instar 1.3.354 → 1.3.356

package/dist/monitoring/QuotaExhaustionDetector.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"QuotaExhaustionDetector.d.ts","sourceRoot":"","sources":["../../src/monitoring/QuotaExhaustionDetector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAqB,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAiElG;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,MAAM,EAClB,UAAU,CAAC,EAAE,UAAU,GAAG,IAAI,GAC7B,0BAA0B,CAkE5B;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,UAAU,EAAE,MAAM,GAAG,QAAQ,CAAA;CAAE,CAkBvI;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,IAAI,CAc/E"}
+{"version":3,"file":"QuotaExhaustionDetector.d.ts","sourceRoot":"","sources":["../../src/monitoring/QuotaExhaustionDetector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAqB,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAiElG;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,MAAM,EAClB,UAAU,CAAC,EAAE,UAAU,GAAG,IAAI,GAC7B,0BAA0B,CAkE5B;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,UAAU,EAAE,MAAM,GAAG,QAAQ,CAAA;CAAE,CAwCvI;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,IAAI,CAc/E"}

package/dist/monitoring/QuotaExhaustionDetector.js

@@ -150,8 +150,30 @@ export function detectContextExhaustion(tmuxOutput) {
     if (!match) {
         return { matched: false, pattern: null, confidence: 'medium' };
     }
-    const strongSignals = ['conversation too long', 'conversation is too long', 'error during compaction'];
-    const isStrong = strongSignals.some(s => output.includes(s));
+    // FALSE-POSITIVE GUARD (RUN-2 2026-06-06, topic 13435 flood). The bare phrase
+    // "conversation (is) too long" appears as ordinary CONTENT whenever a session
+    // discusses the conversation-too-long failure mode — an autonomous session
+    // working ON that feature, a quoted error, or the recovery NOTICE this very
+    // detector triggers ("Session hit \"conversation too long\" …"), which re-enters
+    // the pane and self-amplifies one false positive into a flood. A REAL Claude
+    // Code exhaustion error always renders WITH its CLI recovery framing — the
+    // "press esc twice …" hint or an "error during compaction" line (see the
+    // realistic fixture in the unit tests). Require that framing: the bare phrase,
+    // alone, is content, not a live CLI error.
+    const bareExhaustionPhrases = ['conversation too long', 'conversation is too long'];
+    // Both wordings of the CLI recovery hint ("esc"/"escape"), kept anchored on
+    // "twice" so it matches the real too-long prompt but not an unrelated
+    // "press escape to stop" working-indicator line.
+    const cliErrorFrames = ['press esc twice', 'press escape twice', 'error during compaction'];
+    const hasBarePhrase = bareExhaustionPhrases.some(s => output.includes(s));
+    const hasCliFrame = cliErrorFrames.some(s => output.includes(s));
+    if (hasBarePhrase && !hasCliFrame) {
+        // Phrase present only as content/narration — not the framed CLI error. (A
+        // non-phrase soft signal like "context limit" is unaffected: hasBarePhrase
+        // is false, so this guard does not apply and existing behavior is preserved.)
+        return { matched: false, pattern: null, confidence: 'medium' };
+    }
+    const isStrong = hasBarePhrase || output.includes('error during compaction');
     return { matched: true, pattern: match, confidence: isStrong ? 'high' : 'medium' };
 }
 /**

