instar 1.3.355 → 1.3.357

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.355",
+  "version": "1.3.357",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-06-06T08:02:23.000Z",
-  "instarVersion": "1.3.355",
+  "generatedAt": "2026-06-06T08:26:56.471Z",
+  "instarVersion": "1.3.357",
   "entryCount": 199,
   "entries": {
     "hook:session-start": {
@@ -11,7 +11,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/session-start.sh",
-      "contentHash": "aa88c10ba4816114371a58fa15df8d18a92580fbb861c2c3007cab4a85d5e4d2",
+      "contentHash": "b8227d4a75bfe3ca1a9d0fee53580167a5dbc4e67fe458af11ae66aed1a1d0a0",
       "since": "2025-01-01"
     },
     "hook:dangerous-command-guard": {
@@ -20,7 +20,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/dangerous-command-guard.sh",
-      "contentHash": "aa88c10ba4816114371a58fa15df8d18a92580fbb861c2c3007cab4a85d5e4d2",
+      "contentHash": "b8227d4a75bfe3ca1a9d0fee53580167a5dbc4e67fe458af11ae66aed1a1d0a0",
       "since": "2025-01-01"
     },
     "hook:grounding-before-messaging": {
@@ -29,7 +29,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/grounding-before-messaging.sh",
-      "contentHash": "aa88c10ba4816114371a58fa15df8d18a92580fbb861c2c3007cab4a85d5e4d2",
+      "contentHash": "b8227d4a75bfe3ca1a9d0fee53580167a5dbc4e67fe458af11ae66aed1a1d0a0",
       "since": "2025-01-01"
     },
     "hook:compaction-recovery": {
@@ -38,7 +38,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/compaction-recovery.sh",
-      "contentHash": "aa88c10ba4816114371a58fa15df8d18a92580fbb861c2c3007cab4a85d5e4d2",
+      "contentHash": "b8227d4a75bfe3ca1a9d0fee53580167a5dbc4e67fe458af11ae66aed1a1d0a0",
       "since": "2025-01-01"
     },
     "hook:external-operation-gate": {
@@ -47,7 +47,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-operation-gate.js",
-      "contentHash": "aa88c10ba4816114371a58fa15df8d18a92580fbb861c2c3007cab4a85d5e4d2",
+      "contentHash": "b8227d4a75bfe3ca1a9d0fee53580167a5dbc4e67fe458af11ae66aed1a1d0a0",
       "since": "2025-01-01"
     },
     "hook:deferral-detector": {
@@ -56,7 +56,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/deferral-detector.js",
-      "contentHash": "aa88c10ba4816114371a58fa15df8d18a92580fbb861c2c3007cab4a85d5e4d2",
+      "contentHash": "b8227d4a75bfe3ca1a9d0fee53580167a5dbc4e67fe458af11ae66aed1a1d0a0",
       "since": "2025-01-01"
     },
     "hook:self-stop-guard": {
@@ -65,7 +65,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/self-stop-guard.js",
-      "contentHash": "aa88c10ba4816114371a58fa15df8d18a92580fbb861c2c3007cab4a85d5e4d2",
+      "contentHash": "b8227d4a75bfe3ca1a9d0fee53580167a5dbc4e67fe458af11ae66aed1a1d0a0",
       "since": "2025-01-01"
     },
     "hook:post-action-reflection": {
@@ -74,7 +74,7 @@
       "domain": "evolution",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/post-action-reflection.js",
-      "contentHash": "aa88c10ba4816114371a58fa15df8d18a92580fbb861c2c3007cab4a85d5e4d2",
+      "contentHash": "b8227d4a75bfe3ca1a9d0fee53580167a5dbc4e67fe458af11ae66aed1a1d0a0",
       "since": "2025-01-01"
     },
     "hook:external-communication-guard": {
@@ -83,7 +83,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-communication-guard.js",
-      "contentHash": "aa88c10ba4816114371a58fa15df8d18a92580fbb861c2c3007cab4a85d5e4d2",
+      "contentHash": "b8227d4a75bfe3ca1a9d0fee53580167a5dbc4e67fe458af11ae66aed1a1d0a0",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-collector": {
@@ -92,7 +92,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-collector.js",
-      "contentHash": "aa88c10ba4816114371a58fa15df8d18a92580fbb861c2c3007cab4a85d5e4d2",
+      "contentHash": "b8227d4a75bfe3ca1a9d0fee53580167a5dbc4e67fe458af11ae66aed1a1d0a0",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-checkpoint": {
