instar 1.3.1190 → 1.3.1192

package/dist/core/crossModelReviewer.d.ts

@@ -1,6 +1,15 @@
 /**
  * crossModelReviewer — Step B of the tiered development process.
  *
+ * Governed by: *Never Silently Cut the Data a Decision Depends On*
+ * (docs/STANDARDS-REGISTRY.md). This file carries the case that earned that article:
+ * `CONTEXT_BUDGET_BYTES` (derived from the transport, derivation recorded in place),
+ * `LOAD_BEARING_CONTEXT_SUBSTRINGS` (the context a review is not valid without), and the
+ * `context-incomplete` REFUSAL in `runCrossModelReview` — which exists because this file's
+ * disclosure layer was already correct and complete, and six rounds of review were conducted on a
+ * fabricated view of the world anyway. Disclosure informs a reader who reads; refusal does not
+ * depend on anyone reading.
+ *
  * Re-platforms the `/spec-converge` external "cross-model" reviewer onto the
  * agent's own installed `codex` CLI. The external pass that the skill used to
  * describe as running "via the /crossreview pattern" (a never-built
@@ -66,12 +75,51 @@ export declare const REVIEWER_TIMEOUT_MAX_MS = 900000;
  * so referenced context MUST be inlined; this bounds the prompt size (spec §2).
  * The spec is always included in full; referenced context fills the remainder
  * and is truncated (with a loud note) if it overflows.
+ *
+ * ── DERIVATION (governed by *Never Silently Cut the Data a Decision Depends On*) ─────────────
+ * This number is DERIVED from the binding constraint on the consumer, and the
+ * derivation is recorded here so it can be re-checked rather than inherited.
+ * Re-derive it whenever the transport or the supported reviewer families
+ * change; do not tune it by feel.
+ *
+ *   Candidate constraint 1 — the model's context window. Every reviewer
+ *   family this registry supports at the `capable` tier accepts >= 200K
+ *   input tokens, i.e. roughly 800 KB of English markdown at ~4 chars/token.
+ *   NOT binding.
+ *
+ *   Candidate constraint 2 — the TRANSPORT. The exec-json path hands the
+ *   prompt to the CLI on stdin (unbounded). But `intelligence.codexExecJson:
+ *   false` is a documented rollback lever, and the plain path passes the
+ *   prompt as a single argv element, which must fit inside the host's
+ *   ARG_MAX *together with the whole environment* — 1 MiB on macOS, 2 MiB on
+ *   typical Linux. BINDING, and binding on the smaller host.
+ *
+ * So the budget is set from the transport, at a quarter of the smaller
+ * ARG_MAX: 256 KiB. That leaves three quarters of ARG_MAX for the
+ * environment and the rest of the command line on the worst-case host, and
+ * is ~64K tokens — comfortably inside every supported model's window.
+ *
+ * WHAT THIS NUMBER DOES NOT PROMISE. It is a transport ceiling, not a
+ * guarantee that any given spec plus its parent design will fit. When the
+ * load-bearing context does NOT fit, the review does not quietly proceed on
+ * a partial view: `assembleReviewerPrompt` records the omission and
+ * `runCrossModelReview` returns `degraded` rather than a verdict. See
+ * `LOAD_BEARING_CONTEXT_SUBSTRINGS`.
+ *
+ * HISTORY. This was 60 KB from the spec's first draft until 2026-08-22, a
+ * number with no recorded derivation. At that size the budget was smaller
+ * than a single ordinary spec, so referenced context was dropped in FULL on
+ * every round of every review — the truncation note read "truncated to fit"
+ * while describing 100% loss. Six rounds of cross-model review on
+ * `placement-real-capacity-scoring` were conducted without the reviewers
+ * ever seeing the parent design, the standards registry, or the lessons doc.
+ * The disclosure machinery worked correctly throughout; nothing refused.
  */
 export declare const CONTEXT_BUDGET_BYTES: number;
 /**
  * Deterministic priority ordering for referenced context (spec §2, F4).
  *
- * When the 60KB budget can't hold every referenced doc, truncation MUST be
+ * When the budget can't hold every referenced doc, truncation MUST be
  * deterministic — the same spec + same docs always drop the same docs — so a
  * review is reproducible and the "what got dropped" note is stable. The
  * constitutional / lessons docs are the highest-value context for a reviewer
@@ -84,6 +132,40 @@ export declare const CONTEXT_BUDGET_BYTES: number;
  * via a stable sort.
  */
 export declare const CONTEXT_PRIORITY_SUBSTRINGS: readonly string[];
+/**
+ * The subset of referenced context a cross-model review is NOT VALID WITHOUT
+ * (governed by *Never Silently Cut the Data a Decision Depends On*).
+ *
+ * The reviewer's job is to judge a spec against the design and the rules it is
+ * built on. A reviewer that received the spec but none of those documents can
+ * only check whether the spec agrees with ITSELF — a materially weaker check
+ * wearing the same name. So when a budget walk cannot admit one of these docs
+ * IN FULL, the honest outcome is not "a review with a caveat"; it is NOT A
+ * REVIEW, and `runCrossModelReview` degrades rather than returning a verdict.
+ *
+ * PARTIAL COUNTS AS OMITTED, deliberately. Half of the standards registry, cut
+ * at whatever byte the budget ran out on, is not the standards registry — the
+ * reviewer cannot know whether the clause that governs this spec was in the
+ * half it received. Treating a partial constitutional doc as "present" is the
+ * same substitution of a symbol for the state that this rule exists to stop.
+ *
+ * These coincide with `CONTEXT_PRIORITY_SUBSTRINGS` today, and that is not a
+ * coincidence — a doc is kept first BECAUSE the review is worthless without it.
+ * They are named separately because they answer different questions (what order
+ * do docs go in / what may a review proceed without), and a future doc could
+ * be worth prioritising without being load-bearing.
