instar 1.3.1002 → 1.3.1004

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.1002",
+  "version": "1.3.1004",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/scripts/lib/classify-tier.mjs

@@ -92,7 +92,21 @@ const NEW_CAPABILITY_PATTERNS = [
 // object literal). Without this guard the bare `key: value` pattern fires on
 // almost every TS change. We only treat a `key: value` addition as a new config
 // key when the diff also mentions a recognizable config anchor.
-const CONFIG_SURFACE_HINT = /(ConfigDefaults|config\.json|defaultConfig|InstarConfig|\.config\b|configSchema)/;
+// `\.config\b` used to be an alternative here, and it matched a FILENAME REFERENCE rather than a
+// config surface. A script that merely READS `vitest.push.config.ts` matched it; combined with any
+// ordinary object literal (`const out = { slice: 6, runs: 2 }`) it fired "new config key added" and
+// raised that change's risk floor to 2 — for a read-only developer script that adds no config key at
+// all.
+//
+// WHY THAT IS WORTH A FIX RATHER THAN A SHRUG. The floor is what makes a tier declaration mean
+// something, and declaring under it is treated here as a serious, audited act. A floor that fires on
+// a filename teaches authors that below-floor declarations are routine — which is exactly how a real
+// floor gets argued past later. A noisy guard degrades the guard it belongs to.
+//
+// The remaining anchors are all genuine config SURFACES: a config module, the config file itself by
+// name, or a config type. `foo.config.ts` as a mere mention is no longer one of them — a diff that
+// really adds a config key will name one of the others.
+const CONFIG_SURFACE_HINT = /(ConfigDefaults|config\.json|defaultConfig|InstarConfig|configSchema)/;
 
 /**
  * @param {object} input

package/skills/spec-converge/SKILL.md

@@ -168,10 +168,54 @@ The external passes are **NON-SKIPPABLE** whenever a non-Claude framework was **
 
 Convergence criteria (BOTH must hold — additive, per Autonomy Principle 2):
 
-1. **The new round produces no material new issues.** "Material" means any finding that would require a spec change if unaddressed. Cosmetic findings, repeats of already-addressed concerns, and minor phrasing quibbles are non-material. (A cheap-to-change-after tag the Decision-Completeness reviewer contested and rejected IS a material finding.)
+1. **No DESIGN-class findings for TWO consecutive rounds.**
+
+   **Why this replaced "no material new issues" (2026-07-27).** "Material" was defined as *any finding
+   that would require a spec change if unaddressed* — and a contract-precision or naming finding DOES
+   require a spec edit, so it counted. **On a spec that appends its own review history, the reviewable
+   surface grows every round, and a diligent reviewer will always find precision to add on a larger
+   surface. So the loop could not terminate BY CONSTRUCTION for that document shape**, and the 10-round
+   cap fired for a reason unrelated to whether the design was sound.
+   That is not a hypothesis. `standards-registry-ships-with-code` recorded 4–5 findings under a column
+   headed "Material findings" in *every one* of its ten rounds, while its own report observed that
+   rounds 5–10 *"produced no design defects at all — they produced contract precision, naming, and
+   scope-bound findings."* A second spec on the same problem hit the cap identically. A verdict that
+   does not measure its subject is this project's signature failure; here it lived in the stop
+   criterion itself.
+
+   **Each reviewer CLASSIFIES every finding it raises — the class is declared, never inferred by the
+   comparator from wording:**
+
+   - **DESIGN-class** — changes what would be BUILT or how it would BEHAVE. Architecture; a safety,
+     security, scalability, or integration property; a decision point's classification or floor; a
+     multi-machine posture; a missing failure mode; **or a statement in the spec that is factually
+     WRONG about the system** (round 10 of that spec caught a false rollback claim — that is
+     design-class, not precision, and must keep resetting the counter).
+   - **PRECISION-class** — improves the DOCUMENT without changing what would be built: contract
+     wording, naming, scope-bound phrasing, an added caveat, a clarified example.
+
+   **Precision findings are still addressed** — they are genuinely valuable and several changed
+   production code — but they do not reset the counter. Only a DESIGN-class finding does.
+
+   **Two consecutive rounds, not one**, because a single quiet round is weak evidence on a spec whose
+   surface keeps growing; requiring two makes the terminating condition harder to reach by luck while
+   still reachable at all. Under this rule the spec above converges at round 7 on its merits.
+
+   (A cheap-to-change-after tag the Decision-Completeness reviewer contested and rejected is
+   DESIGN-class — it asserts reversibility the reviewer denies, which is a claim about behaviour.)
+
+   **Honest limit:** the classification is made by a reviewer, so this trades one judgment for a
+   better-specified one rather than removing judgment. A reviewer that mislabels a design defect as
+   precision can end the loop early — which is why the taxonomy names the wrong-about-the-system case
+   explicitly, and why the report must record each round's class counts so a suspiciously quiet
+   round is visible rather than merely accepted.
 2. **Zero unresolved user-decisions remain in `## Open questions`.** A spec cannot converge while a live decision is still parked on the user — every open question must be resolved into a `## Frontloaded Decisions` entry (or a contested-and-surviving cheap-to-change-after tag) before convergence. This is enforced STRUCTURALLY: `write-convergence-tag.mjs` refuses to stamp the tag while `## Open questions` contains unresolved entries, so the criterion cannot be skipped by prose (Structure > Willpower).
 
