instar 1.3.418 → 1.3.420

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.418",
+  "version": "1.3.420",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-06-07T23:51:53.400Z",
-  "instarVersion": "1.3.418",
+  "generatedAt": "2026-06-08T01:07:40.184Z",
+  "instarVersion": "1.3.420",
   "entryCount": 199,
   "entries": {
     "hook:session-start": {
@@ -418,7 +418,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
+      "contentHash": "ba95e48c020a055480ff5c548630cc97e7797d6f79cb919affdb589ebd3f8d48",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -426,7 +426,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
+      "contentHash": "ba95e48c020a055480ff5c548630cc97e7797d6f79cb919affdb589ebd3f8d48",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -434,7 +434,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
+      "contentHash": "ba95e48c020a055480ff5c548630cc97e7797d6f79cb919affdb589ebd3f8d48",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -442,7 +442,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
+      "contentHash": "ba95e48c020a055480ff5c548630cc97e7797d6f79cb919affdb589ebd3f8d48",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -450,7 +450,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
+      "contentHash": "ba95e48c020a055480ff5c548630cc97e7797d6f79cb919affdb589ebd3f8d48",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -458,7 +458,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
+      "contentHash": "ba95e48c020a055480ff5c548630cc97e7797d6f79cb919affdb589ebd3f8d48",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -466,7 +466,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
+      "contentHash": "ba95e48c020a055480ff5c548630cc97e7797d6f79cb919affdb589ebd3f8d48",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -474,7 +474,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
+      "contentHash": "ba95e48c020a055480ff5c548630cc97e7797d6f79cb919affdb589ebd3f8d48",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -482,7 +482,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
+      "contentHash": "ba95e48c020a055480ff5c548630cc97e7797d6f79cb919affdb589ebd3f8d48",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -490,7 +490,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
+      "contentHash": "ba95e48c020a055480ff5c548630cc97e7797d6f79cb919affdb589ebd3f8d48",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -498,7 +498,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
+      "contentHash": "ba95e48c020a055480ff5c548630cc97e7797d6f79cb919affdb589ebd3f8d48",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -506,7 +506,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
+      "contentHash": "ba95e48c020a055480ff5c548630cc97e7797d6f79cb919affdb589ebd3f8d48",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -514,7 +514,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
+      "contentHash": "ba95e48c020a055480ff5c548630cc97e7797d6f79cb919affdb589ebd3f8d48",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -522,7 +522,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
+      "contentHash": "ba95e48c020a055480ff5c548630cc97e7797d6f79cb919affdb589ebd3f8d48",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -530,7 +530,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
+      "contentHash": "ba95e48c020a055480ff5c548630cc97e7797d6f79cb919affdb589ebd3f8d48",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -538,7 +538,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
+      "contentHash": "ba95e48c020a055480ff5c548630cc97e7797d6f79cb919affdb589ebd3f8d48",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -546,7 +546,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
+      "contentHash": "ba95e48c020a055480ff5c548630cc97e7797d6f79cb919affdb589ebd3f8d48",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -554,7 +554,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
+      "contentHash": "ba95e48c020a055480ff5c548630cc97e7797d6f79cb919affdb589ebd3f8d48",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -562,7 +562,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
+      "contentHash": "ba95e48c020a055480ff5c548630cc97e7797d6f79cb919affdb589ebd3f8d48",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -570,7 +570,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
+      "contentHash": "ba95e48c020a055480ff5c548630cc97e7797d6f79cb919affdb589ebd3f8d48",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -578,7 +578,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
+      "contentHash": "ba95e48c020a055480ff5c548630cc97e7797d6f79cb919affdb589ebd3f8d48",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -586,7 +586,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
