instar 1.3.276 → 1.3.278

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.276",
+  "version": "1.3.278",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-06-05T07:56:55.941Z",
-  "instarVersion": "1.3.276",
+  "generatedAt": "2026-06-05T08:36:45.491Z",
+  "instarVersion": "1.3.278",
   "entryCount": 198,
   "entries": {
     "hook:session-start": {
@@ -11,7 +11,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/session-start.sh",
-      "contentHash": "3ded8ee5789307525929dba01a9550a49570129bce2db0d1d5c1f989ad6dbb3e",
+      "contentHash": "e2715fcdb1fa8875b2b20cc52b9180602aee4669a739f54d428f2c6d30986c72",
       "since": "2025-01-01"
     },
     "hook:dangerous-command-guard": {
@@ -20,7 +20,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/dangerous-command-guard.sh",
-      "contentHash": "3ded8ee5789307525929dba01a9550a49570129bce2db0d1d5c1f989ad6dbb3e",
+      "contentHash": "e2715fcdb1fa8875b2b20cc52b9180602aee4669a739f54d428f2c6d30986c72",
       "since": "2025-01-01"
     },
     "hook:grounding-before-messaging": {
@@ -29,7 +29,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/grounding-before-messaging.sh",
-      "contentHash": "3ded8ee5789307525929dba01a9550a49570129bce2db0d1d5c1f989ad6dbb3e",
+      "contentHash": "e2715fcdb1fa8875b2b20cc52b9180602aee4669a739f54d428f2c6d30986c72",
       "since": "2025-01-01"
     },
     "hook:compaction-recovery": {
@@ -38,7 +38,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/compaction-recovery.sh",
-      "contentHash": "3ded8ee5789307525929dba01a9550a49570129bce2db0d1d5c1f989ad6dbb3e",
+      "contentHash": "e2715fcdb1fa8875b2b20cc52b9180602aee4669a739f54d428f2c6d30986c72",
       "since": "2025-01-01"
     },
     "hook:external-operation-gate": {
@@ -47,7 +47,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-operation-gate.js",
-      "contentHash": "3ded8ee5789307525929dba01a9550a49570129bce2db0d1d5c1f989ad6dbb3e",
+      "contentHash": "e2715fcdb1fa8875b2b20cc52b9180602aee4669a739f54d428f2c6d30986c72",
       "since": "2025-01-01"
     },
     "hook:deferral-detector": {
@@ -56,7 +56,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/deferral-detector.js",
-      "contentHash": "3ded8ee5789307525929dba01a9550a49570129bce2db0d1d5c1f989ad6dbb3e",
+      "contentHash": "e2715fcdb1fa8875b2b20cc52b9180602aee4669a739f54d428f2c6d30986c72",
       "since": "2025-01-01"
     },
     "hook:self-stop-guard": {
@@ -65,7 +65,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/self-stop-guard.js",
-      "contentHash": "3ded8ee5789307525929dba01a9550a49570129bce2db0d1d5c1f989ad6dbb3e",
+      "contentHash": "e2715fcdb1fa8875b2b20cc52b9180602aee4669a739f54d428f2c6d30986c72",
       "since": "2025-01-01"
     },
     "hook:post-action-reflection": {
@@ -74,7 +74,7 @@
       "domain": "evolution",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/post-action-reflection.js",
-      "contentHash": "3ded8ee5789307525929dba01a9550a49570129bce2db0d1d5c1f989ad6dbb3e",
+      "contentHash": "e2715fcdb1fa8875b2b20cc52b9180602aee4669a739f54d428f2c6d30986c72",
       "since": "2025-01-01"
     },
     "hook:external-communication-guard": {
@@ -83,7 +83,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-communication-guard.js",
-      "contentHash": "3ded8ee5789307525929dba01a9550a49570129bce2db0d1d5c1f989ad6dbb3e",
+      "contentHash": "e2715fcdb1fa8875b2b20cc52b9180602aee4669a739f54d428f2c6d30986c72",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-collector": {
@@ -92,7 +92,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-collector.js",
-      "contentHash": "3ded8ee5789307525929dba01a9550a49570129bce2db0d1d5c1f989ad6dbb3e",
+      "contentHash": "e2715fcdb1fa8875b2b20cc52b9180602aee4669a739f54d428f2c6d30986c72",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-checkpoint": {
@@ -101,7 +101,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-checkpoint.js",
-      "contentHash": "3ded8ee5789307525929dba01a9550a49570129bce2db0d1d5c1f989ad6dbb3e",
+      "contentHash": "e2715fcdb1fa8875b2b20cc52b9180602aee4669a739f54d428f2c6d30986c72",
       "since": "2025-01-01"
     },
     "hook:free-text-guard": {
@@ -110,7 +110,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/free-text-guard.sh",
-      "contentHash": "3ded8ee5789307525929dba01a9550a49570129bce2db0d1d5c1f989ad6dbb3e",
+      "contentHash": "e2715fcdb1fa8875b2b20cc52b9180602aee4669a739f54d428f2c6d30986c72",
       "since": "2025-01-01"
     },
     "hook:claim-intercept": {