+ *
+ * SPELLED OUT RATHER THAN ALIASED, deliberately (independent review 2026-08-22,
+ * finding C8). This was `= CONTEXT_PRIORITY_SUBSTRINGS` — the SAME array object,
+ * which made the paragraph above false: with an alias, adding a doc to the
+ * priority list silently promotes it to a review-BLOCKER, and the divergence the
+ * comment reserves the right to have is unrepresentable. A list that claims to
+ * be separate must be separate; two lists that happen to agree are checked by
+ * `load-bearing docs are a subset of the priority order` in the unit tests.
+ */
+export declare const LOAD_BEARING_CONTEXT_SUBSTRINGS: readonly string[];
+/** True when a context doc path is one the review is not valid without. */
+export declare function isLoadBearingContext(docPath: string): boolean;
 /**
  * Order referenced context deterministically: constitutional/lessons docs
  * first (per CONTEXT_PRIORITY_SUBSTRINGS), then the caller's spec-declared link
@@ -612,6 +694,35 @@ export interface AssembledPrompt {
     truncated: boolean;
     /** Byte size of the assembled prompt. */
     bytes: number;
+    /**
+     * Repo-relative paths of LOAD-BEARING context docs
+     * (`LOAD_BEARING_CONTEXT_SUBSTRINGS`) that did not make it in whole — either
+     * cut mid-document or dropped entirely. Non-empty means the reviewer cannot
+     * do the job the review claims to do, and `runCrossModelReview` degrades
+     * instead of returning a verdict.
+     *
+     * Always present (empty when nothing load-bearing was lost) so a consumer
+     * that forgets to check reads `[]` rather than `undefined` — an absent field
+     * must never be mistakable for "nothing was lost".
+     */
+    omittedLoadBearing: string[];
+    /**
+     * The subset of `omittedLoadBearing` that could NEVER have fitted — the doc's
+     * own byte size alone exceeds the WHOLE budget, so no spec is small enough to
+     * admit it and no amount of trimming elsewhere will ever change the outcome.
+     *
+     * Split out from `omittedLoadBearing` after the independent review of
+     * 2026-08-22 (finding C2). Both refuse, but they call for OPPOSITE actions and
+     * a single reason string sent the reader down the wrong one: an ordinary
+     * omission says *make the spec smaller*, while this says *stop passing this
+     * doc as raw context — nothing you do to the spec can help.* The live case is
+     * the standards registry, which is larger than the entire budget on its own:
+     * attaching it produced a refusal whose advice ("use a smaller spec") was
+     * unfollowable, which is a limit hiding behind its own polite notice — the
+     * exact defect *Never Silently Cut the Data a Decision Depends On* was earned
+     * from, reproduced by that article's own implementation.
+     */
+    undeliverableLoadBearing: string[];
 }
 /**
  * Assemble the cross-model reviewer prompt: the reviewer template (with
@@ -702,14 +813,6 @@ export declare function aggregateRoundOutcomes(rounds: ReviewerResult[], opts?:
  * inc2 only ADDS the knob — it changes no family's default value.
  */
 export declare function resolveReviewerTimeoutMs(config: ReviewerConfig | undefined, frameworkId: string): number;
-/**
- * The high-level entry the skill driver calls: detect, and if available run
- * the first available framework's reviewer with the assembled prompt;
- * otherwise return the `unavailable` flag. NEVER throws, NEVER blocks.
- *
- * `assembled` is produced by `assembleReviewerPrompt`. `detectInputs` and
- * `providerOverride` exist for tests; production omits them.
- */
 export declare function runCrossModelReview(args: {
     assembled: AssembledPrompt;
     timeoutMs?: number;
@@ -717,6 +820,29 @@ export declare function runCrossModelReview(args: {
     providerOverride?: ReviewerInvokeArgs['providerOverride'];
     /** Agent config for the config-gated claude clean-door family (§1.5). */
     config?: ReviewerConfig;
+    /**
+     * Review through THIS family specifically, instead of the first framework
+     * detection happens to name.
+     *
+     * Added 2026-08-22 after the independent review's finding C1: the per-family
+     * path existed only in the skill driver, which called `family.review(...)`
+     * DIRECTLY — bypassing this function and therefore bypassing the load-bearing
+     * context refusal below. `ReviewerInvokeArgs` carries only `promptText`, so
+     * that path could not have refused even if it wanted to: the omission signal
+     * does not reach it. Since `SKILL.md` instructs `--family` on every call, the
+     * refusal was live on a path nothing used and absent from the path everything
+     * used — dead code wearing a passing test (the test called this function).
+     *
+     * The fix is one chokepoint rather than a check copied into four family
+     * entries (*Structure beats Willpower*): every review, per-family or not,
+     * enters here and meets the same guard.
+     */
+    family?: string;
+    /**
+     * A detection the caller already computed (the driver detects before
+     * assembling). Skips re-probing the host; MUST still be `available`.