+      "contentHash": "ba95e48c020a055480ff5c548630cc97e7797d6f79cb919affdb589ebd3f8d48",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -594,7 +594,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
+      "contentHash": "ba95e48c020a055480ff5c548630cc97e7797d6f79cb919affdb589ebd3f8d48",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -602,7 +602,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
+      "contentHash": "ba95e48c020a055480ff5c548630cc97e7797d6f79cb919affdb589ebd3f8d48",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -610,7 +610,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
+      "contentHash": "ba95e48c020a055480ff5c548630cc97e7797d6f79cb919affdb589ebd3f8d48",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -618,7 +618,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
+      "contentHash": "ba95e48c020a055480ff5c548630cc97e7797d6f79cb919affdb589ebd3f8d48",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -626,7 +626,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
+      "contentHash": "ba95e48c020a055480ff5c548630cc97e7797d6f79cb919affdb589ebd3f8d48",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -634,7 +634,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
+      "contentHash": "ba95e48c020a055480ff5c548630cc97e7797d6f79cb919affdb589ebd3f8d48",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -642,7 +642,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
+      "contentHash": "ba95e48c020a055480ff5c548630cc97e7797d6f79cb919affdb589ebd3f8d48",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -650,7 +650,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
+      "contentHash": "ba95e48c020a055480ff5c548630cc97e7797d6f79cb919affdb589ebd3f8d48",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -658,7 +658,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
+      "contentHash": "ba95e48c020a055480ff5c548630cc97e7797d6f79cb919affdb589ebd3f8d48",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -666,7 +666,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
+      "contentHash": "ba95e48c020a055480ff5c548630cc97e7797d6f79cb919affdb589ebd3f8d48",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -674,7 +674,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
+      "contentHash": "ba95e48c020a055480ff5c548630cc97e7797d6f79cb919affdb589ebd3f8d48",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -682,7 +682,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
+      "contentHash": "ba95e48c020a055480ff5c548630cc97e7797d6f79cb919affdb589ebd3f8d48",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -690,7 +690,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
+      "contentHash": "ba95e48c020a055480ff5c548630cc97e7797d6f79cb919affdb589ebd3f8d48",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -698,7 +698,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
+      "contentHash": "ba95e48c020a055480ff5c548630cc97e7797d6f79cb919affdb589ebd3f8d48",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -706,7 +706,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
+      "contentHash": "ba95e48c020a055480ff5c548630cc97e7797d6f79cb919affdb589ebd3f8d48",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -714,7 +714,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
+      "contentHash": "ba95e48c020a055480ff5c548630cc97e7797d6f79cb919affdb589ebd3f8d48",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -722,7 +722,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
+      "contentHash": "ba95e48c020a055480ff5c548630cc97e7797d6f79cb919affdb589ebd3f8d48",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -730,7 +730,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
+      "contentHash": "ba95e48c020a055480ff5c548630cc97e7797d6f79cb919affdb589ebd3f8d48",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -738,7 +738,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
+      "contentHash": "ba95e48c020a055480ff5c548630cc97e7797d6f79cb919affdb589ebd3f8d48",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -746,7 +746,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
+      "contentHash": "ba95e48c020a055480ff5c548630cc97e7797d6f79cb919affdb589ebd3f8d48",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -754,7 +754,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
+      "contentHash": "ba95e48c020a055480ff5c548630cc97e7797d6f79cb919affdb589ebd3f8d48",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -770,7 +770,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
+      "contentHash": "ba95e48c020a055480ff5c548630cc97e7797d6f79cb919affdb589ebd3f8d48",
       "since": "2025-01-01"
     },
     "cli:init": {

