instar 1.2.77 → 1.2.79

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-05-25T19:25:24.914Z",
-  "instarVersion": "1.2.77",
+  "generatedAt": "2026-05-25T21:49:09.698Z",
+  "instarVersion": "1.2.79",
   "entryCount": 191,
   "entries": {
     "hook:session-start": {
@@ -392,7 +392,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5dc56bb977d66452b6a563412f2ea396d6e684c52b233add8771a15288c6c208",
+      "contentHash": "fe103d29a6f5062e66367e0a131ef53bca638f5c35552bfeb8833cdce0634418",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -400,7 +400,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5dc56bb977d66452b6a563412f2ea396d6e684c52b233add8771a15288c6c208",
+      "contentHash": "fe103d29a6f5062e66367e0a131ef53bca638f5c35552bfeb8833cdce0634418",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -408,7 +408,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5dc56bb977d66452b6a563412f2ea396d6e684c52b233add8771a15288c6c208",
+      "contentHash": "fe103d29a6f5062e66367e0a131ef53bca638f5c35552bfeb8833cdce0634418",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -416,7 +416,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5dc56bb977d66452b6a563412f2ea396d6e684c52b233add8771a15288c6c208",
+      "contentHash": "fe103d29a6f5062e66367e0a131ef53bca638f5c35552bfeb8833cdce0634418",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -424,7 +424,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5dc56bb977d66452b6a563412f2ea396d6e684c52b233add8771a15288c6c208",
+      "contentHash": "fe103d29a6f5062e66367e0a131ef53bca638f5c35552bfeb8833cdce0634418",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -432,7 +432,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5dc56bb977d66452b6a563412f2ea396d6e684c52b233add8771a15288c6c208",
+      "contentHash": "fe103d29a6f5062e66367e0a131ef53bca638f5c35552bfeb8833cdce0634418",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -440,7 +440,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5dc56bb977d66452b6a563412f2ea396d6e684c52b233add8771a15288c6c208",
+      "contentHash": "fe103d29a6f5062e66367e0a131ef53bca638f5c35552bfeb8833cdce0634418",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -448,7 +448,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5dc56bb977d66452b6a563412f2ea396d6e684c52b233add8771a15288c6c208",
+      "contentHash": "fe103d29a6f5062e66367e0a131ef53bca638f5c35552bfeb8833cdce0634418",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -456,7 +456,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5dc56bb977d66452b6a563412f2ea396d6e684c52b233add8771a15288c6c208",
+      "contentHash": "fe103d29a6f5062e66367e0a131ef53bca638f5c35552bfeb8833cdce0634418",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -464,7 +464,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5dc56bb977d66452b6a563412f2ea396d6e684c52b233add8771a15288c6c208",
+      "contentHash": "fe103d29a6f5062e66367e0a131ef53bca638f5c35552bfeb8833cdce0634418",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -472,7 +472,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5dc56bb977d66452b6a563412f2ea396d6e684c52b233add8771a15288c6c208",
+      "contentHash": "fe103d29a6f5062e66367e0a131ef53bca638f5c35552bfeb8833cdce0634418",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -480,7 +480,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5dc56bb977d66452b6a563412f2ea396d6e684c52b233add8771a15288c6c208",
+      "contentHash": "fe103d29a6f5062e66367e0a131ef53bca638f5c35552bfeb8833cdce0634418",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -488,7 +488,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5dc56bb977d66452b6a563412f2ea396d6e684c52b233add8771a15288c6c208",
+      "contentHash": "fe103d29a6f5062e66367e0a131ef53bca638f5c35552bfeb8833cdce0634418",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -496,7 +496,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5dc56bb977d66452b6a563412f2ea396d6e684c52b233add8771a15288c6c208",
+      "contentHash": "fe103d29a6f5062e66367e0a131ef53bca638f5c35552bfeb8833cdce0634418",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -504,7 +504,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5dc56bb977d66452b6a563412f2ea396d6e684c52b233add8771a15288c6c208",
+      "contentHash": "fe103d29a6f5062e66367e0a131ef53bca638f5c35552bfeb8833cdce0634418",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -512,7 +512,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5dc56bb977d66452b6a563412f2ea396d6e684c52b233add8771a15288c6c208",
