instar 1.3.1663 → 1.3.1664

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.1663",
+  "version": "1.3.1664",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-11-05T03:28:30.720Z",
-  "instarVersion": "1.3.1663",
+  "generatedAt": "2026-11-05T04:27:16.833Z",
+  "instarVersion": "1.3.1664",
   "entryCount": 206,
   "entries": {
     "hook:session-start": {
@@ -435,7 +435,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c8761330d98cea3388b34fe35d0e72154e8ffd276e9a8a6b831098df91cb9fa1",
+      "contentHash": "73ca891f77c301201adeb3027702b293f637fa64fdd3b2332ea4b5d87facfa46",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -443,7 +443,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c8761330d98cea3388b34fe35d0e72154e8ffd276e9a8a6b831098df91cb9fa1",
+      "contentHash": "73ca891f77c301201adeb3027702b293f637fa64fdd3b2332ea4b5d87facfa46",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -451,7 +451,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c8761330d98cea3388b34fe35d0e72154e8ffd276e9a8a6b831098df91cb9fa1",
+      "contentHash": "73ca891f77c301201adeb3027702b293f637fa64fdd3b2332ea4b5d87facfa46",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -459,7 +459,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c8761330d98cea3388b34fe35d0e72154e8ffd276e9a8a6b831098df91cb9fa1",
+      "contentHash": "73ca891f77c301201adeb3027702b293f637fa64fdd3b2332ea4b5d87facfa46",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -467,7 +467,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c8761330d98cea3388b34fe35d0e72154e8ffd276e9a8a6b831098df91cb9fa1",
+      "contentHash": "73ca891f77c301201adeb3027702b293f637fa64fdd3b2332ea4b5d87facfa46",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -475,7 +475,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c8761330d98cea3388b34fe35d0e72154e8ffd276e9a8a6b831098df91cb9fa1",
+      "contentHash": "73ca891f77c301201adeb3027702b293f637fa64fdd3b2332ea4b5d87facfa46",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -483,7 +483,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c8761330d98cea3388b34fe35d0e72154e8ffd276e9a8a6b831098df91cb9fa1",
+      "contentHash": "73ca891f77c301201adeb3027702b293f637fa64fdd3b2332ea4b5d87facfa46",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -491,7 +491,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c8761330d98cea3388b34fe35d0e72154e8ffd276e9a8a6b831098df91cb9fa1",
+      "contentHash": "73ca891f77c301201adeb3027702b293f637fa64fdd3b2332ea4b5d87facfa46",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -499,7 +499,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c8761330d98cea3388b34fe35d0e72154e8ffd276e9a8a6b831098df91cb9fa1",
+      "contentHash": "73ca891f77c301201adeb3027702b293f637fa64fdd3b2332ea4b5d87facfa46",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -507,7 +507,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c8761330d98cea3388b34fe35d0e72154e8ffd276e9a8a6b831098df91cb9fa1",
+      "contentHash": "73ca891f77c301201adeb3027702b293f637fa64fdd3b2332ea4b5d87facfa46",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -515,7 +515,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c8761330d98cea3388b34fe35d0e72154e8ffd276e9a8a6b831098df91cb9fa1",
+      "contentHash": "73ca891f77c301201adeb3027702b293f637fa64fdd3b2332ea4b5d87facfa46",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -523,7 +523,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c8761330d98cea3388b34fe35d0e72154e8ffd276e9a8a6b831098df91cb9fa1",
+      "contentHash": "73ca891f77c301201adeb3027702b293f637fa64fdd3b2332ea4b5d87facfa46",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -531,7 +531,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c8761330d98cea3388b34fe35d0e72154e8ffd276e9a8a6b831098df91cb9fa1",
+      "contentHash": "73ca891f77c301201adeb3027702b293f637fa64fdd3b2332ea4b5d87facfa46",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -539,7 +539,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c8761330d98cea3388b34fe35d0e72154e8ffd276e9a8a6b831098df91cb9fa1",
+      "contentHash": "73ca891f77c301201adeb3027702b293f637fa64fdd3b2332ea4b5d87facfa46",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -547,7 +547,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c8761330d98cea3388b34fe35d0e72154e8ffd276e9a8a6b831098df91cb9fa1",