-A lightweight LLM (Haiku-class) compares the new round's findings to the prior round's findings and emits a boolean `converged: true|false` with reasoning. Human-readable comparison log is retained.
+A lightweight LLM (Haiku-class) compares the new round's findings to the prior round's findings and emits a
+boolean `converged: true|false` with reasoning. It consumes each finding's DECLARED class — it must not
+re-classify from wording, because the reviewer that raised a finding is the one that knows whether it changes
+what would be built. It also emits `designFindings` and `precisionFindings` counts per round so the
+consecutive-quiet-round count is auditable rather than asserted. Human-readable comparison log is retained.
 
 **Not converged** → back to Phase 2.
 **Converged** → Phase 4.

package/skills/spec-converge/templates/report.md

@@ -49,8 +49,8 @@ The user reads this section to understand what convergence changed.
 
 ## Iteration Summary
 
-| Iteration | Reviewers who flagged material issues | Material findings | Spec sections changed |
-|-----------|---------------------------------------|-------------------|-----------------------|
+| Iteration | Reviewers who flagged design issues | Design findings | Precision findings | Spec sections changed |
+|-----------|-------------------------------------|-----------------|---------------------|-----------------------|
 {{ITERATION_TABLE}}
 
 ## Full Findings Catalog

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-07-27T11:55:16.447Z",
-  "instarVersion": "1.3.1002",
+  "generatedAt": "2026-07-27T15:44:54.818Z",
+  "instarVersion": "1.3.1004",
   "entryCount": 202,
   "entries": {
     "hook:session-start": {
@@ -418,7 +418,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "675cd3e00c868dcd0262d7964ec0ee503afc0e7436a46eda9af4aa3e9e93b990",
+      "contentHash": "6576dddf2ae6a47a18f00cd06d178f2080d3aabee319f5da1cccb12225091e8c",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -426,7 +426,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "675cd3e00c868dcd0262d7964ec0ee503afc0e7436a46eda9af4aa3e9e93b990",
+      "contentHash": "6576dddf2ae6a47a18f00cd06d178f2080d3aabee319f5da1cccb12225091e8c",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -434,7 +434,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "675cd3e00c868dcd0262d7964ec0ee503afc0e7436a46eda9af4aa3e9e93b990",
+      "contentHash": "6576dddf2ae6a47a18f00cd06d178f2080d3aabee319f5da1cccb12225091e8c",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -442,7 +442,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "675cd3e00c868dcd0262d7964ec0ee503afc0e7436a46eda9af4aa3e9e93b990",
+      "contentHash": "6576dddf2ae6a47a18f00cd06d178f2080d3aabee319f5da1cccb12225091e8c",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -450,7 +450,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "675cd3e00c868dcd0262d7964ec0ee503afc0e7436a46eda9af4aa3e9e93b990",
+      "contentHash": "6576dddf2ae6a47a18f00cd06d178f2080d3aabee319f5da1cccb12225091e8c",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -458,7 +458,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "675cd3e00c868dcd0262d7964ec0ee503afc0e7436a46eda9af4aa3e9e93b990",
+      "contentHash": "6576dddf2ae6a47a18f00cd06d178f2080d3aabee319f5da1cccb12225091e8c",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -466,7 +466,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "675cd3e00c868dcd0262d7964ec0ee503afc0e7436a46eda9af4aa3e9e93b990",
+      "contentHash": "6576dddf2ae6a47a18f00cd06d178f2080d3aabee319f5da1cccb12225091e8c",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -474,7 +474,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "675cd3e00c868dcd0262d7964ec0ee503afc0e7436a46eda9af4aa3e9e93b990",
+      "contentHash": "6576dddf2ae6a47a18f00cd06d178f2080d3aabee319f5da1cccb12225091e8c",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -482,7 +482,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "675cd3e00c868dcd0262d7964ec0ee503afc0e7436a46eda9af4aa3e9e93b990",
+      "contentHash": "6576dddf2ae6a47a18f00cd06d178f2080d3aabee319f5da1cccb12225091e8c",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -490,7 +490,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "675cd3e00c868dcd0262d7964ec0ee503afc0e7436a46eda9af4aa3e9e93b990",
+      "contentHash": "6576dddf2ae6a47a18f00cd06d178f2080d3aabee319f5da1cccb12225091e8c",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -498,7 +498,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "675cd3e00c868dcd0262d7964ec0ee503afc0e7436a46eda9af4aa3e9e93b990",
