instar 1.3.521 → 1.3.522

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.521",
+  "version": "1.3.522",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-06-13T09:25:14.093Z",
-  "instarVersion": "1.3.521",
+  "generatedAt": "2026-06-13T10:23:26.345Z",
+  "instarVersion": "1.3.522",
   "entryCount": 201,
   "entries": {
     "hook:session-start": {
@@ -418,7 +418,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a51902fc7fca91f2f85521696bd148a5e4fb5a8c308f376cafcf1247f659ac0f",
+      "contentHash": "0f8ee3aeadbc20cceb8d717583d9a195174679a1a181f87fc1ef04b6a4263d58",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -426,7 +426,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a51902fc7fca91f2f85521696bd148a5e4fb5a8c308f376cafcf1247f659ac0f",
+      "contentHash": "0f8ee3aeadbc20cceb8d717583d9a195174679a1a181f87fc1ef04b6a4263d58",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -434,7 +434,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a51902fc7fca91f2f85521696bd148a5e4fb5a8c308f376cafcf1247f659ac0f",
+      "contentHash": "0f8ee3aeadbc20cceb8d717583d9a195174679a1a181f87fc1ef04b6a4263d58",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -442,7 +442,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a51902fc7fca91f2f85521696bd148a5e4fb5a8c308f376cafcf1247f659ac0f",
+      "contentHash": "0f8ee3aeadbc20cceb8d717583d9a195174679a1a181f87fc1ef04b6a4263d58",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -450,7 +450,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a51902fc7fca91f2f85521696bd148a5e4fb5a8c308f376cafcf1247f659ac0f",
+      "contentHash": "0f8ee3aeadbc20cceb8d717583d9a195174679a1a181f87fc1ef04b6a4263d58",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -458,7 +458,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a51902fc7fca91f2f85521696bd148a5e4fb5a8c308f376cafcf1247f659ac0f",
+      "contentHash": "0f8ee3aeadbc20cceb8d717583d9a195174679a1a181f87fc1ef04b6a4263d58",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -466,7 +466,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a51902fc7fca91f2f85521696bd148a5e4fb5a8c308f376cafcf1247f659ac0f",
+      "contentHash": "0f8ee3aeadbc20cceb8d717583d9a195174679a1a181f87fc1ef04b6a4263d58",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -474,7 +474,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a51902fc7fca91f2f85521696bd148a5e4fb5a8c308f376cafcf1247f659ac0f",
+      "contentHash": "0f8ee3aeadbc20cceb8d717583d9a195174679a1a181f87fc1ef04b6a4263d58",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -482,7 +482,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a51902fc7fca91f2f85521696bd148a5e4fb5a8c308f376cafcf1247f659ac0f",
+      "contentHash": "0f8ee3aeadbc20cceb8d717583d9a195174679a1a181f87fc1ef04b6a4263d58",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -490,7 +490,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a51902fc7fca91f2f85521696bd148a5e4fb5a8c308f376cafcf1247f659ac0f",
+      "contentHash": "0f8ee3aeadbc20cceb8d717583d9a195174679a1a181f87fc1ef04b6a4263d58",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -498,7 +498,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a51902fc7fca91f2f85521696bd148a5e4fb5a8c308f376cafcf1247f659ac0f",
+      "contentHash": "0f8ee3aeadbc20cceb8d717583d9a195174679a1a181f87fc1ef04b6a4263d58",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -506,7 +506,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a51902fc7fca91f2f85521696bd148a5e4fb5a8c308f376cafcf1247f659ac0f",
+      "contentHash": "0f8ee3aeadbc20cceb8d717583d9a195174679a1a181f87fc1ef04b6a4263d58",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -514,7 +514,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a51902fc7fca91f2f85521696bd148a5e4fb5a8c308f376cafcf1247f659ac0f",
+      "contentHash": "0f8ee3aeadbc20cceb8d717583d9a195174679a1a181f87fc1ef04b6a4263d58",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -522,7 +522,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a51902fc7fca91f2f85521696bd148a5e4fb5a8c308f376cafcf1247f659ac0f",
+      "contentHash": "0f8ee3aeadbc20cceb8d717583d9a195174679a1a181f87fc1ef04b6a4263d58",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -530,7 +530,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a51902fc7fca91f2f85521696bd148a5e4fb5a8c308f376cafcf1247f659ac0f",
+      "contentHash": "0f8ee3aeadbc20cceb8d717583d9a195174679a1a181f87fc1ef04b6a4263d58",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -538,7 +538,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a51902fc7fca91f2f85521696bd148a5e4fb5a8c308f376cafcf1247f659ac0f",
+      "contentHash": "0f8ee3aeadbc20cceb8d717583d9a195174679a1a181f87fc1ef04b6a4263d58",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -546,7 +546,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a51902fc7fca91f2f85521696bd148a5e4fb5a8c308f376cafcf1247f659ac0f",
+      "contentHash": "0f8ee3aeadbc20cceb8d717583d9a195174679a1a181f87fc1ef04b6a4263d58",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -554,7 +554,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a51902fc7fca91f2f85521696bd148a5e4fb5a8c308f376cafcf1247f659ac0f",
+      "contentHash": "0f8ee3aeadbc20cceb8d717583d9a195174679a1a181f87fc1ef04b6a4263d58",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -562,7 +562,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a51902fc7fca91f2f85521696bd148a5e4fb5a8c308f376cafcf1247f659ac0f",
+      "contentHash": "0f8ee3aeadbc20cceb8d717583d9a195174679a1a181f87fc1ef04b6a4263d58",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -570,7 +570,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a51902fc7fca91f2f85521696bd148a5e4fb5a8c308f376cafcf1247f659ac0f",
+      "contentHash": "0f8ee3aeadbc20cceb8d717583d9a195174679a1a181f87fc1ef04b6a4263d58",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -578,7 +578,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a51902fc7fca91f2f85521696bd148a5e4fb5a8c308f376cafcf1247f659ac0f",
+      "contentHash": "0f8ee3aeadbc20cceb8d717583d9a195174679a1a181f87fc1ef04b6a4263d58",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -586,7 +586,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a51902fc7fca91f2f85521696bd148a5e4fb5a8c308f376cafcf1247f659ac0f",
+      "contentHash": "0f8ee3aeadbc20cceb8d717583d9a195174679a1a181f87fc1ef04b6a4263d58",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -594,7 +594,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a51902fc7fca91f2f85521696bd148a5e4fb5a8c308f376cafcf1247f659ac0f",