+      "contentHash": "fe103d29a6f5062e66367e0a131ef53bca638f5c35552bfeb8833cdce0634418",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -520,7 +520,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5dc56bb977d66452b6a563412f2ea396d6e684c52b233add8771a15288c6c208",
+      "contentHash": "fe103d29a6f5062e66367e0a131ef53bca638f5c35552bfeb8833cdce0634418",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -528,7 +528,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5dc56bb977d66452b6a563412f2ea396d6e684c52b233add8771a15288c6c208",
+      "contentHash": "fe103d29a6f5062e66367e0a131ef53bca638f5c35552bfeb8833cdce0634418",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -536,7 +536,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5dc56bb977d66452b6a563412f2ea396d6e684c52b233add8771a15288c6c208",
+      "contentHash": "fe103d29a6f5062e66367e0a131ef53bca638f5c35552bfeb8833cdce0634418",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -544,7 +544,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5dc56bb977d66452b6a563412f2ea396d6e684c52b233add8771a15288c6c208",
+      "contentHash": "fe103d29a6f5062e66367e0a131ef53bca638f5c35552bfeb8833cdce0634418",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -552,7 +552,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5dc56bb977d66452b6a563412f2ea396d6e684c52b233add8771a15288c6c208",
+      "contentHash": "fe103d29a6f5062e66367e0a131ef53bca638f5c35552bfeb8833cdce0634418",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -560,7 +560,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5dc56bb977d66452b6a563412f2ea396d6e684c52b233add8771a15288c6c208",
+      "contentHash": "fe103d29a6f5062e66367e0a131ef53bca638f5c35552bfeb8833cdce0634418",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -568,7 +568,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5dc56bb977d66452b6a563412f2ea396d6e684c52b233add8771a15288c6c208",
+      "contentHash": "fe103d29a6f5062e66367e0a131ef53bca638f5c35552bfeb8833cdce0634418",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -576,7 +576,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5dc56bb977d66452b6a563412f2ea396d6e684c52b233add8771a15288c6c208",
+      "contentHash": "fe103d29a6f5062e66367e0a131ef53bca638f5c35552bfeb8833cdce0634418",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -584,7 +584,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5dc56bb977d66452b6a563412f2ea396d6e684c52b233add8771a15288c6c208",
+      "contentHash": "fe103d29a6f5062e66367e0a131ef53bca638f5c35552bfeb8833cdce0634418",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -592,7 +592,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5dc56bb977d66452b6a563412f2ea396d6e684c52b233add8771a15288c6c208",
+      "contentHash": "fe103d29a6f5062e66367e0a131ef53bca638f5c35552bfeb8833cdce0634418",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -600,7 +600,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5dc56bb977d66452b6a563412f2ea396d6e684c52b233add8771a15288c6c208",
+      "contentHash": "fe103d29a6f5062e66367e0a131ef53bca638f5c35552bfeb8833cdce0634418",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -608,7 +608,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5dc56bb977d66452b6a563412f2ea396d6e684c52b233add8771a15288c6c208",
+      "contentHash": "fe103d29a6f5062e66367e0a131ef53bca638f5c35552bfeb8833cdce0634418",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -616,7 +616,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5dc56bb977d66452b6a563412f2ea396d6e684c52b233add8771a15288c6c208",
+      "contentHash": "fe103d29a6f5062e66367e0a131ef53bca638f5c35552bfeb8833cdce0634418",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -624,7 +624,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5dc56bb977d66452b6a563412f2ea396d6e684c52b233add8771a15288c6c208",
+      "contentHash": "fe103d29a6f5062e66367e0a131ef53bca638f5c35552bfeb8833cdce0634418",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -632,7 +632,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5dc56bb977d66452b6a563412f2ea396d6e684c52b233add8771a15288c6c208",
+      "contentHash": "fe103d29a6f5062e66367e0a131ef53bca638f5c35552bfeb8833cdce0634418",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -640,7 +640,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5dc56bb977d66452b6a563412f2ea396d6e684c52b233add8771a15288c6c208",
+      "contentHash": "fe103d29a6f5062e66367e0a131ef53bca638f5c35552bfeb8833cdce0634418",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -648,7 +648,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5dc56bb977d66452b6a563412f2ea396d6e684c52b233add8771a15288c6c208",
