instar 1.3.323 → 1.3.324

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.323",
+  "version": "1.3.324",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-06-06T00:53:38.445Z",
-  "instarVersion": "1.3.323",
+  "generatedAt": "2026-06-06T01:17:45.496Z",
+  "instarVersion": "1.3.324",
   "entryCount": 199,
   "entries": {
     "hook:session-start": {
@@ -11,7 +11,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/session-start.sh",
-      "contentHash": "1fd77b4e3eefd87a1a19850b080f1225fff38c7bb94b36d1d6357a5c85b77fa2",
+      "contentHash": "71035143949bb1f079760f8f7b4bd8f9aa9dbe6ee222869ddb6dd955cdf12352",
       "since": "2025-01-01"
     },
     "hook:dangerous-command-guard": {
@@ -20,7 +20,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/dangerous-command-guard.sh",
-      "contentHash": "1fd77b4e3eefd87a1a19850b080f1225fff38c7bb94b36d1d6357a5c85b77fa2",
+      "contentHash": "71035143949bb1f079760f8f7b4bd8f9aa9dbe6ee222869ddb6dd955cdf12352",
       "since": "2025-01-01"
     },
     "hook:grounding-before-messaging": {
@@ -29,7 +29,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/grounding-before-messaging.sh",
-      "contentHash": "1fd77b4e3eefd87a1a19850b080f1225fff38c7bb94b36d1d6357a5c85b77fa2",
+      "contentHash": "71035143949bb1f079760f8f7b4bd8f9aa9dbe6ee222869ddb6dd955cdf12352",
       "since": "2025-01-01"
     },
     "hook:compaction-recovery": {
@@ -38,7 +38,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/compaction-recovery.sh",
-      "contentHash": "1fd77b4e3eefd87a1a19850b080f1225fff38c7bb94b36d1d6357a5c85b77fa2",
+      "contentHash": "71035143949bb1f079760f8f7b4bd8f9aa9dbe6ee222869ddb6dd955cdf12352",
       "since": "2025-01-01"
     },
     "hook:external-operation-gate": {
@@ -47,7 +47,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-operation-gate.js",
-      "contentHash": "1fd77b4e3eefd87a1a19850b080f1225fff38c7bb94b36d1d6357a5c85b77fa2",
+      "contentHash": "71035143949bb1f079760f8f7b4bd8f9aa9dbe6ee222869ddb6dd955cdf12352",
       "since": "2025-01-01"
     },
     "hook:deferral-detector": {
@@ -56,7 +56,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/deferral-detector.js",
-      "contentHash": "1fd77b4e3eefd87a1a19850b080f1225fff38c7bb94b36d1d6357a5c85b77fa2",
+      "contentHash": "71035143949bb1f079760f8f7b4bd8f9aa9dbe6ee222869ddb6dd955cdf12352",
       "since": "2025-01-01"
     },
     "hook:self-stop-guard": {
@@ -65,7 +65,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/self-stop-guard.js",
-      "contentHash": "1fd77b4e3eefd87a1a19850b080f1225fff38c7bb94b36d1d6357a5c85b77fa2",
+      "contentHash": "71035143949bb1f079760f8f7b4bd8f9aa9dbe6ee222869ddb6dd955cdf12352",
       "since": "2025-01-01"
     },
     "hook:post-action-reflection": {
@@ -74,7 +74,7 @@
       "domain": "evolution",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/post-action-reflection.js",
-      "contentHash": "1fd77b4e3eefd87a1a19850b080f1225fff38c7bb94b36d1d6357a5c85b77fa2",
+      "contentHash": "71035143949bb1f079760f8f7b4bd8f9aa9dbe6ee222869ddb6dd955cdf12352",
       "since": "2025-01-01"
     },
     "hook:external-communication-guard": {
@@ -83,7 +83,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-communication-guard.js",
-      "contentHash": "1fd77b4e3eefd87a1a19850b080f1225fff38c7bb94b36d1d6357a5c85b77fa2",
+      "contentHash": "71035143949bb1f079760f8f7b4bd8f9aa9dbe6ee222869ddb6dd955cdf12352",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-collector": {
@@ -92,7 +92,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-collector.js",
-      "contentHash": "1fd77b4e3eefd87a1a19850b080f1225fff38c7bb94b36d1d6357a5c85b77fa2",
+      "contentHash": "71035143949bb1f079760f8f7b4bd8f9aa9dbe6ee222869ddb6dd955cdf12352",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-checkpoint": {
@@ -101,7 +101,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-checkpoint.js",
-      "contentHash": "1fd77b4e3eefd87a1a19850b080f1225fff38c7bb94b36d1d6357a5c85b77fa2",
+      "contentHash": "71035143949bb1f079760f8f7b4bd8f9aa9dbe6ee222869ddb6dd955cdf12352",
       "since": "2025-01-01"
     },