+      "contentHash": "73ca891f77c301201adeb3027702b293f637fa64fdd3b2332ea4b5d87facfa46",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -555,7 +555,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c8761330d98cea3388b34fe35d0e72154e8ffd276e9a8a6b831098df91cb9fa1",
+      "contentHash": "73ca891f77c301201adeb3027702b293f637fa64fdd3b2332ea4b5d87facfa46",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -563,7 +563,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c8761330d98cea3388b34fe35d0e72154e8ffd276e9a8a6b831098df91cb9fa1",
+      "contentHash": "73ca891f77c301201adeb3027702b293f637fa64fdd3b2332ea4b5d87facfa46",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -571,7 +571,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c8761330d98cea3388b34fe35d0e72154e8ffd276e9a8a6b831098df91cb9fa1",
+      "contentHash": "73ca891f77c301201adeb3027702b293f637fa64fdd3b2332ea4b5d87facfa46",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -579,7 +579,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c8761330d98cea3388b34fe35d0e72154e8ffd276e9a8a6b831098df91cb9fa1",
+      "contentHash": "73ca891f77c301201adeb3027702b293f637fa64fdd3b2332ea4b5d87facfa46",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -587,7 +587,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c8761330d98cea3388b34fe35d0e72154e8ffd276e9a8a6b831098df91cb9fa1",
+      "contentHash": "73ca891f77c301201adeb3027702b293f637fa64fdd3b2332ea4b5d87facfa46",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -595,7 +595,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c8761330d98cea3388b34fe35d0e72154e8ffd276e9a8a6b831098df91cb9fa1",
+      "contentHash": "73ca891f77c301201adeb3027702b293f637fa64fdd3b2332ea4b5d87facfa46",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -603,7 +603,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c8761330d98cea3388b34fe35d0e72154e8ffd276e9a8a6b831098df91cb9fa1",
+      "contentHash": "73ca891f77c301201adeb3027702b293f637fa64fdd3b2332ea4b5d87facfa46",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -611,7 +611,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c8761330d98cea3388b34fe35d0e72154e8ffd276e9a8a6b831098df91cb9fa1",
+      "contentHash": "73ca891f77c301201adeb3027702b293f637fa64fdd3b2332ea4b5d87facfa46",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -619,7 +619,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c8761330d98cea3388b34fe35d0e72154e8ffd276e9a8a6b831098df91cb9fa1",
+      "contentHash": "73ca891f77c301201adeb3027702b293f637fa64fdd3b2332ea4b5d87facfa46",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -627,7 +627,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c8761330d98cea3388b34fe35d0e72154e8ffd276e9a8a6b831098df91cb9fa1",
+      "contentHash": "73ca891f77c301201adeb3027702b293f637fa64fdd3b2332ea4b5d87facfa46",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -635,7 +635,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c8761330d98cea3388b34fe35d0e72154e8ffd276e9a8a6b831098df91cb9fa1",
+      "contentHash": "73ca891f77c301201adeb3027702b293f637fa64fdd3b2332ea4b5d87facfa46",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -643,7 +643,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c8761330d98cea3388b34fe35d0e72154e8ffd276e9a8a6b831098df91cb9fa1",
+      "contentHash": "73ca891f77c301201adeb3027702b293f637fa64fdd3b2332ea4b5d87facfa46",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -651,7 +651,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c8761330d98cea3388b34fe35d0e72154e8ffd276e9a8a6b831098df91cb9fa1",
+      "contentHash": "73ca891f77c301201adeb3027702b293f637fa64fdd3b2332ea4b5d87facfa46",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -659,7 +659,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c8761330d98cea3388b34fe35d0e72154e8ffd276e9a8a6b831098df91cb9fa1",
+      "contentHash": "73ca891f77c301201adeb3027702b293f637fa64fdd3b2332ea4b5d87facfa46",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -667,7 +667,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c8761330d98cea3388b34fe35d0e72154e8ffd276e9a8a6b831098df91cb9fa1",