+      "contentHash": "0f8ee3aeadbc20cceb8d717583d9a195174679a1a181f87fc1ef04b6a4263d58",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -602,7 +602,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a51902fc7fca91f2f85521696bd148a5e4fb5a8c308f376cafcf1247f659ac0f",
+      "contentHash": "0f8ee3aeadbc20cceb8d717583d9a195174679a1a181f87fc1ef04b6a4263d58",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -610,7 +610,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a51902fc7fca91f2f85521696bd148a5e4fb5a8c308f376cafcf1247f659ac0f",
+      "contentHash": "0f8ee3aeadbc20cceb8d717583d9a195174679a1a181f87fc1ef04b6a4263d58",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -618,7 +618,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a51902fc7fca91f2f85521696bd148a5e4fb5a8c308f376cafcf1247f659ac0f",
+      "contentHash": "0f8ee3aeadbc20cceb8d717583d9a195174679a1a181f87fc1ef04b6a4263d58",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -626,7 +626,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a51902fc7fca91f2f85521696bd148a5e4fb5a8c308f376cafcf1247f659ac0f",
+      "contentHash": "0f8ee3aeadbc20cceb8d717583d9a195174679a1a181f87fc1ef04b6a4263d58",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -634,7 +634,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a51902fc7fca91f2f85521696bd148a5e4fb5a8c308f376cafcf1247f659ac0f",
+      "contentHash": "0f8ee3aeadbc20cceb8d717583d9a195174679a1a181f87fc1ef04b6a4263d58",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -642,7 +642,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a51902fc7fca91f2f85521696bd148a5e4fb5a8c308f376cafcf1247f659ac0f",
+      "contentHash": "0f8ee3aeadbc20cceb8d717583d9a195174679a1a181f87fc1ef04b6a4263d58",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -650,7 +650,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a51902fc7fca91f2f85521696bd148a5e4fb5a8c308f376cafcf1247f659ac0f",
+      "contentHash": "0f8ee3aeadbc20cceb8d717583d9a195174679a1a181f87fc1ef04b6a4263d58",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -658,7 +658,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a51902fc7fca91f2f85521696bd148a5e4fb5a8c308f376cafcf1247f659ac0f",
+      "contentHash": "0f8ee3aeadbc20cceb8d717583d9a195174679a1a181f87fc1ef04b6a4263d58",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -666,7 +666,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a51902fc7fca91f2f85521696bd148a5e4fb5a8c308f376cafcf1247f659ac0f",
+      "contentHash": "0f8ee3aeadbc20cceb8d717583d9a195174679a1a181f87fc1ef04b6a4263d58",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -674,7 +674,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a51902fc7fca91f2f85521696bd148a5e4fb5a8c308f376cafcf1247f659ac0f",
+      "contentHash": "0f8ee3aeadbc20cceb8d717583d9a195174679a1a181f87fc1ef04b6a4263d58",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -682,7 +682,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a51902fc7fca91f2f85521696bd148a5e4fb5a8c308f376cafcf1247f659ac0f",
+      "contentHash": "0f8ee3aeadbc20cceb8d717583d9a195174679a1a181f87fc1ef04b6a4263d58",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -690,7 +690,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a51902fc7fca91f2f85521696bd148a5e4fb5a8c308f376cafcf1247f659ac0f",
+      "contentHash": "0f8ee3aeadbc20cceb8d717583d9a195174679a1a181f87fc1ef04b6a4263d58",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -698,7 +698,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a51902fc7fca91f2f85521696bd148a5e4fb5a8c308f376cafcf1247f659ac0f",
+      "contentHash": "0f8ee3aeadbc20cceb8d717583d9a195174679a1a181f87fc1ef04b6a4263d58",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -706,7 +706,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a51902fc7fca91f2f85521696bd148a5e4fb5a8c308f376cafcf1247f659ac0f",
+      "contentHash": "0f8ee3aeadbc20cceb8d717583d9a195174679a1a181f87fc1ef04b6a4263d58",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -714,7 +714,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a51902fc7fca91f2f85521696bd148a5e4fb5a8c308f376cafcf1247f659ac0f",
+      "contentHash": "0f8ee3aeadbc20cceb8d717583d9a195174679a1a181f87fc1ef04b6a4263d58",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -722,7 +722,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a51902fc7fca91f2f85521696bd148a5e4fb5a8c308f376cafcf1247f659ac0f",
+      "contentHash": "0f8ee3aeadbc20cceb8d717583d9a195174679a1a181f87fc1ef04b6a4263d58",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -730,7 +730,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a51902fc7fca91f2f85521696bd148a5e4fb5a8c308f376cafcf1247f659ac0f",
+      "contentHash": "0f8ee3aeadbc20cceb8d717583d9a195174679a1a181f87fc1ef04b6a4263d58",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -738,7 +738,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a51902fc7fca91f2f85521696bd148a5e4fb5a8c308f376cafcf1247f659ac0f",
+      "contentHash": "0f8ee3aeadbc20cceb8d717583d9a195174679a1a181f87fc1ef04b6a4263d58",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -746,7 +746,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a51902fc7fca91f2f85521696bd148a5e4fb5a8c308f376cafcf1247f659ac0f",
+      "contentHash": "0f8ee3aeadbc20cceb8d717583d9a195174679a1a181f87fc1ef04b6a4263d58",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -754,7 +754,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a51902fc7fca91f2f85521696bd148a5e4fb5a8c308f376cafcf1247f659ac0f",
+      "contentHash": "0f8ee3aeadbc20cceb8d717583d9a195174679a1a181f87fc1ef04b6a4263d58",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -770,7 +770,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a51902fc7fca91f2f85521696bd148a5e4fb5a8c308f376cafcf1247f659ac0f",
+      "contentHash": "0f8ee3aeadbc20cceb8d717583d9a195174679a1a181f87fc1ef04b6a4263d58",
       "since": "2025-01-01"
     },
     "cli:init": {
@@ -1522,7 +1522,7 @@
       "type": "subsystem",
       "domain": "server",
       "sourcePath": "src/server/AgentServer.ts",
-      "contentHash": "b1cb551d8bfe1d9480e66b22b2937648715aea9559f7499a15cd89dcb736bd29",
+      "contentHash": "db7ec67cd606ba59dba8acb7f821204a795b7425acb404482a9b5f416f94a1f6",
       "since": "2025-01-01"
     },
     "subsystem:session-manager": {