@@ -101,7 +101,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-checkpoint.js",
-      "contentHash": "aa88c10ba4816114371a58fa15df8d18a92580fbb861c2c3007cab4a85d5e4d2",
+      "contentHash": "b8227d4a75bfe3ca1a9d0fee53580167a5dbc4e67fe458af11ae66aed1a1d0a0",
       "since": "2025-01-01"
     },
     "hook:free-text-guard": {
@@ -110,7 +110,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/free-text-guard.sh",
-      "contentHash": "aa88c10ba4816114371a58fa15df8d18a92580fbb861c2c3007cab4a85d5e4d2",
+      "contentHash": "b8227d4a75bfe3ca1a9d0fee53580167a5dbc4e67fe458af11ae66aed1a1d0a0",
       "since": "2025-01-01"
     },
     "hook:claim-intercept": {
@@ -119,7 +119,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept.js",
-      "contentHash": "aa88c10ba4816114371a58fa15df8d18a92580fbb861c2c3007cab4a85d5e4d2",
+      "contentHash": "b8227d4a75bfe3ca1a9d0fee53580167a5dbc4e67fe458af11ae66aed1a1d0a0",
       "since": "2025-01-01"
     },
     "hook:claim-intercept-response": {
@@ -128,7 +128,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept-response.js",
-      "contentHash": "aa88c10ba4816114371a58fa15df8d18a92580fbb861c2c3007cab4a85d5e4d2",
+      "contentHash": "b8227d4a75bfe3ca1a9d0fee53580167a5dbc4e67fe458af11ae66aed1a1d0a0",
       "since": "2025-01-01"
     },
     "hook:stop-gate-router": {
@@ -137,7 +137,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/stop-gate-router.js",
-      "contentHash": "aa88c10ba4816114371a58fa15df8d18a92580fbb861c2c3007cab4a85d5e4d2",
+      "contentHash": "b8227d4a75bfe3ca1a9d0fee53580167a5dbc4e67fe458af11ae66aed1a1d0a0",
       "since": "2025-01-01"
     },
     "hook:auto-approve-permissions": {
@@ -146,7 +146,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/auto-approve-permissions.js",
-      "contentHash": "aa88c10ba4816114371a58fa15df8d18a92580fbb861c2c3007cab4a85d5e4d2",
+      "contentHash": "b8227d4a75bfe3ca1a9d0fee53580167a5dbc4e67fe458af11ae66aed1a1d0a0",
       "since": "2025-01-01"
     },
     "job:health-check": {
@@ -418,7 +418,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "dd4e2aa5edf9df31d6193e61f9b36f739282b4403c52c5ae73a218ae09c67e9d",
+      "contentHash": "1256daa92d8ec5e17f975580bb076fa2c451cbd7db03b36ae3c4a929837adac4",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -426,7 +426,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "dd4e2aa5edf9df31d6193e61f9b36f739282b4403c52c5ae73a218ae09c67e9d",
+      "contentHash": "1256daa92d8ec5e17f975580bb076fa2c451cbd7db03b36ae3c4a929837adac4",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -434,7 +434,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "dd4e2aa5edf9df31d6193e61f9b36f739282b4403c52c5ae73a218ae09c67e9d",
+      "contentHash": "1256daa92d8ec5e17f975580bb076fa2c451cbd7db03b36ae3c4a929837adac4",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -442,7 +442,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "dd4e2aa5edf9df31d6193e61f9b36f739282b4403c52c5ae73a218ae09c67e9d",
+      "contentHash": "1256daa92d8ec5e17f975580bb076fa2c451cbd7db03b36ae3c4a929837adac4",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -450,7 +450,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "dd4e2aa5edf9df31d6193e61f9b36f739282b4403c52c5ae73a218ae09c67e9d",
+      "contentHash": "1256daa92d8ec5e17f975580bb076fa2c451cbd7db03b36ae3c4a929837adac4",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -458,7 +458,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "dd4e2aa5edf9df31d6193e61f9b36f739282b4403c52c5ae73a218ae09c67e9d",
+      "contentHash": "1256daa92d8ec5e17f975580bb076fa2c451cbd7db03b36ae3c4a929837adac4",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -466,7 +466,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "dd4e2aa5edf9df31d6193e61f9b36f739282b4403c52c5ae73a218ae09c67e9d",
