" rx="34" fill="url(#panel)" filter="url(#soft-shadow)" />
+
+  <g transform="translate(112 116)">
+    <g transform="scale(1.08)">
+      <path
+        d="M111.3 52.6A49 49 0 1 1 84 19.2"
+        fill="none"
+        stroke="#111827"
+        stroke-width="8"
+        stroke-linecap="round"
+      />
+      <circle cx="98.6" cy="29.4" r="6.5" fill="#f59e0b" />
+      <path
+        d="M41 48L62 64L41 80"
+        fill="none"
+        stroke="#111827"
+        stroke-width="8"
+        stroke-linecap="round"
+        stroke-linejoin="round"
+      />
+      <path d="M70 81H91" fill="none" stroke="#111827" stroke-width="8" stroke-linecap="round" />
+    </g>
+    <text
+      x="155"
+      y="64"
+      class="ink"
+      font-family="'SF Pro Display', 'OpenAI Sans', Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif"
+      font-size="60"
+      letter-spacing="-0.2"
+    ><tspan font-weight="740">HOLO</tspan><tspan font-weight="570">_Codex</tspan></text>
+    <text
+      x="158"
+      y="104"
+      class="muted"
+      font-family="'SF Pro Text', Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif"
+      font-size="22"
+      letter-spacing="-0.1"
+    >Human On Loop Codex</text>
+  </g>
+
+  <g transform="translate(112 316)">
+    <text
+      class="ink"
+      x="0"
+      y="0"
+      font-family="'SF Pro Display', Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif"
+      font-size="44"
+      font-weight="720"
+      letter-spacing="-0.4"
+    >Codex workflows, on loop.</text>
+    <text
+      class="muted"
+      x="0"
+      y="44"
+      font-family="'SF Pro Text', Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif"
+      font-size="22"
+      letter-spacing="-0.1"
+    >Human-gated PR delivery.</text>
+  </g>
+
+  <g transform="translate(790 145)">
+    <rect x="0" y="0" width="372" height="340" rx="22" fill="#ffffff" stroke="#dbe4ee" stroke-width="1.5" />
+    <rect x="24" y="24" width="324" height="54" rx="14" fill="#f8fafc" stroke="#e2e8f0" />
+    <circle cx="51" cy="51" r="9" class="accent" />
+    <text x="72" y="57" class="small">Workflow Board</text>
+
+    <path d="M64 155H306" fill="none" class="rail" stroke-width="4" stroke-linecap="round" />
+    <g transform="translate(64 155)">
+      <circle r="22" class="done" stroke-width="3" />
+      <path d="M-8 0l5 6L9 -7" fill="none" stroke="#16a34a" stroke-width="4" stroke-linecap="round" stroke-linejoin="round" />
+      <text x="-36" y="54" class="small">Plan</text>
+    </g>
+    <g transform="translate(144 155)">
+      <circle r="22" class="done" stroke-width="3" />
+      <path d="M-8 0l5 6L9 -7" fill="none" stroke="#16a34a" stroke-width="4" stroke-linecap="round" stroke-linejoin="round" />
+      <text x="-36" y="54" class="small">Build</text>
+    </g>
+    <g transform="translate(224 155)">
+      <circle r="24" class="blocked" stroke-width="3" />
+      <circle r="8" class="accent" />
+      <text x="-42" y="56" class="small">Review</text>
+    </g>