+      "contentHash": "73ca891f77c301201adeb3027702b293f637fa64fdd3b2332ea4b5d87facfa46",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -675,7 +675,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c8761330d98cea3388b34fe35d0e72154e8ffd276e9a8a6b831098df91cb9fa1",
+      "contentHash": "73ca891f77c301201adeb3027702b293f637fa64fdd3b2332ea4b5d87facfa46",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -683,7 +683,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c8761330d98cea3388b34fe35d0e72154e8ffd276e9a8a6b831098df91cb9fa1",
+      "contentHash": "73ca891f77c301201adeb3027702b293f637fa64fdd3b2332ea4b5d87facfa46",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -691,7 +691,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c8761330d98cea3388b34fe35d0e72154e8ffd276e9a8a6b831098df91cb9fa1",
+      "contentHash": "73ca891f77c301201adeb3027702b293f637fa64fdd3b2332ea4b5d87facfa46",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -699,7 +699,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c8761330d98cea3388b34fe35d0e72154e8ffd276e9a8a6b831098df91cb9fa1",
+      "contentHash": "73ca891f77c301201adeb3027702b293f637fa64fdd3b2332ea4b5d87facfa46",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -707,7 +707,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c8761330d98cea3388b34fe35d0e72154e8ffd276e9a8a6b831098df91cb9fa1",
+      "contentHash": "73ca891f77c301201adeb3027702b293f637fa64fdd3b2332ea4b5d87facfa46",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -715,7 +715,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c8761330d98cea3388b34fe35d0e72154e8ffd276e9a8a6b831098df91cb9fa1",
+      "contentHash": "73ca891f77c301201adeb3027702b293f637fa64fdd3b2332ea4b5d87facfa46",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -723,7 +723,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c8761330d98cea3388b34fe35d0e72154e8ffd276e9a8a6b831098df91cb9fa1",
+      "contentHash": "73ca891f77c301201adeb3027702b293f637fa64fdd3b2332ea4b5d87facfa46",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -731,7 +731,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c8761330d98cea3388b34fe35d0e72154e8ffd276e9a8a6b831098df91cb9fa1",
+      "contentHash": "73ca891f77c301201adeb3027702b293f637fa64fdd3b2332ea4b5d87facfa46",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -739,7 +739,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c8761330d98cea3388b34fe35d0e72154e8ffd276e9a8a6b831098df91cb9fa1",
+      "contentHash": "73ca891f77c301201adeb3027702b293f637fa64fdd3b2332ea4b5d87facfa46",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -747,7 +747,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c8761330d98cea3388b34fe35d0e72154e8ffd276e9a8a6b831098df91cb9fa1",
+      "contentHash": "73ca891f77c301201adeb3027702b293f637fa64fdd3b2332ea4b5d87facfa46",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -755,7 +755,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c8761330d98cea3388b34fe35d0e72154e8ffd276e9a8a6b831098df91cb9fa1",
+      "contentHash": "73ca891f77c301201adeb3027702b293f637fa64fdd3b2332ea4b5d87facfa46",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -763,7 +763,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c8761330d98cea3388b34fe35d0e72154e8ffd276e9a8a6b831098df91cb9fa1",
+      "contentHash": "73ca891f77c301201adeb3027702b293f637fa64fdd3b2332ea4b5d87facfa46",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -771,7 +771,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c8761330d98cea3388b34fe35d0e72154e8ffd276e9a8a6b831098df91cb9fa1",
+      "contentHash": "73ca891f77c301201adeb3027702b293f637fa64fdd3b2332ea4b5d87facfa46",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -787,7 +787,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c8761330d98cea3388b34fe35d0e72154e8ffd276e9a8a6b831098df91cb9fa1",
+      "contentHash": "73ca891f77c301201adeb3027702b293f637fa64fdd3b2332ea4b5d87facfa46",
       "since": "2025-01-01"
     },
     "cli:init": {
@@ -1563,7 +1563,7 @@
       "type": "subsystem",
       "domain": "server",
       "sourcePath": "src/server/AgentServer.ts",
-      "contentHash": "74b9734c2e95f5b29f576967cc9ceeea1c6a1845803b4b5bf83967f726e48f62",
+      "contentHash": "9e5109f45f6d38cd6cceb5da3dab73c626a4a717e0c4420fc3eb8b8d6ba7d653",
       "since": "2025-01-01"
     },
     "subsystem:session-manager": {