+      "contentHash": "1256daa92d8ec5e17f975580bb076fa2c451cbd7db03b36ae3c4a929837adac4",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -474,7 +474,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "dd4e2aa5edf9df31d6193e61f9b36f739282b4403c52c5ae73a218ae09c67e9d",
+      "contentHash": "1256daa92d8ec5e17f975580bb076fa2c451cbd7db03b36ae3c4a929837adac4",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -482,7 +482,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "dd4e2aa5edf9df31d6193e61f9b36f739282b4403c52c5ae73a218ae09c67e9d",
+      "contentHash": "1256daa92d8ec5e17f975580bb076fa2c451cbd7db03b36ae3c4a929837adac4",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -490,7 +490,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "dd4e2aa5edf9df31d6193e61f9b36f739282b4403c52c5ae73a218ae09c67e9d",
+      "contentHash": "1256daa92d8ec5e17f975580bb076fa2c451cbd7db03b36ae3c4a929837adac4",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -498,7 +498,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "dd4e2aa5edf9df31d6193e61f9b36f739282b4403c52c5ae73a218ae09c67e9d",
+      "contentHash": "1256daa92d8ec5e17f975580bb076fa2c451cbd7db03b36ae3c4a929837adac4",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -506,7 +506,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "dd4e2aa5edf9df31d6193e61f9b36f739282b4403c52c5ae73a218ae09c67e9d",
+      "contentHash": "1256daa92d8ec5e17f975580bb076fa2c451cbd7db03b36ae3c4a929837adac4",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -514,7 +514,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "dd4e2aa5edf9df31d6193e61f9b36f739282b4403c52c5ae73a218ae09c67e9d",
+      "contentHash": "1256daa92d8ec5e17f975580bb076fa2c451cbd7db03b36ae3c4a929837adac4",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -522,7 +522,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "dd4e2aa5edf9df31d6193e61f9b36f739282b4403c52c5ae73a218ae09c67e9d",
+      "contentHash": "1256daa92d8ec5e17f975580bb076fa2c451cbd7db03b36ae3c4a929837adac4",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -530,7 +530,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "dd4e2aa5edf9df31d6193e61f9b36f739282b4403c52c5ae73a218ae09c67e9d",
+      "contentHash": "1256daa92d8ec5e17f975580bb076fa2c451cbd7db03b36ae3c4a929837adac4",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -538,7 +538,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "dd4e2aa5edf9df31d6193e61f9b36f739282b4403c52c5ae73a218ae09c67e9d",
+      "contentHash": "1256daa92d8ec5e17f975580bb076fa2c451cbd7db03b36ae3c4a929837adac4",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -546,7 +546,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "dd4e2aa5edf9df31d6193e61f9b36f739282b4403c52c5ae73a218ae09c67e9d",
+      "contentHash": "1256daa92d8ec5e17f975580bb076fa2c451cbd7db03b36ae3c4a929837adac4",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -554,7 +554,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "dd4e2aa5edf9df31d6193e61f9b36f739282b4403c52c5ae73a218ae09c67e9d",
+      "contentHash": "1256daa92d8ec5e17f975580bb076fa2c451cbd7db03b36ae3c4a929837adac4",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -562,7 +562,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "dd4e2aa5edf9df31d6193e61f9b36f739282b4403c52c5ae73a218ae09c67e9d",
+      "contentHash": "1256daa92d8ec5e17f975580bb076fa2c451cbd7db03b36ae3c4a929837adac4",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -570,7 +570,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "dd4e2aa5edf9df31d6193e61f9b36f739282b4403c52c5ae73a218ae09c67e9d",
+      "contentHash": "1256daa92d8ec5e17f975580bb076fa2c451cbd7db03b36ae3c4a929837adac4",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -578,7 +578,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "dd4e2aa5edf9df31d6193e61f9b36f739282b4403c52c5ae73a218ae09c67e9d",