     "hook:free-text-guard": {
@@ -110,7 +110,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/free-text-guard.sh",
-      "contentHash": "1fd77b4e3eefd87a1a19850b080f1225fff38c7bb94b36d1d6357a5c85b77fa2",
+      "contentHash": "71035143949bb1f079760f8f7b4bd8f9aa9dbe6ee222869ddb6dd955cdf12352",
       "since": "2025-01-01"
     },
     "hook:claim-intercept": {
@@ -119,7 +119,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept.js",
-      "contentHash": "1fd77b4e3eefd87a1a19850b080f1225fff38c7bb94b36d1d6357a5c85b77fa2",
+      "contentHash": "71035143949bb1f079760f8f7b4bd8f9aa9dbe6ee222869ddb6dd955cdf12352",
       "since": "2025-01-01"
     },
     "hook:claim-intercept-response": {
@@ -128,7 +128,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept-response.js",
-      "contentHash": "1fd77b4e3eefd87a1a19850b080f1225fff38c7bb94b36d1d6357a5c85b77fa2",
+      "contentHash": "71035143949bb1f079760f8f7b4bd8f9aa9dbe6ee222869ddb6dd955cdf12352",
       "since": "2025-01-01"
     },
     "hook:stop-gate-router": {
@@ -137,7 +137,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/stop-gate-router.js",
-      "contentHash": "1fd77b4e3eefd87a1a19850b080f1225fff38c7bb94b36d1d6357a5c85b77fa2",
+      "contentHash": "71035143949bb1f079760f8f7b4bd8f9aa9dbe6ee222869ddb6dd955cdf12352",
       "since": "2025-01-01"
     },
     "hook:auto-approve-permissions": {
@@ -146,7 +146,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/auto-approve-permissions.js",
-      "contentHash": "1fd77b4e3eefd87a1a19850b080f1225fff38c7bb94b36d1d6357a5c85b77fa2",
+      "contentHash": "71035143949bb1f079760f8f7b4bd8f9aa9dbe6ee222869ddb6dd955cdf12352",
       "since": "2025-01-01"
     },
     "job:health-check": {
@@ -418,7 +418,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "426b6966637507e25871e9da70200e5341c477024d6e5d0454e5b25ed4be29c9",
+      "contentHash": "f68a6ee976164fc67334d8b801206fc13e1da598a1f46263187d87bfce6da77e",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -426,7 +426,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "426b6966637507e25871e9da70200e5341c477024d6e5d0454e5b25ed4be29c9",
+      "contentHash": "f68a6ee976164fc67334d8b801206fc13e1da598a1f46263187d87bfce6da77e",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -434,7 +434,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "426b6966637507e25871e9da70200e5341c477024d6e5d0454e5b25ed4be29c9",
+      "contentHash": "f68a6ee976164fc67334d8b801206fc13e1da598a1f46263187d87bfce6da77e",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -442,7 +442,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "426b6966637507e25871e9da70200e5341c477024d6e5d0454e5b25ed4be29c9",
+      "contentHash": "f68a6ee976164fc67334d8b801206fc13e1da598a1f46263187d87bfce6da77e",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -450,7 +450,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "426b6966637507e25871e9da70200e5341c477024d6e5d0454e5b25ed4be29c9",
+      "contentHash": "f68a6ee976164fc67334d8b801206fc13e1da598a1f46263187d87bfce6da77e",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -458,7 +458,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "426b6966637507e25871e9da70200e5341c477024d6e5d0454e5b25ed4be29c9",
+      "contentHash": "f68a6ee976164fc67334d8b801206fc13e1da598a1f46263187d87bfce6da77e",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -466,7 +466,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "426b6966637507e25871e9da70200e5341c477024d6e5d0454e5b25ed4be29c9",
+      "contentHash": "f68a6ee976164fc67334d8b801206fc13e1da598a1f46263187d87bfce6da77e",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -474,7 +474,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "426b6966637507e25871e9da70200e5341c477024d6e5d0454e5b25ed4be29c9",
+      "contentHash": "f68a6ee976164fc67334d8b801206fc13e1da598a1f46263187d87bfce6da77e",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -482,7 +482,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "426b6966637507e25871e9da70200e5341c477024d6e5d0454e5b25ed4be29c9",
