instar 1.3.459 → 1.3.461

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-06-10T02:35:41.285Z",
-  "instarVersion": "1.3.459",
+  "generatedAt": "2026-06-10T03:19:26.946Z",
+  "instarVersion": "1.3.461",
   "entryCount": 199,
   "entries": {
     "hook:session-start": {
@@ -418,7 +418,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "eb4defe5f4d62b96e65a44a77d27e716388b052e5eb94d1edf19358f96ee9b5a",
+      "contentHash": "1ed553bfb7805aff766d3d95e6e8f65778d535f804d86ba5b6b7916bc36f9068",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -426,7 +426,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "eb4defe5f4d62b96e65a44a77d27e716388b052e5eb94d1edf19358f96ee9b5a",
+      "contentHash": "1ed553bfb7805aff766d3d95e6e8f65778d535f804d86ba5b6b7916bc36f9068",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -434,7 +434,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "eb4defe5f4d62b96e65a44a77d27e716388b052e5eb94d1edf19358f96ee9b5a",
+      "contentHash": "1ed553bfb7805aff766d3d95e6e8f65778d535f804d86ba5b6b7916bc36f9068",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -442,7 +442,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "eb4defe5f4d62b96e65a44a77d27e716388b052e5eb94d1edf19358f96ee9b5a",
+      "contentHash": "1ed553bfb7805aff766d3d95e6e8f65778d535f804d86ba5b6b7916bc36f9068",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -450,7 +450,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "eb4defe5f4d62b96e65a44a77d27e716388b052e5eb94d1edf19358f96ee9b5a",
+      "contentHash": "1ed553bfb7805aff766d3d95e6e8f65778d535f804d86ba5b6b7916bc36f9068",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -458,7 +458,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "eb4defe5f4d62b96e65a44a77d27e716388b052e5eb94d1edf19358f96ee9b5a",
+      "contentHash": "1ed553bfb7805aff766d3d95e6e8f65778d535f804d86ba5b6b7916bc36f9068",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -466,7 +466,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "eb4defe5f4d62b96e65a44a77d27e716388b052e5eb94d1edf19358f96ee9b5a",
+      "contentHash": "1ed553bfb7805aff766d3d95e6e8f65778d535f804d86ba5b6b7916bc36f9068",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -474,7 +474,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "eb4defe5f4d62b96e65a44a77d27e716388b052e5eb94d1edf19358f96ee9b5a",
+      "contentHash": "1ed553bfb7805aff766d3d95e6e8f65778d535f804d86ba5b6b7916bc36f9068",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -482,7 +482,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "eb4defe5f4d62b96e65a44a77d27e716388b052e5eb94d1edf19358f96ee9b5a",
+      "contentHash": "1ed553bfb7805aff766d3d95e6e8f65778d535f804d86ba5b6b7916bc36f9068",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -490,7 +490,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "eb4defe5f4d62b96e65a44a77d27e716388b052e5eb94d1edf19358f96ee9b5a",
+      "contentHash": "1ed553bfb7805aff766d3d95e6e8f65778d535f804d86ba5b6b7916bc36f9068",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -498,7 +498,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "eb4defe5f4d62b96e65a44a77d27e716388b052e5eb94d1edf19358f96ee9b5a",
+      "contentHash": "1ed553bfb7805aff766d3d95e6e8f65778d535f804d86ba5b6b7916bc36f9068",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -506,7 +506,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "eb4defe5f4d62b96e65a44a77d27e716388b052e5eb94d1edf19358f96ee9b5a",
+      "contentHash": "1ed553bfb7805aff766d3d95e6e8f65778d535f804d86ba5b6b7916bc36f9068",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -514,7 +514,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "eb4defe5f4d62b96e65a44a77d27e716388b052e5eb94d1edf19358f96ee9b5a",
+      "contentHash": "1ed553bfb7805aff766d3d95e6e8f65778d535f804d86ba5b6b7916bc36f9068",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -522,7 +522,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "eb4defe5f4d62b96e65a44a77d27e716388b052e5eb94d1edf19358f96ee9b5a",
+      "contentHash": "1ed553bfb7805aff766d3d95e6e8f65778d535f804d86ba5b6b7916bc36f9068",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -530,7 +530,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "eb4defe5f4d62b96e65a44a77d27e716388b052e5eb94d1edf19358f96ee9b5a",
+      "contentHash": "1ed553bfb7805aff766d3d95e6e8f65778d535f804d86ba5b6b7916bc36f9068",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -538,7 +538,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "eb4defe5f4d62b96e65a44a77d27e716388b052e5eb94d1edf19358f96ee9b5a",