+      "contentHash": "6576dddf2ae6a47a18f00cd06d178f2080d3aabee319f5da1cccb12225091e8c",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -506,7 +506,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "675cd3e00c868dcd0262d7964ec0ee503afc0e7436a46eda9af4aa3e9e93b990",
+      "contentHash": "6576dddf2ae6a47a18f00cd06d178f2080d3aabee319f5da1cccb12225091e8c",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -514,7 +514,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "675cd3e00c868dcd0262d7964ec0ee503afc0e7436a46eda9af4aa3e9e93b990",
+      "contentHash": "6576dddf2ae6a47a18f00cd06d178f2080d3aabee319f5da1cccb12225091e8c",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -522,7 +522,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "675cd3e00c868dcd0262d7964ec0ee503afc0e7436a46eda9af4aa3e9e93b990",
+      "contentHash": "6576dddf2ae6a47a18f00cd06d178f2080d3aabee319f5da1cccb12225091e8c",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -530,7 +530,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "675cd3e00c868dcd0262d7964ec0ee503afc0e7436a46eda9af4aa3e9e93b990",
+      "contentHash": "6576dddf2ae6a47a18f00cd06d178f2080d3aabee319f5da1cccb12225091e8c",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -538,7 +538,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "675cd3e00c868dcd0262d7964ec0ee503afc0e7436a46eda9af4aa3e9e93b990",
+      "contentHash": "6576dddf2ae6a47a18f00cd06d178f2080d3aabee319f5da1cccb12225091e8c",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -546,7 +546,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "675cd3e00c868dcd0262d7964ec0ee503afc0e7436a46eda9af4aa3e9e93b990",
+      "contentHash": "6576dddf2ae6a47a18f00cd06d178f2080d3aabee319f5da1cccb12225091e8c",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -554,7 +554,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "675cd3e00c868dcd0262d7964ec0ee503afc0e7436a46eda9af4aa3e9e93b990",
+      "contentHash": "6576dddf2ae6a47a18f00cd06d178f2080d3aabee319f5da1cccb12225091e8c",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -562,7 +562,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "675cd3e00c868dcd0262d7964ec0ee503afc0e7436a46eda9af4aa3e9e93b990",
+      "contentHash": "6576dddf2ae6a47a18f00cd06d178f2080d3aabee319f5da1cccb12225091e8c",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -570,7 +570,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "675cd3e00c868dcd0262d7964ec0ee503afc0e7436a46eda9af4aa3e9e93b990",
+      "contentHash": "6576dddf2ae6a47a18f00cd06d178f2080d3aabee319f5da1cccb12225091e8c",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -578,7 +578,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "675cd3e00c868dcd0262d7964ec0ee503afc0e7436a46eda9af4aa3e9e93b990",
+      "contentHash": "6576dddf2ae6a47a18f00cd06d178f2080d3aabee319f5da1cccb12225091e8c",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -586,7 +586,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "675cd3e00c868dcd0262d7964ec0ee503afc0e7436a46eda9af4aa3e9e93b990",
+      "contentHash": "6576dddf2ae6a47a18f00cd06d178f2080d3aabee319f5da1cccb12225091e8c",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -594,7 +594,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "675cd3e00c868dcd0262d7964ec0ee503afc0e7436a46eda9af4aa3e9e93b990",
+      "contentHash": "6576dddf2ae6a47a18f00cd06d178f2080d3aabee319f5da1cccb12225091e8c",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -602,7 +602,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "675cd3e00c868dcd0262d7964ec0ee503afc0e7436a46eda9af4aa3e9e93b990",
+      "contentHash": "6576dddf2ae6a47a18f00cd06d178f2080d3aabee319f5da1cccb12225091e8c",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -610,7 +610,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "675cd3e00c868dcd0262d7964ec0ee503afc0e7436a46eda9af4aa3e9e93b990",
+      "contentHash": "6576dddf2ae6a47a18f00cd06d178f2080d3aabee319f5da1cccb12225091e8c",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -618,7 +618,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "675cd3e00c868dcd0262d7964ec0ee503afc0e7436a46eda9af4aa3e9e93b990",
+      "contentHash": "6576dddf2ae6a47a18f00cd06d178f2080d3aabee319f5da1cccb12225091e8c",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -626,7 +626,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "675cd3e00c868dcd0262d7964ec0ee503afc0e7436a46eda9af4aa3e9e93b990",
+      "contentHash": "6576dddf2ae6a47a18f00cd06d178f2080d3aabee319f5da1cccb12225091e8c",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -634,7 +634,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "675cd3e00c868dcd0262d7964ec0ee503afc0e7436a46eda9af4aa3e9e93b990",
