instar 1.3.364 → 1.3.366

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.364",
+  "version": "1.3.366",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-06-06T11:07:44.851Z",
-  "instarVersion": "1.3.364",
+  "generatedAt": "2026-06-06T11:42:46.344Z",
+  "instarVersion": "1.3.366",
   "entryCount": 199,
   "entries": {
     "hook:session-start": {
@@ -418,7 +418,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2506a069ef4a5e8040ea751d9ad2cb57a1ef6108a249e2813caa37b3aff448aa",
+      "contentHash": "3621852ccda638fb7453ff9e22739b9bc401b76ee53c67f542b5c6fdd153f79d",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -426,7 +426,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2506a069ef4a5e8040ea751d9ad2cb57a1ef6108a249e2813caa37b3aff448aa",
+      "contentHash": "3621852ccda638fb7453ff9e22739b9bc401b76ee53c67f542b5c6fdd153f79d",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -434,7 +434,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2506a069ef4a5e8040ea751d9ad2cb57a1ef6108a249e2813caa37b3aff448aa",
+      "contentHash": "3621852ccda638fb7453ff9e22739b9bc401b76ee53c67f542b5c6fdd153f79d",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -442,7 +442,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2506a069ef4a5e8040ea751d9ad2cb57a1ef6108a249e2813caa37b3aff448aa",
+      "contentHash": "3621852ccda638fb7453ff9e22739b9bc401b76ee53c67f542b5c6fdd153f79d",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -450,7 +450,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2506a069ef4a5e8040ea751d9ad2cb57a1ef6108a249e2813caa37b3aff448aa",
+      "contentHash": "3621852ccda638fb7453ff9e22739b9bc401b76ee53c67f542b5c6fdd153f79d",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -458,7 +458,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2506a069ef4a5e8040ea751d9ad2cb57a1ef6108a249e2813caa37b3aff448aa",
+      "contentHash": "3621852ccda638fb7453ff9e22739b9bc401b76ee53c67f542b5c6fdd153f79d",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -466,7 +466,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2506a069ef4a5e8040ea751d9ad2cb57a1ef6108a249e2813caa37b3aff448aa",
+      "contentHash": "3621852ccda638fb7453ff9e22739b9bc401b76ee53c67f542b5c6fdd153f79d",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -474,7 +474,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2506a069ef4a5e8040ea751d9ad2cb57a1ef6108a249e2813caa37b3aff448aa",
+      "contentHash": "3621852ccda638fb7453ff9e22739b9bc401b76ee53c67f542b5c6fdd153f79d",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -482,7 +482,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2506a069ef4a5e8040ea751d9ad2cb57a1ef6108a249e2813caa37b3aff448aa",
+      "contentHash": "3621852ccda638fb7453ff9e22739b9bc401b76ee53c67f542b5c6fdd153f79d",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -490,7 +490,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2506a069ef4a5e8040ea751d9ad2cb57a1ef6108a249e2813caa37b3aff448aa",
+      "contentHash": "3621852ccda638fb7453ff9e22739b9bc401b76ee53c67f542b5c6fdd153f79d",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -498,7 +498,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2506a069ef4a5e8040ea751d9ad2cb57a1ef6108a249e2813caa37b3aff448aa",
+      "contentHash": "3621852ccda638fb7453ff9e22739b9bc401b76ee53c67f542b5c6fdd153f79d",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -506,7 +506,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2506a069ef4a5e8040ea751d9ad2cb57a1ef6108a249e2813caa37b3aff448aa",
+      "contentHash": "3621852ccda638fb7453ff9e22739b9bc401b76ee53c67f542b5c6fdd153f79d",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -514,7 +514,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2506a069ef4a5e8040ea751d9ad2cb57a1ef6108a249e2813caa37b3aff448aa",
+      "contentHash": "3621852ccda638fb7453ff9e22739b9bc401b76ee53c67f542b5c6fdd153f79d",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -522,7 +522,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2506a069ef4a5e8040ea751d9ad2cb57a1ef6108a249e2813caa37b3aff448aa",
+      "contentHash": "3621852ccda638fb7453ff9e22739b9bc401b76ee53c67f542b5c6fdd153f79d",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -530,7 +530,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2506a069ef4a5e8040ea751d9ad2cb57a1ef6108a249e2813caa37b3aff448aa",
+      "contentHash": "3621852ccda638fb7453ff9e22739b9bc401b76ee53c67f542b5c6fdd153f79d",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -538,7 +538,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2506a069ef4a5e8040ea751d9ad2cb57a1ef6108a249e2813caa37b3aff448aa",
+      "contentHash": "3621852ccda638fb7453ff9e22739b9bc401b76ee53c67f542b5c6fdd153f79d",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -546,7 +546,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2506a069ef4a5e8040ea751d9ad2cb57a1ef6108a249e2813caa37b3aff448aa",