package/dist/monitoring/QuotaExhaustionDetector.js.map

@@ -1 +1 @@
-{"version":3,"file":"QuotaExhaustionDetector.js","sourceRoot":"","sources":["../../src/monitoring/QuotaExhaustionDetector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,oCAAoC;AACpC,MAAM,cAAc,GAAG;IACrB,kBAAkB;IAClB,YAAY;IACZ,KAAK;IACL,iBAAiB;IACjB,cAAc;IACd,mBAAmB;IACnB,oBAAoB;IACpB,UAAU;IACV,SAAS;IACT,qBAAqB;CACtB,CAAC;AAEF,MAAM,gBAAgB,GAAG;IACvB,kBAAkB;IAClB,gBAAgB;IAChB,eAAe;IACf,uBAAuB;IACvB,kBAAkB;IAClB,0BAA0B;IAC1B,uBAAuB;IACvB,mCAAmC;IACnC,yCAAyC;CAC1C,CAAC;AAEF,MAAM,oCAAoC,GAAG;IAC3C,wBAAwB;IACxB,+BAA+B;IAC/B,6BAA6B;IAC7B,oCAAoC;IACpC,kCAAkC;IAClC,qBAAqB;CACtB,CAAC;AAEF,MAAM,oCAAoC,GAAG;IAC3C,uBAAuB;IACvB,0BAA0B;IAC1B,yBAAyB;IACzB,yCAAyC;CAC1C,CAAC;AAEF,MAAM,cAAc,GAAG;IACrB,SAAS;IACT,SAAS;IACT,SAAS;IACT,aAAa;IACb,sBAAsB;IACtB,QAAQ;IACR,gBAAgB;IAChB,eAAe;IACf,WAAW;CACZ,CAAC;AAEF,MAAM,oBAAoB,GAAG;IAC3B,eAAe;IACf,UAAU;IACV,oBAAoB;IACpB,WAAW;IACX,GAAG;IACH,gBAAgB;CACjB,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAClC,UAAkB,EAClB,UAA8B;IAE9B,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAC/E,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;IAExC,2BAA2B;IAC3B,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACzD,MAAM,YAAY,GAAG,aAAa,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC7D,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACzD,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IAEhE,0CAA0C;IAC1C,IAAI,WAAW,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,EAAE,CAAC;QAC9C,OAAO;YACL,KAAK,EAAE,aAAa;YACpB,UAAU,EAAE,MAAM;YAClB,MAAM,EAAE,iCAAiC,WAAW,GAAG;SACxD,CAAC;IACJ,CAAC;IAED,+DAA+D;IAC/D,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,UAAU,GAA8B,QAAQ,CAAC;QAErD,uDAAuD;QACvD,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,QAAQ,GAAG,UAAU,CAAC,eAAe,CAAC;YAC5C,MAAM,MAAM,GAAG,UAAU,CAAC,YAAY,CAAC;YACvC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,GAAG,EAAE,EAAE,CAAC;gBAClD,UAAU,GAAG,MAAM,CAAC;YACtB,CAAC;iBAAM,IAAI,MAAM,GAAG,EAAE,EAAE,CAAC;gBACvB,UAAU,GAAG,MAAM,CAAC;YACtB,CAAC;QACH,CAAC;QAED,OAAO;YACL,KAAK,EAAE,kBAAkB;YACzB,UAAU;YACV,MAAM,EAAE,2BAA2B,UAAU,GAAG;gBAC9C,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,UAAU,CAAC,YAAY,UAAU,UAAU,CAAC,eAAe,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5G,CAAC;IACJ,CAAC;IAED,2DAA2D;IAC3D,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,aAAa,GAAG,CAAC,uBAAuB,EAAE,0BAA0B,EAAE,yBAAyB,CAAC,CAAC;QACvG,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7D,OAAO;YACL,KAAK,EAAE,mBAAmB;YAC1B,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;YACxC,MAAM,EAAE,6BAA6B,YAAY,GAAG;SACrD,CAAC;IACJ,CAAC;IAED,QAAQ;IACR,IAAI,UAAU,EAAE,CAAC;QACf,OAAO;YACL,KAAK,EAAE,OAAO;YACd,UAAU,EAAE,QAAQ;YACpB,MAAM,EAAE,2BAA2B,UAAU,GAAG;SACjD,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;AAChF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,UAAkB;IACxD,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;IACjE,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;IACxC,IACE,aAAa,CAAC,MAAM,EAAE,oCAAoC,CAAC;WACxD,CAAC,aAAa,CAAC,MAAM,EAAE,oCAAoC,CAAC,EAC/D,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;IACjE,CAAC;IACD,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IACtD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;IACjE,CAAC;IACD,MAAM,aAAa,GAAG,CAAC,uBAAuB,EAAE,0BAA0B,EAAE,yBAAyB,CAAC,CAAC;IACvG,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;AACrF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,MAAc,EAAE,QAAkB;IAC9D,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,IAAI,IAAI,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1C,OAAO,OAAO,CAAC;YACjB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,uDAAuD;YACvD,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBAC3C,OAAO,OAAO,CAAC;YACjB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"QuotaExhaustionDetector.js","sourceRoot":"","sources":["../../src/monitoring/QuotaExhaustionDetector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,oCAAoC;AACpC,MAAM,cAAc,GAAG;IACrB,kBAAkB;IAClB,YAAY;IACZ,KAAK;IACL,iBAAiB;IACjB,cAAc;IACd,mBAAmB;IACnB,oBAAoB;IACpB,UAAU;IACV,SAAS;IACT,qBAAqB;CACtB,CAAC;AAEF,MAAM,gBAAgB,GAAG;IACvB,kBAAkB;IAClB,gBAAgB;IAChB,eAAe;IACf,uBAAuB;IACvB,kBAAkB;IAClB,0BAA0B;IAC1B,uBAAuB;IACvB,mCAAmC;IACnC,yCAAyC;CAC1C,CAAC;AAEF,MAAM,oCAAoC,GAAG;IAC3C,wBAAwB;IACxB,+BAA+B;IAC/B,6BAA6B;IAC7B,oCAAoC;IACpC,kCAAkC;IAClC,qBAAqB;CACtB,CAAC;AAEF,MAAM,oCAAoC,GAAG;IAC3C,uBAAuB;IACvB,0BAA0B;IAC1B,yBAAyB;IACzB,yCAAyC;CAC1C,CAAC;AAEF,MAAM,cAAc,GAAG;IACrB,SAAS;IACT,SAAS;IACT,SAAS;IACT,aAAa;IACb,sBAAsB;IACtB,QAAQ;IACR,gBAAgB;IAChB,eAAe;IACf,WAAW;CACZ,CAAC;AAEF,MAAM,oBAAoB,GAAG;IAC3B,eAAe;IACf,UAAU;IACV,oBAAoB;IACpB,WAAW;IACX,GAAG;IACH,gBAAgB;CACjB,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAClC,UAAkB,EAClB,