instar 1.3.269 → 1.3.270

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.269",
+  "version": "1.3.270",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-06-05T05:06:17.660Z",
-  "instarVersion": "1.3.269",
+  "generatedAt": "2026-06-05T06:21:50.311Z",
+  "instarVersion": "1.3.270",
   "entryCount": 198,
   "entries": {
     "hook:session-start": {
@@ -418,7 +418,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "46ad6286cf73d6a0cec07de6ed3ff0419daf20acef3a02cdd560b486e487c454",
+      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -426,7 +426,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "46ad6286cf73d6a0cec07de6ed3ff0419daf20acef3a02cdd560b486e487c454",
+      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -434,7 +434,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "46ad6286cf73d6a0cec07de6ed3ff0419daf20acef3a02cdd560b486e487c454",
+      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -442,7 +442,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "46ad6286cf73d6a0cec07de6ed3ff0419daf20acef3a02cdd560b486e487c454",
+      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -450,7 +450,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "46ad6286cf73d6a0cec07de6ed3ff0419daf20acef3a02cdd560b486e487c454",
+      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -458,7 +458,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "46ad6286cf73d6a0cec07de6ed3ff0419daf20acef3a02cdd560b486e487c454",
+      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -466,7 +466,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "46ad6286cf73d6a0cec07de6ed3ff0419daf20acef3a02cdd560b486e487c454",
+      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -474,7 +474,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "46ad6286cf73d6a0cec07de6ed3ff0419daf20acef3a02cdd560b486e487c454",
+      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -482,7 +482,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "46ad6286cf73d6a0cec07de6ed3ff0419daf20acef3a02cdd560b486e487c454",
+      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -490,7 +490,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "46ad6286cf73d6a0cec07de6ed3ff0419daf20acef3a02cdd560b486e487c454",
+      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -498,7 +498,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "46ad6286cf73d6a0cec07de6ed3ff0419daf20acef3a02cdd560b486e487c454",
+      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -506,7 +506,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "46ad6286cf73d6a0cec07de6ed3ff0419daf20acef3a02cdd560b486e487c454",
+      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -514,7 +514,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "46ad6286cf73d6a0cec07de6ed3ff0419daf20acef3a02cdd560b486e487c454",
+      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -522,7 +522,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "46ad6286cf73d6a0cec07de6ed3ff0419daf20acef3a02cdd560b486e487c454",
+      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -530,7 +530,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "46ad6286cf73d6a0cec07de6ed3ff0419daf20acef3a02cdd560b486e487c454",
+      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -538,7 +538,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "46ad6286cf73d6a0cec07de6ed3ff0419daf20acef3a02cdd560b486e487c454",
+      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -546,7 +546,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "46ad6286cf73d6a0cec07de6ed3ff0419daf20acef3a02cdd560b486e487c454",
+      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -554,7 +554,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "46ad6286cf73d6a0cec07de6ed3ff0419daf20acef3a02cdd560b486e487c454",
+      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -562,7 +562,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "46ad6286cf73d6a0cec07de6ed3ff0419daf20acef3a02cdd560b486e487c454",
+      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -570,7 +570,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "46ad6286cf73d6a0cec07de6ed3ff0419daf20acef3a02cdd560b486e487c454",
+      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -578,7 +578,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "46ad6286cf73d6a0cec07de6ed3ff0419daf20acef3a02cdd560b486e487c454",
+      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -586,7 +586,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "46ad6286cf73d6a0cec07de6ed3ff0419daf20acef3a02cdd560b486e487c454",
+      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -594,7 +594,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "46ad6286cf73d6a0cec07de6ed3ff0419daf20acef3a02cdd560b486e487c454",
+      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -602,7 +602,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "46ad6286cf73d6a0cec07de6ed3ff0419daf20acef3a02cdd560b486e487c454",
+      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -610,7 +610,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "46ad6286cf73d6a0cec07de6ed3ff0419daf20acef3a02cdd560b486e487c454",
+      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -618,7 +618,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "46ad6286cf73d6a0cec07de6ed3ff0419daf20acef3a02cdd560b486e487c454",
