instar 1.3.499 → 1.3.500

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.499",
+  "version": "1.3.500",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/skills/spec-converge/SKILL.md

@@ -61,6 +61,29 @@ The skill adds `review-convergence`, `review-iterations`, `review-completed-at`,
 
 ### Phase 1 — Initial review round
 
+**Standards-Conformance Gate auto-invocation (MANDATORY, every round).** Before
+spawning the reviewers, the agent calls the constitution inspector against the spec
+and feeds its report into the round as a reviewer input:
+
+```bash
+AUTH=$(python3 -c "import json; print(json.load(open('.instar/config.json')).get('authToken',''))" 2>/dev/null)
+PORT=$(python3 -c "import json; print(json.load(open('.instar/config.json')).get('port',4040))" 2>/dev/null)
+curl -sS -m 90 -X POST -H "Authorization: Bearer ${AUTH:-$INSTAR_AUTH_TOKEN}" -H 'Content-Type: application/json' \
+  -d "{\"specPath\": \"$(realpath docs/specs/<slug>.md)\"}" \
+  "http://localhost:${PORT}/spec/conformance-check"
+```
+
+The report is SIGNAL-ONLY (it never blocks — Signal vs. Authority), but it is not
+optional to RUN: its per-standard flags are handed to the reviewers alongside the
+spec (the lessons-aware reviewer in particular must engage every flagged standard),
+and the convergence report's Iteration Summary records one line per round —
+`Standards-Conformance Gate: ran (N flags)` or, honestly, `unavailable: <reason>`
+(server down / route 503). An unavailable gate NEVER blocks convergence, but a
+SKIPPED-without-reason gate fails report validation. This closes the 2026-06-12
+finding (topic 13481): the gate shipped 2026-05-24 explicitly staged for this exact
+wiring, and the staging lived only in prose — zero runs in 19 days. Auto-invocation
+is now part of the round itself, not a remembered follow-up.
+
 The skill spawns reviewers in parallel:
 
