instar 1.3.352 → 1.3.353

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.352",
+  "version": "1.3.353",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-06-06T07:09:24.156Z",
-  "instarVersion": "1.3.352",
+  "generatedAt": "2026-06-06T07:40:10.127Z",
+  "instarVersion": "1.3.353",
   "entryCount": 199,
   "entries": {
     "hook:session-start": {
@@ -418,7 +418,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "d2905deee33cdc5d932612a152d26c87b57cfe33baf8482c5353ca91dee588a5",
+      "contentHash": "d0606ad3f054cb473a8cd9271752fb6d525a169d4a0b591d7b4fc0691074ece0",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -426,7 +426,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "d2905deee33cdc5d932612a152d26c87b57cfe33baf8482c5353ca91dee588a5",
+      "contentHash": "d0606ad3f054cb473a8cd9271752fb6d525a169d4a0b591d7b4fc0691074ece0",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -434,7 +434,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "d2905deee33cdc5d932612a152d26c87b57cfe33baf8482c5353ca91dee588a5",
+      "contentHash": "d0606ad3f054cb473a8cd9271752fb6d525a169d4a0b591d7b4fc0691074ece0",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -442,7 +442,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "d2905deee33cdc5d932612a152d26c87b57cfe33baf8482c5353ca91dee588a5",
+      "contentHash": "d0606ad3f054cb473a8cd9271752fb6d525a169d4a0b591d7b4fc0691074ece0",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -450,7 +450,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "d2905deee33cdc5d932612a152d26c87b57cfe33baf8482c5353ca91dee588a5",
+      "contentHash": "d0606ad3f054cb473a8cd9271752fb6d525a169d4a0b591d7b4fc0691074ece0",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -458,7 +458,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "d2905deee33cdc5d932612a152d26c87b57cfe33baf8482c5353ca91dee588a5",
+      "contentHash": "d0606ad3f054cb473a8cd9271752fb6d525a169d4a0b591d7b4fc0691074ece0",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -466,7 +466,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "d2905deee33cdc5d932612a152d26c87b57cfe33baf8482c5353ca91dee588a5",
+      "contentHash": "d0606ad3f054cb473a8cd9271752fb6d525a169d4a0b591d7b4fc0691074ece0",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -474,7 +474,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "d2905deee33cdc5d932612a152d26c87b57cfe33baf8482c5353ca91dee588a5",
+      "contentHash": "d0606ad3f054cb473a8cd9271752fb6d525a169d4a0b591d7b4fc0691074ece0",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -482,7 +482,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "d2905deee33cdc5d932612a152d26c87b57cfe33baf8482c5353ca91dee588a5",
+      "contentHash": "d0606ad3f054cb473a8cd9271752fb6d525a169d4a0b591d7b4fc0691074ece0",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -490,7 +490,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "d2905deee33cdc5d932612a152d26c87b57cfe33baf8482c5353ca91dee588a5",
+      "contentHash": "d0606ad3f054cb473a8cd9271752fb6d525a169d4a0b591d7b4fc0691074ece0",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -498,7 +498,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "d2905deee33cdc5d932612a152d26c87b57cfe33baf8482c5353ca91dee588a5",
+      "contentHash": "d0606ad3f054cb473a8cd9271752fb6d525a169d4a0b591d7b4fc0691074ece0",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -506,7 +506,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "d2905deee33cdc5d932612a152d26c87b57cfe33baf8482c5353ca91dee588a5",
+      "contentHash": "d0606ad3f054cb473a8cd9271752fb6d525a169d4a0b591d7b4fc0691074ece0",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -514,7 +514,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "d2905deee33cdc5d932612a152d26c87b57cfe33baf8482c5353ca91dee588a5",
+      "contentHash": "d0606ad3f054cb473a8cd9271752fb6d525a169d4a0b591d7b4fc0691074ece0",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -522,7 +522,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "d2905deee33cdc5d932612a152d26c87b57cfe33baf8482c5353ca91dee588a5",
+      "contentHash": "d0606ad3f054cb473a8cd9271752fb6d525a169d4a0b591d7b4fc0691074ece0",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -530,7 +530,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "d2905deee33cdc5d932612a152d26c87b57cfe33baf8482c5353ca91dee588a5",