package/upgrades/1.3.419.md

@@ -0,0 +1,30 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+Three latent bugs in EXO 3.0 capabilities, surfaced by a new from-every-angle test harness, are fixed — each with a regression test:
+
+- Agent-passport verification no longer returns a 500 when a peer's passport omits a field. `permits()` defaults `forbiddenActions`/`allowedCapabilities` to `[]`, so a partial peer card yields a verdict instead of throwing "Cannot read properties of undefined (reading 'length')".
+- The org-intent Tradeoff Hierarchy parser now accepts the documented single-line `Safety > Operator trust > ...` chained form, not only bullet lists. The resolver previously saw an empty hierarchy and reported "no tradeoff hierarchy defined".
+- The learning-velocity metric now reads its three real event sources — the registered-learnings registry under `state/evolution/` (timestamp at `source.discoveredAt`), the `action-queue.json` evolution actions, and the SQLite correction ledger — instead of three paths the agent never writes. It previously always reported zero events.
+
+## What to Tell Your User
+
+- "I found and fixed three small internal bugs in my EXO 3.0 self-checks, each surfaced by a new test harness that probes every capability from several angles. A peer-passport check could crash on an incomplete card; a value-priority list wasn't being read; and a learning-pace number was stuck at zero because it looked in the wrong places. These are correctness fixes with no change to how I behave for you — the learning-pace number will now reflect my real activity."
+
+## Summary of New Capabilities
+
+| Capability | How to Use |
+|-----------|-----------|
+| Passport verify tolerates a partial peer passport | Automatic. A passport missing a field yields a verdict instead of a 500. |
+| Tradeoff Hierarchy chained-form parsing | Automatic. The org-intent A-greater-than-B line now resolves via the tradeoff endpoint. |
+| Learning-velocity real sources | Automatic. The metric reads the real learnings / evolution-actions / corrections stores. |
+
+## Evidence
+
+Before: `POST /passport/verify` with a passport missing `allowedCapabilities` returned HTTP 500 "Cannot read properties of undefined (reading 'length')". `POST /intent/tradeoff-resolve` returned "no tradeoff hierarchy defined" even though the hierarchy was present in the org-intent file. `GET /metrics/learning-velocity` returned `totalEvents: 0` / `insufficient-data` on an agent with hundreds of real evolution actions and registered learnings on disk.
+
+After: the same partial-passport request returns a 200 verdict (covered by a unit test, plus a regression test that still denies a forbidden action on a partial card). tradeoff-resolve resolves a value pair against the parsed order (unit test asserts the chained line parses to the ordered array; the bulleted form still parses). learning-velocity returns the real event count across learnings, evolution actions, and corrections (integration test seeds the real source paths/shapes and asserts a non-zero total). The pre-existing learning-velocity integration test had encoded the buggy paths, which is why the bug stayed green — it now seeds the real paths.

package/upgrades/1.3.420.md

@@ -0,0 +1,45 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+Fixes a cross-restart duplicate-reply bug (topic 21816): the outbound
+duplicate-suppressor (`OutboundContentDedup`) kept its "recently sent" fingerprints
+only in per-process memory, so a restart (or overlapping processes during restart
+churn) wiped that memory and the same reply could go out multiple times — observed
+as a byte-identical reply sent 5× in 19s during the "server temporarily down"
+instability. Adds `OutboundDedupStore` (SQLite-backed durable fingerprints); the
+suppressor now consults it when the in-memory map misses, so an identical recent
+send is caught across restarts/processes. Wired at the existing `/telegram/reply`
+dedup point.
+
+## What to Tell Your User
+
+If you ever saw the agent post the exact same reply several times in a row
+(especially right around a restart/update), that's fixed — the duplicate-catcher
+now remembers across restarts instead of forgetting.
+
+## Summary of New Capabilities
+
+- Outbound content-dedup is now durable across restarts/processes. **Fail-open**: a
+  db hiccup degrades to the prior in-memory-only behavior and can never suppress a
+  legitimate message. No config change (reuses the `outboundContentDedup` block);
+  a per-agent `outbound-dedup.db` is auto-created.
+
+## Evidence
+
+`tests/unit/outbound-dedup-durable.test.ts` (6, incl the cross-restart catch +
+fail-open paths); existing `OutboundContentDedup.test` (11) still green;
+no-silent-fallbacks at baseline (fail-open catches marked `@silent-fallback-ok`);
+`tsc --noEmit` clean. causalAutopsy: latent — the dedup was in-memory-only since it
+shipped (2026-06-06); harmful only once restart churn (this incident) reset/split
+the in-memory state mid-window.
+
+## Scope (honest)
+
+Contained fix in messaging. Catches byte-identical recent re-sends to the same
+topic (the observed bug, verified identical); does not catch near-identical
+*regenerations* — a deeper inbound "don't re-process an in-flight message across a
+restart" guard is a noted follow-up. Fail-open is the load-bearing safety property.