package/src/data/standards-guard-index.json

@@ -2,7 +2,7 @@
   "schemaVersion": 1,
   "generatedFrom": "source-tree",
   "registrySha256": "f91273af3f6f22eb6bb3161c35b109469d8457f1f93b2ec90eec9e58f62ead53",
-  "packageVersion": "1.3.1663",
+  "packageVersion": "1.3.1664",
   "guards": [
     {
       "ref": "docs/audits/phase-b/f10-triage.md",

package/src/data/standards-guard-index.meta.json

@@ -1,5 +1,5 @@
 {
-  "sha256": "61f0bffcabd3b2b56efd05ffadfb07d7ad9dc7fd0ee8648cfb0d22b58a7dcc5b",
+  "sha256": "df1d312983f7c682f28c6807e351fe1e230b357ebc5e59e57fb1224ab094b274",
   "registrySha256": "f91273af3f6f22eb6bb3161c35b109469d8457f1f93b2ec90eec9e58f62ead53",
-  "packageVersion": "1.3.1663"
+  "packageVersion": "1.3.1664"
 }

package/src/data/standards-registry.meta.json

@@ -2,5 +2,5 @@
   "sha256": "f91273af3f6f22eb6bb3161c35b109469d8457f1f93b2ec90eec9e58f62ead53",
   "articleCount": 95,
   "generatedFrom": "docs/STANDARDS-REGISTRY.md",
-  "packageVersion": "1.3.1663"
+  "packageVersion": "1.3.1664"
 }

package/upgrades/1.3.1664.md

@@ -0,0 +1,32 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+Recommended-service setup now stays stopped when a person stops it. An emergency stop in Telegram or Slack, or ending the session from the dashboard, puts setup on hold. A setup session can hold itself through POST /recommended-services/:id/hold when the person says not now. The Jev offer now says credits are needed before a key. The setup rule on private folders covers sign-in codes too. All of this stays off on real agents, because setup only runs on throwaway or development agents proving a recipe.
+
+Instar's git safety funnel kept two lists of allowed commands, one for commands that change things and one for commands that only read. A command on neither list was refused twice, and each refusal told the caller to use the other route. `git check-ignore` was one of them. There is now one table and one classifier for every entry point. `check-ignore` is allowed as a read, including on Instar's own source tree when a caller opts in. A command outside the table gets a single clear refusal that says it is not classified. Non-read `reflog` forms now route correctly through the funnel's dispatcher.
+
+## What to Tell Your User
+
+Nothing yet. Recommended-service setup isn't on for real agents.
+
+Nothing changes for you. This is an internal safety cleanup in how Instar runs git.
+
+## Summary of New Capabilities
+
+- A stop during service setup holds, until a repeat yes, a no, or a passing check.
+- The list of recommended services shows `held` for a service on hold.
+- The hold route refuses with no-recipe on an agent not proving a recipe.
+
+| Capability | How to Use |
+|---|---|
+| Internal code can ask whether a file is git-ignored through the safety funnel | automatic, for code that calls the funnel |
+
+## Evidence
+
+Second live Jev run on a throwaway, 2026-11-05: an emergency stop was followed by a restart within seconds, in the server log. Tests in tests/integration/recommended-services-setup.test.ts fail without the check in reconcile.
+
+New test file `tests/unit/SafeGitExecutor-verb-classifier.test.ts` drives real git through every entry point in sandbox repositories and a source-tree fixture. Before the fix, 14 of its 16 tests failed, with `check-ignore` refused as a "destructive verb" and an unclassified verb producing four different messages.