+      "contentHash": "1256daa92d8ec5e17f975580bb076fa2c451cbd7db03b36ae3c4a929837adac4",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -586,7 +586,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "dd4e2aa5edf9df31d6193e61f9b36f739282b4403c52c5ae73a218ae09c67e9d",
+      "contentHash": "1256daa92d8ec5e17f975580bb076fa2c451cbd7db03b36ae3c4a929837adac4",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -594,7 +594,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "dd4e2aa5edf9df31d6193e61f9b36f739282b4403c52c5ae73a218ae09c67e9d",
+      "contentHash": "1256daa92d8ec5e17f975580bb076fa2c451cbd7db03b36ae3c4a929837adac4",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -602,7 +602,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "dd4e2aa5edf9df31d6193e61f9b36f739282b4403c52c5ae73a218ae09c67e9d",
+      "contentHash": "1256daa92d8ec5e17f975580bb076fa2c451cbd7db03b36ae3c4a929837adac4",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -610,7 +610,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "dd4e2aa5edf9df31d6193e61f9b36f739282b4403c52c5ae73a218ae09c67e9d",
+      "contentHash": "1256daa92d8ec5e17f975580bb076fa2c451cbd7db03b36ae3c4a929837adac4",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -618,7 +618,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "dd4e2aa5edf9df31d6193e61f9b36f739282b4403c52c5ae73a218ae09c67e9d",
+      "contentHash": "1256daa92d8ec5e17f975580bb076fa2c451cbd7db03b36ae3c4a929837adac4",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -626,7 +626,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "dd4e2aa5edf9df31d6193e61f9b36f739282b4403c52c5ae73a218ae09c67e9d",
+      "contentHash": "1256daa92d8ec5e17f975580bb076fa2c451cbd7db03b36ae3c4a929837adac4",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -634,7 +634,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "dd4e2aa5edf9df31d6193e61f9b36f739282b4403c52c5ae73a218ae09c67e9d",
+      "contentHash": "1256daa92d8ec5e17f975580bb076fa2c451cbd7db03b36ae3c4a929837adac4",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -642,7 +642,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "dd4e2aa5edf9df31d6193e61f9b36f739282b4403c52c5ae73a218ae09c67e9d",
+      "contentHash": "1256daa92d8ec5e17f975580bb076fa2c451cbd7db03b36ae3c4a929837adac4",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -650,7 +650,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "dd4e2aa5edf9df31d6193e61f9b36f739282b4403c52c5ae73a218ae09c67e9d",
+      "contentHash": "1256daa92d8ec5e17f975580bb076fa2c451cbd7db03b36ae3c4a929837adac4",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -658,7 +658,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "dd4e2aa5edf9df31d6193e61f9b36f739282b4403c52c5ae73a218ae09c67e9d",
+      "contentHash": "1256daa92d8ec5e17f975580bb076fa2c451cbd7db03b36ae3c4a929837adac4",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -666,7 +666,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "dd4e2aa5edf9df31d6193e61f9b36f739282b4403c52c5ae73a218ae09c67e9d",
+      "contentHash": "1256daa92d8ec5e17f975580bb076fa2c451cbd7db03b36ae3c4a929837adac4",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -674,7 +674,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "dd4e2aa5edf9df31d6193e61f9b36f739282b4403c52c5ae73a218ae09c67e9d",
+      "contentHash": "1256daa92d8ec5e17f975580bb076fa2c451cbd7db03b36ae3c4a929837adac4",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -682,7 +682,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "dd4e2aa5edf9df31d6193e61f9b36f739282b4403c52c5ae73a218ae09c67e9d",
+      "contentHash": "1256daa92d8ec5e17f975580bb076fa2c451cbd7db03b36ae3c4a929837adac4",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -690,7 +690,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "dd4e2aa5edf9df31d6193e61f9b36f739282b4403c52c5ae73a218ae09c67e9d",