UAA8B;IAE9B,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAC/E,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;IAExC,2BAA2B;IAC3B,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACzD,MAAM,YAAY,GAAG,aAAa,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC7D,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACzD,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IAEhE,0CAA0C;IAC1C,IAAI,WAAW,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,EAAE,CAAC;QAC9C,OAAO;YACL,KAAK,EAAE,aAAa;YACpB,UAAU,EAAE,MAAM;YAClB,MAAM,EAAE,iCAAiC,WAAW,GAAG;SACxD,CAAC;IACJ,CAAC;IAED,+DAA+D;IAC/D,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,UAAU,GAA8B,QAAQ,CAAC;QAErD,uDAAuD;QACvD,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,QAAQ,GAAG,UAAU,CAAC,eAAe,CAAC;YAC5C,MAAM,MAAM,GAAG,UAAU,CAAC,YAAY,CAAC;YACvC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,GAAG,EAAE,EAAE,CAAC;gBAClD,UAAU,GAAG,MAAM,CAAC;YACtB,CAAC;iBAAM,IAAI,MAAM,GAAG,EAAE,EAAE,CAAC;gBACvB,UAAU,GAAG,MAAM,CAAC;YACtB,CAAC;QACH,CAAC;QAED,OAAO;YACL,KAAK,EAAE,kBAAkB;YACzB,UAAU;YACV,MAAM,EAAE,2BAA2B,UAAU,GAAG;gBAC9C,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,UAAU,CAAC,YAAY,UAAU,UAAU,CAAC,eAAe,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5G,CAAC;IACJ,CAAC;IAED,2DAA2D;IAC3D,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,aAAa,GAAG,CAAC,uBAAuB,EAAE,0BAA0B,EAAE,yBAAyB,CAAC,CAAC;QACvG,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7D,OAAO;YACL,KAAK,EAAE,mBAAmB;YAC1B,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;YACxC,MAAM,EAAE,6BAA6B,YAAY,GAAG;SACrD,CAAC;IACJ,CAAC;IAED,QAAQ;IACR,IAAI,UAAU,EAAE,CAAC;QACf,OAAO;YACL,KAAK,EAAE,OAAO;YACd,UAAU,EAAE,QAAQ;YACpB,MAAM,EAAE,2BAA2B,UAAU,GAAG;SACjD,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;AAChF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,UAAkB;IACxD,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;IACjE,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;IACxC,IACE,aAAa,CAAC,MAAM,EAAE,oCAAoC,CAAC;WACxD,CAAC,aAAa,CAAC,MAAM,EAAE,oCAAoC,CAAC,EAC/D,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;IACjE,CAAC;IACD,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IACtD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;IACjE,CAAC;IACD,8EAA8E;IAC9E,8EAA8E;IAC9E,2EAA2E;IAC3E,4EAA4E;IAC5E,iFAAiF;IACjF,6EAA6E;IAC7E,2EAA2E;IAC3E,yEAAyE;IACzE,+EAA+E;IAC/E,2CAA2C;IAC3C,MAAM,qBAAqB,GAAG,CAAC,uBAAuB,EAAE,0BAA0B,CAAC,CAAC;IACpF,4EAA4E;IAC5E,sEAAsE;IACtE,iDAAiD;IACjD,MAAM,cAAc,GAAG,CAAC,iBAAiB,EAAE,oBAAoB,EAAE,yBAAyB,CAAC,CAAC;IAC5F,MAAM,aAAa,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1E,MAAM,WAAW,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACjE,IAAI,aAAa,IAAI,CAAC,WAAW,EAAE,CAAC;QAClC,0EAA0E;QAC1E,2EAA2E;QAC3E,8EAA8E;QAC9E,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;IACjE,CAAC;IACD,MAAM,QAAQ,GAAG,aAAa,IAAI,MAAM,CAAC,QAAQ,CAAC,yBAAyB,CAAC,CAAC;IAC7E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;AACrF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,MAAc,EAAE,QAAkB;IAC9D,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,IAAI,IAAI,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1C,OAAO,OAAO,CAAC;YACjB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,uDAAuD;YACvD,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBAC3C,OAAO,OAAO,CAAC;YACjB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.354",
+  "version": "1.3.356",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-06-06T07:43:24.044Z",
-  "instarVersion": "1.3.354",
+  "generatedAt": "2026-06-06T08:09:49.249Z",
+  "instarVersion": "1.3.356",
   "entryCount": 199,
   "entries": {
     "hook:session-start": {
@@ -11,7 +11,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/session-start.sh",
-      "contentHash": "aa88c10ba4816114371a58fa15df8d18a92580fbb861c2c3007cab4a85d5e4d2",
+      "contentHash": "b8227d4a75bfe3ca1a9d0fee53580167a5dbc4e67fe458af11ae66aed1a1d0a0",
       "since": "2025-01-01"
     },
     "hook:dangerous-command-guard": {
@@ -20,7 +20,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/dangerous-command-guard.sh",
-      "contentHash": "aa88c10ba4816114371a58fa15df8d18a92580fbb861c2c3007cab4a85d5e4d2",
+      "contentHash": "b8227d4a75bfe3ca1a9d0fee53580167a5dbc4e67fe458af11ae66aed1a1d0a0",
       "since": "2025-01-01"
     },
     "hook:grounding-before-messaging": {
@@ -29,7 +29,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/grounding-before-messaging.sh",
-      "contentHash": "aa88c10ba4816114371a58fa15df8d18a92580fbb861c2c3007cab4a85d5e4d2",
+      "contentHash": "b8227d4a75bfe3ca1a9d0fee53580167a5dbc4e67fe458af11ae66aed1a1d0a0",
       "since": "2025-01-01"
     },
     "hook:compaction-recovery": {
@@ -38,7 +38,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/compaction-recovery.sh",
