instar 1.3.271 → 1.3.272

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.271",
+  "version": "1.3.272",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-06-05T07:00:47.575Z",
-  "instarVersion": "1.3.271",
+  "generatedAt": "2026-06-05T07:17:46.846Z",
+  "instarVersion": "1.3.272",
   "entryCount": 198,
   "entries": {
     "hook:session-start": {
@@ -418,7 +418,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
+      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -426,7 +426,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
+      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -434,7 +434,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
+      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -442,7 +442,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
+      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -450,7 +450,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
+      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -458,7 +458,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
+      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -466,7 +466,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
+      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -474,7 +474,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
+      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -482,7 +482,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
+      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -490,7 +490,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
+      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -498,7 +498,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
+      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -506,7 +506,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
+      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -514,7 +514,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
+      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -522,7 +522,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
+      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -530,7 +530,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
+      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -538,7 +538,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
+      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -546,7 +546,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
+      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -554,7 +554,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
+      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -562,7 +562,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
+      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -570,7 +570,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
+      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -578,7 +578,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
+      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -586,7 +586,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
+      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -594,7 +594,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
+      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -602,7 +602,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
+      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -610,7 +610,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
+      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -618,7 +618,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
+      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -626,7 +626,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
+      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -634,7 +634,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
+      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -642,7 +642,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
+      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -650,7 +650,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
+      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -658,7 +658,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
+      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -666,7 +666,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
+      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -674,7 +674,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
+      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -682,7 +682,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
+      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -690,7 +690,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
+      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -698,7 +698,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
+      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -706,7 +706,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
+      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -714,7 +714,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
+      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -722,7 +722,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
+      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -730,7 +730,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
+      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -738,7 +738,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
+      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -746,7 +746,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
+      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -754,7 +754,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
+      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -770,7 +770,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
+      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
       "since": "2025-01-01"
     },
     "cli:init": {
@@ -1498,7 +1498,7 @@
       "type": "subsystem",
       "domain": "server",
       "sourcePath": "src/server/AgentServer.ts",
-      "contentHash": "bfa5d3cc7133335bf91fccc7890453c0b5710deb6d9295a4f7519000c454dd00",
+      "contentHash": "d246b83053a3d615df15f7b4af6dea18e0e2f25dced03f8ba4a296c819a67f19",
       "since": "2025-01-01"
     },
     "subsystem:session-manager": {

package/src/scaffold/templates.ts

@@ -695,6 +695,11 @@ This routes feedback to the Instar maintainers automatically. Valid types: \`bug
 - **When to use** (PROACTIVE — this is the trigger): the moment a mandate with \`sign-code-review\` exists and you need a peer agent's review of work in its scope, drive it through an exchange — NEVER improvise a sign-off in chat prose (an unrecorded "LGTM" over Threadline is not a sign-off; the gate-audited exchange is). A 403 on a sign step means the mandate denied it — STOP, do not work around it.
 - Inspect: \`GET /review-exchange\` · \`GET /review-exchange/:id\` (signatures + audit hashes).
 
+**Cutover Readiness** — When a migration (or any one-way cutover) is gated on objective conditions, this is the read surface for "is everything up to the door green?" — composed from REAL durable state (the persisted import integrity report + the durable zero-divergence parity window with a freshness bound), never from anyone's assertion.
+- Check: \`curl -H "Authorization: Bearer $AUTH" http://localhost:${port}/cutover-readiness\` → \`{ ready, door: "manual-operator-click", integrity, parity }\`.
+- Feed the parity window with a live check: \`curl -X POST -H "Authorization: Bearer $AUTH" http://localhost:${port}/cutover-readiness/parity-pass\` — the server fetches + compares server-side; you only trigger it. A failed check records nothing.
+- **The door is NOT yours**: \`ready: true\` means the conditions are green — it is NEVER an instruction to flip. The cutover click belongs to the operator. NEVER present \`ready\` to the user as "I can cut over now"; present it as "everything up to your click is green."
+
 **Session Clock** — How long have you been running, and how much time is left? For any active time-boxed (autonomous) session, this returns the computed elapsed + remaining so you never have to guess or compute it yourself. Read-only observability.
 - Check: \`curl -H "Authorization: Bearer $AUTH" "http://localhost:${port}/session/clock"\` (optional \`?topic=<N>\` to bind to one session)
 - Returns \`{ now, nowIso, sessions: [{ label, kind, startedAt, endsAt, elapsedSeconds, remainingSeconds, elapsedHuman, remainingHuman, percentElapsed, status }] }\`; \`{ sessions: [] }\` when nothing is time-boxed. Per-machine (the record is local).