+      "contentHash": "1ed553bfb7805aff766d3d95e6e8f65778d535f804d86ba5b6b7916bc36f9068",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -546,7 +546,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "eb4defe5f4d62b96e65a44a77d27e716388b052e5eb94d1edf19358f96ee9b5a",
+      "contentHash": "1ed553bfb7805aff766d3d95e6e8f65778d535f804d86ba5b6b7916bc36f9068",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -554,7 +554,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "eb4defe5f4d62b96e65a44a77d27e716388b052e5eb94d1edf19358f96ee9b5a",
+      "contentHash": "1ed553bfb7805aff766d3d95e6e8f65778d535f804d86ba5b6b7916bc36f9068",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -562,7 +562,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "eb4defe5f4d62b96e65a44a77d27e716388b052e5eb94d1edf19358f96ee9b5a",
+      "contentHash": "1ed553bfb7805aff766d3d95e6e8f65778d535f804d86ba5b6b7916bc36f9068",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -570,7 +570,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "eb4defe5f4d62b96e65a44a77d27e716388b052e5eb94d1edf19358f96ee9b5a",
+      "contentHash": "1ed553bfb7805aff766d3d95e6e8f65778d535f804d86ba5b6b7916bc36f9068",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -578,7 +578,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "eb4defe5f4d62b96e65a44a77d27e716388b052e5eb94d1edf19358f96ee9b5a",
+      "contentHash": "1ed553bfb7805aff766d3d95e6e8f65778d535f804d86ba5b6b7916bc36f9068",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -586,7 +586,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "eb4defe5f4d62b96e65a44a77d27e716388b052e5eb94d1edf19358f96ee9b5a",
+      "contentHash": "1ed553bfb7805aff766d3d95e6e8f65778d535f804d86ba5b6b7916bc36f9068",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -594,7 +594,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "eb4defe5f4d62b96e65a44a77d27e716388b052e5eb94d1edf19358f96ee9b5a",
+      "contentHash": "1ed553bfb7805aff766d3d95e6e8f65778d535f804d86ba5b6b7916bc36f9068",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -602,7 +602,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "eb4defe5f4d62b96e65a44a77d27e716388b052e5eb94d1edf19358f96ee9b5a",
+      "contentHash": "1ed553bfb7805aff766d3d95e6e8f65778d535f804d86ba5b6b7916bc36f9068",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -610,7 +610,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "eb4defe5f4d62b96e65a44a77d27e716388b052e5eb94d1edf19358f96ee9b5a",
+      "contentHash": "1ed553bfb7805aff766d3d95e6e8f65778d535f804d86ba5b6b7916bc36f9068",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -618,7 +618,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "eb4defe5f4d62b96e65a44a77d27e716388b052e5eb94d1edf19358f96ee9b5a",
+      "contentHash": "1ed553bfb7805aff766d3d95e6e8f65778d535f804d86ba5b6b7916bc36f9068",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -626,7 +626,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "eb4defe5f4d62b96e65a44a77d27e716388b052e5eb94d1edf19358f96ee9b5a",
+      "contentHash": "1ed553bfb7805aff766d3d95e6e8f65778d535f804d86ba5b6b7916bc36f9068",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -634,7 +634,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "eb4defe5f4d62b96e65a44a77d27e716388b052e5eb94d1edf19358f96ee9b5a",
+      "contentHash": "1ed553bfb7805aff766d3d95e6e8f65778d535f804d86ba5b6b7916bc36f9068",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -642,7 +642,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "eb4defe5f4d62b96e65a44a77d27e716388b052e5eb94d1edf19358f96ee9b5a",
+      "contentHash": "1ed553bfb7805aff766d3d95e6e8f65778d535f804d86ba5b6b7916bc36f9068",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -650,7 +650,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "eb4defe5f4d62b96e65a44a77d27e716388b052e5eb94d1edf19358f96ee9b5a",
+      "contentHash": "1ed553bfb7805aff766d3d95e6e8f65778d535f804d86ba5b6b7916bc36f9068",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -658,7 +658,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "eb4defe5f4d62b96e65a44a77d27e716388b052e5eb94d1edf19358f96ee9b5a",
+      "contentHash": "1ed553bfb7805aff766d3d95e6e8f65778d535f804d86ba5b6b7916bc36f9068",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -666,7 +666,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "eb4defe5f4d62b96e65a44a77d27e716388b052e5eb94d1edf19358f96ee9b5a",