+      "contentHash": "6576dddf2ae6a47a18f00cd06d178f2080d3aabee319f5da1cccb12225091e8c",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -642,7 +642,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "675cd3e00c868dcd0262d7964ec0ee503afc0e7436a46eda9af4aa3e9e93b990",
+      "contentHash": "6576dddf2ae6a47a18f00cd06d178f2080d3aabee319f5da1cccb12225091e8c",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -650,7 +650,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "675cd3e00c868dcd0262d7964ec0ee503afc0e7436a46eda9af4aa3e9e93b990",
+      "contentHash": "6576dddf2ae6a47a18f00cd06d178f2080d3aabee319f5da1cccb12225091e8c",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -658,7 +658,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "675cd3e00c868dcd0262d7964ec0ee503afc0e7436a46eda9af4aa3e9e93b990",
+      "contentHash": "6576dddf2ae6a47a18f00cd06d178f2080d3aabee319f5da1cccb12225091e8c",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -666,7 +666,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "675cd3e00c868dcd0262d7964ec0ee503afc0e7436a46eda9af4aa3e9e93b990",
+      "contentHash": "6576dddf2ae6a47a18f00cd06d178f2080d3aabee319f5da1cccb12225091e8c",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -674,7 +674,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "675cd3e00c868dcd0262d7964ec0ee503afc0e7436a46eda9af4aa3e9e93b990",
+      "contentHash": "6576dddf2ae6a47a18f00cd06d178f2080d3aabee319f5da1cccb12225091e8c",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -682,7 +682,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "675cd3e00c868dcd0262d7964ec0ee503afc0e7436a46eda9af4aa3e9e93b990",
+      "contentHash": "6576dddf2ae6a47a18f00cd06d178f2080d3aabee319f5da1cccb12225091e8c",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -690,7 +690,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "675cd3e00c868dcd0262d7964ec0ee503afc0e7436a46eda9af4aa3e9e93b990",
+      "contentHash": "6576dddf2ae6a47a18f00cd06d178f2080d3aabee319f5da1cccb12225091e8c",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -698,7 +698,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "675cd3e00c868dcd0262d7964ec0ee503afc0e7436a46eda9af4aa3e9e93b990",
+      "contentHash": "6576dddf2ae6a47a18f00cd06d178f2080d3aabee319f5da1cccb12225091e8c",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -706,7 +706,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "675cd3e00c868dcd0262d7964ec0ee503afc0e7436a46eda9af4aa3e9e93b990",
+      "contentHash": "6576dddf2ae6a47a18f00cd06d178f2080d3aabee319f5da1cccb12225091e8c",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -714,7 +714,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "675cd3e00c868dcd0262d7964ec0ee503afc0e7436a46eda9af4aa3e9e93b990",
+      "contentHash": "6576dddf2ae6a47a18f00cd06d178f2080d3aabee319f5da1cccb12225091e8c",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -722,7 +722,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "675cd3e00c868dcd0262d7964ec0ee503afc0e7436a46eda9af4aa3e9e93b990",
+      "contentHash": "6576dddf2ae6a47a18f00cd06d178f2080d3aabee319f5da1cccb12225091e8c",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -730,7 +730,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "675cd3e00c868dcd0262d7964ec0ee503afc0e7436a46eda9af4aa3e9e93b990",
+      "contentHash": "6576dddf2ae6a47a18f00cd06d178f2080d3aabee319f5da1cccb12225091e8c",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -738,7 +738,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "675cd3e00c868dcd0262d7964ec0ee503afc0e7436a46eda9af4aa3e9e93b990",
+      "contentHash": "6576dddf2ae6a47a18f00cd06d178f2080d3aabee319f5da1cccb12225091e8c",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -746,7 +746,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "675cd3e00c868dcd0262d7964ec0ee503afc0e7436a46eda9af4aa3e9e93b990",
+      "contentHash": "6576dddf2ae6a47a18f00cd06d178f2080d3aabee319f5da1cccb12225091e8c",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -754,7 +754,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "675cd3e00c868dcd0262d7964ec0ee503afc0e7436a46eda9af4aa3e9e93b990",
+      "contentHash": "6576dddf2ae6a47a18f00cd06d178f2080d3aabee319f5da1cccb12225091e8c",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -770,7 +770,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "675cd3e00c868dcd0262d7964ec0ee503afc0e7436a46eda9af4aa3e9e93b990",
+      "contentHash": "6576dddf2ae6a47a18f00cd06d178f2080d3aabee319f5da1cccb12225091e8c",
       "since": "2025-01-01"
     },
     "cli:init": {