-      "contentHash": "aa88c10ba4816114371a58fa15df8d18a92580fbb861c2c3007cab4a85d5e4d2",
+      "contentHash": "b8227d4a75bfe3ca1a9d0fee53580167a5dbc4e67fe458af11ae66aed1a1d0a0",
       "since": "2025-01-01"
     },
     "hook:external-operation-gate": {
@@ -47,7 +47,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-operation-gate.js",
-      "contentHash": "aa88c10ba4816114371a58fa15df8d18a92580fbb861c2c3007cab4a85d5e4d2",
+      "contentHash": "b8227d4a75bfe3ca1a9d0fee53580167a5dbc4e67fe458af11ae66aed1a1d0a0",
       "since": "2025-01-01"
     },
     "hook:deferral-detector": {
@@ -56,7 +56,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/deferral-detector.js",
-      "contentHash": "aa88c10ba4816114371a58fa15df8d18a92580fbb861c2c3007cab4a85d5e4d2",
+      "contentHash": "b8227d4a75bfe3ca1a9d0fee53580167a5dbc4e67fe458af11ae66aed1a1d0a0",
       "since": "2025-01-01"
     },
     "hook:self-stop-guard": {
@@ -65,7 +65,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/self-stop-guard.js",
-      "contentHash": "aa88c10ba4816114371a58fa15df8d18a92580fbb861c2c3007cab4a85d5e4d2",
+      "contentHash": "b8227d4a75bfe3ca1a9d0fee53580167a5dbc4e67fe458af11ae66aed1a1d0a0",
       "since": "2025-01-01"
     },
     "hook:post-action-reflection": {
@@ -74,7 +74,7 @@
       "domain": "evolution",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/post-action-reflection.js",
-      "contentHash": "aa88c10ba4816114371a58fa15df8d18a92580fbb861c2c3007cab4a85d5e4d2",
+      "contentHash": "b8227d4a75bfe3ca1a9d0fee53580167a5dbc4e67fe458af11ae66aed1a1d0a0",
       "since": "2025-01-01"
     },
     "hook:external-communication-guard": {
@@ -83,7 +83,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-communication-guard.js",
-      "contentHash": "aa88c10ba4816114371a58fa15df8d18a92580fbb861c2c3007cab4a85d5e4d2",
+      "contentHash": "b8227d4a75bfe3ca1a9d0fee53580167a5dbc4e67fe458af11ae66aed1a1d0a0",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-collector": {
@@ -92,7 +92,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-collector.js",
-      "contentHash": "aa88c10ba4816114371a58fa15df8d18a92580fbb861c2c3007cab4a85d5e4d2",
+      "contentHash": "b8227d4a75bfe3ca1a9d0fee53580167a5dbc4e67fe458af11ae66aed1a1d0a0",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-checkpoint": {
@@ -101,7 +101,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-checkpoint.js",
-      "contentHash": "aa88c10ba4816114371a58fa15df8d18a92580fbb861c2c3007cab4a85d5e4d2",
+      "contentHash": "b8227d4a75bfe3ca1a9d0fee53580167a5dbc4e67fe458af11ae66aed1a1d0a0",
       "since": "2025-01-01"
     },
     "hook:free-text-guard": {
@@ -110,7 +110,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/free-text-guard.sh",
-      "contentHash": "aa88c10ba4816114371a58fa15df8d18a92580fbb861c2c3007cab4a85d5e4d2",
+      "contentHash": "b8227d4a75bfe3ca1a9d0fee53580167a5dbc4e67fe458af11ae66aed1a1d0a0",
       "since": "2025-01-01"
     },
     "hook:claim-intercept": {
@@ -119,7 +119,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept.js",
-      "contentHash": "aa88c10ba4816114371a58fa15df8d18a92580fbb861c2c3007cab4a85d5e4d2",
+      "contentHash": "b8227d4a75bfe3ca1a9d0fee53580167a5dbc4e67fe458af11ae66aed1a1d0a0",
       "since": "2025-01-01"
     },
     "hook:claim-intercept-response": {
@@ -128,7 +128,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept-response.js",
-      "contentHash": "aa88c10ba4816114371a58fa15df8d18a92580fbb861c2c3007cab4a85d5e4d2",
+      "contentHash": "b8227d4a75bfe3ca1a9d0fee53580167a5dbc4e67fe458af11ae66aed1a1d0a0",
       "since": "2025-01-01"
     },
     "hook:stop-gate-router": {
@@ -137,7 +137,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/stop-gate-router.js",
-      "contentHash": "aa88c10ba4816114371a58fa15df8d18a92580fbb861c2c3007cab4a85d5e4d2",
+      "contentHash": "b8227d4a75bfe3ca1a9d0fee53580167a5dbc4e67fe458af11ae66aed1a1d0a0",
       "since": "2025-01-01"
     },
     "hook:auto-approve-permissions": {
@@ -146,7 +146,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/auto-approve-permissions.js",
-      "contentHash": "aa88c10ba4816114371a58fa15df8d18a92580fbb861c2c3007cab4a85d5e4d2",
+      "contentHash": "b8227d4a75bfe3ca1a9d0fee53580167a5dbc4e67fe458af11ae66aed1a1d0a0",
       "since": "2025-01-01"
     },
     "job:health-check": {
@@ -1538,7 +1538,7 @@
       "type": "subsystem",
       "domain": "updates",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
-      "contentHash": "aa88c10ba4816114371a58fa15df8d18a92580fbb861c2c3007cab4a85d5e4d2",
+      "contentHash": "b8227d4a75bfe3ca1a9d0fee53580167a5dbc4e67fe458af11ae66aed1a1d0a0",
       "since": "2025-01-01"
     },
     "subsystem:scheduler": {