+      "contentHash": "1256daa92d8ec5e17f975580bb076fa2c451cbd7db03b36ae3c4a929837adac4",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -698,7 +698,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "dd4e2aa5edf9df31d6193e61f9b36f739282b4403c52c5ae73a218ae09c67e9d",
+      "contentHash": "1256daa92d8ec5e17f975580bb076fa2c451cbd7db03b36ae3c4a929837adac4",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -706,7 +706,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "dd4e2aa5edf9df31d6193e61f9b36f739282b4403c52c5ae73a218ae09c67e9d",
+      "contentHash": "1256daa92d8ec5e17f975580bb076fa2c451cbd7db03b36ae3c4a929837adac4",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -714,7 +714,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "dd4e2aa5edf9df31d6193e61f9b36f739282b4403c52c5ae73a218ae09c67e9d",
+      "contentHash": "1256daa92d8ec5e17f975580bb076fa2c451cbd7db03b36ae3c4a929837adac4",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -722,7 +722,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "dd4e2aa5edf9df31d6193e61f9b36f739282b4403c52c5ae73a218ae09c67e9d",
+      "contentHash": "1256daa92d8ec5e17f975580bb076fa2c451cbd7db03b36ae3c4a929837adac4",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -730,7 +730,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "dd4e2aa5edf9df31d6193e61f9b36f739282b4403c52c5ae73a218ae09c67e9d",
+      "contentHash": "1256daa92d8ec5e17f975580bb076fa2c451cbd7db03b36ae3c4a929837adac4",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -738,7 +738,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "dd4e2aa5edf9df31d6193e61f9b36f739282b4403c52c5ae73a218ae09c67e9d",
+      "contentHash": "1256daa92d8ec5e17f975580bb076fa2c451cbd7db03b36ae3c4a929837adac4",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -746,7 +746,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "dd4e2aa5edf9df31d6193e61f9b36f739282b4403c52c5ae73a218ae09c67e9d",
+      "contentHash": "1256daa92d8ec5e17f975580bb076fa2c451cbd7db03b36ae3c4a929837adac4",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -754,7 +754,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "dd4e2aa5edf9df31d6193e61f9b36f739282b4403c52c5ae73a218ae09c67e9d",
+      "contentHash": "1256daa92d8ec5e17f975580bb076fa2c451cbd7db03b36ae3c4a929837adac4",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -770,7 +770,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "dd4e2aa5edf9df31d6193e61f9b36f739282b4403c52c5ae73a218ae09c67e9d",
+      "contentHash": "1256daa92d8ec5e17f975580bb076fa2c451cbd7db03b36ae3c4a929837adac4",
       "since": "2025-01-01"
     },
     "cli:init": {
@@ -1538,7 +1538,7 @@
       "type": "subsystem",
       "domain": "updates",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
-      "contentHash": "aa88c10ba4816114371a58fa15df8d18a92580fbb861c2c3007cab4a85d5e4d2",
+      "contentHash": "b8227d4a75bfe3ca1a9d0fee53580167a5dbc4e67fe458af11ae66aed1a1d0a0",
       "since": "2025-01-01"
     },
     "subsystem:scheduler": {

package/upgrades/1.3.356.md

@@ -0,0 +1,38 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+The `session-start` hook now injects the verified `<topic-operator>` block at
+session boot (Know Your Principal standard, security-build increment 2c). It
+fetches `/topic-operator/session-context?topicId=$INSTAR_TELEGRAM_TOPIC` (the route
+shipped in #906) and, when the topic has a verified operator, hands the agent a
+short block naming that operator — so the agent reasons with its authenticated
+principal from message one. This is the READ side of the operator binding; it
+cannot itself seat anyone (the store established the operator only from the
+platform-verified sender).