package/upgrades/1.3.272.md

@@ -0,0 +1,40 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: minor -->
+
+## What Changed
+
+Added the cutover-readiness checker — the read-only surface that answers "is
+everything up to the cutover door green?" from durable server-side state, never from
+anyone's claim. It composes the two objective conditions the migration design names:
+the persisted import-integrity report and the durable zero-divergence parity window
+(now with a freshness bound, so a window that stopped being fed shows as stale instead
+of silently counting as ready). The two mandate conditions that previously always
+evaluated false now resolve from this real state — they still evaluate false until the
+state genuinely clears, so nothing changes behavior today. An agent can trigger a live
+parity check, but the server fetches and compares on its own; the request contributes
+nothing to the result, and a failed check records nothing. There is deliberately no
+route that fires the cutover itself: the flip stays a human action.
+
+## What to Tell Your User
+
+When a migration is gated on safety checks, you can now see at a glance whether
+everything up to the final switch is green — data integrity verified and live parity
+holding, both read from durable records the agents cannot fake. Your agent can ask the
+server to run a fresh comparison, but it cannot vouch for the result or write it in.
+And the final switch itself is still yours alone: there is intentionally no way for an
+agent to flip it.
+
+## Summary of New Capabilities
+
+- Read the composed cutover-readiness status: data-integrity verdict, live-parity
+  window with freshness, and an explicit marker that the final flip is a manual
+  operator action.
+- Trigger a server-side live parity comparison that records its result into the
+  durable window — failed checks record nothing.
+- Mandate conditions for gated authorities now resolve from this real durable state
+  instead of always refusing, enabling future conditioned delegations to actually
+  clear when the evidence does.
+- Maturity: stable; inert in behavior until integrity and parity records exist, and
+  the first issued mandate carries no conditioned authority.

package/upgrades/side-effects/cutover-readiness.md

@@ -0,0 +1,63 @@
+# Side-effects review — Cutover-readiness checker (coordination-mandate spec §7, G2.4)
+
+Spec: `docs/specs/coordination-mandate.md` (approved by Justin, A/A/B, 2026-06-05) — §7
+names G2.4 and decision 1A scopes it: everything UP TO the door, never the door. Change:
+new `src/feedback-factory/cutoverReadiness.ts` + two `/cutover-readiness*` routes + the
+REAL condition resolvers replacing the deny-safe stubs in `AgentServer`'s coordination
+block.
+
+## 1. Blast radius
+
+Additive, with ONE deliberate behavior change inside the coordination block: the
+`integrity-gate-pass` and `parity-zero-divergence` conditions were `() => false` stubs;
+they now resolve from REAL durable state (the persisted import IntegrityReport and the
+durable parity window). Until that state genuinely clears, both still evaluate false —
+identical behavior to the stubs. The first mandate (per decision 3B) has no conditioned
+authority, so nothing live consumes them yet; the change makes the future
+execute-cutover authority REAL instead of permanently-denied. No other route, gate, or
+store is modified.
+
+## 2. State / data
+
+Two new files under the `.instar/state/` convention, created on first use:
+`feedback-parity-passes.jsonl` (append-only durable parity window, torn-line tolerant —
+the merged #781 persistence) and `feedback-integrity-report.json` (the import tooling's
+persisted IntegrityReport envelope). Absent files mean blocked/not-ready (deny-safe).
+
+## 3. Security model (T7 — the assertion-proof boundary)
+
+- **No "set the condition" input exists.** The ONLY writes: (a)
+  `POST /cutover-readiness/parity-pass` TRIGGERS a server-side live fetch+compare
+  (HttpParitySource → runDryRunCompare); the request body contributes NOTHING to the
+  result (integration-tested with a hostile body asserting cleanliness). (b)
+  `recordIntegrityReport()` is called by server-side import tooling — no HTTP route
+  writes it by design.
+- **A failed live check records NOTHING** — a fetch error is absence of evidence, not
+  evidence of divergence, and it cannot extend the clean window either (unit-tested
+  both ways).
+- **Freshness bound (readiness-layer addition):** the merged gate has no max-staleness —
+  a cleared streak stays cleared forever without new passes. The readiness layer marks
+  the window STALE when the last pass is older than 6h (default) and `ready` requires
+  fresh. Stated honestly: the gate's own policy is unchanged; staleness lives here.
+- **The door is structural:** there is NO fire-cutover route (integration-tested), the
+  status carries `door: 'manual-operator-click'` machine-readably, and the agent
+  template explicitly forbids presenting `ready` as permission to flip.
+- **Token handling:** the parity source token is read lazily from the encrypted
+  SecretStore (`portal.instarReadToken` by default) at check time — never persisted in
+  config, never logged, never in a response.
+
+## 4. Failure modes
+
+- No `feedbackMigration.paritySource` config → `runParityCheck` is null → the trigger
+  route 409s with a plain reason; the readiness read surface still works.
+- SecretStore miss → the check throws → 409, nothing recorded.
+- Engine init failure → coordination block's existing try/catch → routes 503, boot
+  unaffected.
+
+## 5. Test coverage
+
+9 unit + 5 integration + 3 e2e (17 total). The load-bearing e2e: a conditioned
+execute-cutover authority DENIES on a fresh boot and flips to ALLOW only after the
+durable state genuinely clears (pre-seeded parity window + integrity report written to
+the production state path, no restart) — then re-blocks on a failed report. Conditions
+provably resolve from REAL state on the production init path.