+     */
+    detectionOverride?: CrossModelDetectionResult;
 }): Promise<ReviewerResult>;
 /**
  * Hash the spec's REVIEWABLE body (Piece 3 delta-gating): sha256 hex of the

package/dist/core/crossModelReviewer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"crossModelReviewer.d.ts","sourceRoot":"","sources":["../../src/core/crossModelReviewer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AA2BH,OAAO,EAEL,KAAK,qBAAqB,EAC3B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAItD;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,SAAU,CAAC;AAEzC;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,QAAS,CAAC;AAC9C,eAAO,MAAM,uBAAuB,SAAU,CAAC;AAE/C;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,QAAY,CAAC;AAE9C;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,2BAA2B,EAAE,SAAS,MAAM,EAK/C,CAAC;AAgBX;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,SAAS,oBAAoB,EAAE,GACvC,oBAAoB,EAAE,CAKxB;AAOD;;;;GAIG;AACH,MAAM,MAAM,2BAA2B,GACnC,qBAAqB,GACrB,kBAAkB,GAClB,6BAA6B,GAC7B,sBAAsB,GACtB,mBAAmB,GACnB,oBAAoB,GACpB,iBAAiB,GACjB,4BAA4B,GAC5B,8BAA8B,GAC9B,kBAAkB,GAIlB,sBAAsB,GACtB,uBAAuB,GACvB,kBAAkB,GAClB,wBAAwB,CAAC;AAE7B,MAAM,WAAW,yBAAyB;IACxC,SAAS,EAAE,OAAO,CAAC;IACnB;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yEAAyE;IACzE,SAAS,CAAC,EAAE,qBAAqB,CAAC;IAClC,yEAAyE;IACzE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,oEAAoE;IACpE,MAAM,CAAC,EAAE,2BAA2B,CAAC;IACrC;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACrC;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kFAAkF;IAClF,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,8DAA8D;IAC9D,GAAG,CAAC,EAAE,IAAI,CAAC;IACX;;;OAGG;IACH,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC;;;OAGG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC;;;OAGG;IACH,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC9B;AAwBD;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,GAAE,sBAA2B,GAClC,yBAAyB,CA+B3B;AAoCD;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,GAAE,sBAA2B,GAClC,yBAAyB,CAsB3B;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,GAAE,sBAA2B,GAClC,yBAAyB,CA0F3B;AAED;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,4BAA4B,KAAK,CAAC;AAC/C,eAAO,MAAM,8BAA8B,UAAY,CAAC;AAmOxD;;;;GAIG;AACH;;;;;;GAMG;AACH,wBAAgB,4BAA4B,IAAI,IAAI,GAAG,SAAS,GAAG,WAAW,GAAG,kBAAkB,CAElG;AAED,4EAA4E;AAC5E,wBAAgB,gCAAgC,IAAI,UAAU,GAAG,cAAc,CAK9E;AAED,wBAAgB,uBAAuB,CACrC,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI,GACzB,IAAI,CAON;AAgND;6DAC6D;AAC7D,wBAAgB,2BAA2B,CAAC,GAAG,GAAE,IAAiB,GAAG,OAAO,CAI3E;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB,aAAa,CAAC;AAI9C;;;;;;;;GAQG;AACH,eAAO,MAAM,6BAA6B,mBAAmB,CAAC;AAE9D;;;;;;;;;GASG;AACH,eAAO,MAAM,+BAA+B,EAAE,SAAS,MAAM,EAAoC,CAAC;AAOlG;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,GAAE,sBAA2B,GAClC,yBAAyB,CAgC3B;AAED,wEAAwE;AACxE,MAAM,MAAM,6BAA6B,GACrC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC3B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,uBAAuB,GAAG,uBAAuB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAE5F;;;;;;;;;;GAUG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,CAAC,EAAE,cAAc,GACtB,6BAA6B,CAa/B;AAYD,wBAAgB,+BAA+B,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAyB5E;AAED,qEAAqE;AACrE,wBAAgB,oCAAoC,IAAI,IAAI,CAE3D;AAID,MAAM,WAAW,cAAc;IAC7B,8CAA8C;IAC9C,MAAM,EAAE,IAAI,GAAG,UAAU,GAAG,aAAa,CAAC;IAC1C,kDAAkD;IAClD,SAAS,CAAC,EAAE,qBAAqB,CAAC;IAClC,2BAA2B;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gDAAgD;IAChD,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAC;IAC3B,yDAAyD;IACzD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4EAA4E;IAC5E,IAAI,EAAE,MAAM,CAAC;IACb;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,YAAY,CAAC,EAAE;QACb,SAAS,CAAC,EAAE;YACV,SAAS,CAAC,EAAE;gBACV,iFAAiF;gBACjF,OAAO,CAAC,EAAE,OAAO,CAAC;gBAClB,oEAAoE;gBACpE,KAAK,CAAC,EAAE,MAAM,CAAC;aAChB,CAAC;YACF;;;;;;;;;eASG;YACH,SAAS,CAAC,EACN,MAAM,GACN;gBACE,yDAAyD;gBACzD,OAAO,CAAC,EAAE,MAAM,CAAC;gBACjB,6CAA6C;gBAC7C,WAAW,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC,CAAC;aAC9D,CAAC;SACP,CAAC;KACH,CAAC;CACH;AAED,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,cAAc,GAAG,gBAAgB,GAAG,SAAS,CAAC;AAEpF,MAAM,WAAW,aAAa;IAC5B,0DAA0D;IAC1D,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,aAAa,CAAC;IACvB,+DAA+D;IAC/D,IAAI,EAAE,MAAM,CAAC;IACb,6EAA6E;IAC7E,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,UAAU,0BAA0B;IAClC,gEAAgE;IAChE,EAAE,EAAE,qBAAqB,CAAC;IAC1B;;;;;;OAMG;IACH,WAAW,EAAE,OAAO,CAAC;IACrB,4EAA4E;IAC5E,MAAM,CAAC,MAAM,CAAC,EAAE,sBAAsB,GAAG,yBAAyB,CAAC;IACnE;;;;OAIG;IACH,MAAM,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;CAC3D;AAED,MAAM,WAAW,kBAAkB;IACjC,iFAAiF;IACjF,UAAU,EAAE,MAAM,CAAC;IACnB,wBAAwB;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;KAAE,CAAC;IAChG;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,yBAAyB,CAAC;IAC9C;;;;OAIG;IACH,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC;;;;OAIG;IACH,