package/upgrades/eli16/exo3-harness-gap-fixes.md

@@ -0,0 +1,33 @@
+# EXO 3.0 Harness Gap Fixes — Plain-English Overview
+
+> The one-line version: a new from-every-angle test harness for our EXO 3.0 features found three small, real bugs that shipped because the old tests checked the wrong things — this fixes all three.
+
+## The problem in one breath
+
+We built a harness that probes every EXO 3.0 capability through its real endpoint, from several angles. It surfaced three genuine bugs that were invisible before because the existing tests quietly encoded the same wrong assumptions the code had. None of them are big — but each made a real capability lie about itself.
+
+## What already exists
+
+- **Agent Passport** — a portable card that says what an agent may and may not do; a peer can check an action against it before trusting it.
+- **Org-Intent / tradeoff hierarchy** — our purpose file lists, in priority order, which value wins when two collide (Safety first, then Operator trust, and so on).
+- **Learning-velocity metric** — a read-only number meant to show how fast the agent is actually learning, by counting real learning events.
+
+## What this adds
+
+This is three surgical fixes, no new features:
+
+- **Passport verify no longer crashes on a partial card.** A peer's passport that omits a field (it didn't go through our builder) used to make the verifier throw a 500 error. Now any missing list defaults to empty, so the verifier always returns a clean yes/no verdict instead of crashing.
+- **The tradeoff hierarchy now actually parses.** Our purpose file writes the hierarchy the documented way — one line, "Safety > Operator trust > Correctness > …". The parser only understood bullet lists, so it read an empty hierarchy and the resolver said "no hierarchy defined." Now it understands the chained form too.
+- **Learning-velocity reads the real event sources.** The metric was reading three file paths the agent never actually writes to (wrong directory, wrong timestamp field, and a JSONL file for data that lives in a database). So it always reported zero. Now it reads the registered-learnings registry (with the right timestamp), the evolution action queue, and the corrections database.
+
+## The safeguards
+
+**Prevents the verifier from crashing on untrusted input.** A passport is, by design, handed over by another agent — so it must be treated as possibly-partial. Defaulting the array fields means a malformed card produces a verdict, never an exception.
+
+**Prevents silent zero-reporting.** The learning-velocity test used to write fixtures to the same wrong paths the route read, so both were wrong together and the test stayed green. The test now seeds the REAL paths and shapes the live agent writes, so it can never again pass while the live metric reads zero.
+
+**No behavior change for healthy inputs.** A complete passport, a bulleted hierarchy, and an agent with no learning events all behave exactly as before. These fixes only add tolerance and correct paths.
+
+## What ships when
+
+One PR, all three fixes together — they were all surfaced by the same harness run and share the same root (latent bugs masked by tests that encoded the same wrong assumptions). Regression tests ship alongside each fix.