+      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -626,7 +626,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "46ad6286cf73d6a0cec07de6ed3ff0419daf20acef3a02cdd560b486e487c454",
+      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -634,7 +634,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "46ad6286cf73d6a0cec07de6ed3ff0419daf20acef3a02cdd560b486e487c454",
+      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -642,7 +642,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "46ad6286cf73d6a0cec07de6ed3ff0419daf20acef3a02cdd560b486e487c454",
+      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -650,7 +650,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "46ad6286cf73d6a0cec07de6ed3ff0419daf20acef3a02cdd560b486e487c454",
+      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -658,7 +658,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "46ad6286cf73d6a0cec07de6ed3ff0419daf20acef3a02cdd560b486e487c454",
+      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -666,7 +666,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "46ad6286cf73d6a0cec07de6ed3ff0419daf20acef3a02cdd560b486e487c454",
+      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -674,7 +674,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "46ad6286cf73d6a0cec07de6ed3ff0419daf20acef3a02cdd560b486e487c454",
+      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -682,7 +682,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "46ad6286cf73d6a0cec07de6ed3ff0419daf20acef3a02cdd560b486e487c454",
+      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -690,7 +690,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "46ad6286cf73d6a0cec07de6ed3ff0419daf20acef3a02cdd560b486e487c454",
+      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -698,7 +698,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "46ad6286cf73d6a0cec07de6ed3ff0419daf20acef3a02cdd560b486e487c454",
+      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -706,7 +706,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "46ad6286cf73d6a0cec07de6ed3ff0419daf20acef3a02cdd560b486e487c454",
+      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -714,7 +714,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "46ad6286cf73d6a0cec07de6ed3ff0419daf20acef3a02cdd560b486e487c454",
+      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -722,7 +722,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "46ad6286cf73d6a0cec07de6ed3ff0419daf20acef3a02cdd560b486e487c454",
+      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -730,7 +730,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "46ad6286cf73d6a0cec07de6ed3ff0419daf20acef3a02cdd560b486e487c454",
+      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -738,7 +738,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "46ad6286cf73d6a0cec07de6ed3ff0419daf20acef3a02cdd560b486e487c454",
+      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -746,7 +746,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "46ad6286cf73d6a0cec07de6ed3ff0419daf20acef3a02cdd560b486e487c454",
+      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -754,7 +754,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "46ad6286cf73d6a0cec07de6ed3ff0419daf20acef3a02cdd560b486e487c454",
+      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -770,7 +770,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "46ad6286cf73d6a0cec07de6ed3ff0419daf20acef3a02cdd560b486e487c454",
+      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
       "since": "2025-01-01"
     },
     "cli:init": {
@@ -1498,7 +1498,7 @@
       "type": "subsystem",
       "domain": "server",
       "sourcePath": "src/server/AgentServer.ts",
-      "contentHash": "9dce44bff3e2cd1c9a5034cd9249e70dc836d1d1c12603a905bb4456bcd5b416",
+      "contentHash": "30a413b5f098c00a676aa9daf20f6b00d13e3030973e0d819c885c6d8f14edd2",
       "since": "2025-01-01"
     },
     "subsystem:session-manager": {
@@ -1506,7 +1506,7 @@
       "type": "subsystem",
       "domain": "sessions",
       "sourcePath": "src/core/SessionManager.ts",
-      "contentHash": "58bd0d081d6b5b2355888694ecd9cfdb8f3e5b0771702d037cfff30f6d19d5ac",
+      "contentHash": "a81bb8757e0c6d92510d7ca7d0b6dc4975b11f21ec8d7664616d0bc07fcfbc93",
       "since": "2025-01-01"
     },
     "subsystem:auto-updater": {

package/src/scaffold/templates.ts

@@ -677,6 +677,17 @@ This routes feedback to the Instar maintainers automatically. Valid types: \`bug
 - Each framework gets its own circuit breaker (a Claude trip can't pause Codex). If a routed framework's CLI is missing it degrades to the default and reports it; if it's just rate-limited the component falls back to its heuristic (no herd onto the default). Routes INTERNAL component calls only — spawned interactive sessions stay governed by \`topicFrameworks\`.
 - **When to use** (PROACTIVE): when the user is hitting rate limits and asks how to spread load, or says "run my sentinels on Codex" / "move the background checks off Claude" → point them at \`sessions.componentFrameworks\` and \`GET /intelligence/routing\`. Restart sessions to apply (config is read into the router at the call path, but a file edit needs the server to pick it up). (Spec: \`docs/specs/per-component-framework-routing.md\`.)