+      "contentHash": "d0606ad3f054cb473a8cd9271752fb6d525a169d4a0b591d7b4fc0691074ece0",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -538,7 +538,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "d2905deee33cdc5d932612a152d26c87b57cfe33baf8482c5353ca91dee588a5",
+      "contentHash": "d0606ad3f054cb473a8cd9271752fb6d525a169d4a0b591d7b4fc0691074ece0",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -546,7 +546,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "d2905deee33cdc5d932612a152d26c87b57cfe33baf8482c5353ca91dee588a5",
+      "contentHash": "d0606ad3f054cb473a8cd9271752fb6d525a169d4a0b591d7b4fc0691074ece0",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -554,7 +554,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "d2905deee33cdc5d932612a152d26c87b57cfe33baf8482c5353ca91dee588a5",
+      "contentHash": "d0606ad3f054cb473a8cd9271752fb6d525a169d4a0b591d7b4fc0691074ece0",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -562,7 +562,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "d2905deee33cdc5d932612a152d26c87b57cfe33baf8482c5353ca91dee588a5",
+      "contentHash": "d0606ad3f054cb473a8cd9271752fb6d525a169d4a0b591d7b4fc0691074ece0",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -570,7 +570,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "d2905deee33cdc5d932612a152d26c87b57cfe33baf8482c5353ca91dee588a5",
+      "contentHash": "d0606ad3f054cb473a8cd9271752fb6d525a169d4a0b591d7b4fc0691074ece0",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -578,7 +578,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "d2905deee33cdc5d932612a152d26c87b57cfe33baf8482c5353ca91dee588a5",
+      "contentHash": "d0606ad3f054cb473a8cd9271752fb6d525a169d4a0b591d7b4fc0691074ece0",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -586,7 +586,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "d2905deee33cdc5d932612a152d26c87b57cfe33baf8482c5353ca91dee588a5",
+      "contentHash": "d0606ad3f054cb473a8cd9271752fb6d525a169d4a0b591d7b4fc0691074ece0",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -594,7 +594,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "d2905deee33cdc5d932612a152d26c87b57cfe33baf8482c5353ca91dee588a5",
+      "contentHash": "d0606ad3f054cb473a8cd9271752fb6d525a169d4a0b591d7b4fc0691074ece0",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -602,7 +602,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "d2905deee33cdc5d932612a152d26c87b57cfe33baf8482c5353ca91dee588a5",
+      "contentHash": "d0606ad3f054cb473a8cd9271752fb6d525a169d4a0b591d7b4fc0691074ece0",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -610,7 +610,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "d2905deee33cdc5d932612a152d26c87b57cfe33baf8482c5353ca91dee588a5",
+      "contentHash": "d0606ad3f054cb473a8cd9271752fb6d525a169d4a0b591d7b4fc0691074ece0",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -618,7 +618,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "d2905deee33cdc5d932612a152d26c87b57cfe33baf8482c5353ca91dee588a5",
+      "contentHash": "d0606ad3f054cb473a8cd9271752fb6d525a169d4a0b591d7b4fc0691074ece0",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -626,7 +626,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "d2905deee33cdc5d932612a152d26c87b57cfe33baf8482c5353ca91dee588a5",
+      "contentHash": "d0606ad3f054cb473a8cd9271752fb6d525a169d4a0b591d7b4fc0691074ece0",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -634,7 +634,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "d2905deee33cdc5d932612a152d26c87b57cfe33baf8482c5353ca91dee588a5",
+      "contentHash": "d0606ad3f054cb473a8cd9271752fb6d525a169d4a0b591d7b4fc0691074ece0",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -642,7 +642,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "d2905deee33cdc5d932612a152d26c87b57cfe33baf8482c5353ca91dee588a5",
+      "contentHash": "d0606ad3f054cb473a8cd9271752fb6d525a169d4a0b591d7b4fc0691074ece0",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -650,7 +650,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "d2905deee33cdc5d932612a152d26c87b57cfe33baf8482c5353ca91dee588a5",
+      "contentHash": "d0606ad3f054cb473a8cd9271752fb6d525a169d4a0b591d7b4fc0691074ece0",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -658,7 +658,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "d2905deee33cdc5d932612a152d26c87b57cfe33baf8482c5353ca91dee588a5",