package/upgrades/side-effects/durable-outbound-dedup.md

@@ -0,0 +1,87 @@
+# Side-Effects Review — durable outbound content-dedup (cross-restart)
+
+**Version / slug:** `durable-outbound-dedup`
+**Date:** `2026-06-07`
+**Author:** `Echo`
+**Tier:** 1 (durable backing for an existing dedup; fail-open; no API/route/config/migration surface; both-sides tested)
+**Second-pass reviewer:** `Echo (self) — Tier-1; the fail-open design is the load-bearing safety property and is directly tested`
+
+## Summary of the change
+
+Fixes the cross-restart duplicate-reply bug (topic 21816,
+finding_cross_restart_duplicate_replies): during the "server temporarily down"
+restart instability a byte-identical refusal went to the same topic **5× in 19s**
+(confirmed byte-identical by sha). The existing `OutboundContentDedup` couldn't
+catch it because its fingerprint Map is **per-process in-memory** and resets on
+restart / isn't shared across overlapping processes — exactly the window the
+restart churn opened.
+
+Adds `OutboundDedupStore` (`src/messaging/OutboundDedupStore.ts`): a SQLite-backed
+durable fingerprint store. `OutboundContentDedup` now takes an optional store —
+`isDuplicate` consults it when the in-memory Map misses (catching a duplicate
+across a restart), and `record` mirrors to it. Wired in `routes.ts` at the existing
+`/telegram/reply` dedup point with `SqliteOutboundDedupStore(stateDir)`.
+
+## The load-bearing safety property: FAIL-OPEN
+
+A dedup that wrongly suppresses a **legitimate** reply is strictly worse than the
+duplicate it prevents. So every store method swallows its own errors and returns
+"no durable signal" — a missing / locked / corrupt / native-binding-broken db ⇒
+silent no-op, the caller behaves exactly as the in-memory-only path did. The
+construct path is guarded too (better-sqlite3 binding fragility was itself a factor
+in this incident). Directly tested: a throwing store + an unwritable path both
+no-op without throwing, and in-memory dedup still works.
+
+## Decision-point inventory
+
+- The only new decision: "was this fingerprint sent recently, per the durable
+  store?" — consulted ONLY when in-memory misses, ANDed into the existing window +
+  length-floor gates (unchanged). The narrow-by-design protections (≥40 chars,
+  `allowDuplicate` escape hatch, record-only-after-success) are all preserved.
+
+## 1. False positive (suppress a legitimate message)
+
+Mitigated three ways: (a) fail-open (any store trouble ⇒ allow the send), (b) the
+existing ≥40-char floor + window + `allowDuplicate` escape hatch are unchanged, (c)
+fingerprint is (normalized-text + length), so only a byte-identical recent send to
+the SAME topic is ever a duplicate. Tested: different text / different topic / past
+window are NOT suppressed.
+
+## 2. False negative (still duplicates)
+
+The durable store catches byte-identical re-sends across restarts/processes (the
+observed bug). It does NOT catch near-identical *regenerations* (different bytes) —
+but the incident's 5 sends were byte-identical (verified), so this is the right
+shape. (A deeper inbound "don't re-inject an in-flight message across restart"
+guard is noted as a follow-up in the finding; this closes the observed symptom.)
+
+## 2b. DB lifecycle + hygiene (CI follow-up)
+
+The store registers its handle via `registerSqliteHandle` (SqliteRegistry close-on-
+exit) so it's closed once at shutdown and never leaks — db-leak hygiene that fits the
+topic-21816 resource theme; listed in the SqliteRegistry-wiring LONG_LIVED_STORES
+allowlist. The route-level dedup test got an isolated per-test `stateDir` (the durable
+db persists to `stateDir/outbound-dedup.db`, so a shared dir leaked fingerprints
+across cases — the cross-process persistence this feature adds, surfaced as a
+test-isolation requirement).
+
+## 3. Blast radius
+
+`/telegram/reply` adds one SQLite point-query per reply (fast; better-sqlite3 is
+synchronous + already used widely). A new per-agent `outbound-dedup.db` is
+auto-created (no migration). Fail-open bounds worst case to today's behavior. No
+config change (reuses the existing `outboundContentDedup` config block).
+
+## 4. Rollback
+
+Pass `null` as the store (or revert the routes wiring) ⇒ in-memory-only (today's
+behavior). Delete `outbound-dedup.db` is harmless (auto-recreated). No format/state
+migration.
+
+## 5. Tests
+
+`tests/unit/outbound-dedup-durable.test.ts` (6): catches a duplicate across a
+restart (fresh instance, same db file — the bug); in-memory still works + length
+floor; different text/topic not suppressed; window honored; fail-open on a throwing
+store; store fail-opens on an unwritable path. Existing `OutboundContentDedup.test`
+(11) still green; no-silent-fallbacks at baseline (fail-open catches marked); tsc clean.