+      "contentHash": "fe103d29a6f5062e66367e0a131ef53bca638f5c35552bfeb8833cdce0634418",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -656,7 +656,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5dc56bb977d66452b6a563412f2ea396d6e684c52b233add8771a15288c6c208",
+      "contentHash": "fe103d29a6f5062e66367e0a131ef53bca638f5c35552bfeb8833cdce0634418",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -664,7 +664,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5dc56bb977d66452b6a563412f2ea396d6e684c52b233add8771a15288c6c208",
+      "contentHash": "fe103d29a6f5062e66367e0a131ef53bca638f5c35552bfeb8833cdce0634418",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -672,7 +672,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5dc56bb977d66452b6a563412f2ea396d6e684c52b233add8771a15288c6c208",
+      "contentHash": "fe103d29a6f5062e66367e0a131ef53bca638f5c35552bfeb8833cdce0634418",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -680,7 +680,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5dc56bb977d66452b6a563412f2ea396d6e684c52b233add8771a15288c6c208",
+      "contentHash": "fe103d29a6f5062e66367e0a131ef53bca638f5c35552bfeb8833cdce0634418",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -688,7 +688,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5dc56bb977d66452b6a563412f2ea396d6e684c52b233add8771a15288c6c208",
+      "contentHash": "fe103d29a6f5062e66367e0a131ef53bca638f5c35552bfeb8833cdce0634418",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -696,7 +696,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5dc56bb977d66452b6a563412f2ea396d6e684c52b233add8771a15288c6c208",
+      "contentHash": "fe103d29a6f5062e66367e0a131ef53bca638f5c35552bfeb8833cdce0634418",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -704,7 +704,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5dc56bb977d66452b6a563412f2ea396d6e684c52b233add8771a15288c6c208",
+      "contentHash": "fe103d29a6f5062e66367e0a131ef53bca638f5c35552bfeb8833cdce0634418",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -712,7 +712,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5dc56bb977d66452b6a563412f2ea396d6e684c52b233add8771a15288c6c208",
+      "contentHash": "fe103d29a6f5062e66367e0a131ef53bca638f5c35552bfeb8833cdce0634418",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -720,7 +720,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5dc56bb977d66452b6a563412f2ea396d6e684c52b233add8771a15288c6c208",
+      "contentHash": "fe103d29a6f5062e66367e0a131ef53bca638f5c35552bfeb8833cdce0634418",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -728,7 +728,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5dc56bb977d66452b6a563412f2ea396d6e684c52b233add8771a15288c6c208",
+      "contentHash": "fe103d29a6f5062e66367e0a131ef53bca638f5c35552bfeb8833cdce0634418",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -744,7 +744,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5dc56bb977d66452b6a563412f2ea396d6e684c52b233add8771a15288c6c208",
+      "contentHash": "fe103d29a6f5062e66367e0a131ef53bca638f5c35552bfeb8833cdce0634418",
       "since": "2025-01-01"
     },
     "cli:init": {
@@ -1440,7 +1440,7 @@
       "type": "subsystem",
       "domain": "server",
       "sourcePath": "src/server/AgentServer.ts",
-      "contentHash": "074c270761f1a6bd512d77c09465217087d169a19d012a9b2bf76d270b5811e5",
+      "contentHash": "823d36d25490f6afb6968e96d27a538ce031dae7d97a7f2c979ddab707d2918a",
       "since": "2025-01-01"
     },
     "subsystem:session-manager": {

package/upgrades/1.2.78.md

@@ -0,0 +1,49 @@
+# Upgrade Guide — vNEXT
+
+<!-- bump: patch -->
+<!-- patch = bug fixes, refactors, test additions, doc updates -->
+
+## What Changed
+
+Two Codex-parity follow-ups from the codex-full-parity spec (§7), both hardening the Codex
+safety-hook layer that shipped in the previous release:
+
+1. **Live-config drift detection for the Codex safety guards (C4).** A new check
+   (`checkInstalledCodexHookTrust`) reads what's ACTUALLY installed on a Codex agent — its
+   `.codex/hooks.json` plus the trust state in `~/.codex/config.toml` — and reports `ok` / `drift`
+   / `skip`. It confirms the end-of-turn review trio (response-review + claim-intercept-response +
+   scope-coherence) is present AND trusted (not disabled), and that the anti-deferral hook hasn't
+   drifted back onto the Stop event. The existing canary asserts the *blueprint* (what instar would
+   install); this catches *reality* drifting from it — a hand-edited or clobbered config, a
+   never-trusted ("dark") agent, or a guard a user turned off — which the blueprint check can't see.