 
+**Approval-as-Data** — Every operator approval becomes durable data instead of a one-shot "approved" with no memory. Each decision is recorded as \`approved-as-is\` vs \`approved-with-change\` vs \`rejected\`, with the WHY of each divergence, so over time you can see — per decision-class — where the operator takes your recommendation as-is vs revises it, and close the gap (your recommendations trend toward what they'd pick). Tracks approvals WHEREVER they occur: an official spec sign-off, a decision approved in chat, anywhere. Signed, append-only; read paths never gate.
+- Record a decision: \`curl -X POST -H "Authorization: Bearer $AUTH" http://localhost:${port}/approvals -H 'Content-Type: application/json' -d '{"subject":"<what-was-approved>","decisionClass":"<bucket>","surface":"chat","mode":"approved-as-is"}'\`. For a change: \`"mode":"approved-with-change","divergences":[{"category":"scope-correction","summary":"…","why":"…"}]\` (categories: \`missing-principle | risk-reduction | scope-correction | efficiency | new-information | style\`).
+- See the agreement ratios: \`curl -H "Authorization: Bearer $AUTH" http://localhost:${port}/approvals/summary\` → per class \`{ total, approvedAsIs, ratio, streak, autoApprovalEligible, divergenceCounts }\` + a \`bySurface\` breakdown. List rows: \`GET /approvals?limit=50&decisionClass=…&surface=…\`.
+- **AUTHORITY RULE (load-bearing):** \`mode\` + \`divergences\` MUST reflect an EXPLICIT operator statement ("go with your picks" = as-is; "change X because Y" = with-change). NEVER self-classify the operator's intent or record an ambiguous/silent decision; any row is operator-correctable (append with \`corrects\`).
+- **When to use** (PROACTIVE): the moment the operator approves or revises a recommendation you presented — a spec sign-off OR a chat decision — record it so the agreement signal accumulates. (Spec: \`docs/specs/AUTONOMOUS-OPERATION-JUDGMENT-AND-APPROVAL-AS-DATA-SPEC.md\`, Part B.)
+**Coordination Mandate** — Your operator's "permission slip" for autonomous agent-to-agent work. Instead of approving every step of a multi-agent project, the operator issues ONE bounded, expiring, revocable mandate (from the dashboard, behind their PIN) delegating SPECIFIC authorities to a SPECIFIC pair of agents. The mandate — never you — is the authorizer: requester ≠ authorizer is preserved. Deny-by-default: with no mandate issued, every check denies.
+- **Before any A2A action under a mandate** (PROACTIVE — this is the trigger): check it: \`curl -X POST -H "Authorization: Bearer $AUTH" http://localhost:${port}/mandate/evaluate -H 'Content-Type: application/json' -d '{"action":"sign-code-review","params":{"artifact":"migration-port","mutual":true},"agentFp":"<your-fingerprint>","mandateId":"<id>"}'\` → \`{ decision: "allow"|"deny", reason }\`. A deny means STOP — do not retry around it or escalate to a human-bypass; the bounds are the operator's.
+- Inspect: \`GET /mandate\` (each with live \`authorshipValid\`) · \`GET /mandate/:id\` · \`GET /mandate/audit\` (every decision, hash-chained — \`chain.ok:false\` means tampering; surface it immediately).
+- **You cannot issue or revoke mandates.** \`POST /mandate/issue\` and \`POST /mandate/:id/revoke\` require the operator's dashboard PIN — your Bearer token is structurally insufficient. NEVER ask the user to paste their PIN into chat; point them at the dashboard.
+- Every evaluation (allow AND deny) is audited. Act as if the audit is read by the operator — because it is. (Spec: \`docs/specs/coordination-mandate.md\`.)
+
 **Session Clock** — How long have you been running, and how much time is left? For any active time-boxed (autonomous) session, this returns the computed elapsed + remaining so you never have to guess or compute it yourself. Read-only observability.
 - Check: \`curl -H "Authorization: Bearer $AUTH" "http://localhost:${port}/session/clock"\` (optional \`?topic=<N>\` to bind to one session)
 - Returns \`{ now, nowIso, sessions: [{ label, kind, startedAt, endsAt, elapsedSeconds, remainingSeconds, elapsedHuman, remainingHuman, percentElapsed, status }] }\`; \`{ sessions: [] }\` when nothing is time-boxed. Per-machine (the record is local).

package/upgrades/1.3.270.md

@@ -0,0 +1,106 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: minor -->
+
+## What Changed
+
+Implemented Phase 2 of the approved Approval-as-Data design: the **approval ledger**.