package/upgrades/1.3.355.md

@@ -0,0 +1,45 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+Fixed a false-positive in context-exhaustion detection that could flood a topic with
+duplicate "conversation too long" notices. The detector (`detectContextExhaustion`)
+matched the bare phrase "conversation too long" anywhere in a session's terminal
+output, with no check that it was an actual CLI error versus ordinary content. A
+session that merely discussed the failure mode — or the recovery notice the detector
+itself emits ("Session hit 'conversation too long'…") — re-tripped detection, and
+because the notice text re-enters the pane, one false positive amplified into a flood
+of duplicate notices and spurious respawns on a perfectly healthy session.
+
+The detector now requires the real CLI error framing — the "Press esc twice…" hint or
+an "error during compaction" line — for the bare phrase to count. The bare phrase
+alone is treated as content. Real exhaustion errors always carry that framing, so
+genuine recovery is unaffected; the self-amplifying flood and the content
+false-positive are both eliminated.
+
+## What to Tell Your User
+
+If you ever saw a burst of repeated "conversation too long" messages while your
+session was actually working fine, that was a false alarm — now fixed. Real
+out-of-room recovery still works exactly as before. Nothing for you to do.
+
+## Summary of New Capabilities
+
+- Context-exhaustion detection no longer fires on the phrase appearing as content or
+  in its own recovery notice — it requires the real CLI error framing.
+- Eliminates the self-amplifying "conversation too long" notice flood.
+- No behavior change for genuine context-exhaustion recovery.
+
+## Evidence
+
+- Unit (`tests/unit/context-exhaustion-recovery.test.ts`): real framed error detected;
+  bare phrase rejected; recovery-notice text rejected; agent narration rejected; a
+  mixed pane (narration + real framed error) still detected. 31 passing.
+- Unit (`tests/unit/presence-proxy-context-exhaustion.test.ts`): standby detection on
+  realistic framed snapshots; non-error content not detected. 14 passing.
+- SessionRecovery recovery-behavior tests updated to realistic framed fixtures and
+  still green (recovery still triggers on real exhaustion).
+- Full typecheck clean.

