instar 0.28.121 → 0.28.123

package/dist/core/PostUpdateMigrator.d.ts

@@ -72,6 +72,20 @@ export declare class PostUpdateMigrator {
      * each migration is idempotent.
      */
     migrate(): MigrationResult;
+    /**
+     * Async migration superset — runs the sync migrate() then performs the
+     * async parity-renderings backfill that needs rule.remediate() Promises.
+     * Callers in async contexts should prefer migrateAsync() to ensure all
+     * post-update side effects (including primitive-rendering backfill) are
+     * complete before returning.
+     *
+     * Sync callers can still use migrate() and rely on the next async pass to
+     * pick up the parity backfill. The marker in _instar_migrations ensures
+     * the backfill runs exactly once even across mixed sync/async callers.
+     */
+    migrateAsync(): Promise<MigrationResult>;
+    private migrateParityRenderings;
+    private migrateParitySentinelTrust;
     private migrateProviderPortability;
     private migrateFleetWatchdog;
     private migrateContextDeathAntiPattern;

package/dist/core/PostUpdateMigrator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PostUpdateMigrator.d.ts","sourceRoot":"","sources":["../../src/core/PostUpdateMigrator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AA8BH,OAAO,EAEL,KAAK,YAAY,EACjB,KAAK,qBAAqB,EAC3B,MAAM,yBAAyB,CAAC;AAIjC,MAAM,WAAW,eAAe;IAC9B,wBAAwB;IACxB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,kCAAkC;IAClC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,2CAA2C;IAC3C,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,OAAO,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,MAAM,CAAiB;IAC/B;;;;;;OAMG;IACH,OAAO,CAAC,UAAU,CAAiC;gBAEvC,MAAM,EAAE,cAAc;IAIlC;;;;;;;;;;;OAWG;IACH,YAAY,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI;IAItC;;;;;;OAMG;IACG,eAAe,CACnB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,qBAAqB,CAAC;IAIjC,OAAO,CAAC,aAAa;IAOrB;;;OAGG;IACH,OAAO,IAAI,eAAe;IA4C1B,OAAO,CAAC,0BAA0B;IAkElC,OAAO,CAAC,oBAAoB;IAqH5B,OAAO,CAAC,8BAA8B;IA2EtC;;;;OAIG;IACH,OAAO,CAAC,gBAAgB;IAaxB;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,0BAA0B;IA8BlC;;;OAGG;IACH,OAAO,CAAC,oBAAoB;IAW5B;;;;;;;;;OASG;IACH,OAAO,CAAC,kBAAkB;IA2B1B;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACH,OAAO,CAAC,yBAAyB;IA4HjC;6EACyE;IACzE,OAAO,CAAC,wBAAwB;IAShC;sDACkD;IAClD,OAAO,CAAC,wBAAwB;IAQhC;;;;OAIG;IACH,OAAO,CAAC,YAAY;IAiKpB;;;;;;;;OAQG;IACH,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,GAAG,IAAI;IA6CvE;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;IA+DzB;;;OAGG;IACH,OAAO,CAAC,wBAAwB;IAkChC;;;;;;;;;OASG;IACH,OAAO,CAAC,wBAAwB;IAoEhC;;;;;;OAMG;IACH,OAAO,CAAC,oBAAoB;IAiE5B;;;;;OAKG;IACH,OAAO,CAAC,2BAA2B;IA8BnC;;;;OAIG;IACH,OAAO,CAAC,wBAAwB;IAwGhC;;;;;;OAMG;IACH,OAAO,CAAC,8BAA8B;IAwDtC,OAAO,CAAC,0BAA0B;IA8DlC;;;OAGG;IACH,OAAO,CAAC,eAAe;IAgXvB;;;OAGG;IACH,OAAO,CAAC,cAAc;IA0FtB;;;OAGG;IACH,OAAO,CAAC,eAAe;IA0NvB;;;OAGG;IACH,OAAO,CAAC,aAAa;IAqFrB;;;OAGG;IACH;;;OAGG;IACH,OAAO,CAAC,wBAAwB;IAqChC,OAAO,CAAC,gBAAgB;IAiBxB;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH,OAAO,CAAC,qBAAqB;IAkE7B;;;;;;;;;;;;;;;;;;;OAmBG;IACH,OAAO,CAAC,0BAA0B;IAgDlC;;;;;OAKG;IACH,OAAO,CAAC,oBAAoB;IAkC5B;;;;;;;;;;OAUG;IACH,OAAO,CAAC,kBAAkB;IA2C1B;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;IA+BzB,OAAO,CAAC,oBAAoB;IAgC5B;;;OAGG;IACH,OAAO,CAAC,aAAa;IAyBrB;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAqC9B;;;OAGG;IACH,cAAc,CAAC,IAAI,EAAE,eAAe,GAAG,qBAAqB,GAAG,yBAAyB,GAAG,mBAAmB,GAAG,wBAAwB,GAAG,8BAA8B,GAAG,2BAA2B,GAAG,4BAA4B,GAAG,iBAAiB,GAAG,0BAA0B,GAAG,wBAAwB,GAAG,iBAAiB,GAAG,0BAA0B,GAAG,uBAAuB,GAAG,iBAAiB,GAAG,MAAM;IAoB3Z,oFAAoF;IACpF,iCAAiC,IAAI,MAAM;IAI3C,6EAA6E;IAC7E,yBAAyB,IAAI,MAAM;IAInC,OAAO,CAAC,mBAAmB;IA0V3B,OAAO,CAAC,wBAAwB;IAmEhC,OAAO,CAAC,2BAA2B;IA0DnC,OAAO,CAAC,yBAAyB;IAuGjC,OAAO,CAAC,2BAA2B;IAsHnC,OAAO,CAAC,qBAAqB;IAqP7B,OAAO,CAAC,uBAAuB;IA6H/B,OAAO,CAAC,2BAA2B;IA8GnC,OAAO,CAAC,iCAAiC;IA6DzC,OAAO,CAAC,4BAA4B;IA4LpC;;;;;;;;;;OAUG;IACH;;;;;;;;;;;OAWG;IAEH,gBAAuB,iCAAiC,EAAE,WAAW,CAAC,MAAM,CAAC,CA4B1E;IAEH;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,8BAA8B;IAiHtC,OAAO,CAAC,uBAAuB;IA4B/B;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;IAczB,OAAO,CAAC,sBAAsB;IAwC9B,OAAO,CAAC,iBAAiB;IAwBzB,OAAO,CAAC,mBAAmB;IAoB3B,OAAO,CAAC,8BAA8B;IAoHtC,OAAO,CAAC,+BAA+B;IAmJvC,OAAO,CAAC,oBAAoB;IAO5B,OAAO,CAAC,qBAAqB;IA4N7B,OAAO,CAAC,qBAAqB;IA4H7B,OAAO,CAAC,6BAA6B;IAyKrC,OAAO,CAAC,0BAA0B;IAgClC,OAAO,CAAC,gBAAgB;IAqFxB,OAAO,CAAC,6BAA6B;CAoCtC"}
+{"version":3,"file":"PostUpdateMigrator.d.ts","sourceRoot":"","sources":["../../src/core/PostUpdateMigrator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AA8BH,OAAO,EAEL,KAAK,YAAY,EACjB,KAAK,qBAAqB,EAC3B,MAAM,yBAAyB,CAAC;AAIjC,MAAM,WAAW,eAAe;IAC9B,wBAAwB;IACxB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,kCAAkC;IAClC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,2CAA2C;IAC3C,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,OAAO,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,MAAM,CAAiB;IAC/B;;;;;;OAMG;IACH,OAAO,CAAC,UAAU,CAAiC;gBAEvC,MAAM,EAAE,cAAc;IAIlC;;;;;;;;;;;OAWG;IACH,YAAY,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI;IAItC;;;;;;OAMG;IACG,eAAe,CACnB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,qBAAqB,CAAC;IAIjC,OAAO,CAAC,aAAa;IAOrB;;;OAGG;IACH,OAAO,IAAI,eAAe;IA8B1B;;;;;;;;;;OAUG;IACG,YAAY,IAAI,OAAO,CAAC,eAAe,CAAC;YA4BhC,uBAAuB;IAkGrC,OAAO,CAAC,0BAA0B;IAkGlC,OAAO,CAAC,0BAA0B;IAkElC,OAAO,CAAC,oBAAoB;IAqH5B,OAAO,CAAC,8BAA8B;IA2EtC;;;;OAIG;IACH,OAAO,CAAC,gBAAgB;IAaxB;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,0BAA0B;IA8BlC;;;OAGG;IACH,OAAO,CAAC,oBAAoB;IAW5B;;;;;;;;;OASG;IACH,OAAO,CAAC,kBAAkB;IA2B1B;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACH,OAAO,CAAC,yBAAyB;IA4HjC;6EACyE;IACzE,OAAO,CAAC,wBAAwB;IAShC;sDACkD;IAClD,OAAO,CAAC,wBAAwB;IAQhC;;;;OAIG;IACH,OAAO,CAAC,YAAY;IAiKpB;;;;;;;;OAQG;IACH,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,GAAG,IAAI;IA6CvE;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;IA+DzB;;;OAGG;IACH,OAAO,CAAC,wBAAwB;IAkChC;;;;;;;;;OASG;IACH,OAAO,CAAC,wBAAwB;IAoEhC;;;;;;OAMG;IACH,OAAO,CAAC,oBAAoB;IAiE5B;;;;;OAKG;IACH,OAAO,CAAC,2BAA2B;IA8BnC;;;;OAIG;IACH,OAAO,CAAC,wBAAwB;IAwGhC;;;;;;OAMG;IACH,OAAO,CAAC,8BAA8B;IAwDtC,OAAO,CAAC,0BAA0B;IA8DlC;;;OAGG;IACH,OAAO,CAAC,eAAe;IAgXvB;;;OAGG;IACH,OAAO,CAAC,cAAc;IA0FtB;;;OAGG;IACH,OAAO,CAAC,eAAe;IA0NvB;;;OAGG;IACH,OAAO,CAAC,aAAa;IAqFrB;;;OAGG;IACH;;;OAGG;IACH,OAAO,CAAC,wBAAwB;IAqChC,OAAO,CAAC,gBAAgB;IAiBxB;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH,OAAO,CAAC,qBAAqB;IAkE7B;;;;;;;;;;;;;;;;;;;OAmBG;IACH,OAAO,CAAC,0BAA0B;IAgDlC;;;;;OAKG;IACH,OAAO,CAAC,oBAAoB;IAkC5B;;;;;;;;;;OAUG;IACH,OAAO,CAAC,kBAAkB;IA2C1B;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;IA+BzB,OAAO,CAAC,oBAAoB;IAgC5B;;;OAGG;IACH,OAAO,CAAC,aAAa;IAyBrB;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAqC9B;;;OAGG;IACH,cAAc,CAAC,IAAI,EAAE,eAAe,GAAG,qBAAqB,GAAG,yBAAyB,GAAG,mBAAmB,GAAG,wBAAwB,GAAG,8BAA8B,GAAG,2BAA2B,GAAG,4BAA4B,GAAG,iBAAiB,GAAG,0BAA0B,GAAG,wBAAwB,GAAG,iBAAiB,GAAG,0BAA0B,GAAG,uBAAuB,GAAG,iBAAiB,GAAG,MAAM;IAoB3Z,oFAAoF;IACpF,iCAAiC,IAAI,MAAM;IAI3C,6EAA6E;IAC7E,yBAAyB,IAAI,MAAM;IAInC,OAAO,CAAC,mBAAmB;IA0V3B,OAAO,CAAC,wBAAwB;IAmEhC,OAAO,CAAC,2BAA2B;IA0DnC,OAAO,CAAC,yBAAyB;IAuGjC,OAAO,CAAC,2BAA2B;IAsHnC,OAAO,CAAC,qBAAqB;IAqP7B,OAAO,CAAC,uBAAuB;IA6H/B,OAAO,CAAC,2BAA2B;IA8GnC,OAAO,CAAC,iCAAiC;IA6DzC,OAAO,CAAC,4BAA4B;IA4LpC;;;;;;;;;;OAUG;IACH;;;;;;;;;;;OAWG;IAEH,gBAAuB,iCAAiC,EAAE,WAAW,CAAC,MAAM,CAAC,CA4B1E;IAEH;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,8BAA8B;IAiHtC,OAAO,CAAC,uBAAuB;IA4B/B;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;IAczB,OAAO,CAAC,sBAAsB;IAwC9B,OAAO,CAAC,iBAAiB;IAwBzB,OAAO,CAAC,mBAAmB;IAoB3B,OAAO,CAAC,8BAA8B;IAoHtC,OAAO,CAAC,+BAA+B;IAmJvC,OAAO,CAAC,oBAAoB;IAO5B,OAAO,CAAC,qBAAqB;IA4N7B,OAAO,CAAC,qBAAqB;IA4H7B,OAAO,CAAC,6BAA6B;IAyKrC,OAAO,CAAC,0BAA0B;IAgClC,OAAO,CAAC,gBAAgB;IAqFxB,OAAO,CAAC,6BAA6B;CAoCtC"}