 **Internal reviewers (Claude subagents):**

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-06-12T22:38:17.006Z",
-  "instarVersion": "1.3.499",
+  "generatedAt": "2026-06-12T22:55:28.388Z",
+  "instarVersion": "1.3.500",
   "entryCount": 201,
   "entries": {
     "hook:session-start": {
@@ -11,7 +11,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/session-start.sh",
-      "contentHash": "1c55628007e83a3bb8eb4ef113dd0811cdfb01086d46cba9d7ebf5f3707e5562",
+      "contentHash": "4cadffedf5765aee7afb11ed290bbcf43545059d7dc85cea865a8982fd414f9b",
       "since": "2025-01-01"
     },
     "hook:dangerous-command-guard": {
@@ -20,7 +20,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/dangerous-command-guard.sh",
-      "contentHash": "1c55628007e83a3bb8eb4ef113dd0811cdfb01086d46cba9d7ebf5f3707e5562",
+      "contentHash": "4cadffedf5765aee7afb11ed290bbcf43545059d7dc85cea865a8982fd414f9b",
       "since": "2025-01-01"
     },
     "hook:grounding-before-messaging": {
@@ -29,7 +29,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/grounding-before-messaging.sh",
-      "contentHash": "1c55628007e83a3bb8eb4ef113dd0811cdfb01086d46cba9d7ebf5f3707e5562",
+      "contentHash": "4cadffedf5765aee7afb11ed290bbcf43545059d7dc85cea865a8982fd414f9b",
       "since": "2025-01-01"
     },
     "hook:compaction-recovery": {
@@ -38,7 +38,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/compaction-recovery.sh",
-      "contentHash": "1c55628007e83a3bb8eb4ef113dd0811cdfb01086d46cba9d7ebf5f3707e5562",
+      "contentHash": "4cadffedf5765aee7afb11ed290bbcf43545059d7dc85cea865a8982fd414f9b",
       "since": "2025-01-01"
     },
     "hook:external-operation-gate": {
@@ -47,7 +47,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-operation-gate.js",
-      "contentHash": "1c55628007e83a3bb8eb4ef113dd0811cdfb01086d46cba9d7ebf5f3707e5562",
+      "contentHash": "4cadffedf5765aee7afb11ed290bbcf43545059d7dc85cea865a8982fd414f9b",
       "since": "2025-01-01"
     },
     "hook:deferral-detector": {
@@ -56,7 +56,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/deferral-detector.js",
-      "contentHash": "1c55628007e83a3bb8eb4ef113dd0811cdfb01086d46cba9d7ebf5f3707e5562",
+      "contentHash": "4cadffedf5765aee7afb11ed290bbcf43545059d7dc85cea865a8982fd414f9b",
       "since": "2025-01-01"
     },
     "hook:self-stop-guard": {
@@ -65,7 +65,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/self-stop-guard.js",
-      "contentHash": "1c55628007e83a3bb8eb4ef113dd0811cdfb01086d46cba9d7ebf5f3707e5562",
+      "contentHash": "4cadffedf5765aee7afb11ed290bbcf43545059d7dc85cea865a8982fd414f9b",
       "since": "2025-01-01"
     },
     "hook:post-action-reflection": {
@@ -74,7 +74,7 @@
       "domain": "evolution",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/post-action-reflection.js",
-      "contentHash": "1c55628007e83a3bb8eb4ef113dd0811cdfb01086d46cba9d7ebf5f3707e5562",
+      "contentHash": "4cadffedf5765aee7afb11ed290bbcf43545059d7dc85cea865a8982fd414f9b",
       "since": "2025-01-01"
     },
     "hook:external-communication-guard": {
@@ -83,7 +83,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-communication-guard.js",
-      "contentHash": "1c55628007e83a3bb8eb4ef113dd0811cdfb01086d46cba9d7ebf5f3707e5562",
+      "contentHash": "4cadffedf5765aee7afb11ed290bbcf43545059d7dc85cea865a8982fd414f9b",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-collector": {
@@ -92,7 +92,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-collector.js",
-      "contentHash": "1c55628007e83a3bb8eb4ef113dd0811cdfb01086d46cba9d7ebf5f3707e5562",
+      "contentHash": "4cadffedf5765aee7afb11ed290bbcf43545059d7dc85cea865a8982fd414f9b",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-checkpoint": {
@@ -101,7 +101,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-checkpoint.js",
-      "contentHash": "1c55628007e83a3bb8eb4ef113dd0811cdfb01086d46cba9d7ebf5f3707e5562",
+      "contentHash": "4cadffedf5765aee7afb11ed290bbcf43545059d7dc85cea865a8982fd414f9b",
       "since": "2025-01-01"
     },
     "hook:free-text-guard": {
@@ -110,7 +110,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/free-text-guard.sh",
-      "contentHash": "1c55628007e83a3bb8eb4ef113dd0811cdfb01086d46cba9d7ebf5f3707e5562",
+      "contentHash": "4cadffedf5765aee7afb11ed290bbcf43545059d7dc85cea865a8982fd414f9b",
       "since": "2025-01-01"
     },
     "hook:claim-intercept": {
@@ -119,7 +119,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept.js",
-      "contentHash": "1c55628007e83a3bb8eb4ef113dd0811cdfb01086d46cba9d7ebf5f3707e5562",
+      "contentHash": "4cadffedf5765aee7afb11ed290bbcf43545059d7dc85cea865a8982fd414f9b",
       "since": "2025-01-01"
     },
     "hook:claim-intercept-response": {
@@ -128,7 +128,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept-response.js",
-      "contentHash": "1c55628007e83a3bb8eb4ef113dd0811cdfb01086d46cba9d7ebf5f3707e5562",
+      "contentHash": "4cadffedf5765aee7afb11ed290bbcf43545059d7dc85cea865a8982fd414f9b",
       "since": "2025-01-01"
     },
     "hook:stop-gate-router": {
@@ -137,7 +137,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/stop-gate-router.js",
-      "contentHash": "1c55628007e83a3bb8eb4ef113dd0811cdfb01086d46cba9d7ebf5f3707e5562",
+      "contentHash": "4cadffedf5765aee7afb11ed290bbcf43545059d7dc85cea865a8982fd414f9b",
       "since": "2025-01-01"
     },
     "hook:auto-approve-permissions": {
@@ -146,7 +146,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/auto-approve-permissions.js",
-      "contentHash": "1c55628007e83a3bb8eb4ef113dd0811cdfb01086d46cba9d7ebf5f3707e5562",
+      "contentHash": "4cadffedf5765aee7afb11ed290bbcf43545059d7dc85cea865a8982fd414f9b",
       "since": "2025-01-01"
     },
     "job:health-check": {
@@ -1554,7 +1554,7 @@
       "type": "subsystem",
       "domain": "updates",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
-      "contentHash": "1c55628007e83a3bb8eb4ef113dd0811cdfb01086d46cba9d7ebf5f3707e5562",
+      "contentHash": "4cadffedf5765aee7afb11ed290bbcf43545059d7dc85cea865a8982fd414f9b",
       "since": "2025-01-01"
     },
     "subsystem:scheduler": {