+    <g transform="translate(306 155)">
+      <circle r="22" class="pending" stroke-width="3" />
+      <text x="-36" y="54" class="small">Merge</text>
+    </g>
+
+    <rect x="34" y="252" width="304" height="58" rx="14" fill="#fff7ed" stroke="#fed7aa" />
+    <circle cx="61" cy="281" r="8" class="accent" />
+    <text x="80" y="277" class="label" font-size="20">Human gate</text>
+    <text x="80" y="298" class="small">Approve before merge.</text>
+  </g>
+</svg>

package/assets/brand/holo-codex-wordmark-options.svg

@@ -0,0 +1,52 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 920 440" role="img" aria-labelledby="title desc">
+  <title id="title">HOLO-Codex wordmark options</title>
+  <desc id="desc">Three restrained wordmark treatments for HOLO-Codex.</desc>
+  <rect width="920" height="440" fill="#ffffff" />
+  <defs>
+    <style>
+      .label { fill: #64748b; font-family: Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif; font-size: 14px; font-weight: 560; }
+      .caption { fill: #64748b; font-family: Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif; font-size: 15px; }
+      .ink { fill: #111827; }
+      .accent { fill: #f59e0b; }
+    </style>
+  </defs>
+
+  <g transform="translate(54 58)">
+    <text class="label" x="0" y="0">A · Codex-like grotesk</text>
+    <text
+      class="ink"
+      x="0"
+      y="64"
+      font-family="'SF Pro Display', 'OpenAI Sans', Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif"
+      font-size="54"
+      letter-spacing="-0.5"
+    ><tspan font-weight="710">HOLO</tspan><tspan font-weight="610">-Codex</tspan></text>
+    <text class="caption" x="2" y="95">Quiet, modern, closest to a developer tool wordmark.</text>
+  </g>
+
+  <g transform="translate(54 192)">
+    <text class="label" x="0" y="0">B · More technical</text>
+    <text
+      class="ink"
+      x="0"
+      y="64"
+      font-family="'SF Pro Display', Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif"
+      font-size="52"
+      letter-spacing="-0.2"
+    ><tspan font-weight="760">HOLO</tspan><tspan font-weight="540">_Codex</tspan></text>
+    <text class="caption" x="2" y="95">Stronger CLI flavor, but the underscore can over-index on terminal UI.</text>
+  </g>
+
+  <g transform="translate(54 326)">
+    <text class="label" x="0" y="0">C · Human-on-loop emphasis</text>
+    <text
+      class="ink"
+      x="0"
+      y="64"
+      font-family="'SF Pro Rounded', 'SF Pro Display', Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif"
+      font-size="52"
+      letter-spacing="-0.3"
+    ><tspan font-weight="720">HOLO</tspan><tspan class="accent" font-weight="720">·</tspan><tspan font-weight="610">Codex</tspan></text>
+    <text class="caption" x="2" y="95">Warmer and more ownable, but farther from the Codex reference.</text>
+  </g>
+</svg>

package/docs/checklists/agent-loop-first-delivery-audit.md

@@ -0,0 +1,129 @@
+# Agent-loop-first Delivery Audit Checklist
+