package/upgrades/1.3.356.md

@@ -0,0 +1,38 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+The `session-start` hook now injects the verified `<topic-operator>` block at
+session boot (Know Your Principal standard, security-build increment 2c). It
+fetches `/topic-operator/session-context?topicId=$INSTAR_TELEGRAM_TOPIC` (the route
+shipped in #906) and, when the topic has a verified operator, hands the agent a
+short block naming that operator — so the agent reasons with its authenticated
+principal from message one. This is the READ side of the operator binding; it
+cannot itself seat anyone (the store established the operator only from the
+platform-verified sender).
+
+## What to Tell Your User
+
+Nothing user-facing changes. Foundation wiring (experimental) for the Caroline
+identity-bleed security fix: the agent now SEES its verified operator at session
+start when one is bound, but no conversational behavior changes and nothing is
+gated. Auto-binding on inbound and the cross-principal guard are later increments.
+
+## Summary of New Capabilities
+
+- Session-start injection of the `<topic-operator>` block (fail-open: no topic /
+  unbound topic / store unavailable → nothing injected). Reaches existing agents
+  automatically — the `instar/` session-start hook is rewritten on every update.
+
+## Evidence
+
+Verified by 3 Tier-3 E2E lifecycle tests
+(`tests/e2e/topic-operator-hook-injection-lifecycle.test.ts`): Phase 1 asserts the
+generated hook source wires the fetch; Phase 2 extracts the exact block and runs
+it against a live server, proving it emits the `<topic-operator>` block when a
+topic is bound and nothing when unbound. The analog hook suites
+(PostUpdateMigrator-bootSelfKnowledge, migration-parity-hooks,
+OrgIntentManager-session-start-format) stay green. Clean `tsc --noEmit`.