@@ -119,7 +119,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept.js",
-      "contentHash": "3ded8ee5789307525929dba01a9550a49570129bce2db0d1d5c1f989ad6dbb3e",
+      "contentHash": "e2715fcdb1fa8875b2b20cc52b9180602aee4669a739f54d428f2c6d30986c72",
       "since": "2025-01-01"
     },
     "hook:claim-intercept-response": {
@@ -128,7 +128,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept-response.js",
-      "contentHash": "3ded8ee5789307525929dba01a9550a49570129bce2db0d1d5c1f989ad6dbb3e",
+      "contentHash": "e2715fcdb1fa8875b2b20cc52b9180602aee4669a739f54d428f2c6d30986c72",
       "since": "2025-01-01"
     },
     "hook:stop-gate-router": {
@@ -137,7 +137,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/stop-gate-router.js",
-      "contentHash": "3ded8ee5789307525929dba01a9550a49570129bce2db0d1d5c1f989ad6dbb3e",
+      "contentHash": "e2715fcdb1fa8875b2b20cc52b9180602aee4669a739f54d428f2c6d30986c72",
       "since": "2025-01-01"
     },
     "hook:auto-approve-permissions": {
@@ -146,7 +146,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/auto-approve-permissions.js",
-      "contentHash": "3ded8ee5789307525929dba01a9550a49570129bce2db0d1d5c1f989ad6dbb3e",
+      "contentHash": "e2715fcdb1fa8875b2b20cc52b9180602aee4669a739f54d428f2c6d30986c72",
       "since": "2025-01-01"
     },
     "job:health-check": {
@@ -418,7 +418,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
+      "contentHash": "79a4439d7a02d91071447e360cc333379885f2dec5aa0e60045c2e49be336289",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -426,7 +426,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
+      "contentHash": "79a4439d7a02d91071447e360cc333379885f2dec5aa0e60045c2e49be336289",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -434,7 +434,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
+      "contentHash": "79a4439d7a02d91071447e360cc333379885f2dec5aa0e60045c2e49be336289",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -442,7 +442,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
+      "contentHash": "79a4439d7a02d91071447e360cc333379885f2dec5aa0e60045c2e49be336289",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -450,7 +450,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
+      "contentHash": "79a4439d7a02d91071447e360cc333379885f2dec5aa0e60045c2e49be336289",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -458,7 +458,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
+      "contentHash": "79a4439d7a02d91071447e360cc333379885f2dec5aa0e60045c2e49be336289",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -466,7 +466,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
+      "contentHash": "79a4439d7a02d91071447e360cc333379885f2dec5aa0e60045c2e49be336289",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -474,7 +474,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
+      "contentHash": "79a4439d7a02d91071447e360cc333379885f2dec5aa0e60045c2e49be336289",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -482,7 +482,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
+      "contentHash": "79a4439d7a02d91071447e360cc333379885f2dec5aa0e60045c2e49be336289",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -490,7 +490,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
+      "contentHash": "79a4439d7a02d91071447e360cc333379885f2dec5aa0e60045c2e49be336289",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -498,7 +498,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
+      "contentHash": "79a4439d7a02d91071447e360cc333379885f2dec5aa0e60045c2e49be336289",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -506,7 +506,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
+      "contentHash": "79a4439d7a02d91071447e360cc333379885f2dec5aa0e60045c2e49be336289",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -514,7 +514,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
+      "contentHash": "79a4439d7a02d91071447e360cc333379885f2dec5aa0e60045c2e49be336289",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -522,7 +522,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
+      "contentHash": "79a4439d7a02d91071447e360cc333379885f2dec5aa0e60045c2e49be336289",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -530,7 +530,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
+      "contentHash": "79a4439d7a02d91071447e360cc333379885f2dec5aa0e60045c2e49be336289",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -538,7 +538,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
