instar 1.3.1017 → 1.3.1018

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.1017",
+  "version": "1.3.1018",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/scripts/lint-rollout-evidence-resolvable.js

@@ -115,18 +115,39 @@ for (const file of specFiles()) {
   try { text = fs.readFileSync(file, 'utf8'); } catch { continue; }
   const fm = frontmatter(text);
   if (!fm) continue;
-  if (field(fm, 'rollout-disposition') !== 'active') continue;
+  // GUARDED DISPOSITIONS — 'active' AND 'composed'.
+  //
+  // 'composed' does NOT mean exempt. It names WHO owns graduation (the rollout rides
+  // an owner feature via rollout-owner-feature) rather than WHETHER the evidence
+  // matters. A composed spec still carries a real rollout-criteria naming a
+  // measurement, and often rollout-metrics-json thresholds against it. If its ref
+  // 404s the criterion is exactly as unevaluable as an active one's, and the feature
+  // parks for exactly the same reason.
+  //
+  // Widening is safe BECAUSE of assertion C rather than in spite of it: a composed
+  // spec whose owner feature was genuinely abandoned may legitimately carry a stale
+  // ref, and the shrink-only baseline is where that goes — with a stated reason,
+  // deleted automatically the moment the ref starts resolving. So this does not force
+  // anyone to FIX anything; it forces them to DECLARE. Entry needs evidence.
+  //
+  // EARNED (2026-07-27): this lint shipped guarding 'active' only, and its own header
+  // said "a sweep of all 5 rollout-active specs" — accurate for its scope, and the
+  // scope was narrower than the class it names. A single-pass sweep is incomplete by
+  // definition (Iterative Audit to Convergence); this is that standard applied to the
+  // guard itself, one pass later.
+  const disposition = field(fm, 'rollout-disposition');
+  if (disposition !== 'active' && disposition !== 'composed') continue;
   if (field(fm, 'rollout-evidence-type') !== 'endpoint') continue;
   const ref = field(fm, 'rollout-evidence-ref');
   if (!ref || !ref.startsWith('/')) continue; // unparseable ⇒ skip, not fail
   const slug = field(fm, 'slug') || path.basename(file, '.md');
   const resolves = srcContains(ref);
-  seenActive.push({ slug, ref, resolves });
+  seenActive.push({ slug, ref, resolves, disposition });
 
   // A — every active endpoint ref resolves, unless explicitly accepted.
   if (!resolves && !allowed.has(slug)) {
     errors.push(
-      `${path.relative(ROOT, file)}: rollout-disposition:active names ` +
+      `${path.relative(ROOT, file)}: rollout-disposition:${disposition} names ` +
       `rollout-evidence-ref "${ref}" but no route with that path exists in src/. ` +
       `The graduation criterion can never be evaluated, so this rollout is parked ` +
       `indefinitely. Build the endpoint, correct the ref, or add an explicit ` +
@@ -157,6 +178,8 @@ if (errors.length) {
   process.exit(1);
 }
 console.log(
-  `lint-rollout-evidence-resolvable: clean — ${seenActive.length} rollout-active endpoint spec(s), ` +
+  `lint-rollout-evidence-resolvable: clean — ${seenActive.length} guarded endpoint spec(s) ` +
+  `(${seenActive.filter((s) => s.disposition === 'active').length} active, ` +
+  `${seenActive.filter((s) => s.disposition === 'composed').length} composed), ` +
   `${seenActive.filter((s) => s.resolves).length} resolving, ${allowed.size} accepted-unresolved.`,
 );

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-07-27T21:51:05.954Z",
-  "instarVersion": "1.3.1017",
+  "generatedAt": "2026-07-27T21:55:15.925Z",
+  "instarVersion": "1.3.1018",
   "entryCount": 202,
   "entries": {
     "hook:session-start": {

package/upgrades/1.3.1018.md

@@ -0,0 +1,66 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+A correction made earlier today to how design reviews decide they are finished now actually reaches
+agents that are already running. It previously did not.
+
+Tools like that review process exist both in what ships and as a copy on each running agent's disk.
+The install step deliberately never overwrites an existing copy, in case an operator has customised
+it, so an update reaches running agents only through a small dedicated delivery step. One already
+existed for this file — but its "have I done this already?" check was keyed to an older change, so
+once an agent had taken that one it quietly stopped delivering anything further to the same file.
+
+The build guard that stops a switched-off feature from claiming a graduation condition it can
+never check now covers a second kind of feature document it previously skipped.
+
+Some features graduate alongside a bigger parent feature rather than on their own. The guard
+treated those as out of scope. They are not: such a feature still states its own condition and
+still names an address to read it from, so a missing address parks it for exactly the same
+reason. Three feature documents sat outside the guard; all three are now covered.
+
+## What to Tell Your User
+
+Nothing changes in how your agent behaves day to day. A fix that had been shipped but could not
+reach already-running agents now reaches them.
+
+Nothing changes in how your agent behaves. A safety check that runs when the project is built
+now looks at a few more files than it used to.
+
+## Summary of New Capabilities
+
+None. No endpoint, config key, or behaviour is added. This is a delivery step so an existing fix
+arrives where it was always meant to go.
+
+Agents that have customised the file keep their version untouched, agents that already have the
+correction are unaffected, and a fresh install is unchanged.
+
+None. No endpoint, config key, or behaviour is added. This widens the scope of an existing
+build-time check and reports its two counts separately, so a future narrowing shows up as a
+number dropping rather than as silence.
+
+Widening it forces no new work on anyone. The guard already carries an escape hatch — a list
+of accepted exceptions, each requiring a written reason, each deleted automatically once its
+address starts working. A feature whose parent was genuinely abandoned needs a declaration,
+not a fix.
+
+## Evidence
+
+The gap was confirmed on a real running agent rather than reasoned about: its copy carried the older
+change's marker and did not carry the correction, so the update could never have arrived.
+
+The delivery step was proved to work by simulating exactly that agent — one that already took the
+earlier change — and then deliberately breaking the fix in the way that would reintroduce the
+problem, which made precisely that test fail and no other.
+
+Nothing was broken when this was written: all eight covered addresses currently work, and the
+accepted-exception list is empty. This closes a hole in the guard rather than repairing a
+fault.
+
+The guard was proved to actually bite by breaking one of the newly-covered documents on
+purpose — the check refused, and named which kind of document had failed — then restoring it
+byte-for-byte and confirming it passed again. The tests were proved the same way, by narrowing
+the check back and watching exactly the two new tests fail.