package/upgrades/side-effects/recommended-services-stop-holds.md

@@ -0,0 +1,64 @@
+# Side-Effects Review — a person's stop holds recommended-service setup
+
+**Tier 2 by risk (session restart behaviour), with second-pass review.** Spec: `docs/specs/recommended-services.md`. Dark: setup only runs on a throwaway or development agent listing a recipe.
+
+## Summary
+
+- New `held` in per-machine setup state. `reconcile` skips a held service, so no restart and no stuck notice.
+- `holdSetupForSession` is called from the Telegram sentinel kill and `DELETE /sessions/:id`, before the kill and matching by session name or topic. `holdAllSetups` is called from the Slack sentinel kill-all and the app's Slack kill-all, and also holds a setup whose session is already dead.
+- Setup state now follows the conversation's current session, found through the topic. A reply brings a session back under a different name. Before this, a repeat yes could start a second session, and a no couldn't stop the renamed one.
+- New `POST /recommended-services/:id/hold`, for a session whose person said not now. Needs the bearer token and `X-Instar-Request`. No PIN, and it refuses without a recipe.
+- A repeat yes lifts a hold, resets its restart count and starts setup. A fresh yes also lifts it. A no and a pass clear it.
+- The Jev offer text says credits are needed before a key. This changes its offer hash, which is harmless because no real agent has a grant.
+- The brief rule covers sign-in codes and pictures. The Jev brief records the credit requirement and a credit code as the route that avoids a card.
+
+## 1. Over-block
+
+A false emergency stop now stays stopped until the person writes again. The second live run was exactly this: "No, don't add credits" was classified as a stop. It recovered before only because of the restart this removes. The person is told "Session terminated. Send a new message", so it isn't silent, and the classifier bug is filed on its own (fb-01131fac-fb1).
+
+An agent's own `DELETE /sessions/:id` with a bearer token also holds, since the route can't always tell operator from agent. A session ended that way stays ended until a yes, a no, a pass, or a reply. An agent ending its own setup session on purpose wants that.
+
+## 2. Under-block
+
+- Kill paths that aren't named still restart: the reaper, the watchdog, crash recovery. They're not a person's stop, so that's intended. A new person-facing stop path added later would miss this. A test pins the four named paths by reading the source, so it shows the calls exist and not that each runs.
+- `/stop-all` style autonomous stops and the route at `routes.ts:28380` are covered only where they go through `onSentinelKillSession`. The route's fallback without Telegram doesn't hold, and setup needs Telegram to talk to the person.
+- A session the person brought back by replying, which then dies, isn't restarted while held. Their next message resumes it. Recorded in the spec's Left behind.
+- The hold rule is prompt text, so a session can fail to call it. It then gets the bounded restarts, as today.
+- The hold is written before the kill. If the kill fails, the session keeps running while held. It can still finish and pass, which clears the hold.
+- Narrow race left in place: a stop during `startSetup`, before any session name is saved, can find nothing to hold or leave the new session running. The window is seconds, one recipe, and only on proving agents.
+
+## 3. Level-of-abstraction fit
+
+The stop decision stays where it is, in the sentinel and the routes. Setup state only records the outcome, and `reconcile` reads it. The two kill-all paths hold every setup that hasn't passed, including one whose session is already dead.
+
+## 4. Signal vs authority compliance
+
+No new judgment. `held` is a recorded fact, and `reconcile` applies a deterministic skip. The hold route only reduces what the system does, and grants nothing. Reference: `docs/signal-vs-authority.md`.
+
+## 5. Interactions
+
+`dormant` and `exhausted` are unaffected, because the hold check sits beside them. `endSetup` clears `held`, and `reconcile`'s no-grant branch runs before the skip, so a no from another machine still ends a held setup. A repeat yes used to return without touching setup. It now restarts a held one, which needs the PIN and a live page token.
+
+## 6. External surfaces
+
+`GET /recommended-services` gains `held`. One new route. The offer text changes only on the confirm page, which real agents can't reach. No change to what a person sees on any real agent.
+
+## 6b. Operator-surface quality
+
+The confirm page shows the new cost line through the existing field. It is one sentence longer, and the page is otherwise unchanged. No new control.
+
+## 7. Multi-machine posture
+
+Machine-local, like the rest of setup state. `machine-local-justification: physical-credential-locality`: setup state tracks a key and session on one disk. A stop on one machine holds the session on that machine. Setup runs only on the granted machine.
+
+## 8. Rollback cost
+
+A revert removes the route and the skip. A leftover `held` field in the state file is ignored. No data migration.
+
+## Second-pass review
+
+First read: concern raised. A stop, a reply and then a yes could start a second live session, because state kept a stale session name. The reviewer also named an unheld stop under a renamed session, a fresh yes leaving a hold, the app's Slack kill-all, a dead session coming back after a kill-all, the gap after the dashboard's kill, a hold overwritten during preflight, a repeat yes keeping its spent restarts, a pass not clearing the hold with no open promise, and an overclaiming test title. All were fixed.
+
+Second read: concurred, nothing blocking, from reading the code without running tests. It raised three smaller items. Re-adopting a session after a no, and a stop during preflight, are fixed after that read and weren't re-read. Left in place: a stop during `startSetup` still ends with a session running while held, and a yes on an open session clears `lastAttemptAt`, so a later idle-out gets one more restart.
+
+Verifier: the first full run failed one integration test, `recommended-services-confirm-wiring`, because that test's Telegram stand-in had no topic lookup, which the no path now calls. The real adapter has it. The stand-in now keeps real topic records, so the no path runs the real lookup. I hadn't run that file locally before pushing. Test-only, so no second read.