package/upgrades/side-effects/context-exhaustion-false-positive.md

@@ -0,0 +1,62 @@
+# Side-effects review — context-exhaustion false-positive fix
+
+**Change:** `detectContextExhaustion` (QuotaExhaustionDetector) now requires the
+real CLI error framing ("press esc twice" or "error during compaction") for the
+bare "conversation (is) too long" phrase. The bare phrase as content no longer
+matches.
+
+**Signal vs authority (Phase 1):** This IS a decision point — the detector's verdict
+gates a destructive action (SessionMonitor kills + respawns the session and notifies
+the user). It is a SIGNAL feeding the SessionMonitor authority; this change makes the
+signal correct, it does not add or move authority. The fix narrows a brittle
+substring match that was producing false positives with blocking-equivalent
+consequences (forced respawns + user notices) — exactly the "brittle check with
+real-world authority" failure `docs/signal-vs-authority.md` warns about.
+
+1. **Over-block (false positive — the bug):** FIXED. Before, the bare phrase as
+   content (a session discussing the failure mode, a quoted error, or the recovery
+   notice itself) was flagged as live exhaustion → spurious respawn + user notice,
+   self-amplifying into a flood (RUN-2 2026-06-06, topic 13435, ~27 notices on a
+   healthy session). Now the bare phrase without CLI framing is not matched.
+
+2. **Under-block (could a REAL error now be missed?):** No real loss. Every
+   realistic exhaustion fixture in the unit tests carries the CLI framing ("press
+   esc twice" and/or "error during compaction") — that is how Claude Code actually
+   renders the error. The guard only removes matches that lack any framing, which
+   are content, not live errors. Residual: if a future Claude Code version renders
+   the error WITHOUT the esc hint or compaction line, it would be missed — the frame
+   list is a one-line extension and is documented as the tuning point.
+
+3. **Level-of-abstraction fit:** Correct layer. The fix is in the detector (the pure
+   function that decides), not in SessionMonitor (the actor). One change fixes every
+   consumer (SessionMonitor, PresenceProxy standby). The soft, non-phrase patterns
+   (context limit, token limit) are deliberately left unchanged — they are not the
+   observed bug and gating them risks under-detection; scoped to the live bug, not
+   a hypothetical.
+
+4. **Signal vs authority compliance:** Compliant. Detector stays a signal; the fix
+   reduces its false-positive rate without changing where authority lives.
+
+5. **Interactions:** The same `detectContextExhaustion` feeds SessionMonitor's
+   proactive check and PresenceProxy. Both now benefit. The self-amplification path
+   (recovery notice → pane → re-detect) is closed because the notice lacks CLI
+   framing. classifySessionDeath (the POST-death classifier) shares the bare-phrase
+   pattern but runs on a dead session's final output where the flood/respawn harm
+   does not apply; left as-is to keep this fix scoped to the live false-positive
+   (noted as a known sibling, not a deferral of THIS bug).
+
+6. **External surfaces:** Reduces user-facing noise (fewer false "conversation too
+   long" notices). No API/schema change. Behavior depends on tmux pane content,
+   which is what it already read; no new timing/runtime dependence.
+
+7. **Rollback cost:** Trivial — revert the commit. Pure-function change, no data
+   migration, no state. Worst case on revert is the original false-positive returns.
+
+**Tier:** 1 (a guard added to one pure function + realistic test fixtures; no route,
+no migration, no persistent state). No CLAUDE.md template change: this is an internal
+detector hardening, not a new agent-invocable capability.
+
+**No deferrals:** the fix is complete — detector guard + both-sides unit coverage
+(real-error-detected, bare-phrase-rejected, recovery-notice-rejected, narration-
+rejected, mixed-pane-still-detected) + updated realistic fixtures. classifySessionDeath
+is a distinct surface (post-death), not a withheld part of this fix.

package/upgrades/side-effects/topic-operator-hook-injection-inc2c.md

@@ -0,0 +1,79 @@
+# Side-effects review — Topic Operator session-start injection (Know Your Principal #898, increment 2c)
+
+## What this change does
+Adds one fetch-block to the generated `session-start` hook
+(`PostUpdateMigrator.getHookContent('session-start')`) that injects the
+`<topic-operator>` block at session boot — the READ side of the operator binding
+shipped in #904 (store) and #906 (routes). When a topic has a verified operator,
+the agent now reasons with it from message one.
+
+## Blast radius
+- **One template string edit, additive.** The block is appended after the
+  existing ORG-INTENT and AUTO-LEARNED-PREFERENCES injection blocks and before the
+  SESSION-BOOT-SELF-KNOWLEDGE block — modeled byte-for-byte on those two
+  precedents (same `curl -sf --max-time 4` + `python3` present/block parse + echo).
+- **Fail-open, three guards.** The block only runs when `$INSTAR_TELEGRAM_TOPIC`
+  AND `$PORT` AND `$TOKEN` are all set. `curl -sf` emits nothing on any non-2xx
+  (route 503 when the store is unavailable, or `{present:false}` for an unbound
+  topic), so an unbound topic or an old server injects nothing — the session
+  continues normally. A non-Telegram session (no topic env) skips entirely.
+- **No new route, class, config key, or dependency.** It consumes the
+  `/topic-operator/session-context` route that already shipped in #906.
+- **Bearer token stays in the header** (never the URL/query), matching the other
+  injection blocks.
+
+## The security property
+The injected block names the operator established ONLY from the platform-verified
+sender id (the store guarantees this by construction — #904). The hook merely
+surfaces that verified binding; it cannot itself seat anyone. So this read-side
+change cannot introduce a Caroline-class identity bleed — it can only make the
+ALREADY-verified operator visible to the agent at boot.
+
+## Compaction parity (constitutional)
+The same fetch is ALSO wired into `getCompactionRecovery()` — its compaction twin —
+so the verified operator is re-injected after a context reset, not presumed to
+survive in the compaction summary (the `session-context-compaction-parity` standard
+from PR #811, enforced by `tests/unit/session-context-compaction-parity.test.ts`).
+This is thematically load-bearing for Know Your Principal: an agent that loses its
+verified-operator awareness post-compaction is exactly the identity gap this feature
+closes. The twin block mirrors the SESSION-BOOT-SELF-KNOWLEDGE re-injection
+precedent (own `TOPIC_OP_PORT`/`TOPIC_OP_TOKEN` resolution, same fail-open contract),
+and the injector is NOT added to the parity allowlist (the allowlist only shrinks).
+
+## Migration parity
+The `session-start` hook lives in the always-overwritten `instar/` hook set:
+`migrateHooks()` rewrites `hooks/instar/session-start.sh` from
+`getSessionStartHook()` on EVERY update run (PostUpdateMigrator.ts:1958). So this
+block reaches existing agents automatically on their next update — no dedicated
+migration needed, and the migration-parity-hooks unit suite stays green.
+
+## Agent awareness (deliberately deferred)
+No CLAUDE.md template section is added in this increment. The injected
+`<topic-operator>` block is self-describing (it carries its own "do not attribute
+to any other name" instruction), and the governing behavior is already in the
+ratified #898 "Know Your Principal" constitution standard. The operator-binding
+feature's agent-awareness capability section will be added ONCE, as a coherent
+whole, when the feature is end-to-end (after the Inc-2d inbound auto-bind and the
+Inc-3 guard) — rather than fragmenting it across increments. The feature-delivery
+and docs-coverage gates pass without it.
+
+## Framework generality
+Framework-agnostic. The block is emitted into the generic session-start hook that
+every framework's session runs; the `<topic-operator>` payload is plain text any
+harness injects. The topic is resolved from `$INSTAR_TELEGRAM_TOPIC`, the same env
+the existing topic-context block uses — not coupled to Claude Code, Codex, or
+Gemini.
+
+## Tests
+- Tier 3 (E2E): `tests/e2e/topic-operator-hook-injection-lifecycle.test.ts` (3) —
+  Phase 1 asserts the generated hook SOURCE wires the fetch; Phase 2 extracts the
+  exact block and runs it against a LIVE server, proving it emits the
+  `<topic-operator>` block when a topic is bound and nothing when unbound.
+- Tier 1/2 for the store + route shipped in #904/#906; the analog hook suites
+  (PostUpdateMigrator-bootSelfKnowledge, migration-parity-hooks,
+  OrgIntentManager-session-start-format) stay green.
+
+## Rollback
+Revert the single template-string block in PostUpdateMigrator.ts + delete the E2E
+test. The next update rewrites the hook without the block; nothing else depends
+on it.