+Every operator approval is now recorded as durable, signed data — classified as
+approved-as-is, approved-with-change (with the reason for each change), or rejected — and
+the system computes a per-class agreement ratio and streak from those records. The ledger
+tracks approvals wherever they occur: an official spec sign-off, a decision approved in
+chat, or any other surface. New endpoints record a decision, list the records, and return
+the agreement summary with a breakdown by surface. The ledger is signed, append-only, and
+read-only with respect to all other behavior — it never gates, blocks, or changes anything.
+The authoritative source of whether an approval was as-is or changed is always the
+operator; the agent never self-classifies intent, and any record is operator-correctable.
+
+Implemented the Coordination Mandate enforcement engine (the design the operator
+signed off as A/A/B): a deny-by-default authority gate for autonomous agent-to-agent
+actions. The operator writes one bounded, expiring, revocable "permission slip"
+delegating specific authorities to a specific pair of agents; the slip — not the agent
+— is what authorizes each action, preserving the rule that the one asking is never the
+one authorizing. Issuance and revocation require the operator's dashboard PIN, so an
+agent's API access alone is structurally unable to create or widen a mandate. A signed
+store verifies authorship on every check (a forged or edited mandate fails), risky
+authorities can be tied to objective real-state conditions the agent cannot fake, and
+every decision — allowed and denied alike — lands in a tamper-evident, hash-chained
+audit log. With no mandate issued, the gate denies everything, so this ships inert and
+changes no behavior until the operator issues the first mandate.
+
+Added the Phase-3 invariant-parity monitor for the feedback-factory migration: a
+windowing layer over parity results that computes the objective
+parity-zero-divergence condition (a sustained run of clean passes over a minimum
+real-traffic window) which the future cutover step reads as its go signal. Includes
+a durable, restart-surviving variant (append-only pass journal, torn-line tolerant).
+Internal migration tooling — not yet wired to any live behavior.
+
+Added the Phase-4 data-migration integrity tooling for the feedback-factory
+migration: import-as-is preservation of every curated field, per-row checksums
+(in vs out), fingerprint-uniqueness scanning, auto-increment sequence reset,
+schema-equivalence assertion, and the structural never-re-derive guard (the
+processor refuses to mutate any cluster created before the cutover timestamp or
+carrying governance notes). Internal migration tooling — not yet wired to any
+live behavior.
+
+SessionManager now samples the live tmux pane cwd for enabled development-agent sessions and stores it in a crash-safe sidecar. Resume spawns prepend a restore note only for fresh, existing `.worktrees` paths; home-only sessions remain a no-op.
+
+## What to Tell Your User
+
+Your agent now remembers your approvals instead of forgetting them the moment they happen.
+Each time you approve something — a full spec, or just a choice you make in chat — it can
+record whether you took its recommendation as-is or changed it, and why. Over time this
+builds a simple picture of where the agent already proposes what you would have picked, and
+where it still needs to close the gap. You stay the source of truth: the agent only records
+what you explicitly say, and you can correct any entry. This is an internal, read-only
+record — it never changes what the agent does, it just helps it learn your preferences.
+
+You can now hand your agent a bounded permission slip instead of approving every step
+of a multi-agent project. You write the slip once from your dashboard with your PIN:
+exactly which actions are allowed, within which limits, for which two agents, until
+when. Your agent can act inside those lines without pinging you, and nothing outside
+them — and you can tear the slip up at any moment. Everything done under a slip is
+written to a tamper-evident log you can review. Until you issue a slip, nothing changes
+at all: the system refuses every delegated action by default.
+
+Nothing changes for you. This is internal plumbing for the feedback-system handover:
+a safety meter that has to read "clean for a sustained window" before the one-way
+switch can ever be considered. It ships dormant.
+
+Nothing changes for you. This is internal plumbing for the feedback-system
+handover: the checks that guarantee curated history is copied perfectly and can
+never be silently rewritten afterward. It ships dormant.
+
+Developer-agent respawns can now re-surface the worktree checkout they were building in before the restart. Normal home-only conversations are unchanged.
+
+## Summary of New Capabilities
+
+- Record an approval decision through the new approvals endpoint, tagged as approved-as-is,
+  approved-with-change, or rejected, with the reason for any change.
+- Read a per-class agreement summary (total, approved-as-is count, ratio, streak, and a
+  breakdown by where the approval happened) plus a list of recorded decisions.