+      "contentHash": "3621852ccda638fb7453ff9e22739b9bc401b76ee53c67f542b5c6fdd153f79d",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -554,7 +554,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2506a069ef4a5e8040ea751d9ad2cb57a1ef6108a249e2813caa37b3aff448aa",
+      "contentHash": "3621852ccda638fb7453ff9e22739b9bc401b76ee53c67f542b5c6fdd153f79d",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -562,7 +562,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2506a069ef4a5e8040ea751d9ad2cb57a1ef6108a249e2813caa37b3aff448aa",
+      "contentHash": "3621852ccda638fb7453ff9e22739b9bc401b76ee53c67f542b5c6fdd153f79d",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -570,7 +570,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2506a069ef4a5e8040ea751d9ad2cb57a1ef6108a249e2813caa37b3aff448aa",
+      "contentHash": "3621852ccda638fb7453ff9e22739b9bc401b76ee53c67f542b5c6fdd153f79d",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -578,7 +578,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2506a069ef4a5e8040ea751d9ad2cb57a1ef6108a249e2813caa37b3aff448aa",
+      "contentHash": "3621852ccda638fb7453ff9e22739b9bc401b76ee53c67f542b5c6fdd153f79d",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -586,7 +586,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2506a069ef4a5e8040ea751d9ad2cb57a1ef6108a249e2813caa37b3aff448aa",
+      "contentHash": "3621852ccda638fb7453ff9e22739b9bc401b76ee53c67f542b5c6fdd153f79d",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -594,7 +594,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2506a069ef4a5e8040ea751d9ad2cb57a1ef6108a249e2813caa37b3aff448aa",
+      "contentHash": "3621852ccda638fb7453ff9e22739b9bc401b76ee53c67f542b5c6fdd153f79d",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -602,7 +602,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2506a069ef4a5e8040ea751d9ad2cb57a1ef6108a249e2813caa37b3aff448aa",
+      "contentHash": "3621852ccda638fb7453ff9e22739b9bc401b76ee53c67f542b5c6fdd153f79d",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -610,7 +610,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2506a069ef4a5e8040ea751d9ad2cb57a1ef6108a249e2813caa37b3aff448aa",
+      "contentHash": "3621852ccda638fb7453ff9e22739b9bc401b76ee53c67f542b5c6fdd153f79d",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -618,7 +618,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2506a069ef4a5e8040ea751d9ad2cb57a1ef6108a249e2813caa37b3aff448aa",
+      "contentHash": "3621852ccda638fb7453ff9e22739b9bc401b76ee53c67f542b5c6fdd153f79d",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -626,7 +626,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2506a069ef4a5e8040ea751d9ad2cb57a1ef6108a249e2813caa37b3aff448aa",
+      "contentHash": "3621852ccda638fb7453ff9e22739b9bc401b76ee53c67f542b5c6fdd153f79d",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -634,7 +634,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2506a069ef4a5e8040ea751d9ad2cb57a1ef6108a249e2813caa37b3aff448aa",
+      "contentHash": "3621852ccda638fb7453ff9e22739b9bc401b76ee53c67f542b5c6fdd153f79d",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -642,7 +642,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2506a069ef4a5e8040ea751d9ad2cb57a1ef6108a249e2813caa37b3aff448aa",
+      "contentHash": "3621852ccda638fb7453ff9e22739b9bc401b76ee53c67f542b5c6fdd153f79d",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -650,7 +650,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2506a069ef4a5e8040ea751d9ad2cb57a1ef6108a249e2813caa37b3aff448aa",
+      "contentHash": "3621852ccda638fb7453ff9e22739b9bc401b76ee53c67f542b5c6fdd153f79d",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -658,7 +658,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2506a069ef4a5e8040ea751d9ad2cb57a1ef6108a249e2813caa37b3aff448aa",
+      "contentHash": "3621852ccda638fb7453ff9e22739b9bc401b76ee53c67f542b5c6fdd153f79d",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -666,7 +666,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2506a069ef4a5e8040ea751d9ad2cb57a1ef6108a249e2813caa37b3aff448aa",
+      "contentHash": "3621852ccda638fb7453ff9e22739b9bc401b76ee53c67f542b5c6fdd153f79d",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -674,7 +674,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2506a069ef4a5e8040ea751d9ad2cb57a1ef6108a249e2813caa37b3aff448aa",
+      "contentHash": "3621852ccda638fb7453ff9e22739b9bc401b76ee53c67f542b5c6fdd153f79d",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -682,7 +682,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2506a069ef4a5e8040ea751d9ad2cb57a1ef6108a249e2813caa37b3aff448aa",