+      "contentHash": "f68a6ee976164fc67334d8b801206fc13e1da598a1f46263187d87bfce6da77e",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -490,7 +490,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "426b6966637507e25871e9da70200e5341c477024d6e5d0454e5b25ed4be29c9",
+      "contentHash": "f68a6ee976164fc67334d8b801206fc13e1da598a1f46263187d87bfce6da77e",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -498,7 +498,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "426b6966637507e25871e9da70200e5341c477024d6e5d0454e5b25ed4be29c9",
+      "contentHash": "f68a6ee976164fc67334d8b801206fc13e1da598a1f46263187d87bfce6da77e",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -506,7 +506,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "426b6966637507e25871e9da70200e5341c477024d6e5d0454e5b25ed4be29c9",
+      "contentHash": "f68a6ee976164fc67334d8b801206fc13e1da598a1f46263187d87bfce6da77e",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -514,7 +514,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "426b6966637507e25871e9da70200e5341c477024d6e5d0454e5b25ed4be29c9",
+      "contentHash": "f68a6ee976164fc67334d8b801206fc13e1da598a1f46263187d87bfce6da77e",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -522,7 +522,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "426b6966637507e25871e9da70200e5341c477024d6e5d0454e5b25ed4be29c9",
+      "contentHash": "f68a6ee976164fc67334d8b801206fc13e1da598a1f46263187d87bfce6da77e",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -530,7 +530,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "426b6966637507e25871e9da70200e5341c477024d6e5d0454e5b25ed4be29c9",
+      "contentHash": "f68a6ee976164fc67334d8b801206fc13e1da598a1f46263187d87bfce6da77e",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -538,7 +538,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "426b6966637507e25871e9da70200e5341c477024d6e5d0454e5b25ed4be29c9",
+      "contentHash": "f68a6ee976164fc67334d8b801206fc13e1da598a1f46263187d87bfce6da77e",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -546,7 +546,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "426b6966637507e25871e9da70200e5341c477024d6e5d0454e5b25ed4be29c9",
+      "contentHash": "f68a6ee976164fc67334d8b801206fc13e1da598a1f46263187d87bfce6da77e",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -554,7 +554,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "426b6966637507e25871e9da70200e5341c477024d6e5d0454e5b25ed4be29c9",
+      "contentHash": "f68a6ee976164fc67334d8b801206fc13e1da598a1f46263187d87bfce6da77e",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -562,7 +562,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "426b6966637507e25871e9da70200e5341c477024d6e5d0454e5b25ed4be29c9",
+      "contentHash": "f68a6ee976164fc67334d8b801206fc13e1da598a1f46263187d87bfce6da77e",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -570,7 +570,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "426b6966637507e25871e9da70200e5341c477024d6e5d0454e5b25ed4be29c9",
+      "contentHash": "f68a6ee976164fc67334d8b801206fc13e1da598a1f46263187d87bfce6da77e",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -578,7 +578,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "426b6966637507e25871e9da70200e5341c477024d6e5d0454e5b25ed4be29c9",
+      "contentHash": "f68a6ee976164fc67334d8b801206fc13e1da598a1f46263187d87bfce6da77e",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -586,7 +586,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "426b6966637507e25871e9da70200e5341c477024d6e5d0454e5b25ed4be29c9",
+      "contentHash": "f68a6ee976164fc67334d8b801206fc13e1da598a1f46263187d87bfce6da77e",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -594,7 +594,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "426b6966637507e25871e9da70200e5341c477024d6e5d0454e5b25ed4be29c9",
+      "contentHash": "f68a6ee976164fc67334d8b801206fc13e1da598a1f46263187d87bfce6da77e",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -602,7 +602,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "426b6966637507e25871e9da70200e5341c477024d6e5d0454e5b25ed4be29c9",