package/upgrades/1.3.1003.md

@@ -0,0 +1,50 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+`/spec-converge`'s first convergence criterion terminated on "no MATERIAL new issues", where material
+was defined as *any finding that would require a spec change if unaddressed*. A contract-precision or
+naming finding DOES require a spec edit, so it counted — and because a spec appends its own review
+history each round, its reviewable surface grows every round and a diligent reviewer always finds
+precision to add on a larger surface.
+
+The loop was therefore unterminating BY CONSTRUCTION for that document shape, and the 10-round cap
+fired for reasons unrelated to design soundness.
+
+The criterion is now "no DESIGN-class findings for TWO consecutive rounds", with an explicit
+taxonomy each reviewer DECLARES per finding: design-class changes what would be built or how it
+behaves (including a statement that is factually wrong about the system); precision-class improves the
+document without changing what would be built. Precision findings are still raised and still
+addressed — they do not reset the counter. The comparator consumes the declared class rather than
+re-deriving it, and emits per-round design/precision counts; the report template records both.
+
+## What to Tell Your User
+
+None — internal change (no user-facing surface).
+
+## Summary of New Capabilities
+
+None — internal change (no user-facing surface).
+
+## Evidence
+
+`standards-registry-ships-with-code` recorded 4–5 findings under a column headed "Material findings"
+in every one of its ten rounds, while its own report observed that rounds 5–10 "produced no design
+defects at all — they produced contract precision, naming, and scope-bound findings". A second spec on
+the same problem hit the cap identically. Under the new rule that spec converges at round 7 on its
+merits.
+
+Criterion 2 (zero unresolved `## Open questions`) is untouched and still enforced structurally in
+`write-convergence-tag.mjs`, so the structural half of convergence cannot be weakened by this change.
+
+## Known limits
+
+This relocates judgment rather than removing it: a reviewer that misfiles a design defect as precision
+can end the loop early. Three bounds — the taxonomy names the factually-wrong case explicitly as
+design-class, two consecutive quiet rounds are required rather than one, and the class is declared by
+the raising reviewer and recorded per round so a suspiciously quiet round is visible. None of these is
+a guarantee, and no code enforces the classification; this is an instruction change and binds only as
+well as the reviewers follow it.