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC;;;;;;OAMG;IACH,qBAAqB,CAAC,EAAE,MAAM;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;KAAE,GAAG,IAAI,CAAC;CACnH;AAED;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAM1E;AAkiBD;;;;;GAKG;AACH,eAAO,MAAM,6BAA6B,EAAE,0BAA0B,EAYrE,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CAAC,MAAM,CAAC,EAAE,cAAc,GAAG,OAAO,CAE3E;AAED;;;;;;GAMG;AACH,wBAAgB,+BAA+B,CAC7C,MAAM,CAAC,EAAE,cAAc,GACtB,0BAA0B,EAAE,CAI9B;AAED;;;;;;;;GAQG;AACH,wBAAgB,8BAA8B,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAI9E;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,2BAA2B,EAAE,SAAS,MAAM,EASxD,CAAC;AAEF,6DAA6D;AAC7D,wBAAgB,0BAA0B,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAE9D;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,GAAE,sBAA2B,EACnC,MAAM,CAAC,EAAE,cAAc,GACtB,yBAAyB,CAU3B;AAED;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAC1C,MAAM,GAAE,sBAA2B,EACnC,MAAM,CAAC,EAAE,cAAc,GACtB,yBAAyB,EAAE,CAO7B;AAID;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAuC1D;AAID;;;;;;GAMG;AACH;;;;;;;;;GASG;AACH;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAIvD;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAMxE;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,aAAa,CA0BlF;AAuBD,MAAM,WAAW,oBAAoB;IACnC,uEAAuE;IACvE,IAAI,EAAE,MAAM,CAAC;IACb,uDAAuD;IACvD,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,oBAAoB;IACnC,0EAA0E;IAC1E,gBAAgB,EAAE,MAAM,CAAC;IACzB,8BAA8B;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,4EAA4E;IAC5E,QAAQ,EAAE,MAAM,CAAC;IACjB,+EAA+E;IAC/E,OAAO,CAAC,EAAE,oBAAoB,EAAE,CAAC;IACjC,+DAA+D;IAC/D,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,eAAe;IAC9B,mDAAmD;IACnD,UAAU,EAAE,MAAM,CAAC;IACnB,0EAA0E;IAC1E,SAAS,EAAE,OAAO,CAAC;IACnB,yCAAyC;IACzC,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,oBAAoB,GAAG,eAAe,CA2EpF;AAID;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,oBAAoB,GAC5B,WAAW,GACX,aAAa,GACb,UAAU,GACV,qBAAqB,GACrB,qBAAqB,CAAC;AAE1B,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,oBAAoB,CAAC;IAC7B,mDAAmD;IACnD,IAAI,EAAE,MAAM,CAAC;IACb,mDAAmD;IACnD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,aAAa,GAAG,qBAAqB,GAAG,qBAAqB,EACrE,MAAM,CAAC,EAAE,MAAM,GACd,cAAc,CAQhB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,cAAc,EAAE,EACxB,IAAI,GAAE;IAAE,kBAAkB,CAAC,EAAE,OAAO,CAAA;CAAO,GAC1C,cAAc,CAkChB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,cAAc,GAAG,SAAS,EAClC,WAAW,EAAE,MAAM,GAClB,MAAM,CAcR;AAED;;;;;;;GAOG;AACH,wBAAsB,mBAAmB,CAAC,IAAI,EAAE;IAC9C,SAAS,EAAE,eAAe,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,sBAAsB,CAAC;IACtC,gBAAgB,CAAC,EAAE,kBAAkB,CAAC,kBAAkB,CAAC,CAAC;IAC1D,yEAAyE;IACzE,MAAM,CAAC,EAAE,cAAc,CAAC;CACzB,GAAG,OAAO,CAAC,cAAc,CAAC,CA8C1B;AAID;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAQ/D;AAID;;;;;GAKG;AACH,MAAM,WAAW,8BAA8B;IAC7C,sCAAsC;IACtC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,kEAAkE;IAClE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC;AASD;;;;;;;;;;;GAWG;AACH,wBAAgB,oCAAoC,CAClD,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,8BAA8B,GAC1C,IAAI,CAkBN;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iCAAiC,CAC/C,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,EACpB,GAAG,CAAC,EAAE,IAAI,GACT,OAAO,CAsCT"}
+{"version":3,"file":"crossModelReviewer.d.ts","sourceRoot":"","sources":["../../src/core/crossModelReviewer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsDG;AA2BH,OAAO,EAEL,KAAK,qBAAqB,EAC3B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAItD;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,SAAU,CAAC;AAEzC;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,QAAS,CAAC;AAC9C,eAAO,MAAM,uBAAuB,SAAU,CAAC;AAE/C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AACH,eAAO,MAAM,oBAAoB,QAAa,CAAC;AAE/C;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,2BAA2B,EAAE,SAAS,MAAM,EAK/C,CAAC;AAEX;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,eAAO,MAAM,+BAA+B,EAAE,SAAS,MAAM,EAKnD,CAAC;AAEX,2EAA2E;AAC3E,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAG7D;AAgBD;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,SAAS,oBAAoB,EAAE,GACvC,oBAAoB,EAAE,CAKxB;AAOD;;;;GAIG;AACH,MAAM,MAAM,2BAA2B,GACnC,qBAAqB,GACrB,kBAAkB,GAClB,6BAA6B,GAC7B,sBAAsB,GACtB,mBAAmB,GACnB,oBAAoB,GACpB,iBAAiB,GACjB,4BAA4B,GAC5B,8BAA8B,GAC9B,kBAAkB,GAIlB,sBAAsB,GACtB,uBAAuB,GACvB,kBAAkB,GAClB,wBAAwB,CAAC;AAE7B,MAAM,WAAW,yBAAyB;IACxC,SAAS,EAAE,OAAO,CAAC;IACnB;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yEAAyE;IACzE,SAAS,CAAC,EAAE,qBAAqB,CAAC;IAClC,yEAAyE;IACzE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,oEAAoE;IACpE,MAAM,CAAC,EAAE,2BAA2B,CAAC;IACrC;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACrC;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kFAAkF;IAClF,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,8DAA8D;IAC9D,GAAG,CAAC,EAAE,IAAI,CAAC;IACX;;;OAGG;IACH,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC;;;OAGG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC;;;OAGG;IACH,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC9B;AAwBD;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,GAAE,sBAA2B,GAClC,yBAAyB,CA+B3B;AAoCD;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,GAAE,sBAA2B,GAClC,yBAAyB,CAsB3B;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,GAAE,sBAA2B,GAClC,yBAAyB,CA0F3B;AAED;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,4BAA4B,KAAK,CAAC;AAC/C,eAAO,MAAM,8BAA8B,UAAY,CAAC;AAmOxD;;;;GAIG;AACH;;;;;;GAMG;AACH,wBAAgB,4BAA4B,IAAI,IAAI,GAAG,SAAS,GAAG,WAAW,GAAG,kBAAkB,CAElG;AAED,4EAA4E;AAC5E,wBAAgB,gCAAgC,IAAI,UAAU,GAAG,cAAc,CAK9E;AAED,wBAAgB,uBAAuB,CACrC,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI,GACzB,IAAI,CAON;AAgND;6DAC6D;AAC7D,wBAAgB,2BAA2B,CAAC,GAAG,GAAE,IAAiB,GAAG,OAAO,CAI3E;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB,aAAa,CAAC;AAI9C;;;;;;;;GAQG;AACH,eAAO,MAAM,6BAA6B,mBAAmB,CAAC;AAE9D;;;;;;;;;GASG;AACH,eAAO,MAAM,+BAA+B,EAAE,SAAS,MAAM,EAAoC,CAAC;AAOlG;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,GAAE,sBAA2B,GAClC,yBAAyB,CAgC3B;AAED,wEAAwE;AACxE,MAAM,MAAM,6BAA6B,GACrC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC3B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,uBAAuB,GAAG,uBAAuB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAE5F;;;;;;;;;;GAUG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,CAAC,EAAE,cAAc,GACtB,6BAA6B,CAa/B;AAYD,wBAAgB,+BAA+B,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAyB5E;AAED,qEAAqE;AACrE,wBAAgB,oCAAoC,IAAI,IAAI,CAE3D;AAID,MAAM,WAAW,cAAc;IAC7B,8CAA8C;IAC9C,MAAM,EAAE,IAAI,GAAG,UAAU,GAAG,aAAa,CAAC;IAC1C,kDAAkD;IAClD,SAAS,CAAC,EAAE,qBAAqB,CAAC;IAClC,2BAA2B;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gDAAgD;IAChD,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAC;IAC3B,yDAAyD;IACzD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4EAA4E;IAC5E,IAAI,EAAE,MAAM,CAAC;IACb;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,YAAY,CAAC,EAAE;QACb,SAAS,CAAC,EAAE;YACV,SAAS,CAAC,EAAE;gBACV,iFAAiF;gBACjF,OAAO,CAAC,EAAE,OAAO,CAAC;gBAClB,oEAAoE;gBACpE,KAAK,CAAC,EAAE,MAAM,CAAC;aAChB,CAAC;YACF;;;;;;;;;eASG;YACH,SAAS,CAAC,EACN,MAAM,GACN;gBACE,yDAAyD;gBACzD,OAAO,CAAC,EAAE,MAAM,CAAC;gBACjB,6CAA6C;gBAC7C,WAAW,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC,CAAC;aAC9D,CAAC;SACP,CAAC;KACH,CAAC;CACH;AAED,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,cAAc,GAAG,gBAAgB,GAAG,SAAS,CAAC;AAEpF,MAAM,WAAW,aAAa;IAC5B,0DAA0D;IAC1D,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,aAAa,CAAC;IACvB,+DAA+D;IAC/D,IAAI,EAAE,MAAM,CAAC;IACb,6EAA6E;IAC7E,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,UAAU,0BAA0B;IAClC,gEAAgE;IAChE,EAAE,EAAE,qBAAqB,CAAC;IAC1B;;;;;;OAMG;IACH,WAAW,EAAE,OAAO,CAAC;IACrB,4EAA4E;IAC5E,MAAM,CAAC,MAAM,CAAC,EAAE,sBAAsB,GAAG,yBAAyB,CAAC;IACnE;;;;OAIG;IACH,MAAM,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;CAC3D;AAED,MAAM,WAAW,kBAAkB;IACjC,iFAAiF;IACjF,UAAU,EAAE,MAAM,CAAC;IACnB,wBAAwB;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;KAAE,CAAC;IAChG;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,yBAAyB,CAAC;IAC9C;;;;OAIG;IACH,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC;;;;OAIG;IACH,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC;;;;;;OAMG;IACH,qBAAqB,CAAC,EAAE,MAAM;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;KAAE,GAAG,IAAI,CAAC;CACnH;AAED;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAM1E;AAkiBD;;;;;GAKG;AACH,eAAO,MAAM,6BAA6B,EAAE,0BAA0B,EAYrE,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CAAC,MAAM,CAAC,EAAE,cAAc,GAAG,OAAO,CAE3E;AAED;;;;;;GAMG;AACH,wBAAgB,+BAA+B,CAC7C,MAAM,CAAC,EAAE,cAAc,GACtB,0BAA0B,EAAE,CAI9B;AAED;;;;;;;;GAQG;AACH,wBAAgB,8BAA8B,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAI9E;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,2BAA2B,EAAE,SAAS,MAAM,EASxD,CAAC;AAEF,6DAA6D;AAC7D,wBAAgB,0BAA0B,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAE9D;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,GAAE,sBAA2B,EACnC,MAAM,CAAC,EAAE,cAAc,GACtB,yBAAyB,CAU3B;AAED;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAC1C,MAAM,GAAE,sBAA2B,EACnC,MAAM,CAAC,EAAE,cAAc,GACtB,yBAAyB,EAAE,CAO7B;AAID;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAuC1D;AAID;;;;;;GAMG;AACH;;;;;;;;;GASG;AACH;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAIvD;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAMxE;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,aAAa,CA0BlF;AAuBD,MAAM,WAAW,oBAAoB;IACnC,uEAAuE;IACvE,IAAI,EAAE,MAAM,CAAC;IACb,uDAAuD;IACvD,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,oBAAoB;IACnC,0EAA0E;IAC1E,gBAAgB,EAAE,MAAM,CAAC;IACzB,8BAA8B;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,4EAA4E;IAC5E,QAAQ,EAAE,MAAM,CAAC;IACjB,+EAA+E;IAC/E,OAAO,CAAC,EAAE,oBAAoB,EAAE,CAAC;IACjC,+DAA+D;IAC/D,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,eAAe;IAC9B,mDAAmD;IACnD,