+      "contentHash": "d0606ad3f054cb473a8cd9271752fb6d525a169d4a0b591d7b4fc0691074ece0",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -666,7 +666,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "d2905deee33cdc5d932612a152d26c87b57cfe33baf8482c5353ca91dee588a5",
+      "contentHash": "d0606ad3f054cb473a8cd9271752fb6d525a169d4a0b591d7b4fc0691074ece0",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -674,7 +674,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "d2905deee33cdc5d932612a152d26c87b57cfe33baf8482c5353ca91dee588a5",
+      "contentHash": "d0606ad3f054cb473a8cd9271752fb6d525a169d4a0b591d7b4fc0691074ece0",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -682,7 +682,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "d2905deee33cdc5d932612a152d26c87b57cfe33baf8482c5353ca91dee588a5",
+      "contentHash": "d0606ad3f054cb473a8cd9271752fb6d525a169d4a0b591d7b4fc0691074ece0",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -690,7 +690,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "d2905deee33cdc5d932612a152d26c87b57cfe33baf8482c5353ca91dee588a5",
+      "contentHash": "d0606ad3f054cb473a8cd9271752fb6d525a169d4a0b591d7b4fc0691074ece0",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -698,7 +698,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "d2905deee33cdc5d932612a152d26c87b57cfe33baf8482c5353ca91dee588a5",
+      "contentHash": "d0606ad3f054cb473a8cd9271752fb6d525a169d4a0b591d7b4fc0691074ece0",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -706,7 +706,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "d2905deee33cdc5d932612a152d26c87b57cfe33baf8482c5353ca91dee588a5",
+      "contentHash": "d0606ad3f054cb473a8cd9271752fb6d525a169d4a0b591d7b4fc0691074ece0",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -714,7 +714,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "d2905deee33cdc5d932612a152d26c87b57cfe33baf8482c5353ca91dee588a5",
+      "contentHash": "d0606ad3f054cb473a8cd9271752fb6d525a169d4a0b591d7b4fc0691074ece0",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -722,7 +722,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "d2905deee33cdc5d932612a152d26c87b57cfe33baf8482c5353ca91dee588a5",
+      "contentHash": "d0606ad3f054cb473a8cd9271752fb6d525a169d4a0b591d7b4fc0691074ece0",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -730,7 +730,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "d2905deee33cdc5d932612a152d26c87b57cfe33baf8482c5353ca91dee588a5",
+      "contentHash": "d0606ad3f054cb473a8cd9271752fb6d525a169d4a0b591d7b4fc0691074ece0",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -738,7 +738,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "d2905deee33cdc5d932612a152d26c87b57cfe33baf8482c5353ca91dee588a5",
+      "contentHash": "d0606ad3f054cb473a8cd9271752fb6d525a169d4a0b591d7b4fc0691074ece0",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -746,7 +746,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "d2905deee33cdc5d932612a152d26c87b57cfe33baf8482c5353ca91dee588a5",
+      "contentHash": "d0606ad3f054cb473a8cd9271752fb6d525a169d4a0b591d7b4fc0691074ece0",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -754,7 +754,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "d2905deee33cdc5d932612a152d26c87b57cfe33baf8482c5353ca91dee588a5",
+      "contentHash": "d0606ad3f054cb473a8cd9271752fb6d525a169d4a0b591d7b4fc0691074ece0",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -770,7 +770,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "d2905deee33cdc5d932612a152d26c87b57cfe33baf8482c5353ca91dee588a5",
+      "contentHash": "d0606ad3f054cb473a8cd9271752fb6d525a169d4a0b591d7b4fc0691074ece0",
       "since": "2025-01-01"
     },
     "cli:init": {
@@ -1506,7 +1506,7 @@
       "type": "subsystem",
       "domain": "server",
       "sourcePath": "src/server/AgentServer.ts",
-      "contentHash": "42a9832c82d3f2234bb104cbd78cc8b948e0dbe84fead80752d00f443154211a",
+      "contentHash": "800958822ee452d616e5c1c095f5b3da3a9936557cf636ca2dd6fadfb92fbca3",
       "since": "2025-01-01"
     },
     "subsystem:session-manager": {

package/upgrades/1.3.353.md

@@ -0,0 +1,40 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+Wired the merged `TopicOperatorStore` (#904) into the live `AgentServer` and
+exposed it over HTTP (Know Your Principal standard, security-build increment 2b).