+      "contentHash": "79a4439d7a02d91071447e360cc333379885f2dec5aa0e60045c2e49be336289",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -546,7 +546,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
+      "contentHash": "79a4439d7a02d91071447e360cc333379885f2dec5aa0e60045c2e49be336289",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -554,7 +554,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
+      "contentHash": "79a4439d7a02d91071447e360cc333379885f2dec5aa0e60045c2e49be336289",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -562,7 +562,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
+      "contentHash": "79a4439d7a02d91071447e360cc333379885f2dec5aa0e60045c2e49be336289",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -570,7 +570,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
+      "contentHash": "79a4439d7a02d91071447e360cc333379885f2dec5aa0e60045c2e49be336289",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -578,7 +578,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
+      "contentHash": "79a4439d7a02d91071447e360cc333379885f2dec5aa0e60045c2e49be336289",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -586,7 +586,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
+      "contentHash": "79a4439d7a02d91071447e360cc333379885f2dec5aa0e60045c2e49be336289",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -594,7 +594,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
+      "contentHash": "79a4439d7a02d91071447e360cc333379885f2dec5aa0e60045c2e49be336289",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -602,7 +602,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
+      "contentHash": "79a4439d7a02d91071447e360cc333379885f2dec5aa0e60045c2e49be336289",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -610,7 +610,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
+      "contentHash": "79a4439d7a02d91071447e360cc333379885f2dec5aa0e60045c2e49be336289",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -618,7 +618,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
+      "contentHash": "79a4439d7a02d91071447e360cc333379885f2dec5aa0e60045c2e49be336289",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -626,7 +626,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
+      "contentHash": "79a4439d7a02d91071447e360cc333379885f2dec5aa0e60045c2e49be336289",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -634,7 +634,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
+      "contentHash": "79a4439d7a02d91071447e360cc333379885f2dec5aa0e60045c2e49be336289",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -642,7 +642,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
+      "contentHash": "79a4439d7a02d91071447e360cc333379885f2dec5aa0e60045c2e49be336289",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -650,7 +650,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
+      "contentHash": "79a4439d7a02d91071447e360cc333379885f2dec5aa0e60045c2e49be336289",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -658,7 +658,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
+      "contentHash": "79a4439d7a02d91071447e360cc333379885f2dec5aa0e60045c2e49be336289",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -666,7 +666,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
+      "contentHash": "79a4439d7a02d91071447e360cc333379885f2dec5aa0e60045c2e49be336289",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -674,7 +674,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
+      "contentHash": "79a4439d7a02d91071447e360cc333379885f2dec5aa0e60045c2e49be336289",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -682,7 +682,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
+      "contentHash": "79a4439d7a02d91071447e360cc333379885f2dec5aa0e60045c2e49be336289",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -690,7 +690,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
+      "contentHash": "79a4439d7a02d91071447e360cc333379885f2dec5aa0e60045c2e49be336289",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -698,7 +698,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
+      "contentHash": "79a4439d7a02d91071447e360cc333379885f2dec5aa0e60045c2e49be336289",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -706,7 +706,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
+      "contentHash": "79a4439d7a02d91071447e360cc333379885f2dec5aa0e60045c2e49be336289",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -714,7 +714,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