UAAU,EAAE,MAAM,CAAC;IACnB,0EAA0E;IAC1E,SAAS,EAAE,OAAO,CAAC;IACnB,yCAAyC;IACzC,KAAK,EAAE,MAAM,CAAC;IACd;;;;;;;;;;OAUG;IACH,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B;;;;;;;;;;;;;;;OAeG;IACH,wBAAwB,EAAE,MAAM,EAAE,CAAC;CACpC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,oBAAoB,GAAG,eAAe,CAgGpF;AAID;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,oBAAoB,GAC5B,WAAW,GACX,aAAa,GACb,UAAU,GACV,qBAAqB,GACrB,qBAAqB,CAAC;AAE1B,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,oBAAoB,CAAC;IAC7B,mDAAmD;IACnD,IAAI,EAAE,MAAM,CAAC;IACb,mDAAmD;IACnD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,aAAa,GAAG,qBAAqB,GAAG,qBAAqB,EACrE,MAAM,CAAC,EAAE,MAAM,GACd,cAAc,CAQhB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,cAAc,EAAE,EACxB,IAAI,GAAE;IAAE,kBAAkB,CAAC,EAAE,OAAO,CAAA;CAAO,GAC1C,cAAc,CAkChB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,cAAc,GAAG,SAAS,EAClC,WAAW,EAAE,MAAM,GAClB,MAAM,CAcR;AAoFD,wBAAsB,mBAAmB,CAAC,IAAI,EAAE;IAC9C,SAAS,EAAE,eAAe,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,sBAAsB,CAAC;IACtC,gBAAgB,CAAC,EAAE,kBAAkB,CAAC,kBAAkB,CAAC,CAAC;IAC1D,yEAAyE;IACzE,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB;;;;;;;;;;;;;;;;OAgBG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,yBAAyB,CAAC;CAC/C,GAAG,OAAO,CAAC,cAAc,CAAC,CAmE1B;AAID;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAQ/D;AAID;;;;;GAKG;AACH,MAAM,WAAW,8BAA8B;IAC7C,sCAAsC;IACtC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,kEAAkE;IAClE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC;AASD;;;;;;;;;;;GAWG;AACH,wBAAgB,oCAAoC,CAClD,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,8BAA8B,GAC1C,IAAI,CAkBN;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iCAAiC,CAC/C,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,EACpB,GAAG,CAAC,EAAE,IAAI,GACT,OAAO,CAsCT"}

package/dist/core/crossModelReviewer.js

@@ -1,6 +1,15 @@
 /**
  * crossModelReviewer — Step B of the tiered development process.
  *
+ * Governed by: *Never Silently Cut the Data a Decision Depends On*
+ * (docs/STANDARDS-REGISTRY.md). This file carries the case that earned that article:
+ * `CONTEXT_BUDGET_BYTES` (derived from the transport, derivation recorded in place),
+ * `LOAD_BEARING_CONTEXT_SUBSTRINGS` (the context a review is not valid without), and the
+ * `context-incomplete` REFUSAL in `runCrossModelReview` — which exists because this file's
+ * disclosure layer was already correct and complete, and six rounds of review were conducted on a
+ * fabricated view of the world anyway. Disclosure informs a reader who reads; refusal does not
+ * depend on anyone reading.
+ *
  * Re-platforms the `/spec-converge` external "cross-model" reviewer onto the
  * agent's own installed `codex` CLI. The external pass that the skill used to
  * describe as running "via the /crossreview pattern" (a never-built
@@ -82,12 +91,51 @@ export const REVIEWER_TIMEOUT_MAX_MS = 900_000;
  * so referenced context MUST be inlined; this bounds the prompt size (spec §2).
  * The spec is always included in full; referenced context fills the remainder
  * and is truncated (with a loud note) if it overflows.
+ *
+ * ── DERIVATION (governed by *Never Silently Cut the Data a Decision Depends On*) ─────────────
+ * This number is DERIVED from the binding constraint on the consumer, and the
+ * derivation is recorded here so it can be re-checked rather than inherited.
+ * Re-derive it whenever the transport or the supported reviewer families
+ * change; do not tune it by feel.
+ *
+ *   Candidate constraint 1 — the model's context window. Every reviewer
+ *   family this registry supports at the `capable` tier accepts >= 200K
+ *   input tokens, i.e. roughly 800 KB of English markdown at ~4 chars/token.
+ *   NOT binding.
+ *
+ *   Candidate constraint 2 — the TRANSPORT. The exec-json path hands the
+ *   prompt to the CLI on stdin (unbounded). But `intelligence.codexExecJson:
+ *   false` is a documented rollback lever, and the plain path passes the
+ *   prompt as a single argv element, which must fit inside the host's
+ *   ARG_MAX *together with the whole environment* — 1 MiB on macOS, 2 MiB on
+ *   typical Linux. BINDING, and binding on the smaller host.
+ *
+ * So the budget is set from the transport, at a quarter of the smaller
+ * ARG_MAX: 256 KiB. That leaves three quarters of ARG_MAX for the
+ * environment and the rest of the command line on the worst-case host, and
+ * is ~64K tokens — comfortably inside every supported model's window.
+ *
+ * WHAT THIS NUMBER DOES NOT PROMISE. It is a transport ceiling, not a
+ * guarantee that any given spec plus its parent design will fit. When the
+ * load-bearing context does NOT fit, the review does not quietly proceed on
+ * a partial view: `assembleReviewerPrompt` records the omission and
+ * `runCrossModelReview` returns `degraded` rather than a verdict. See
+ * `LOAD_BEARING_CONTEXT_SUBSTRINGS`.