+这份清单用于审计一次以 `agent-loop` 为优先入口的真实交付。目标不是证明 dashboard 好看，而是判断从 issue 选择到 PR 合并的关键行为是否可恢复、可审计、可暂停。
+
+记录原则：
+
+- 只记录摘要、ID、状态、时间、命令名和证据位置。
+- 不记录 dashboard token、secret-like 内容、完整 worker raw log、私有 prompt 全文。
+- 高风险写操作必须先写明原因，再记录结果。
+- 每项结论使用 `PASS`、`PARTIAL`、`GAP`。
+
+## 0. Preflight
+
+| 项目 | 检查动作 | 预期证据 | 记录位置 | 判定标准 |
+| --- | --- | --- | --- | --- |
+| Git 基线 | `git status --short --branch`、`git switch main`、`git pull --ff-only origin main` | branch、HEAD、worktree clean 状态 | pilot report 的 Preflight | `PASS`：main 最新且干净；`PARTIAL`：可解释的本地运行态变化；`GAP`：旧分支或脏文件原因不明 |
+| Loop 状态 | `pnpm agent-loop status --json`、`pnpm agent-loop observe --json` | current run id、status、state、branch、updatedAt | pilot report 的 Preflight | `PASS`：无 active run 或 active run 属于当前 work item；`PARTIAL`：旧 run 已记录并隔离；`GAP`：旧 active gate 未处理就开工 |
+| 事件基线 | `pnpm agent-loop timeline --limit 20 --json`、`pnpm agent-loop workers --events --json` | 最近 state/event/worker/artifact 摘要 | pilot report 的 Preflight | `PASS`：能解释当前状态；`PARTIAL`：能看见事件但缺 work item 语义；`GAP`：关键状态只能靠聊天判断 |
+| Issue 基线 | `gh issue view <audit>`、`gh issue view <payload>`、`gh issue list` | audit issue、payload issue、open queue | pilot report 的 Issue Selection | `PASS`：选择来源可追溯；`GAP`：dashboard 或 CLI 无法表达当前 work item |
+
+## 1. Issue Selection
+
+| 项目 | 检查动作 | 预期证据 | 记录位置 | 判定标准 |
+| --- | --- | --- | --- | --- |
+| Tracker/payload 区分 | 确认 audit tracker 和 pilot payload 是两个 issue | tracker 用于流程审计，payload 用于小改动 | Issue Selection | `PASS`：两者职责清楚；`GAP`：一个 issue 同时承担范围和审计导致混乱 |
+| 优先级来源 | 检查 open issues、handoff、用户指定内容 | 用户指定优先，其次 GitHub issues 和 handoff | Issue Selection | `PASS`：选择理由有 issue/handoff 证据；`PARTIAL`：由 commander 解释但 dashboard 不显示；`GAP`：选择过程不可复现 |
+| 范围控制 | 判断 payload 是否低风险 | 预期文件、non-goals、是否不碰 runtime | Issue Selection | `PASS`：改动足够小；`GAP`：pilot 样本本身扩大架构风险 |
+
+## 2. Agent-loop-first Execution
+
+| 项目 | 检查动作 | 预期证据 | 记录位置 | 判定标准 |
+| --- | --- | --- | --- | --- |
+| Dry run | `pnpm agent-loop run --dry-run --json` | run id、state、dry-run artifact、timeline event | Execution Audit | `PASS`：dry-run 不改变真实执行状态且可解释；`PARTIAL`：有 artifact 但 state/transition 表达不一致；`GAP`：无 artifact 或不可复现 |
+| Run until gate | `pnpm agent-loop run --until=gate --json` | state progression、gate 或 worker 创建 | Execution Audit | `PASS`：能推进到明确 gate 或 worker；`PARTIAL`：打开 gate 但不能绑定 work item；`GAP`：无清晰失败证据 |
+| Step/resume | 有 existing run 时执行 `step` 或 `resume` | state change、worker attempt、gate decision consumed | Execution Audit | `PASS`：resume/step 行为和 gate 语义一致；`PARTIAL`：CLI 可见但 dashboard 指导不足；`GAP`：需要聊天外判断 |
+| Worker | `pnpm agent-loop workers --events --json` | worker type/status/thread id/artifacts | Worker Evidence | `PASS`：worker lifecycle 完整；`PARTIAL`：只有失败摘要；`GAP`：worker 行为不进入 state |
+| Artifact | Dashboard Artifact Viewer 或 artifact ids | dry-run plan、worker prompt/jsonl、audit export | Artifact Evidence | `PASS`：artifact 可列出、可只读打开；`PARTIAL`：只能 CLI 看 ID；`GAP`：关键 evidence 不持久化 |
+| Gate | `observe`、timeline、Gate Center、Recovery Center | active gate kind/message/details/status | Gate Evidence | `PASS`：active/historical 清楚且可操作；`PARTIAL`：可见但缺决策上下文；`GAP`：gate 只能从 raw log 判断 |