+- Maturity: stable for the recording and summary surface; the later auto-approval pilot
+  remains a separate, operator-gated phase that is not part of this change.
+
+- Issue or revoke a coordination mandate from the dashboard surface with your PIN —
+  agent credentials alone cannot do either.
+- Agents check intended agent-to-agent actions against the mandate and get an
+  allow-or-deny answer with the reason; denials are the default with no mandate.
+- Review every mandate decision in a chained, tamper-evident audit trail, including
+  whether each entry's chain verifies.
+- Maturity: stable for the gate, store, and audit; conditioned authorities (objective
+  real-state gates for riskier actions) ship deny-safe and unused by the first mandate.
+
+- Internal: order-independent parity windowing (per-report fingerprint,
+  terminal-status, recurrence/cycling counts) with a conservative
+  cleared-or-blocked gate verdict; survives restarts.
+- Maturity: internal migration tooling, dormant until the dual-forward phase.
+
+- Internal: integrity-safe import core + a guarded store wrapper that makes
+  pre-cutover and governance-noted clusters structurally immutable.
+- Maturity: internal migration tooling, dormant until the import phase.
+
+- SessionManager can record the live pane working directory for running sessions when the development-agent-gated feature is enabled.
+- A resumed respawn receives a `[BUILD-CONTEXT RESTORE]` continuation note only when the prior cwd was a fresh, existing agent worktree.
+- The sidecar state write is crash-safe through the state layer's temp-file plus rename path.

package/upgrades/approval-ledger-phase2.eli16.md

@@ -0,0 +1,56 @@
+# Approval-as-Data — the approval ledger (Phase 2), explained simply
+
+## What this is
+
+Until now, when Justin approved something, that approval vanished the moment it
+happened. "Approved" — and no memory of it. So the agent could never learn the
+pattern of *when Justin agrees with its recommendation as-is* versus *when he changes
+it*, and could never get better at recommending the thing he'd have picked anyway.
+
+This change builds the **approval ledger**: every approval becomes a durable, signed
+record. Each one is tagged as one of three things:
+
+- **approved-as-is** — Justin took the recommendation exactly.
+- **approved-with-change** — Justin approved, but changed something (and we record
+  *why* — the single most useful bit).
+- **rejected** — Justin said no (also with the why).
+
+From those records, the system computes a simple score per *kind* of decision: out of
+all the decisions of this kind, what fraction did Justin take as-is? That fraction (the
+"agreement ratio"), plus a "current streak" of consecutive as-is approvals, is the
+signal that — much later, and only if Justin opts in — could let a class of low-risk
+decisions auto-approve. That auto-approval part is NOT in this change; this is just the
+memory + the scoreboard.
+
+## The restaurant analogy
+
+Think of the agent as a sous-chef proposing dishes to the head chef (Justin). Today,
+each "yes" or "change the sauce" is said out loud and then forgotten. The ledger is a
+notebook where the sous-chef writes down every proposal and what the head chef did with
+it — took it as-is, tweaked it (and the tweak), or sent it back. Over weeks, the notebook
+reveals: "For pasta dishes he almost always takes my call; for desserts he usually
+adjusts the sweetness." That's how the sous-chef learns to propose what the chef would
+pick — and which calls the chef trusts him to just make.
+
+## The one rule that keeps it honest
+
+The agent must **never decide for Justin** whether he agreed. Only Justin's *explicit*
+words count: "go with your picks" = as-is; "change X because Y" = a change with that
+reason. If Justin is silent or vague, nothing is recorded. And Justin can correct any
+entry later (a correction is a new signed line, never a quiet edit). This is what stops
+the agent from flattering itself by marking everything "approved-as-is."
+
+## What Justin asked for, and what changed mid-build
+
+Justin asked for this, then made one correction while it was being built: the original
+written design only tracked *official spec sign-offs*, but most of his approvals (like
+picking A/A/B in chat) happen in conversation. So the ledger was generalized to track
+approvals **wherever they occur** — a spec, a chat, anywhere — each tagged with where it
+happened. Fittingly, that very correction became the ledger's first recorded
+"change" entry: the first real data point is the feedback that shaped the feature.
+
+## What's safe about it
+
+It only *reads and records* — it never blocks or changes any behavior. If the agent has
+nowhere to store state, the feature simply isn't there (the API politely says
+"unavailable") rather than breaking anything. Every record is signed so tampering shows.