+ *
+ * HISTORY. This was 60 KB from the spec's first draft until 2026-08-22, a
+ * number with no recorded derivation. At that size the budget was smaller
+ * than a single ordinary spec, so referenced context was dropped in FULL on
+ * every round of every review — the truncation note read "truncated to fit"
+ * while describing 100% loss. Six rounds of cross-model review on
+ * `placement-real-capacity-scoring` were conducted without the reviewers
+ * ever seeing the parent design, the standards registry, or the lessons doc.
+ * The disclosure machinery worked correctly throughout; nothing refused.
  */
-export const CONTEXT_BUDGET_BYTES = 60 * 1024;
+export const CONTEXT_BUDGET_BYTES = 256 * 1024;
 /**
  * Deterministic priority ordering for referenced context (spec §2, F4).
  *
- * When the 60KB budget can't hold every referenced doc, truncation MUST be
+ * When the budget can't hold every referenced doc, truncation MUST be
  * deterministic — the same spec + same docs always drop the same docs — so a
  * review is reproducible and the "what got dropped" note is stable. The
  * constitutional / lessons docs are the highest-value context for a reviewer
@@ -105,6 +153,48 @@ export const CONTEXT_PRIORITY_SUBSTRINGS = [
     'STANDARDS-REGISTRY',
     'integrated-being',
 ];
+/**
+ * The subset of referenced context a cross-model review is NOT VALID WITHOUT
+ * (governed by *Never Silently Cut the Data a Decision Depends On*).
+ *
+ * The reviewer's job is to judge a spec against the design and the rules it is
+ * built on. A reviewer that received the spec but none of those documents can
+ * only check whether the spec agrees with ITSELF — a materially weaker check
+ * wearing the same name. So when a budget walk cannot admit one of these docs
+ * IN FULL, the honest outcome is not "a review with a caveat"; it is NOT A
+ * REVIEW, and `runCrossModelReview` degrades rather than returning a verdict.
+ *
+ * PARTIAL COUNTS AS OMITTED, deliberately. Half of the standards registry, cut
+ * at whatever byte the budget ran out on, is not the standards registry — the
+ * reviewer cannot know whether the clause that governs this spec was in the
+ * half it received. Treating a partial constitutional doc as "present" is the
+ * same substitution of a symbol for the state that this rule exists to stop.
+ *
+ * These coincide with `CONTEXT_PRIORITY_SUBSTRINGS` today, and that is not a
+ * coincidence — a doc is kept first BECAUSE the review is worthless without it.
+ * They are named separately because they answer different questions (what order
+ * do docs go in / what may a review proceed without), and a future doc could
+ * be worth prioritising without being load-bearing.
+ *
+ * SPELLED OUT RATHER THAN ALIASED, deliberately (independent review 2026-08-22,
+ * finding C8). This was `= CONTEXT_PRIORITY_SUBSTRINGS` — the SAME array object,
+ * which made the paragraph above false: with an alias, adding a doc to the
+ * priority list silently promotes it to a review-BLOCKER, and the divergence the
+ * comment reserves the right to have is unrepresentable. A list that claims to
+ * be separate must be separate; two lists that happen to agree are checked by
+ * `load-bearing docs are a subset of the priority order` in the unit tests.
+ */
+export const LOAD_BEARING_CONTEXT_SUBSTRINGS = [
+    'signal-vs-authority',
+    'INSTAR-DESIGN-PRINCIPLES-AND-LESSONS',
+    'STANDARDS-REGISTRY',
+    'integrated-being',
+];
+/** True when a context doc path is one the review is not valid without. */
+export function isLoadBearingContext(docPath) {
+    const lower = docPath.toLowerCase();
+    return LOAD_BEARING_CONTEXT_SUBSTRINGS.some((s) => lower.includes(s.toLowerCase()));
+}
 /**
  * Return a deterministic priority rank for a context doc path: a small index
  * for a constitutional/lessons doc (earlier substring = smaller rank), or a
@@ -1804,11 +1894,31 @@ export function assembleReviewerPrompt(inputs) {
             ' Your view of the supporting docs is PARTIAL — flag any finding that ' +
             'depends on context you could not see. ---\n');
     }
+    // Which LOAD-BEARING docs failed to arrive IN FULL? A partial one counts as
+    // omitted (see LOAD_BEARING_CONTEXT_SUBSTRINGS) — half a constitution cannot
+    // certify a spec against the constitution.
+    const omittedLoadBearing = [
+        ...(partialDoc && isLoadBearingContext(partialDoc) ? [partialDoc] : []),
+        ...droppedDocs.filter(isLoadBearingContext),
+    ];
+    // Of those, which could never have fitted at ANY spec size? Measured against
+    // the WHOLE budget, not the remainder: a doc bigger than the entire budget is
+    // undeliverable by construction, and saying "use a smaller spec" about it is
+    // advice that cannot be followed.
+    const undeliverableLoadBearing = omittedLoadBearing.filter((docPath) => {
+        const doc = context.find((d) => d.path === docPath);
+        if (!doc)
+            return false;
+        const block = `\n--- CONTEXT: ${doc.path} ---\n${doc.content}\n`;
+        return Buffer.byteLength(block, 'utf-8') > budget;
+    });
     const promptText = parts.join('');
     return {
         promptText,
         truncated,
         bytes: Buffer.byteLength(promptText, 'utf-8'),
+        omittedLoadBearing,
+        undeliverableLoadBearing,
     };
 }
 /**
@@ -1922,6 +2032,65 @@ export function resolveReviewerTimeoutMs(config, frameworkId) {
  * `assembled` is produced by `assembleReviewerPrompt`. `detectInputs` and
  * `providerOverride` exist for tests; production omits them.
  */
+/**
+ * THE single place a cross-model reviewer is invoked.
+ *
+ * Every path — the first-match default and the per-family `--family` path the
+ * skill actually uses — enters here, so the load-bearing context refusal cannot
+ * be routed around. That is the whole point of the function existing: before
+ * 2026-08-22 the refusal lived inline in `runCrossModelReview` while the skill
+ * driver called `family.review(...)` directly, so the guard was live only on the
+ * path nothing used (independent review, finding C1). A guard reachable by one
+ * of two callers is not a guard; it is a comment with a test attached.