+
+## 3. Dashboard 13-page Audit
+
+| 页面 | 检查动作 | 预期证据 | 记录位置 | 判定标准 |
+| --- | --- | --- | --- | --- |
+| Mission Control | 检查 current run、next action、autonomy、merge readiness、summary | 能判断当前 run 是否可继续 | Dashboard Audit | `PASS`：页面能指导下一步；`PARTIAL`：状态可见但 work item 不明；`GAP`：核心状态缺失 |
+| Plan Navigator | 检查下一项、计划、handoff 线索 | 能解释选择了哪个 issue 或为什么不明确 | Dashboard Audit | `PASS`：work item 可见；`PARTIAL`：只显示 plans；`GAP`：不能表示用户指定 issue |
+| Policy Config | 只检查渲染、diff preview、保存按钮状态，不保存 | 配置可读，save 是明确写操作 | Dashboard Audit | `PASS`：只读检查安全；`GAP`：无法区分 preview/save 风险 |
+| Dry-run Preview | 检查 planned commands、workflow stages、possible gates、missing conditions | dry-run artifact 和 UI 一致 | Dashboard Audit | `PASS`：能预判下一步；`PARTIAL`：能显示但不绑定当前 issue；`GAP`：空白或误导 |
+| Notifications | 检查关注项、mark read 按钮状态 | 无通知时禁用，通知有来源 | Dashboard Audit | `PASS`：状态清楚；`PARTIAL`：通知有但不指向动作；`GAP`：噪音或遗漏 blocker |
+| Observability Console | 使用 timeline/worker/gate/artifact 筛选 | 筛选结果能对应 CLI | Dashboard Audit | `PASS`：和 CLI 互相印证；`PARTIAL`：能筛但缺 work item；`GAP`：筛选不可用 |
+| Gate Center | 检查 active/historical、raw/original message、intervention panel | active gate 驱动操作，historical 不误导 | Dashboard Audit | `PASS`：gate 可审计；`PARTIAL`：状态清楚但处理入口有限；`GAP`：active/historical 混淆 |
+| PR Inbox | PR 前为空或显示无 PR；PR 后看 PR/CI/review | 能判断 PR/CI/review 是否 ready | PR Audit | `PASS`：PR 状态足以决策；`PARTIAL`：需 GitHub 补证据；`GAP`：dashboard 不知道 PR |
+| Worker Runs | 检查 lifecycle、events、artifact ids、raw message 折叠 | worker 状态和 artifacts 可追踪 | Worker Evidence | `PASS`：完整；`PARTIAL`：失败可见但修复建议缺失；`GAP`：worker 不出现 |
+| Scope Guard | 检查 GitNexus/scope evidence | scope guard 证据和 PR diff 对应 | Scope Audit | `PASS`：能支持 merge readiness；`PARTIAL`：只显示摘要；`GAP`：scope 只能手动判断 |
+| Event Ledger | 检查 append-only state/event/decision | stop/recover/gate 等关键决策存在 | Event Evidence | `PASS`：关键行为都有 event；`PARTIAL`：command 可见但 commander 手工行为缺失；`GAP`：行为不进 ledger |
+| Artifact Viewer | 打开只读 artifact 列表和代表项 | artifact 可读且不泄露 token | Artifact Evidence | `PASS`：可读、安全；`PARTIAL`：可列不可解释；`GAP`：关键 artifact 缺失 |
+| Recovery Center | 检查 historical/stale/handled gate、re-evaluate 可见性 | 历史 gate 不自动消失，写操作明确 | Gate Evidence | `PASS`：恢复链路清楚；`PARTIAL`：可见但需 CLI 决策；`GAP`：无法判断是否应恢复 |
+
+## 4. Button Risk Classification
+
+| 等级 | 包含按钮/动作 | 检查动作 | 记录要求 | 判定标准 |
+| --- | --- | --- | --- | --- |
+| 只读 | refresh、filter、expand/collapse、artifact read、theme/language toggle | 可以点击代表项 | 记录页面、时间、结果 | `PASS`：不改变 repo/loop 状态；`GAP`：只读动作造成状态变化 |
+| 低风险写操作 | mark notification read、historical gate re-evaluate | 仅在有明确样本时点击 | 记录前后 state/event | `PASS`：append-only 或局部状态变化可审计；`GAP`：写操作无 event |
+| 高风险写操作 | run、step、resume、recover、stop、approve/reject、save config | 只在 pilot 需要时执行 | 记录原因、命令、结果、run id | `PASS`：动作有 state/event；`PARTIAL`：动作成功但退出码/状态表达不一致；`GAP`：动作绕过审计 |
+
+## 5. Commander Intervention
+
+每次 commander 直接介入使用这个格式：
+
+```text
+Time:
+Trigger:
+Commander action:
+Dashboard evidence:
+CLI evidence:
+Captured by agent-loop: yes/no/partial
+Gap owner: none/#45/#46
+```
+
+判定：
+
+- `PASS`：介入动作进入 agent-loop event 或 artifact，并能从 dashboard 找到。
+- `PARTIAL`：CLI 或 PR comment 有证据，但 dashboard 不完整。
+- `GAP`：只能从聊天或本地终端历史知道。
+
+## 6. PR, Review, CI
+
+| 项目 | 检查动作 | 预期证据 | 记录位置 | 判定标准 |
+| --- | --- | --- | --- | --- |
+| PR body | 检查是否引用 payload issue、audit tracker、run id、dashboard evidence | `Closes #payload`、`Updates #audit`、run id、manual intervention | PR Audit | `PASS`：读 PR 能复盘；`GAP`：只靠聊天 |
+| Internal tester/reviewer | 每个 agent report 发 PR issue comment | agent/model、PASS/BLOCK、findings by severity | PR comments | `PASS`：report 可查；`PARTIAL`：owner 代发；`GAP`：无 PR comment |
+| External review | UI/runtime 改动时做 AGY/Gemini 或 Claude ACP；docs-only 可记录不需要 | reviewer rationale 或 report comment | PR comments | `PASS`：需要时存在；`PARTIAL`：跳过理由清楚；`GAP`：需要却没做 |
+| CI/local checks | `pnpm lint`，runtime 改动再跑 tests；GitNexus detect | check output summary、CI status | PR body/comment | `PASS`：无 blocker；`GAP`：失败被当 follow-up |
+| Merge readiness | PR Inbox、GitHub checks、review comments | ready/not ready 原因 | PR Audit | `PASS`：dashboard+GitHub 可判断；`PARTIAL`：主要靠 GitHub；`GAP`：无法判断 |
+
+## 7. Security And Token
+
+| 项目 | 检查动作 | 预期证据 | 记录位置 | 判定标准 |
+| --- | --- | --- | --- | --- |
+| URL token | 看 dashboard URL | URL 不含 token | Security Audit | `PASS`：无 token；`GAP`：token 出现在 URL |
+| Auto-login | 打开 loopback dashboard | 自动进入 dashboard | Security Audit | `PASS`：无需粘贴 token；`PARTIAL`：fallback login 可用；`GAP`：必须手动找 token |
+| Cache control | 只读检查 index response header | `cache-control: no-store` | Security Audit | `PASS`：存在；`GAP`：HTML token 可能缓存 |
+| Mutation guard | 引用或执行安全的缺 token/bad Origin 测试 | 401/403 仍生效 | Security Audit | `PASS`：guard 不回退；`PARTIAL`：引用近期验证；`GAP`：无证据 |
+| Report hygiene | 检查 docs、PR body、comments、screenshots | 不含 token/raw secret/full worker log | Security Audit | `PASS`：只写摘要；`GAP`：泄露敏感内容 |
+
+## 8. Output Matrix
+
+每次 pilot report 必须包含：
+
+| Capability | Status | Evidence | Gap Owner |
+| --- | --- | --- | --- |
+| Work item selection visible | PASS/PARTIAL/GAP | issue/handoff/dashboard evidence | none/#45/#46 |
+| Run lifecycle visible | PASS/PARTIAL/GAP | status/observe/timeline | none/#45 |
+| Worker lifecycle visible | PASS/PARTIAL/GAP | Worker Runs/artifacts | none/#45 |
+| Gate/recovery auditable | PASS/PARTIAL/GAP | Gate Center/Recovery/Event Ledger | none/#45 |
+| Dashboard page coverage | PASS/PARTIAL/GAP | 13-page checklist | none |
+| Commander manual actions visible | PASS/PARTIAL/GAP | PR comments/events | #45 |
+| External review visible | PASS/PARTIAL/GAP | PR comments/dashboard artifacts | #45 |
+| PR/CI/merge readiness visible | PASS/PARTIAL/GAP | PR Inbox/CI/GitHub | #45/#46 |
+| Skill/state-machine integration | PASS/PARTIAL/GAP | ability to drive payload through agent-loop | #46 |
+| Token/security posture | PASS/PARTIAL/GAP | URL/header/report checks | none |
+
+结论必须回答：
+
+- 今天哪些能力可以信任。
+- 哪些能力部分可用。
+- 哪些缺口阻碍完整运营采用。
+- #45 是否应该作为下一项。
+- #46 是否应该等 #45 完成后再做。