package/upgrades/1.3.500.md

@@ -0,0 +1,43 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+The Standards-Conformance Gate (shipped 2026-05-24, #373: reads the constitution,
+checks any spec against every standard, signal-only) had ZERO runs in 19 days —
+its spec-review wiring was staged in prose and never tracked (operator finding,
+2026-06-12 topic 13481). Now: spec-converge Phase 1 carries a MANDATORY
+auto-invocation step (`POST /spec/conformance-check`; flags feed the reviewers; each
+round's report records `ran (N flags)` or an honest `unavailable: <reason>`; an
+unexplained skip fails report validation). The constitution registry prose is updated
+to the true current state, and `migrateConformanceGateAutoInvoke` delivers the
+updated skill content to deployed agents (marker/fingerprint pattern, customized
+files untouched, idempotent). The wider documented-only→enforced program is tracked
+as CMT-1426.
+
+## What to Tell Your User
+
+- "The inspector that checks every new plan against my constitution now runs
+  automatically on every spec review — it had been built but sat unused for three
+  weeks because the follow-up to wire it in was never tracked. That gap is closed,
+  and converting the rest of the constitution's written rules into enforced gates is
+  now a tracked program."
+
+## Summary of New Capabilities
+
+| Capability | How to Use |
+|-----------|-----------|
+| Constitution check on every spec review | Automatic — recorded per round in each convergence report |
+
+## Evidence
+
+- `tests/unit/PostUpdateMigrator-conformanceAutoInvoke.test.ts` — 4 tests: bundled
+  skill carries the step; stock copies upgraded + idempotent; customized copies
+  untouched; registry prose honesty locked (the stale "not yet auto-invoked" claim
+  can never silently return).
+- `tsc --noEmit` clean; migration suites green.
+- Side-effects: `upgrades/side-effects/conformance-gate-autoinvoke.md` (answers the
+  new §7 multi-machine posture question shipped this morning — the gate dogfooding
+  itself twice in one day). ELI16: `docs/eli16/conformance-gate-autoinvoke.md`.

package/upgrades/side-effects/conformance-gate-autoinvoke.md

@@ -0,0 +1,58 @@
+# Side-Effects Review — Standards-Conformance Gate auto-invocation
+
+**Trigger:** operator finding (2026-06-12 topic 13481): the gate shipped 2026-05-24
+explicitly staged for spec-review wiring; the staging lived only in registry prose →
+zero runs in 19 days. ("What's the point of building something and not using it?")
+**Change:** spec-converge Phase 1 gains a MANDATORY auto-invocation step — call
+`POST /spec/conformance-check`, feed the per-standard flags to the reviewers, record
+`ran (N flags)` / `unavailable: <reason>` per round in the convergence report; a
+skipped-without-reason gate fails report validation. Registry prose updated to the
+honest current state (auto-invoked as of 2026-06-12, CMT-1426 tracks the wider
+enforcement-ratio program). PostUpdateMigrator delivers the updated skill content to
+deployed agents (established marker/fingerprint pattern).
+
+## 1. Over-block
+None: the gate's report is signal-only and an UNAVAILABLE gate (server down, 503)
+never blocks convergence — only an unexplained skip fails validation, which costs one
+honest sentence.
+
+## 2. Under-block
+The mandate lives in skill instructions + report validation, not a programmatic hook
+— a determined skip mislabeled "unavailable" would pass until the conformance
+metrics funnel (GET /spec/conformance-metrics, already shipped) shows zero runs
+against nonzero convergences; CMT-1426's cadence reviews exactly that number. Named
+honestly: this is the signal-first phase per Signal vs. Authority.
+
+## 3. Level-of-abstraction fit
+The wiring belongs in the round that consumes it (Phase 1) — not a cron, not a
+separate job: the gate's value is per-spec flags reaching the reviewers of that spec.
+
+## 4. Signal vs authority compliance
+Fully signal-only by construction; blocking authority remains a later, earned phase
+(unchanged from the gate's own converged spec).
+
+## 5. Interactions
+Composes with the existing 8-reviewer round (a ninth input, not a new reviewer
+spawn); the conformance route's extended timeout budget (middleware) already exists;
+migration ordering with the posture migration converges either way (both copy the
+same bundled file; markers are distinct).
+
+## 6. External surfaces
+None beyond the install base (skill content + registry prose + migration).
+
+## 7. Multi-machine posture (Cross-Machine Coherence)
+**machine-local BY DESIGN, with reason** — per-machine installed skill content kept
+current by each machine's own update cycle (same posture as PR #1088's files). The
+conformance CHECK itself runs against the local server of whichever machine runs the
+spec review — correct, since the spec being reviewed lives in that machine's
+worktree. No user-facing notices, no durable runtime state, no generated URLs.
+
+## 8. Rollback cost
+Revert the skill/registry edits and ship; the migration is marker-gated (a reverted
+bundle stops patching; already-patched agents keep a mandatory step that calls a
+still-existing, signal-only route — benign).
+
+## Second-pass review
+Not required — no block/allow runtime decisions, no session lifecycle, no
+gate/sentinel/watchdog RUNTIME surface (the "gate" here is review-process content;
+the route it calls is unchanged).