+      "contentHash": "3621852ccda638fb7453ff9e22739b9bc401b76ee53c67f542b5c6fdd153f79d",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -690,7 +690,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2506a069ef4a5e8040ea751d9ad2cb57a1ef6108a249e2813caa37b3aff448aa",
+      "contentHash": "3621852ccda638fb7453ff9e22739b9bc401b76ee53c67f542b5c6fdd153f79d",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -698,7 +698,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2506a069ef4a5e8040ea751d9ad2cb57a1ef6108a249e2813caa37b3aff448aa",
+      "contentHash": "3621852ccda638fb7453ff9e22739b9bc401b76ee53c67f542b5c6fdd153f79d",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -706,7 +706,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2506a069ef4a5e8040ea751d9ad2cb57a1ef6108a249e2813caa37b3aff448aa",
+      "contentHash": "3621852ccda638fb7453ff9e22739b9bc401b76ee53c67f542b5c6fdd153f79d",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -714,7 +714,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2506a069ef4a5e8040ea751d9ad2cb57a1ef6108a249e2813caa37b3aff448aa",
+      "contentHash": "3621852ccda638fb7453ff9e22739b9bc401b76ee53c67f542b5c6fdd153f79d",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -722,7 +722,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2506a069ef4a5e8040ea751d9ad2cb57a1ef6108a249e2813caa37b3aff448aa",
+      "contentHash": "3621852ccda638fb7453ff9e22739b9bc401b76ee53c67f542b5c6fdd153f79d",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -730,7 +730,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2506a069ef4a5e8040ea751d9ad2cb57a1ef6108a249e2813caa37b3aff448aa",
+      "contentHash": "3621852ccda638fb7453ff9e22739b9bc401b76ee53c67f542b5c6fdd153f79d",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -738,7 +738,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2506a069ef4a5e8040ea751d9ad2cb57a1ef6108a249e2813caa37b3aff448aa",
+      "contentHash": "3621852ccda638fb7453ff9e22739b9bc401b76ee53c67f542b5c6fdd153f79d",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -746,7 +746,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2506a069ef4a5e8040ea751d9ad2cb57a1ef6108a249e2813caa37b3aff448aa",
+      "contentHash": "3621852ccda638fb7453ff9e22739b9bc401b76ee53c67f542b5c6fdd153f79d",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -754,7 +754,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2506a069ef4a5e8040ea751d9ad2cb57a1ef6108a249e2813caa37b3aff448aa",
+      "contentHash": "3621852ccda638fb7453ff9e22739b9bc401b76ee53c67f542b5c6fdd153f79d",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -770,7 +770,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2506a069ef4a5e8040ea751d9ad2cb57a1ef6108a249e2813caa37b3aff448aa",
+      "contentHash": "3621852ccda638fb7453ff9e22739b9bc401b76ee53c67f542b5c6fdd153f79d",
       "since": "2025-01-01"
     },
     "cli:init": {

package/upgrades/1.3.366.md

@@ -0,0 +1,96 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+Phase-2 LLM judge for ORG-INTENT governance (CMT-1128): when the
+keyword-overlap refusal test misses, POST /intent/org/test-action (and the
+red-team harness expectation resolver) can now escalate to one bounded LLM
+call that judges whether a constraint forbids the action by meaning rather
+than wording — closing the keyword matcher's false-negative side that the
+first boundary-map run exposed. Verdicts carry their method: llm-judge is
+claimed only for a real, parsed LLM verdict; a judge problem keeps the
+heuristic verdict and flags judgeUnavailable. Ships dark behind
+monitoring.orgIntentLlmJudge.enabled and requires a configured intelligence
+provider; with the flag off the route response is byte-for-byte unchanged.
+
+First slice of the converged Working-Set Handoff spec (P2 of multi-machine
+coherence): a machine can now compute, on demand and from durable evidence,
+"what files make up topic T's workspace here" — never from anyone remembering
+to declare anything.
+
+- `src/core/WorkingSetManifest.ts` — `computeWorkingSet()`: candidates from
+  the filesystem convention (`autonomous/<topic>.*`, bounded readdir, exact
+  topic-prefix so 134 never matches 13481) + the topic's own-stream journal
+  `artifactPaths`; every candidate compute-time jailed (realpath containment,
+  final-component symlinks refused), sha256-hashed, scanned for credential
+  shapes via the versioned redaction enum, and capped (4MiB per file, 16MiB
+  headline exemption for `<topic>.local.md`, 64 files). Over-cap and flagged
+  entries are LISTED with honest flags (`tooLarge` / `secretFlagged` /
+  `liveSource`) — never silently skipped. `mtime` is display-only; sha256 is
+  the only decision key.