package/upgrades/side-effects/rollout-evidence-ratchet-composed.md

@@ -0,0 +1,54 @@
+# Side-effects review — rollout-evidence ratchet widened to `composed`
+
+## What this changes
+
+`scripts/lint-rollout-evidence-resolvable.js` guarded `rollout-disposition: active` only.
+It now guards `active` AND `composed`. Guarded endpoint specs go from 5 to 8.
+
+## Blast radius
+
+The lint runs in the `npm run lint` chain, so it gates every commit and every CI run.
+Widening it can, in principle, fail a build that previously passed.
+
+**Measured, not assumed: it cannot do so today.** All eight guarded refs resolve; the lint
+exits 0 with an EMPTY accepted-baseline. The three newly-covered specs are
+`self-heal-gate.md` (`/feedback-factory/drain/status`), `context-wedge-detection-completeness.md`
+(`/health`), and `slack-considered-acknowledgment-v1.md` (`/permissions/ambient-stats`).
+Two were already transitively covered — one shares its ref with an active spec, one names a
+path that trivially exists. Exactly one was genuinely unguarded.
+
+## The failure mode this could introduce, and why it does not
+
+The obvious risk of widening a guard is forcing unrelated work on whoever trips it next: a
+`composed` spec whose owner feature was abandoned may legitimately carry a stale ref, and
+such a person should not be conscripted into building a route they do not want.
+
+They are not. Assertion C's shrink-only baseline is the escape hatch, and it was designed
+before this change: an accepted entry requires a written reason and is auto-deleted the
+moment its ref starts resolving. So the widened guard forces a DECLARATION, never a fix.
+Entry needs evidence; exit happens by itself.
+
+## What is NOT weakened
+
+Assertions A (every guarded ref resolves unless accepted), B (baseline reasons must be
+substantive), and C (baseline shrinks only) are unchanged. No threshold moved. The
+refusal message now names which disposition fired, which is strictly more information.
+
+## Verification
+
+- Live run: `clean — 8 guarded endpoint spec(s) (5 active, 3 composed), 8 resolving, 0 accepted-unresolved`, exit 0.
+- Falsified against the real subject: breaking the COMPOSED spec's ref → exit 1 with a
+  refusal naming `rollout-disposition:composed`. Spec restored byte-identical; exit 0 again.
+- Falsified against the tests: narrowing the filter back to active-only → `2 failed | 7 passed`.
+  Restored → `9 passed`.
+- Two pre-existing tests asserted the OLD summary wording and correctly broke. Their
+  PROPERTY — that the guard must report its denominator, since "clean" alone cannot be told
+  from "scanned nothing" — is preserved, with the pattern updated rather than the assertion
+  dropped.
+
+## Reviewer's note
+
+This is a correction to my own work from earlier the same day. The lint's header claimed a
+sweep of "all 5 rollout-active specs" — accurate for its scope, and the scope was narrower
+than the class it names. Recorded in the source comment rather than quietly widened, because
+a guard that silently grew is indistinguishable from one that was always right.

package/upgrades/1.3.1017.md

@@ -1,37 +0,0 @@
-# Upgrade Guide — vNEXT
-
-<!-- assembled-by: assemble-next-md -->
-<!-- bump: patch -->
-
-## What Changed
-
-A correction made earlier today to how design reviews decide they are finished now actually reaches
-agents that are already running. It previously did not.
-
-Tools like that review process exist both in what ships and as a copy on each running agent's disk.
-The install step deliberately never overwrites an existing copy, in case an operator has customised
-it, so an update reaches running agents only through a small dedicated delivery step. One already
-existed for this file — but its "have I done this already?" check was keyed to an older change, so
-once an agent had taken that one it quietly stopped delivering anything further to the same file.
-
-## What to Tell Your User
-
-Nothing changes in how your agent behaves day to day. A fix that had been shipped but could not
-reach already-running agents now reaches them.
-
-## Summary of New Capabilities
-
-None. No endpoint, config key, or behaviour is added. This is a delivery step so an existing fix
-arrives where it was always meant to go.
-
-Agents that have customised the file keep their version untouched, agents that already have the
-correction are unaffected, and a fresh install is unchanged.
-
-## Evidence
-
-The gap was confirmed on a real running agent rather than reasoned about: its copy carried the older
-change's marker and did not carry the correction, so the update could never have arrived.
-
-The delivery step was proved to work by simulating exactly that agent — one that already took the
-earlier change — and then deliberately breaking the fix in the way that would reintroduce the
-problem, which made precisely that test fail and no other.