+
+2. **Stop-payload runtime-verified (B1).** The two Codex Stop review-checkers read a
+   `last_assistant_message` field. We had confirmed Codex's binary *declares* that field; this
+   release confirms it at RUNTIME — a live Codex 0.133 turn was captured and the field held the
+   exact agent reply. So those checkers genuinely receive the response on Codex. No code change;
+   this closes the schema-vs-runtime gap the convergence review flagged.
+
+## What to Tell Your User
+
+- **Your Codex agent's safety guards now have a reality check**: "There's a new check that looks at
+  what's actually wired and switched on for a Codex agent — not just what should be — so a guard
+  can't quietly end up uninstalled, untrusted, or turned off without it being noticeable."
+- Nothing for you to do — it ships automatically on update.
+
+## Summary of New Capabilities
+
+| Capability | How to Use |
+|-----------|-----------|
+| Codex installed-config drift check (`checkInstalledCodexHookTrust`) | Programmatic — read-only health check of a Codex agent's hooks + trust state |
+| Codex Stop review-checkers runtime-verified | Automatic — no action needed |
+
+## Evidence
+
+- **C4**: `checkInstalledCodexHookTrust` reads the on-disk `.codex/hooks.json` + `config.toml`
+  `[hooks.state]` (reusing `codexHookTrust`) and returns `ok`/`drift`/`skip`. 5 new unit tests cover
+  skip (no hooks.json), drift (untrusted/dark agent), ok (trio present + trusted), drift (a slot
+  explicitly disabled), and a clobbered config where `deferral-detector` wrongly sits on Stop. 28
+  codex-area tests green; `tsc` clean. Side-effects review: `upgrades/side-effects/codex-parity-c4-canary-drift.md`.
+- **B1**: captured a real Codex 0.133 Stop payload from a live `codex exec` turn; payload keys
+  include `last_assistant_message`, which held the exact reply ("The quick brown fox jumps over the
+  lazy dog."). Confirms `response-review.js` + `claim-intercept-response.js` are fed at runtime on Codex.

package/upgrades/1.2.79.md

@@ -0,0 +1,68 @@
+# Upgrade Guide — vNEXT
+
+<!-- bump: minor -->
+<!-- minor = new capability, backward compatible -->
+
+## What Changed
+
+Threadline collaboration is now **visible to the operator** instead of happening
+in an invisible side channel (CMT-509). Driven by a real incident: an agent-to-
+agent collaboration ran entirely in background worker sessions and never surfaced
+to the operator, AND the "report back" commitment resolved with the operator never
+informed.
+
+**The fixes (a quiet MVP — convergence scoped it down from "surface everything"
+so it doesn't violate the near-silent-notifications standard):**
+
+1. **Report-back commitments wait for the user.** A `threadline-reply` commitment
+   no longer resolves on delivery-mode alone — it resolves only when the reply was
+   actually surfaced to the user (live-inject into the topic session, or a
+   resume-pending whose Telegram surface confirmed). An un-surfaced reply leaves
+   the commitment OPEN (beacon keeps heartbeating; 7-day TTL backstop).
+2. **Parentless conversations surface to a dedicated Threadline topic.** When a
+   peer reaches out cold (no parent topic), a single warranted first contact posts
+   to ONE dedicated "Threadline" topic — created on demand + reused, kept separate
+   from the generic attention list, never per-thread. One quiet post per
+   conversation (deduped), gated by the warrants-a-reply check so a multi-turn
+   exchange doesn't flood the operator.
+3. Topic-bound conversations continue to surface in their parent topic
+   (TopicLinkageHandler), at most one user-facing post per reply.