+      "contentHash": "1ed553bfb7805aff766d3d95e6e8f65778d535f804d86ba5b6b7916bc36f9068",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -674,7 +674,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "eb4defe5f4d62b96e65a44a77d27e716388b052e5eb94d1edf19358f96ee9b5a",
+      "contentHash": "1ed553bfb7805aff766d3d95e6e8f65778d535f804d86ba5b6b7916bc36f9068",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -682,7 +682,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "eb4defe5f4d62b96e65a44a77d27e716388b052e5eb94d1edf19358f96ee9b5a",
+      "contentHash": "1ed553bfb7805aff766d3d95e6e8f65778d535f804d86ba5b6b7916bc36f9068",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -690,7 +690,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "eb4defe5f4d62b96e65a44a77d27e716388b052e5eb94d1edf19358f96ee9b5a",
+      "contentHash": "1ed553bfb7805aff766d3d95e6e8f65778d535f804d86ba5b6b7916bc36f9068",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -698,7 +698,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "eb4defe5f4d62b96e65a44a77d27e716388b052e5eb94d1edf19358f96ee9b5a",
+      "contentHash": "1ed553bfb7805aff766d3d95e6e8f65778d535f804d86ba5b6b7916bc36f9068",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -706,7 +706,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "eb4defe5f4d62b96e65a44a77d27e716388b052e5eb94d1edf19358f96ee9b5a",
+      "contentHash": "1ed553bfb7805aff766d3d95e6e8f65778d535f804d86ba5b6b7916bc36f9068",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -714,7 +714,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "eb4defe5f4d62b96e65a44a77d27e716388b052e5eb94d1edf19358f96ee9b5a",
+      "contentHash": "1ed553bfb7805aff766d3d95e6e8f65778d535f804d86ba5b6b7916bc36f9068",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -722,7 +722,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "eb4defe5f4d62b96e65a44a77d27e716388b052e5eb94d1edf19358f96ee9b5a",
+      "contentHash": "1ed553bfb7805aff766d3d95e6e8f65778d535f804d86ba5b6b7916bc36f9068",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -730,7 +730,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "eb4defe5f4d62b96e65a44a77d27e716388b052e5eb94d1edf19358f96ee9b5a",
+      "contentHash": "1ed553bfb7805aff766d3d95e6e8f65778d535f804d86ba5b6b7916bc36f9068",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -738,7 +738,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "eb4defe5f4d62b96e65a44a77d27e716388b052e5eb94d1edf19358f96ee9b5a",
+      "contentHash": "1ed553bfb7805aff766d3d95e6e8f65778d535f804d86ba5b6b7916bc36f9068",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -746,7 +746,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "eb4defe5f4d62b96e65a44a77d27e716388b052e5eb94d1edf19358f96ee9b5a",
+      "contentHash": "1ed553bfb7805aff766d3d95e6e8f65778d535f804d86ba5b6b7916bc36f9068",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -754,7 +754,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "eb4defe5f4d62b96e65a44a77d27e716388b052e5eb94d1edf19358f96ee9b5a",
+      "contentHash": "1ed553bfb7805aff766d3d95e6e8f65778d535f804d86ba5b6b7916bc36f9068",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -770,7 +770,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "eb4defe5f4d62b96e65a44a77d27e716388b052e5eb94d1edf19358f96ee9b5a",
+      "contentHash": "1ed553bfb7805aff766d3d95e6e8f65778d535f804d86ba5b6b7916bc36f9068",
       "since": "2025-01-01"
     },
     "cli:init": {

package/upgrades/1.3.460.md

@@ -0,0 +1,44 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+When two agents on the SAME computer talk over Threadline, a reply could get silently quarantined by
+the anti-hijack guard. The cause: same-computer delivery labels the sender by NAME, but the
+conversation is filed under the sender's FINGERPRINT (derived from their public key) — so the guard
+compared a name against a fingerprint, decided they didn't match, and isolated the reply into a fresh
+empty thread (the conversation "read empty"). The fix teaches the receiving side to work out the
+sender's fingerprint — using the exact same recipe the conversation was filed with (`fingerprint`, else
+the first 32 chars of the public key) — and hand the guard just that one fact. Now a legitimate reply
+matches its conversation and resumes; an unknown sender is still isolated (fail-safe). The cross-machine
+(internet) path was never affected — it already carries the fingerprint. This is the inbound companion
+to the duplicate-identity fix shipped just before it.