+- `CoherenceJournalReader.readOwnAutonomousRuns(topic, ownMachineId)` — the
+  own-stream-only evidence source (replicas nominate; they never feed THIS
+  machine's manifest). `liveRun` derives from the newest run's state, so a
+  still-writing run marks every entry "still being written" rather than
+  serving a torn snapshot.
+
+Pure module — nothing constructs it at boot yet. The P2.2 transfer verb,
+receiver trigger, and pending-pull ledger wire it into the move path next.
+
+## What to Tell Your User
+
+Nothing — this ships dark and is an internal governance-testing improvement.
+If they previously saw an intent boundary report calling something
+"ungoverned," that verdict was keyword-based and conservative; once this
+feature is enabled, those misses get a semantic second opinion before being
+reported as candidate gaps.
+
+Nothing user-visible yet. This is the foundation slice of "moving a
+conversation between your machines moves its working files too" — the part
+that lets a machine reliably answer what those files are. The transfer itself
+lands in the next slice.
+
+## Summary of New Capabilities
+
+- judgeRefusal in IntentTestHarness: one bounded fast-model call (temperature
+  0, 8s timeout, attributed IntentLlmJudge/gate for /metrics/features)
+  judging an action against the constraints by meaning.
+- resolveExpectationJudged in the red-team ScenarioPack: keyword pre-filter,
+  LLM decision, honest judgeUnavailable signal.
+- POST /intent/org/test-action escalates keyword misses to the judge when
+  monitoring.orgIntentLlmJudge.enabled is true; refusal verdicts then carry
+  their method.
+
+- `computeWorkingSet(opts)` (`src/core/WorkingSetManifest.ts`) — pure,
+  bounded, jailed manifest computation for one topic's working files, with
+  honest per-entry flags and counted degradations (`jailRejected`,
+  `goneFromDisk`, `filesTruncated`).
+- `CoherenceJournalReader.readOwnAutonomousRuns(topic, ownMachineId)` —
+  own-stream autonomous-run evidence: newest-first entries, `liveRun`,
+  deduped `artifactPaths`, bounded with `truncated` honesty.
+- Spec: `docs/specs/WORKING-SET-HANDOFF-SPEC.md` (converged 2026-06-06,
+  4 rounds, cross-model codex-cli:gpt-5.5; report at
+  `docs/specs/reports/working-set-handoff-convergence.md`).
+
+## Evidence
+
+tests/unit/intent-llm-judge.test.ts (16, including the boundary-map replay
+that first proves the keyword miss and then proves the judge closes it),
+tests/integration/intent-llm-judge-route.test.ts (5, full HTTP pipeline both
+flag states), tests/e2e/intent-llm-judge-lifecycle.test.ts (3, real
+AgentServer.start with the provider injected through the production seam).
+Regression canaries IntentTestHarness + redteam-scenario-pack +
+org-intent-routes + mtp-protocol lifecycle + no-silent-fallbacks all green;
+clean tsc; docs-coverage floors hold.
+
+- `tests/unit/WorkingSetManifest.test.ts` — 18 passing: sources + canonical
+  dedupe, jail matrix (escape-shaped path, final-component symlink,
+  symlinked-parent escape), caps (tooLarge listed+hashed, headline exemption,
+  maxFiles truncation keeps the headline), secretFlagged honest listing +
+  transferableBytes exclusion, mtime display-only, liveSource covers ALL of a
+  live run's entries, reader own-stream-only + liveRun semantics.
+- `tests/unit/CoherenceJournalReader.test.ts` — 15 passing unchanged.
+- Full typecheck clean.

package/upgrades/side-effects/intent-llm-judge.md

@@ -0,0 +1,94 @@
+# Side-effects review — Phase-2 LLM judge for ORG-INTENT governance (CMT-1128)
+
+## What this change does
+
+Adds the semantic resolver the keyword matcher's honesty work (#899) pointed
+at: when the keyword-overlap refusal test MISSES, one bounded LLM call judges
+whether any ORG-INTENT constraint forbids the action by MEANING. Surfaces:
+(1) `judgeRefusal()` in IntentTestHarness.ts (the judge primitive),
+(2) `resolveExpectationJudged()` in ScenarioPack.ts (the red-team harness
+Phase-2 resolver), (3) POST /intent/org/test-action escalates a keyword miss
+to the judge when `monitoring.orgIntentLlmJudge.enabled` is true AND an
+intelligence provider is configured. Ships DARK (default false).