+The store is now composed into the server under the `stateDir` guard (fail-safe:
+`null` → routes `503`, never a crash) and reachable via four Bearer-gated routes.
+This is the runtime arm of the operator-binding spec (#897); the store had no
+consumers before this.
+
+## What to Tell Your User
+
+Nothing user-facing changes yet. This is foundation wiring (experimental) for the
+Caroline identity-bleed security fix — it adds routes the system can use but does
+not alter any current conversational behavior. The automatic session-start
+injection of the verified operator is a later increment.
+
+## Summary of New Capabilities
+
+- `GET /topic-operator` — all bound operators (names + uids).
+- `GET /topic-operator/:topicId` — one topic's verified operator (or null).
+- `GET /topic-operator/session-context?topicId=N` — the `<topic-operator>`
+  session-start injection block (`{ present:false }` when unbound).
+- `POST /topic-operator` — bind a topic operator from the AUTHENTICATED sender
+  `{ topicId, platform?, uid (required), displayName? }`; a blank uid is refused
+  `400` (a content name can never become the operator).
+- `CapabilityIndex` entry `topicOperator` (prefix `/topic-operator`).
+
+## Evidence
+
+Verified by 10 Tier-2 integration tests (full HTTP pipeline over a real
+file-backed store, incl. the blank-uid refusal and the store-not-wired `503`
+degradation) and 6 Tier-3 E2E lifecycle tests (feature-alive on the real
+`AgentServer` boot path — `200` not `503` — full bind→read→inject lifecycle,
+durable-write proof, and the over-the-wire blank-uid refusal). Tier-1 unit
+coverage shipped in #904. Clean `tsc --noEmit`.

package/upgrades/side-effects/topic-operator-binding-inc2b.md

@@ -0,0 +1,72 @@
+# Side-effects review — Topic Operator binding (Know Your Principal #898, increment 2b)
+
+## What this change does
+Wires the already-merged `TopicOperatorStore` (#904) into the live `AgentServer`
+composition and exposes it over HTTP, plus the session-start injection block.
+
+- `AgentServer.ts`: a new `topicOperatorStore` field constructed under the
+  `stateDir` guard inside its own try/catch (mirrors the `approvalLedger`
+  precedent), then passed into `routeCtx`.
+- `routes.ts`: a `topicOperatorStore` field on `RouteContext` and four routes —
+  `GET /topic-operator`, `GET /topic-operator/:topicId`,
+  `GET /topic-operator/session-context?topicId=N`, `POST /topic-operator`.
+- `CapabilityIndex.ts`: a `topicOperator` capability entry (prefix
+  `/topic-operator`) so the routes are discoverable.
+
+## Blast radius
+- **Additive only.** No existing route, field, or store is modified. The store
+  is constructed when `stateDir` is available and is otherwise `null`; every
+  route degrades to `503` (feature-not-available) when it is `null`, never a
+  null-deref crash. The E2E test asserts the routes answer `200` on the real
+  production boot path (the store is genuinely composed in, not null).
+- **No auth change.** All four routes sit behind the existing Bearer
+  middleware, identical to `/topic-bindings` and `/approvals`.
+- **Fail-safe by construction.** An init failure is caught and reported via
+  `console.warn`; it can never block server boot. A corrupt store file is
+  treated as empty (a missing operator means the cross-principal guard treats
+  everything as unverifiable — deny-safe, not allow-safe).
+
+## The load-bearing security property (unchanged from #904)
+The operator is established ONLY from the authenticated sender `uid`. The POST
+route refuses a blank uid with `400`; a `displayName` (a content name) is never
+authoritative — it is only lowercased for prose-matching. There is no code path
+by which a name read from content becomes the operator. This is the structural
+fix for the "Caroline" identity-bleed failure mode, and the integration + E2E
+tests both assert the blank-uid refusal over the wire.
+
+## Migration parity
+No migration is required. These are server-side routes and an in-process store
+field — they reach existing agents automatically on the next server update (the
+Migration Parity Standard governs agent-installed FILES: settings hooks, config
+defaults, CLAUDE.md template, hook scripts, skills — none of which this touches).