+      "contentHash": "f68a6ee976164fc67334d8b801206fc13e1da598a1f46263187d87bfce6da77e",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -610,7 +610,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "426b6966637507e25871e9da70200e5341c477024d6e5d0454e5b25ed4be29c9",
+      "contentHash": "f68a6ee976164fc67334d8b801206fc13e1da598a1f46263187d87bfce6da77e",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -618,7 +618,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "426b6966637507e25871e9da70200e5341c477024d6e5d0454e5b25ed4be29c9",
+      "contentHash": "f68a6ee976164fc67334d8b801206fc13e1da598a1f46263187d87bfce6da77e",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -626,7 +626,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "426b6966637507e25871e9da70200e5341c477024d6e5d0454e5b25ed4be29c9",
+      "contentHash": "f68a6ee976164fc67334d8b801206fc13e1da598a1f46263187d87bfce6da77e",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -634,7 +634,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "426b6966637507e25871e9da70200e5341c477024d6e5d0454e5b25ed4be29c9",
+      "contentHash": "f68a6ee976164fc67334d8b801206fc13e1da598a1f46263187d87bfce6da77e",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -642,7 +642,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "426b6966637507e25871e9da70200e5341c477024d6e5d0454e5b25ed4be29c9",
+      "contentHash": "f68a6ee976164fc67334d8b801206fc13e1da598a1f46263187d87bfce6da77e",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -650,7 +650,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "426b6966637507e25871e9da70200e5341c477024d6e5d0454e5b25ed4be29c9",
+      "contentHash": "f68a6ee976164fc67334d8b801206fc13e1da598a1f46263187d87bfce6da77e",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -658,7 +658,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "426b6966637507e25871e9da70200e5341c477024d6e5d0454e5b25ed4be29c9",
+      "contentHash": "f68a6ee976164fc67334d8b801206fc13e1da598a1f46263187d87bfce6da77e",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -666,7 +666,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "426b6966637507e25871e9da70200e5341c477024d6e5d0454e5b25ed4be29c9",
+      "contentHash": "f68a6ee976164fc67334d8b801206fc13e1da598a1f46263187d87bfce6da77e",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -674,7 +674,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "426b6966637507e25871e9da70200e5341c477024d6e5d0454e5b25ed4be29c9",
+      "contentHash": "f68a6ee976164fc67334d8b801206fc13e1da598a1f46263187d87bfce6da77e",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -682,7 +682,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "426b6966637507e25871e9da70200e5341c477024d6e5d0454e5b25ed4be29c9",
+      "contentHash": "f68a6ee976164fc67334d8b801206fc13e1da598a1f46263187d87bfce6da77e",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -690,7 +690,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "426b6966637507e25871e9da70200e5341c477024d6e5d0454e5b25ed4be29c9",
+      "contentHash": "f68a6ee976164fc67334d8b801206fc13e1da598a1f46263187d87bfce6da77e",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -698,7 +698,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "426b6966637507e25871e9da70200e5341c477024d6e5d0454e5b25ed4be29c9",
+      "contentHash": "f68a6ee976164fc67334d8b801206fc13e1da598a1f46263187d87bfce6da77e",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -706,7 +706,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "426b6966637507e25871e9da70200e5341c477024d6e5d0454e5b25ed4be29c9",
+      "contentHash": "f68a6ee976164fc67334d8b801206fc13e1da598a1f46263187d87bfce6da77e",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -714,7 +714,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "426b6966637507e25871e9da70200e5341c477024d6e5d0454e5b25ed4be29c9",
+      "contentHash": "f68a6ee976164fc67334d8b801206fc13e1da598a1f46263187d87bfce6da77e",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -722,7 +722,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "426b6966637507e25871e9da70200e5341c477024d6e5d0454e5b25ed4be29c9",