package/dist/core/PostUpdateMigrator.js

@@ -111,8 +111,214 @@ export class PostUpdateMigrator {
         this.migrateContextDeathAntiPattern(result);
         this.migrateProviderPortability(result);
         this.migrateFleetWatchdog(result);
+        this.migrateParitySentinelTrust(result);
         return result;
     }
+    /**
+     * Async migration superset — runs the sync migrate() then performs the
+     * async parity-renderings backfill that needs rule.remediate() Promises.
+     * Callers in async contexts should prefer migrateAsync() to ensure all
+     * post-update side effects (including primitive-rendering backfill) are
+     * complete before returning.
+     *
+     * Sync callers can still use migrate() and rely on the next async pass to
+     * pick up the parity backfill. The marker in _instar_migrations ensures
+     * the backfill runs exactly once even across mixed sync/async callers.
+     */
+    async migrateAsync() {
+        const result = this.migrate();
+        try {
+            await this.migrateParityRenderings(result);
+        }
+        catch (err) {
+            result.errors.push(`parity-renderings: backfill failed: ${err instanceof Error ? err.message : String(err)}`);
+        }
+        return result;
+    }
+    // ── Parity Rule Rendering Backfill ─────────────────────────────────
+    //
+    // For every registered parity rule (Layer-3 functional primitive), iterate
+    // its canonical instances and call remediate() for each enabled framework.
+    // This is the Migration Parity §5-style backfill for primitive-renderings
+    // that PRs #252 (Skill), #253 (Hook), #254 (Memory) deferred — existing
+    // deployed agents pick up the canonical→framework rendering on update.
+    //
+    // skillParityRule: refuse-on-conflict (per §5). User-edited skill files
+    //   are preserved with operator-action requirement.
+    // hookParityRule: alwaysOverwrite=true (per §4). Built-in hooks ALWAYS
+    //   re-render from canonical; user edits captured in audit event for
+    //   git-recovery.
+    // memoryParityRule: refuse-on-conflict (per §5). Memory canonical content
+    //   is operator-managed; system never clobbers.
+    //
+    // Idempotent via _instar_migrations marker AND each rule's verify-first
+    // pattern (no-op when rendering matches canonical).