+      "contentHash": "79a4439d7a02d91071447e360cc333379885f2dec5aa0e60045c2e49be336289",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -722,7 +722,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
+      "contentHash": "79a4439d7a02d91071447e360cc333379885f2dec5aa0e60045c2e49be336289",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -730,7 +730,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
+      "contentHash": "79a4439d7a02d91071447e360cc333379885f2dec5aa0e60045c2e49be336289",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -738,7 +738,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
+      "contentHash": "79a4439d7a02d91071447e360cc333379885f2dec5aa0e60045c2e49be336289",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -746,7 +746,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
+      "contentHash": "79a4439d7a02d91071447e360cc333379885f2dec5aa0e60045c2e49be336289",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -754,7 +754,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
+      "contentHash": "79a4439d7a02d91071447e360cc333379885f2dec5aa0e60045c2e49be336289",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -770,7 +770,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ebff9df80ee18fbb9a7a92fff3bca09a1db23ef357540f7afa7c1a768386e339",
+      "contentHash": "79a4439d7a02d91071447e360cc333379885f2dec5aa0e60045c2e49be336289",
       "since": "2025-01-01"
     },
     "cli:init": {
@@ -1530,7 +1530,7 @@
       "type": "subsystem",
       "domain": "updates",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
-      "contentHash": "3ded8ee5789307525929dba01a9550a49570129bce2db0d1d5c1f989ad6dbb3e",
+      "contentHash": "e2715fcdb1fa8875b2b20cc52b9180602aee4669a739f54d428f2c6d30986c72",
       "since": "2025-01-01"
     },
     "subsystem:scheduler": {

package/src/scaffold/templates.ts

@@ -688,7 +688,7 @@ This routes feedback to the Instar maintainers automatically. Valid types: \`bug
 **Coordination Mandate** — Your operator's "permission slip" for autonomous agent-to-agent work. Instead of approving every step of a multi-agent project, the operator issues ONE bounded, expiring, revocable mandate (from the dashboard, behind their PIN) delegating SPECIFIC authorities to a SPECIFIC pair of agents. The mandate — never you — is the authorizer: requester ≠ authorizer is preserved. Deny-by-default: with no mandate issued, every check denies.
 - **Before any A2A action under a mandate** (PROACTIVE — this is the trigger): check it: \`curl -X POST -H "Authorization: Bearer $AUTH" http://localhost:${port}/mandate/evaluate -H 'Content-Type: application/json' -d '{"action":"sign-code-review","params":{"artifact":"migration-port","mutual":true},"agentFp":"<your-fingerprint>","mandateId":"<id>"}'\` → \`{ decision: "allow"|"deny", reason }\`. A deny means STOP — do not retry around it or escalate to a human-bypass; the bounds are the operator's.
 - Inspect: \`GET /mandate\` (each with live \`authorshipValid\`) · \`GET /mandate/:id\` · \`GET /mandate/audit\` (every decision, hash-chained — \`chain.ok:false\` means tampering; surface it immediately).
-- **You cannot issue or revoke mandates.** \`POST /mandate/issue\` and \`POST /mandate/:id/revoke\` require the operator's dashboard PIN — your Bearer token is structurally insufficient. NEVER ask the user to paste their PIN into chat; point them at the dashboard.
+- **You cannot issue or revoke mandates.** \`POST /mandate/issue\` and \`POST /mandate/:id/revoke\` require the operator's dashboard PIN — your Bearer token is structurally insufficient. NEVER ask the user to paste their PIN into chat; point them at the dashboard **Mandates tab** (issue/revoke forms + the decision audit live there).
 - Every evaluation (allow AND deny) is audited. Act as if the audit is read by the operator — because it is. (Spec: \`docs/specs/coordination-mandate.md\`.)
 
 **ReviewExchange (autonomous code review)** — The structured way two mandate-named agents sign off a code review WITHOUT the operator relaying. One exchange = one review package, content-addressed (\`packageSha256\` fixed at creation), moving linearly: proposed → delivered → verdict-recorded → complete (or changes-requested — rework is a NEW exchange). BOTH sign-offs (the peer's authenticated approve-verdict AND your countersignature) are evaluated through the mandate gate's \`sign-code-review\` authority before acceptance; every accepted signature carries the audit hash of the gate decision that authorized it.