+      "contentHash": "f68a6ee976164fc67334d8b801206fc13e1da598a1f46263187d87bfce6da77e",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -730,7 +730,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "426b6966637507e25871e9da70200e5341c477024d6e5d0454e5b25ed4be29c9",
+      "contentHash": "f68a6ee976164fc67334d8b801206fc13e1da598a1f46263187d87bfce6da77e",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -738,7 +738,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "426b6966637507e25871e9da70200e5341c477024d6e5d0454e5b25ed4be29c9",
+      "contentHash": "f68a6ee976164fc67334d8b801206fc13e1da598a1f46263187d87bfce6da77e",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -746,7 +746,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "426b6966637507e25871e9da70200e5341c477024d6e5d0454e5b25ed4be29c9",
+      "contentHash": "f68a6ee976164fc67334d8b801206fc13e1da598a1f46263187d87bfce6da77e",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -754,7 +754,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "426b6966637507e25871e9da70200e5341c477024d6e5d0454e5b25ed4be29c9",
+      "contentHash": "f68a6ee976164fc67334d8b801206fc13e1da598a1f46263187d87bfce6da77e",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -770,7 +770,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "426b6966637507e25871e9da70200e5341c477024d6e5d0454e5b25ed4be29c9",
+      "contentHash": "f68a6ee976164fc67334d8b801206fc13e1da598a1f46263187d87bfce6da77e",
       "since": "2025-01-01"
     },
     "cli:init": {
@@ -1538,7 +1538,7 @@
       "type": "subsystem",
       "domain": "updates",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
-      "contentHash": "1fd77b4e3eefd87a1a19850b080f1225fff38c7bb94b36d1d6357a5c85b77fa2",
+      "contentHash": "71035143949bb1f079760f8f7b4bd8f9aa9dbe6ee222869ddb6dd955cdf12352",
       "since": "2025-01-01"
     },
     "subsystem:scheduler": {

package/src/scaffold/templates.ts

@@ -1760,6 +1760,11 @@ Manage it:
 - \`curl -X POST -H "Authorization: Bearer $AUTH" -H 'Content-Type: application/json' -d '{"task":{"description":"Route invoices, schedule approvals, track status"}}' http://localhost:${port}/agent-readiness/score\` (or \`{"workflow":{"steps":[...]}}\`) → \`{ coordinationRatio, overallReadiness (0-100), recommendation, matched }\`. \`recommendation\`: deploy-agent (75+) / agent-with-oversight (55-74) / hybrid (40-54) / human-led (<40). Deterministic + advisory.
 - **When to use** (PROACTIVE): before delegating a task/workflow to an agent, or when deciding what to automate vs keep human. Pair with \`/intent/org/test-action\` (is it agent-ready AND does our purpose endorse it?). Skill: \`/agent-readiness\`.
 
+**Agent Digital Passport (EXO 3.0).** Your identity (name + routing fingerprint), trust level, and ORG-INTENT constraints packaged into one portable passport — "every agent carries metadata saying what it's allowed and forbidden to do, and other agents watch compliance" (Salim Ismail).
+- Your passport: \`curl -H "Authorization: Bearer $AUTH" http://localhost:${port}/passport\` → \`{ agent, fingerprint, trustLevel, allowedCapabilities, forbiddenActions, issuedAt }\` (forbiddenActions = your ORG-INTENT constraints).
+- Verify a peer's action against their passport: \`curl -X POST -H "Authorization: Bearer $AUTH" -H 'Content-Type: application/json' -d '{"passport":{...},"action":"..."}' http://localhost:${port}/passport/verify\` → \`{ permitted, basis, reason }\` (basis: forbidden-action / trust-floor / out-of-scope / ok).
+- **When to use** (PROACTIVE): before trusting another agent's proposed action, verify it against their passport; hand peers your passport so they know your scope. Skill: \`/agent-passport\`.
+
 ## Agent Infrastructure
 
 This project uses instar for persistent agent capabilities.

package/upgrades/1.3.324.md

@@ -0,0 +1,51 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: minor -->
+
+## What Changed
+
+Adds the **agent digital passport** — Salim Ismail's EXO 3.0 concept (from *The
+80-Year Business Rule AI Just Broke*): "every AI agent gets a digital passport
+with metadata saying what it's allowed to do and what it's not allowed to do,
+and other agents watching that it's complying."