+
+## What to Tell Your User
+
+Nothing user-facing changes. Foundation wiring (experimental) for the Caroline
+identity-bleed security fix: the agent now SEES its verified operator at session
+start when one is bound, but no conversational behavior changes and nothing is
+gated. Auto-binding on inbound and the cross-principal guard are later increments.
+
+## Summary of New Capabilities
+
+- Session-start injection of the `<topic-operator>` block (fail-open: no topic /
+  unbound topic / store unavailable → nothing injected). Reaches existing agents
+  automatically — the `instar/` session-start hook is rewritten on every update.
+
+## Evidence
+
+Verified by 3 Tier-3 E2E lifecycle tests
+(`tests/e2e/topic-operator-hook-injection-lifecycle.test.ts`): Phase 1 asserts the
+generated hook source wires the fetch; Phase 2 extracts the exact block and runs
+it against a live server, proving it emits the `<topic-operator>` block when a
+topic is bound and nothing when unbound. The analog hook suites
+(PostUpdateMigrator-bootSelfKnowledge, migration-parity-hooks,
+OrgIntentManager-session-start-format) stay green. Clean `tsc --noEmit`.

package/upgrades/1.3.357.md

@@ -0,0 +1,40 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+The verified topic operator is now recorded AUTOMATICALLY (Know Your Principal
+standard, security-build increment 2d — the WRITE side). On the lifeline-forward
+inbound path (`POST /internal/telegram-forward`), a real user message from an
+AUTHENTICATED + AUTHORIZED sender binds that sender as the topic's operator, so
+the session-start hook (#908) injects it without a manual `POST /topic-operator`.
+Added a public `TelegramAdapter.isAuthorizedSender()` (the authorized-only gate)
+wrapping the private `isAuthorized`.
+
+## What to Tell Your User
+
+Nothing user-facing changes. Foundation wiring (experimental) for the Caroline
+identity-bleed security fix: the agent now learns its verified operator on its own
+from authorized inbound messages. ONLY authorized senders are recorded — an
+unauthorized party in the group is never seated as operator. Fail-soft: a bind
+failure never affects message handling.
+
+## Summary of New Capabilities
+
+- Auto-bind of the topic operator on `/internal/telegram-forward` (authorized
+  senders only; a2a bot messages and unauthorized senders never bind; fail-soft;
+  idempotent).
+- `TelegramAdapter.isAuthorizedSender(number|string)` — public read-only auth check.
+- Known gap (tracked for Inc-2e): the adapter long-poll (no-lifeline) path is not
+  yet covered; a no-lifeline install has no auto-bind (fail-safe).
+
+## Evidence
+
+Verified by 5 Tier-1 unit tests (`telegram-isauthorizedsender`: both sides of the
+boundary, number/string ids, blank/NaN guard, no-allowlist model) and 4 Tier-2
+integration tests (`topic-operator-autobind-route`: over the wire — authorized
+binds, unauthorized doesn't, a2a bot doesn't, null store no-op). The 14 existing
+`/internal/telegram-forward` integration tests stay green (no regression). Clean
+`tsc --noEmit`.