+
+## Decision boundary (both sides tested)
+
+- Keyword MISS + judge says forbidden → governed/refused with
+  `method: 'llm-judge'` and the semantically-matched constraint (the live
+  boundary-map replay: "unverified work as completed" governs "estimates as
+  confirmed numbers"; the unit test FIRST proves the keyword matcher misses
+  this exact pair, then proves the judge closes it).
+- Keyword MATCH → short-circuit: heuristic verdict returned, provider never
+  called (call-count asserted). The pre-filter contract from types.ts:
+  heuristics narrow candidates, the provider decides.
+- Judge requested but unavailable (provider throws / circuit open / malformed
+  reply) → heuristic verdict stands with `judgeUnavailable: true`; route
+  still 200 (unit + integration + e2e).
+- Judged not-forbidden → `method: 'llm-judge'` ungoverned with
+  judgment-not-ground-truth framing in the reason string.
+- Flag OFF (or no provider) → byte-compatible Phase-1 response, zero provider
+  calls (integration + e2e).
+
+## Blast radius
+
+- `src/core/IntentTestHarness.ts`: additive exports (`judgeRefusal`,
+  `JudgeMethod`, `JudgedRefusalResult`, `JudgeOptions`); the existing class
+  and its keyword logic are untouched (its 9 tests pass unmodified).
+- `src/redteam/ScenarioPack.ts`: `ResolvedExpectation.method` widened to the
+  `'keyword-heuristic' | 'llm-judge'` union (additive — the sync
+  `resolveExpectation` still always reports `'keyword-heuristic'`; its
+  honesty test passes unmodified); new optional `judgeUnavailable` field; new
+  async `resolveExpectationJudged`.
+- `src/server/routes.ts`: the test-action handler computes the heuristic
+  verdict exactly as before, then — only inside the flag+provider guard —
+  escalates a miss. Flag-off path emits the identical response object.
+- `src/core/types.ts`: new optional `monitoring.orgIntentLlmJudge` config
+  block. No migrateConfig (absent → off, the principalCoherence sibling
+  convention).
+- LLM spend: at most ONE fast-model call per keyword-missed test-action
+  request (or per scenario hint in the red-team resolver), temperature 0,
+  maxTokens 250, 8s timeout, attributed `IntentLlmJudge`/`gate` so
+  /metrics/features and burn detection see it. No background loop — the
+  judge only runs inside an explicit request.
+- No new routes (route floor untouched), no new core class files (class
+  floor untouched), no migration surface, no subprocess.
+
+## Migration parity
+
+No agent-installed files change (no hooks, no config defaults written, no
+CLAUDE.md template text, no skills). The config flag is opt-in and absent
+means off — nothing to migrate.
+
+## Framework generality
+
+Framework-agnostic: the judge consumes the IntelligenceProvider interface,
+so per-component framework routing (`IntentLlmJudge` under category `gate`)
+applies — the judge can run on whichever framework the routing table says.
+
+## Tests
+
+- `tests/unit/intent-llm-judge.test.ts` — 16 tests: judgeRefusal verdict
+  parsing both sides, prose-wrapped JSON, malformed/typed-wrong replies,
+  provider throw, no-constraints short-circuit, out-of-range index tolerance,
+  call-options pinning (fast/temp-0/attribution/timeout);
+  resolveExpectationJudged: the boundary-map replay (keyword miss proven,
+  judge governs), keyword-match short-circuit (zero provider calls), judge
+  unavailable honesty, judged-ungoverned framing, multi-hint iteration,
+  mixed failure+verdict semantics.
+- `tests/integration/intent-llm-judge-route.test.ts` — 5 tests over the full
+  HTTP pipeline: judged governance over the wire, match short-circuit,
+  unavailable honesty, flag-off byte-compatibility, flag-on-without-provider.
+- `tests/e2e/intent-llm-judge-lifecycle.test.ts` — 3 tests on a REAL
+  AgentServer.start(): feature-alive (200 + llm-judge verdict through the
+  production options seam), judge problem never breaks the route, dark
+  server byte-compatible.
+- Regression canaries green: IntentTestHarness (9), redteam-scenario-pack
+  (26), org-intent-routes (21), mtp-protocol-test-action-lifecycle (4),
+  no-silent-fallbacks (5); tsc clean; docs-coverage --check passes (floors
+  hold — no new routes or class files).
+
+## Rollback
+
+Delete the judge block in the test-action route, the two new functions, the
+type widening, and the config block. No state, no migrations, no on-disk
+artifacts to unwind (verdicts are request-scoped).