+
+This packages Instar's existing primitives — agent identity (name + routing
+fingerprint), trust level, and ORG-INTENT constraints — into one portable
+passport, plus a deterministic compliance check a peer runs before trusting an
+action:
+
+- `GET /passport` → `{ version, agent, fingerprint, trustLevel,
+  allowedCapabilities, forbiddenActions, issuedAt }`. `forbiddenActions` are
+  drawn from the agent's ORG-INTENT constraints.
+- `POST /passport/verify` `{ passport, action }` → `{ permitted, basis, reason,
+  matched? }` where `basis` is `forbidden-action` | `trust-floor` (an untrusted
+  passport may observe but not act) | `out-of-scope` | `ok`.
+- A `/agent-passport` skill so agents reach for it proactively.
+
+Deterministic + advisory — it answers "should I let this passport do this?"; the
+caller decides. Pairs with the MTP Protocol (`/intent/org/test-action`).
+
+## What to Tell Your User
+
+Your agent now carries a digital passport — one portable card that says who it is (name + cryptographic fingerprint), how trusted it is, and exactly what it's forbidden to do (drawn straight from your organization's written constraints). When two agents work together, one can check the other's proposed action against that passport before trusting it: "is this allowed, forbidden, or outside your scope?" It's the EXO 3.0 idea that agents police each other's compliance — made real. Nothing changes in day-to-day use until agents start exchanging passports; there's nothing you need to configure.
+
+## Summary of New Capabilities
+
+- `GET /passport` — your own passport: `{ agent, fingerprint, trustLevel, allowedCapabilities, forbiddenActions, issuedAt }` (forbiddenActions = ORG-INTENT constraints).
+- `POST /passport/verify` `{ passport, action }` — deterministic peer compliance check → `{ permitted, basis, reason }` (basis: forbidden-action / trust-floor / out-of-scope / ok). Advisory — the caller decides.
+- `/agent-passport` skill — the proactive entry point before trusting a peer's proposed action.
+
+## Evidence
+
+Three-tier coverage, all green, `tsc --noEmit` clean:
+
+- Unit — `AgentPassport.test.ts` (6): build defaults + `permits()` across every
+  boundary (forbidden-action, trust-floor, out-of-scope, in-scope, unscoped).
+- Integration — `agent-passport-routes.test.ts` (3): both routes over real HTTP,
+  with ORG-INTENT constraints surfaced as the passport's forbidden actions.
+- E2E — `agent-passport-lifecycle.test.ts` (2): a real server on a real port;
+  `GET /passport` and `POST /passport/verify` alive end-to-end (200, not 404/503).
+
+Skill registered in `installBuiltinSkills`; CLAUDE.md scaffold template documents
+both endpoints.

package/upgrades/side-effects/exo3-g3-ci-greening.md

@@ -0,0 +1,31 @@
+# Side-effects — EXO 3.0 G3 (#793) CI greening on post-rebase main
+
+## Change set
+
+- `tests/integration/agent-passport-routes.test.ts` + `tests/e2e/agent-passport-lifecycle.test.ts`
+  — teardown `fs.rmSync` → `SafeFsExecutor.safeRmSync` (lint compliance; test-only).
+- `src/server/CapabilityIndex.ts` — new `agentPassport` entry (prefix `/passport`,
+  static `configured: true`, two endpoints).
+- `src/core/PostUpdateMigrator.ts` — migrateClaudeMd Agent Digital Passport
+  section (content-sniffed, idempotent) + shadow marker
+  `'**Agent Digital Passport (EXO 3.0'`.
+- `tests/unit/feature-delivery-completeness.test.ts` — featureSections entry.
+- `upgrades/next/agent-digital-passport.md` — the two required user sections.
+
+## Side effects considered
+
+- **/capabilities grows** one static block (no ctx dependency; the passport
+  builder reads identity/trust/intent lazily inside the route, not the index).
+- **Existing agents' CLAUDE.md grows** one section on next migration; sniff
+  phrase 'Agent Digital Passport (EXO 3.0' matches template + migrator variants.
+- **Shadow mirror**: marker bounded by the next-marker scan like its siblings.
+- **No passport behavior change**: AgentPassport module and routes untouched.
+
+## Verification
+
+- Passport unit/integration/e2e + completeness + discoverability suites green
+  locally; `check-repo-invariants` holds; destructive lint clean; `tsc --noEmit` 0.
+
+## Rollback
+
+Revert this single commit; feature commits untouched.