+
+## What to Tell Your User
+
+When another agent collaborates with me, you'll now see it: cold outreach shows up
+as one quiet heads-up in a dedicated Threadline topic, and a collaboration tied to
+one of your conversations surfaces right there. And "I'll report back" now actually
+waits until you've been told — it won't quietly mark itself done. It stays
+near-silent: only genuinely new, relevant content surfaces.
+
+## Summary of New Capabilities
+
+| Capability | How to Use |
+|-----------|-----------|
+| Parentless-conversation surfacing | Automatic; one dedicated "Threadline" topic, deduped, near-silent |
+| Commitment resolves only after user-facing surface | Automatic; un-surfaced replies keep the commitment open |
+
+## Migration Notes
+
+Additive. New state file `.instar/threadline/collaboration-surface.json` (dedicated
+topic id + dedupe). Behind `threadline.surfaceCollaboration` (default on). No
+`~/.codex` or relay change.
+
+## Evidence
+
+- Spec: `docs/specs/THREADLINE-COLLABORATION-SURFACING-SPEC.md` (+ ELI16 +
+  convergence report — scoped down to a low-noise MVP; §3 found to need no code
+  change against the live behavior).
+- Tests: `CollaborationSurfacer.test.ts` (9 — routing/dedupe/topic-reuse/JSON-strip/
+  non-fatal), `TopicLinkageHandler.test.ts` (+1 regression: resume-pending with no
+  surface keeps the commitment open), wiring-integrity
+  `collaboration-surfacing-wiring.test.ts` (5 — constructed + invoked at both seams).
+- Test-as-self on live `instar-codey` before merge (cold peer note → one operator
+  update, no spam, commitment resolves only after).
+
+## Rollback
+
+Behind `threadline.surfaceCollaboration` (flag off = today's behavior). The
+commitment-resolution change is a guard on an existing call; revert removes it. No
+state migration.

package/upgrades/side-effects/codex-parity-c4-canary-drift.md

@@ -0,0 +1,33 @@
+# Side-Effects Review: C4 — canary live-config drift detector + B1 runtime-verified
+
+## Change
+1. **C4** — new `checkInstalledCodexHookTrust(projectDir, codexHome?)` in codexHookContractCanary.ts:
+   reads the ACTUAL installed `.codex/hooks.json` + `$CODEX_HOME/config.toml [hooks.state]` (reusing
+   codexHookTrust) and reports `ok` / `drift` / `skip` — asserting the Stop review trio is present
+   AND every instar slot is trusted (not enabled=false), and that deferral-detector is NOT on Stop.
+   Layer A asserts the BUILDER output; Layer C catches reality drifting (clobbered hooks.json,
+   dark/untrusted agent, user-disabled guard). Runtime/per-agent (skip when no hooks.json).
+2. **B1** — spec updated: response-review/claim-intercept Codex Stop-payload is now RUNTIME-VERIFIED
+   (captured a real Codex 0.133 Stop payload; `last_assistant_message` held the exact reply). No code.
+
+## Why
+Convergence review §7 C4 + B1. C4 makes the drift-alarm check reality, not just the blueprint —
+the reviewer's point that a hardcoded-trio assertion would encode the next drift as correct. B1
+closes the schema≠runtime gap for the two Stop review-checkers.
+
+## Scope / blast radius
+- C4 is a new read-only function (no mutation); reuses codexHookTrust (pure). Imported at top
+  (no lazy require — that broke under the ESM test runner). Not yet wired into a scheduled health
+  check — it's a building block a runtime caller (G5 arming canary / health) can use. RULE 3:
+  the canary module already carries a Rule 3.1 rationale; this extends it (read-only config parse).
+- B1: docs-only (spec status update).
+
+## Signal vs Authority / Rollback
+- Read-only check, no authority. Rollback: remove the function + tests + revert the spec line.
+
+## Tests
+- codexHookContractCanary.test.ts: +5 (skip/drift-untrusted/ok/disabled/clobbered-trio). 11 green.
+  installCodexHooks + codexHookTrust unaffected. tsc clean.
+
+## Publish
+- PR to JKHeadley/main (codex-parity-followups). Squash-merge.