package/upgrades/1.3.277.md

@@ -0,0 +1,50 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+The secrets vault's master-key handling is rebuilt to kill the recurring
+"vault looks empty" disease (the 2026-06-05 bifurcation incident — CMT-1038):
+
+1. **Per-agent keychain slots.** The master key now lives under
+   `master-key:<stateDir>` instead of one machine-global slot shared by every
+   agent. Agents still on the legacy slot adopt their key automatically on
+   first read; nothing ever writes the global slot again.
+2. **Self-describing vault format (v2).** New vault writes stamp an 8-byte
+   key fingerprint into the header. A reader holding the wrong key gets a
+   precise, named error ("encrypted with key id …; the vault is NOT empty")
+   instead of silently treating the vault as empty. Old (v1) vaults read
+   forever; the first write upgrades them.
+3. **Dual-key reads + self-healing.** If the keychain and file keys diverge,
+   readers try both; a fallback success is loudly reported and the next write
+   converges the vault back to the primary key.
+4. `GET /secrets/sync-status` now reports `vault: ok | empty | decrypt-failed`
+   — decrypt failure is no longer masked as an empty key list.
+
+Encryption itself (AES-256-GCM), vault location, and the tests-can't-touch-
+the-real-keychain guard are unchanged.
+
+## What to Tell Your User
+
+Secrets you've handed me can no longer turn invisible because two parts of me
+ended up holding different vault keys. If the keys ever drift, I keep reading
+your secrets, log exactly what happened, and self-heal on the next write —
+instead of asking you to send the secret again.
+
+## Summary of New Capabilities
+
+- Per-agent keychain accounts with automatic legacy adoption.
+- v2 vault format with key fingerprint (wrong-key ≠ corruption ≠ empty).
+- Dual-key read fallback + convergence-on-write.
+- `vault` status on `GET /secrets/sync-status`.
+
+## Evidence
+
+`tests/unit/secret-store-key-coherence.test.ts` (11 new — including the
+verbatim incident: a vault written with the file key stays readable when the
+keychain key diverges, then converges on the next write) + 29 existing
+secret-store tests + 21 secret-adjacent regression tests (store-first
+integration, sealed-handoff at-rest, hardening, e2e) all green. tsc + lint
+clean.

package/upgrades/1.3.278.md

@@ -0,0 +1,36 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+Added a Mandates tab to the dashboard — the operator's surface for the coordination
+permission slips. It lists every issued mandate with live authorship verification and
+state, provides PIN-gated forms to issue a new mandate or revoke an existing one, and
+shows the tamper-evident decision audit with its chain status. The PIN is typed at
+action time, sent once, and cleared immediately — it is never stored anywhere in the
+browser. Also backfilled the agent-awareness sections for the three coordination
+surfaces into existing agents' instruction files on update, so agents updated in
+place learn these capabilities exist (previously only freshly-initialized agents got
+them).
+
+## What to Tell Your User
+
+Your dashboard now has a Mandates tab where you manage the permission slips for
+autonomous agent-to-agent work: see every slip and whether its authorship still
+verifies, issue a new one with your PIN, tear one up with your PIN, and read the
+tamper-evident log of every allowed and denied action under them. Your PIN is asked
+for right when you act and is never remembered by the page.
+
+## Summary of New Capabilities
+
+- See all coordination mandates with live authorship-verification badges and
+  active/revoked/expired state at a glance.
+- Issue a mandate from a form (pre-filled with the standard two-authority shape) —
+  PIN required, typed at issuance, never stored.
+- Revoke any active mandate inline with a reason — PIN required.
+- Read the hash-chained decision audit; a broken chain is flagged loudly as possible
+  tampering.
+- Existing agents now learn the mandate, review-exchange, and cutover-readiness
+  surfaces via the update path, not just fresh installs.