+The store auto-creates `state/topic-operators.json` on first write; no config
+key is added, so there is nothing for `migrateConfig` to backfill.
+
+The session-start HOOK wiring (so the `<topic-operator>` block is actually
+fetched and injected at boot) is deliberately NOT in this increment — that is a
+hook-template change requiring `migrateHooks`, and is scoped to increment 2c so
+this PR stays a focused, reviewable composition+routes change. Until 2c lands the
+block is reachable at the route but nothing injects it yet; that is intentional.
+
+## Framework generality
+This is framework-agnostic. `platform` is a generic string (`telegram` |
+`whatsapp` | `slack` | …), so the binding works for any messaging adapter, not
+just Telegram. The `session-context` route returns a plain text block that any
+framework's session-start hook can fetch and inject — it is not coupled to
+Claude Code, Codex, or Gemini. The store has no platform-specific logic; it
+delegates identity establishment to `PrincipalGuard.establishOperator`, which is
+itself pure and framework-neutral.
+
+## Tests
+- Tier 1 (unit): `tests/unit/topic-operator-store.test.ts` (10) — shipped in #904.
+- Tier 2 (integration): `tests/integration/topic-operator-routes.test.ts` (10) —
+  full HTTP pipeline over a real file-backed store, incl. the blank-uid refusal
+  and the store-not-wired 503 degradation.
+- Tier 3 (E2E): `tests/e2e/topic-operator-lifecycle.test.ts` (6) — feature-alive
+  on the real `AgentServer` boot path (200 not 503), full bind→read→inject
+  lifecycle, durable-write proof, and the over-the-wire blank-uid refusal.
+
+## Rollback
+Revert the three source edits + delete the two test files. The store on disk
+(`state/topic-operators.json`) is inert without the routes and can be left or
+removed with no consequence.

package/upgrades/topic-operator-binding-inc2b.eli16.md

@@ -0,0 +1,47 @@
+# ELI16 — Who's the boss of this chat?
+
+## The problem in one sentence
+An AI agent needs to know, for sure, *which real person* it's working for in a
+given conversation — and it should never get tricked into thinking some other
+name it read somewhere is the boss.
+
+## The story behind it
+Not long ago, an agent running on a shared computer slowly started treating a
+*different real person* — call her Caroline — as the person giving it orders. It
+even wrote her name into its work as if her approvals counted. Nobody caught it,
+because the mix-up happened entirely inside the agent's own writing. There was no
+"front door" guard checking that, because the bad name never came in through a
+message — it leaked in from the machine's settings and the agent's own notes.
+
+We already built two pieces to stop this: a detector brain (`PrincipalGuard`)
+that spots when the agent credits a decision to the wrong person, and a small
+filing cabinet (`TopicOperatorStore`) that remembers, per conversation, exactly
+who the verified boss is. The rule the filing cabinet enforces is strict: the
+boss is decided ONLY by the verified ID of whoever actually sent the message —
+never by a name typed in some document.
+
+## What this change adds
+This step plugs that filing cabinet into the running server so the rest of the
+system can actually use it. It adds four simple web endpoints:
+
+- "Who's the boss of this chat?" — read one conversation's verified operator.
+- "Show me all the bosses" — list every conversation's verified operator.
+- "Set the boss" — record the boss, but ONLY from a verified sender ID. If you
+  try to set it with a blank ID (hoping a typed-in name will stick), it says no.
+- "Give me the boot-up note" — hand back a short block the agent can read at the
+  start of a session so it knows, from message one, who it's really serving.
+
+## Why it's safe
+It only *adds* things. Nothing old changes. If the server can't build the filing
+cabinet for some reason, the endpoints politely say "not available" instead of
+crashing. And the one rule that matters most — a name you merely *read* can never
+become the boss, only a verified sender can — is checked right at the web layer,
+and we have tests that prove it by trying to sneak the name "Caroline" in through
+a blank ID and watching it get rejected.
+
+## What's deliberately left for next time
+The actual "read the boot-up note at session start" wiring (so the agent
+automatically sees who its boss is every time it wakes up) is a separate, slightly
+riskier change to the start-up script, so it gets its own follow-up step. For now
+the note is available to ask for; nothing reads it automatically yet. That's on
+purpose — it keeps this change small and easy to review.