package/upgrades/topic-operator-hook-injection-inc2c.eli16.md

@@ -0,0 +1,47 @@
+# ELI16 — Telling the agent who its boss is, the moment it wakes up
+
+## The one-sentence version
+When the agent starts a conversation, it now gets handed a little note that says
+"the verified boss of this chat is X" — so it knows from the very first message
+who it's working for, instead of guessing from names it reads later.
+
+## The backstory
+We've been fixing a real problem: an agent on a shared computer slowly started
+treating a *different real person* (call her Caroline) as its boss, because the
+mix-up lived inside the agent's own writing where nothing was watching. To fix it
+we built three pieces:
+
+1. A filing cabinet (`TopicOperatorStore`) that remembers, per conversation, who
+   the verified boss is — and the rule is strict: the boss is decided ONLY by the
+   verified ID of whoever actually sent the message, never by a name typed in a
+   document.
+2. Four web endpoints to read and set that binding (shipped last step).
+3. **This step:** actually handing the agent that "who's your boss" note at the
+   start of every conversation.
+
+## What this change adds
+At session start, the agent already gets handed a few notes — the company's rules,
+the preferences it has learned about you, and so on. This change adds one more
+note to that pile: it quietly asks the server "who's the verified boss of this
+chat?" and, if there's an answer, prints a short block telling the agent. The
+block also reminds the agent: don't ever swap in some other name you happen to
+read — an unfamiliar name in the boss's chair is a question to resolve, not a fact
+to accept.
+
+## Why it's safe
+- It only **adds** a note; it changes nothing else about how sessions start.
+- It's careful: it only runs if there's actually a chat topic and the server is
+  reachable. If the server can't answer, or nobody's been set as boss yet, it
+  prints nothing and the session goes on exactly as before.
+- It can't *make* anyone the boss — it only shows the boss who was already
+  verified the safe way. So there's no way for this to repeat the Caroline mix-up.
+- Every agent gets it automatically the next time it updates, because this note
+  lives in the startup script that always gets refreshed on update.
+
+## What's still coming
+Right now a boss gets recorded either by a one-time manual call, or — in the next
+step — automatically whenever the verified boss sends a message. After that, a
+final step will let the agent's own safety checker USE this binding to catch
+itself if it ever credits a decision to the wrong person. This step is the
+"agent can SEE its boss" piece; the "agent gets corrected if it forgets" piece
+comes next.