package/upgrades/1.3.1004.md

@@ -0,0 +1,111 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+`GET /channels` covers WhatsApp and iMessage. Both adapters existed but had no registry row — a gap
+recorded explicitly when the direct user channels shipped, and a hole in the registry's own
+"absence is impossible" property, since a channel with no row cannot report that it is missing.
+
+WhatsApp is read from `getStatus().state`, a real state machine rather than a boolean, so
+`qr-pending` maps to `reachable-no-credential` — the link is alive and waiting for a human to scan a
+pairing code, and a restart will not help. `connecting`/`reconnecting` report `unknown` with the phase
+named rather than being guessed; `disconnected`/`closed` are `broken`; an unrecognised state is
+`unknown`, never `working`.
+
+iMessage is read from `getConnectionInfo().state`, deliberately NOT the sibling `connectedAt` — that
+field is computed as `started ? new Date().toISOString() : undefined`, so it reports the moment you
+asked rather than the moment it connected. A source ratchet fails if anyone wires it in.
+
+`scripts/lib/classify-tier.mjs` no longer treats a `.config` FILENAME reference as evidence of a
+config surface. The `\.config\b` alternative in `CONFIG_SURFACE_HINT` matched any text containing
+`.config`, including filenames — so a script that merely READ `vitest.push.config.ts`, combined with
+an ordinary object literal, fired "new capability: new config key added" and raised that change's risk
+floor to 2.
+
+## What to Tell Your User
+
+Your agent can now tell you whether WhatsApp and iMessage are actually working, alongside Telegram and
+Slack.
+
+The useful part is what it says when WhatsApp is waiting for you to scan a pairing code. That is not
+broken — the connection is fine, it just needs you for a moment — and restarting things would not fix
+it. It now says exactly that, instead of lumping it in with a dropped connection.
+
+It is also careful about what it does not know. If a link is mid-connection it says so rather than
+guessing, and a working link means the connection was up when it checked, not a promise that a message
+to one particular person will arrive.
+
+None — internal change (no user-facing surface).
+
+## Summary of New Capabilities
+
+No new endpoint, command, or config key. `GET /channels` gains `user-whatsapp` and `user-imessage`
+rows with live-state verdicts.
+
+None — internal change (no user-facing surface).
+
+## Evidence
+
+Falsified by flattening `qr-pending` to `broken` in production:
+
+```
+× THE STATE A BOOLEAN LOSES: qr-pending is reachable-no-credential, not broken
+  → expected 'broken' to be 'reachable-no-credential'
+  Tests  1 failed | 15 passed (16)
+```
+
+Restored byte-identical. Green across every suite touching the change:
+`Test Files 5 passed (5) · Tests 59 passed (59)` (`user-channel-wa-imessage`,
+`user-channel-liveness`, `channel-registry`, `channel-registry-claims`, `channels-route`);
+`tsc --noEmit` exit 0. The integration test pinning the exact channel set and the audience partition
+was updated in this change rather than left for CI to catch.
+
+Falsified by restoring the alternative:
+
+```
+× does NOT fire on a mere .config FILENAME reference — the reproduction of the real case
+  → reading a .config filename is not adding a config key: expected 2 to be 1
+  Tests  1 failed | 48 passed (49)
+```
+
+Restored byte-identical; 49 passed, including all 47 pre-existing classifier tests unchanged. A second
+new test iterates every remaining anchor (`ConfigDefaults`, `defaultConfig`, `InstarConfig`,
+`configSchema`) and asserts the floor still rises — narrowing a check must not blind it.
+
+## Also in this change: the Telegram row now names its subject
+
+Found by checking the shipped feature on a running agent rather than only in tests. `/capabilities`
+reported `telegram: { configured: true, adapter: true, bidirectional: true }` while `/channels`
+reported `user-telegram: unknown — the Telegram poll loop is not running` — the config surface and the
+live surface disagreeing, which is exactly what this registry exists to expose.
+
+But the row was measuring the SERVER process's adapter and presenting it as the channel's state. On a
+lifeline deployment inbound never goes through that adapter: a separate lifeline process polls and
+forwards, and the server logs "Telegram relay wired (via lifeline callback forwarding)". Inbound was
+healthy; a stopped server poller is normal there.
+
+That is the same scope error the `threadline-relay` row was fixed for in #1667 — a true statement
+whose subject is unstated, so the reader concludes something about a path that was never measured.
+The verdict stays `unknown` (what it can see is genuinely undetermined); it now names the server
+adapter and says plainly that this alone does not mean messages are not arriving.
+
+## Known limits
+
+`working` means the link was up when probed — not that a message to a particular chat or contact
+would land. Neither row probes a round-trip, because a status read must not send. iMessage is bound to
+the host running its backend, recorded as a real cost of choosing it.
+
+If a genuine config-key addition mentions only a `*.config.ts` filename and none of the remaining
+anchors, its floor will no longer rise. The remaining anchors cover this repo's actual config
+surfaces, and the both-sides test guards against a future narrowing that blinds the check — but this
+is a heuristic over diff text and always was.
+
+## Why it mattered
+
+The floor is what makes a tier declaration meaningful: declaring under it is permitted but audited as
+a deliberate override. A floor that fires on a filename teaches authors that below-floor declarations
+are routine, which is how a real floor gets argued past later. A noisy guard degrades the guard it
+belongs to.