+
+## What to Tell Your User
+
+If you run more than one agent on the same machine and noticed that a co-located agent's replies were
+"going through but not arriving" — or that a conversation between two of your agents kept restarting in
+empty threads — this fixes it. Their replies now stay on the same conversation thread. You don't need
+to do anything; it takes effect after the agent updates and restarts. Nothing changes for agents talking
+across different machines.
+
+## Summary of New Capabilities
+
+A reliability/correctness fix, not a new feature: same-computer agent-to-agent replies now resolve to
+the right conversation instead of being false-isolated by the anti-hijack guard. The guard stays fully
+active and still isolates any sender it can't resolve.
+
+## Evidence
+
+- 13 unit tests for the shared name→fingerprint resolver (incl. the publicKey-only shape that was the
+  blocking case, name collisions → no-guess, and malformed/missing-file fail-safe).
+- 3 unit tests driving the REAL anti-hijack guard: the no-hint case reproduces the live incident
+  (`sagemind` isolated on thread `199c20fe owned by 1db85f…`); the hint case resumes; a mismatched hint
+  still isolates.
+- 2 integration tests chaining the real resolver (against a real on-disk `known-agents.json`) into the
+  real guard, on the exact incident data shape.
+- Typecheck clean; 1710 existing threadline tests unaffected; independent second-pass security review:
+  CONCUR.
+- Spec (converged iter 2, approved): `docs/specs/threadline-local-delivery-fingerprint-attribution.md`.

package/upgrades/1.3.461.md

@@ -0,0 +1,30 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+Adds **Phase 7 — Auto-merge on green** to the `instar-dev` skill: once an instar-dev PR's CI is fully
+green, the instar-developing agent merges it via the existing `scripts/safe-merge.mjs` wrapper (which
+waits for every check, refuses on any red, and confirms the e2e job ran and passed) and narrates the
+ship via the Agent Updates channel — it no longer pauses to ask the operator "ready to merge?".
+Auto-merge-on-green now applies to **every tier**, not just Tier-1; the Tier-1 wording is corrected so
+it no longer reads as a Tier-1-only privilege. No runtime code changes — the merge mechanism and CI
+gates it relies on are unchanged. Structure-over-Willpower fix for an operator directive (never pause
+to ask for merge; the gates already guarantee mergeability by the time CI is green).
+
+## What to Tell Your User
+
+None — internal change (no user-facing surface).
+
+## Summary of New Capabilities
+
+None — internal change (no user-facing surface).
+
+## Evidence
+
+- `skills/instar-dev/SKILL.md` — new Phase 7 + corrected Tier-1 line.
+- Mechanism unchanged: `scripts/safe-merge.mjs` already re-imposes all-checks-green (incl. e2e) before
+  merging. Tier-1 instar-dev gate passed (ELI16 + side-effects + trace); this PR auto-merges on green
+  per the very phase it adds.

package/upgrades/side-effects/instar-dev-automerge-on-green.md

@@ -0,0 +1,88 @@
+# Side-Effects Review — instar-dev: auto-merge on green (every tier)
+
+**Version / slug:** `instar-dev-automerge-on-green`
+**Date:** `2026-06-09`
+**Author:** `Instar Agent (echo)`
+**Second-pass reviewer:** `not required (Tier 1 — documentation/process change to the dev skill; the merge mechanism it mandates (safe-merge.mjs + CI) is unchanged and already gated)`
+
+## Summary of the change
+
+Adds **Phase 7 — Auto-merge on green (every tier)** to `skills/instar-dev/SKILL.md`, and corrects the
+Tier-1 description so auto-merge no longer reads as a Tier-1-only privilege. The new phase mandates that
+once an instar-dev PR's CI is fully green, the agent merges it via the existing
+`scripts/safe-merge.mjs <PR> --squash --admin` wrapper and narrates the ship via `/telegram/post-update`
+— it does NOT pause to ask the operator "ready to merge?". Documentation/process change only; no runtime
+code, no new gate, no new merge mechanism (safe-merge.mjs already exists and re-imposes all-checks-green
+before merging, including an explicit e2e-ran-and-passed check). Driven by the operator directive
+(2026-06-09, topic 23178): "never pause and ask me to merge; we have enough infra in place to ensure
+it's good to merge by the time it gets there. Lets fix this via infrastructure."