+ */
+async function invokeReviewerWithContextGuard(framework, detection, args) {
+    // We have a reviewer. Before spending it, check that the input it is about
+    // to judge is one a review can actually be conducted on. If the budget walk
+    // dropped (or cut) a doc the review is not valid without, this is NOT a
+    // review with a caveat — the reviewer could only check the spec against
+    // itself. Degrade, name exactly what was lost, and spend nothing.
+    //
+    // This is deliberately a REFUSAL rather than a louder disclosure. The
+    // assembler already disclosed the loss correctly and in full, naming every
+    // affected doc in the prompt — and six rounds of review were still conducted
+    // and reported as review on top of it. Disclosure informs a reader who
+    // reads; refusal does not depend on anyone reading.
+    const omitted = args.assembled.omittedLoadBearing ?? [];
+    if (omitted.length > 0) {
+        // Two refusals, not one (independent review 2026-08-22, finding C2). Both
+        // decline to review; they differ in what the reader must DO about it, and
+        // an undeliverable doc reported as an ordinary omission hands the reader
+        // advice ("make the spec smaller") that cannot work at any spec size.
+        const undeliverable = args.assembled.undeliverableLoadBearing ?? [];
+        const reason = undeliverable.length > 0
+            ? `context-undeliverable: ${undeliverable.join(', ')} — larger than the whole ` +
+                `${CONTEXT_BUDGET_BYTES}-byte budget on its own; no spec size admits it. ` +
+                `Do not pass it as raw context (the standards-conformance gate reads the ` +
+                `constitution in code).`
+            : `context-incomplete: ${omitted.join(', ')}`;
+        return {
+            status: 'degraded',
+            framework: framework.id,
+            reason,
+            flag: `cross-model-review: ${framework.id} (degraded: ${(args.assembled.undeliverableLoadBearing ?? []).length > 0
+                ? 'context-undeliverable'
+                : 'context-incomplete'})`,
+            crossFamily: isCrossFamilyReviewerFramework(framework.id),
+        };
+    }
+    return framework.review({
+        promptText: args.assembled.promptText,
+        // Per-family timeout (§3.2 / D6): an explicit caller value wins (e.g. the
+        // script's `--timeout-ms` dev override); otherwise resolve the per-family
+        // budget from the `specConverge.reviewers.timeoutMs` knob (absent ⇒ 120s).
+        timeoutMs: args.timeoutMs ?? resolveReviewerTimeoutMs(args.config, framework.id),
+        // Hand the already-computed detection down so the entry never re-probes
+        // the host (and tests stay hermetic to the injected inputs).
+        detectionOverride: detection,
+        ...(args.config ? { reviewerConfig: args.config } : {}),
+        ...(args.providerOverride ? { providerOverride: args.providerOverride } : {}),
+    });
+}
 export async function runCrossModelReview(args) {
     // Derive detect inputs from config when the caller omitted them
     // (round-8: every future caller inherits the enabledFrameworks plumb —
@@ -1930,7 +2099,36 @@ export async function runCrossModelReview(args) {
         (Array.isArray(args.config?.enabledFrameworks)
             ? { enabledFrameworks: args.config.enabledFrameworks }
             : undefined);
-    const detection = detectCrossModelReviewer(effectiveDetectInputs, args.config);
+    // Per-family selection (C1): resolve THIS family's entry and detection, then
+    // fall through to exactly the same refusal + invoke below. A family the
+    // active registry does not carry is `unavailable`, never a silent fallback to
+    // some other model — a caller that asked for gemini must not be answered by
+    // codex without being told.
+    const requestedFamily = args.family;
+    if (requestedFamily !== undefined) {
+        const entry = resolveActiveReviewerFrameworks(args.config).find((f) => f.id === requestedFamily);
+        if (!entry) {
+            const flag = buildCrossModelFlag('unavailable', 'no-supported-framework');
+            return {
+                status: 'unavailable',
+                reason: 'no-supported-framework',
+                flag: flag.flag,
+                crossFamily: isCrossFamilyReviewerFramework(requestedFamily),
+            };
+        }
+        const famDetection = args.detectionOverride ?? entry.detect(effectiveDetectInputs);
+        if (!famDetection.available) {
+            const flag = buildCrossModelFlag('unavailable', famDetection.reason);
+            return {
+                status: 'unavailable',
+                reason: famDetection.reason,
+                flag: flag.flag,
+                crossFamily: isCrossFamilyReviewerFramework(requestedFamily),
+            };
+        }
+        return invokeReviewerWithContextGuard(entry, famDetection, args);
+    }
+    const detection = args.detectionOverride ?? detectCrossModelReviewer(effectiveDetectInputs, args.config);
     if (!detection.available) {
         const flag = buildCrossModelFlag('unavailable', detection.reason);
         return {
@@ -1951,18 +2149,7 @@ export async function runCrossModelReview(args) {
             crossFamily: false,
         };
     }
-    return framework.review({
-        promptText: args.assembled.promptText,
-        // Per-family timeout (§3.2 / D6): an explicit caller value wins (e.g. the
-        // script's `--timeout-ms` dev override); otherwise resolve the per-family
-        // budget from the `specConverge.reviewers.timeoutMs` knob (absent ⇒ 120s).
-        timeoutMs: args.timeoutMs ?? resolveReviewerTimeoutMs(args.config, framework.id),
-        // Hand the already-computed detection down so the entry never re-probes
-        // the host (and tests stay hermetic to the injected inputs).
-        detectionOverride: detection,
-        ...(args.config ? { reviewerConfig: args.config } : {}),
-        ...(args.providerOverride ? { providerOverride: args.providerOverride } : {}),
-    });
+    return invokeReviewerWithContextGuard(framework, detection, args);
 }
 // ── Delta-gating (reviewable-body hash) ─────────────────────────────────
 /**