+    async migrateParityRenderings(result) {
+        const configPath = path.join(this.config.stateDir, 'config.json');
+        if (!fs.existsSync(configPath)) {
+            result.skipped.push('parity-renderings: config.json not found');
+            return;
+        }
+        let config;
+        try {
+            config = JSON.parse(fs.readFileSync(configPath, 'utf-8'));
+        }
+        catch (err) {
+            result.errors.push(`parity-renderings: config.json read failed: ${err instanceof Error ? err.message : String(err)}`);
+            return;
+        }
+        const migrations = (config._instar_migrations ?? []);
+        const marker = 'parity-renderings-backfill-v1';
+        if (migrations.some(m => m.startsWith(marker))) {
+            result.skipped.push('parity-renderings: already migrated');
+            return;
+        }
+        // Lazy-import registry so PostUpdateMigrator doesn't pull the entire
+        // parity graph at startup for agents that never invoke migrate().
+        const { listParityRules } = await import('../providers/parity/registry.js');
+        // Determine enabled frameworks from config — default to claude-code+codex-cli
+        // for portable agents, claude-code-only as a safe fallback.
+        const frameworks = (() => {
+            const enabled = config.enabledFrameworks;
+            if (Array.isArray(enabled) && enabled.length > 0) {
+                return enabled.filter(f => f === 'claude-code' || f === 'codex-cli');
+            }
+            return ['claude-code'];
+        })();
+        const rules = listParityRules();
+        let renderedCount = 0;
+        let skippedCount = 0;
+        for (const rule of rules) {
+            let instances;
+            try {
+                instances = await rule.listInstances(this.config.projectDir);
+            }
+            catch (err) {
+                result.errors.push(`parity-renderings: ${rule.primitive} listInstances failed: ${err instanceof Error ? err.message : String(err)}`);
+                continue;
+            }
+            for (const instance of instances) {
+                for (const framework of frameworks) {
+                    if (!rule.frameworks.includes(framework))
+                        continue;
+                    try {
+                        await rule.remediate(this.config.projectDir, instance, framework);
+                        renderedCount += 1;
+                        result.upgraded.push(`parity-renderings: ${rule.primitive}/${instance} → ${framework}`);
+                    }
+                    catch (err) {
+                        // refuse-on-conflict (mirror-trust without alwaysOverwrite) is
+                        // expected for user-edited renderings — not an error, just a
+                        // skip. Capture for visibility.
+                        const msg = err instanceof Error ? err.message : String(err);
+                        if (msg.includes('user-edit-conflict')) {
+                            skippedCount += 1;
+                            result.skipped.push(`parity-renderings: ${rule.primitive}/${instance} on ${framework} — ${msg}`);
+                        }
+                        else {
+                            result.errors.push(`parity-renderings: ${rule.primitive}/${instance} on ${framework} — ${msg}`);
+                        }
+                    }
+                }
+            }
+        }
+        // Mark migration complete regardless of per-instance skips — the marker
+        // means "this backfill pass ran successfully," not "every rendering
+        // succeeded." Operators resolve user-edit-conflicts via /spec-converge.
+        migrations.push(`${marker}-${new Date().toISOString()}`);
+        config._instar_migrations = migrations;
+        fs.writeFileSync(configPath, JSON.stringify(config, null, 2));
+        if (renderedCount === 0 && skippedCount === 0) {
+            result.skipped.push('parity-renderings: no canonical instances found (new agent or no primitives shipped yet)');
+        }
+    }
+    // ── Parity Sentinel trust profile seed ─────────────────────────────
+    //
+    // FrameworkParitySentinel.shouldRemediate now consults AdaptiveTrust on
+    // mirror-trust rules: trust level 'log' or 'autonomous' allows remediation,
+    // 'approve-*' or 'blocked' downgrades to flag-only. AdaptiveTrust's
+    // DEFAULT_TRUST for 'modify' is 'approve-always', which would silently turn
+    // every mirror-trust rule into flag-only for existing agents on update.