+
+## Decision-point inventory
+
+- No decision point added/changed. This is a process-doc change to the instar-dev skill. The actual
+  merge safety lives in `safe-merge.mjs` (waits for all checks, refuses on any red, confirms e2e) + CI
+  branch protection — both unchanged.
+
+## 1. Over-block
+
+No block/allow surface — over-block not applicable.
+
+## 2. Under-block
+
+No block/allow surface — under-block not applicable. (The only behavior changed is removing a human
+pause AFTER green CI; the green verdict itself — the actual quality gate — is unchanged. `safe-merge.mjs`
+still refuses to merge anything not fully green.)
+
+## 3. Level-of-abstraction fit
+
+Correct layer. The fix Justin asked for is behavioral: stop pausing to ask for merge. The instar-dev
+skill is exactly where the dev-agent's process is defined, so adding Phase 7 there is the
+right-altitude structural fix (Structure > Willpower — the behavior is now baked into the governing
+process doc, not left to the agent "remembering" not to pause). The merge mechanism it points at
+(`safe-merge.mjs`) already existed; this just makes invoking it the mandated final step for every tier.
+
+## 4. Signal vs authority compliance
+
+- [x] No — this change has no block/allow surface (documentation/process change).
+
+## 5. Interactions
+
+- **Shadowing / double-fire:** none. `safe-merge.mjs` is idempotent-safe (it no-ops / refuses if the PR
+  isn't green or is already merged).
+- **Races:** none introduced.
+- **Existing Tier-1 auto-merge wording:** the prior line implied auto-merge was a Tier-1 privilege;
+  Phase 7 generalizes it and the Tier-1 line is corrected to point at Phase 7, so the two no longer
+  conflict.
+
+## 6. External surfaces
+
+- **Merge behavior:** the agent now auto-merges green instar-dev PRs instead of asking. This is the
+  intended change. It is bounded by CI + `safe-merge.mjs` (refuses on any red, confirms e2e ran+passed),
+  so an unsafe PR cannot be auto-merged. Ship narration moves to the Agent Updates channel
+  (`/telegram/post-update`) rather than a "ready to merge?" question in the working topic.
+- **Migration Parity:** this updates the **instar-dev DEV skill** — used only by the instar-developing
+  agent (Echo / a dev-assigned agent), not an end-user feature skill. Per the known skill-install gap
+  (the root `skills/` dir, including `instar-dev`, is not synced by `installBuiltinSkills()` and has no
+  PostUpdateMigrator path — a separately-tracked issue), the canonical source change here reaches the
+  repo; the installed-copy sync for dev agents rides that pre-existing gap. The authoring agent updates
+  its own installed `.claude/skills/instar-dev/SKILL.md` directly so the behavior is live immediately.
+  A general fix to dev-skill sync is out of scope (it is the standing skill-install-gap project).
+- **No config / CLAUDE.md template / hook / route change.** No persisted state.
+
+## 7. Rollback cost
+
+Pure documentation revert — revert the PR; the skill returns to the Tier-1-only auto-merge wording. No
+data migration, no runtime impact, no agent-state repair.
+
+## Conclusion
+
+A focused Structure-over-Willpower fix for the operator's directive: auto-merge-on-green becomes the
+mandated final phase for every instar-dev tier, removing the redundant "ask to merge" pause while
+leaving the actual merge-safety mechanism (`safe-merge.mjs` + CI) untouched. Tier 1 (doc/process change
+to the dev skill); second-pass not required. It will be auto-merged on green per the very phase it adds.
+
+## Second-pass review (if required)
+
+**Reviewer:** not required — Tier-1 documentation/process change to the dev skill; no block/allow,
+session-lifecycle, sentinel/guard/gate, or recovery-path code is modified. The merge mechanism
+(`safe-merge.mjs`) and CI gates it relies on are unchanged.