+    //
+    // This migration seeds state/trust-profile.json with a parity-sentinel
+    // service entry at level 'log' (auto-elevatable, never blocking by default)
+    // so existing agents preserve the v0.1 remediate-by-default behavior. New
+    // agents get the same seed via the natural AdaptiveTrust flow once the
+    // sentinel first calls getTrustLevel.
+    //
+    // Idempotent: re-runs are no-ops via the _instar_migrations marker AND a
+    // content-sniff (skip if parity-sentinel service entry already exists).
+    migrateParitySentinelTrust(result) {
+        const configPath = path.join(this.config.stateDir, 'config.json');
+        const trustProfilePath = path.join(this.config.stateDir, 'state', 'trust-profile.json');
+        if (!fs.existsSync(configPath)) {
+            result.skipped.push('parity-sentinel-trust: config.json not found');
+            return;
+        }
+        let config;
+        try {
+            config = JSON.parse(fs.readFileSync(configPath, 'utf-8'));
+        }
+        catch (err) {
+            result.errors.push(`parity-sentinel-trust: config.json read failed: ${err instanceof Error ? err.message : String(err)}`);
+            return;
+        }
+        const migrations = (config._instar_migrations ?? []);
+        const marker = 'parity-sentinel-trust-seed';
+        if (migrations.some(m => m.startsWith(marker))) {
+            result.skipped.push('parity-sentinel-trust: already migrated');
+            return;
+        }
+        // Load existing trust profile (or create skeleton). Content-sniff: skip
+        // if a parity-sentinel service entry already exists (operator-set).
+        let profile;
+        try {
+            if (fs.existsSync(trustProfilePath)) {
+                profile = JSON.parse(fs.readFileSync(trustProfilePath, 'utf-8'));
+            }
+            else {
+                profile = {
+                    services: {},
+                    global: {
+                        maturity: 0,
+                        lastEvent: 'Profile created by parity-sentinel-trust-seed migration',
+                        lastEventAt: new Date().toISOString(),
+                        floor: 'collaborative',
+                    },
+                };
+            }
+        }
+        catch (err) {
+            result.errors.push(`parity-sentinel-trust: trust-profile.json read failed: ${err instanceof Error ? err.message : String(err)}`);
+            return;
+        }
+        if (profile.services['parity-sentinel']) {
+            // Operator already configured it — never overwrite. Mark migration done.
+            migrations.push(`${marker}-${new Date().toISOString()}-existing-entry-preserved`);
+            config._instar_migrations = migrations;
+            fs.writeFileSync(configPath, JSON.stringify(config, null, 2));
+            result.skipped.push('parity-sentinel-trust: existing entry preserved');
+            return;
+        }
+        const now = new Date().toISOString();
+        profile.services['parity-sentinel'] = {
+            service: 'parity-sentinel',
+            operations: {
+                modify: { level: 'log', source: 'default', changedAt: now },
+            },
+            history: { successCount: 0, incidentCount: 0, streakSinceIncident: 0 },
+        };
+        // Ensure state dir exists before writing the profile.
+        const stateDir = path.dirname(trustProfilePath);
+        if (!fs.existsSync(stateDir)) {
+            fs.mkdirSync(stateDir, { recursive: true });
+        }
+        fs.writeFileSync(trustProfilePath, JSON.stringify(profile, null, 2));
+        migrations.push(`${marker}-${now}`);
+        config._instar_migrations = migrations;
+        fs.writeFileSync(configPath, JSON.stringify(config, null, 2));
+        result.upgraded.push('parity-sentinel-trust: seeded trust profile entry at level=log');
+    }
     // ── Provider portability v1.0.0 — Phase 7 migration entry ──────────
     //
     // Idempotent migrator that runs on every `instar update`. Confirms the