package/upgrades/1.3.522.md

@@ -0,0 +1,25 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: minor -->
+
+## What Changed
+
+A new dark, dev-gated, signal-only monitoring component — **OrphanedWorkSentinel** — detects agent worktrees that hold uncommitted work whose owning session has died and settled, records each durably, and raises ONE deduped agent-health attention item. It needs nothing registered: it reads the stranded work straight off disk (worktree dirty + no live process/lock + quiet for a settle window), closing the gap the PromiseBeacon escalation ladder (#1093/#1097) cannot see — that ladder acts only on REGISTERED commitments, while this catches code stranded by a dead build/autonomous session with no obligation representing it.
+
+It is the inverse of `AgentWorktreeReaper` (which reclaims clean+merged+idle worktrees and leaves anything dirty alone) and shares the same git signal sources so worktree discovery + process-cwd liveness have ONE implementation. An optional, off-by-default `preserveWork` writes a NON-destructive preservation patch (read-only `git diff` to a state-dir file; never mutates the worktree, index, or ref). Read surface: `GET /orphaned-work` (503 when dark, 200 when live). Ships dark on the fleet, live on the development agent via the `developmentAgent` dark-feature gate.
+
+audience: agent-only
+maturity: experimental
+
+## What to Tell Your User
+
+Nothing to announce — this is an experimental, agent-only safety net that runs quietly in the background. If anyone asks: I now notice when a background work session dies before saving its changes, so that work gets surfaced instead of vanishing silently.
+
+## Summary of New Capabilities
+
+| Capability | How to Use |
+|-----------|-----------|
+| Detect work stranded by a dead session | Automatic (dark on fleet, live on dev agent) |
+| Inspect orphaned-work findings | `GET /orphaned-work` |
+| Non-destructive preservation patch | Off by default; opt-in config |

package/upgrades/side-effects/orphaned-work-sentinel.md

@@ -0,0 +1,40 @@
+# Side-effects review — OrphanedWorkSentinel (silent-uncommitted-death backstop)
+
+## 1. What changed
+
+A new dark, dev-gated, signal-only monitoring sentinel that detects agent worktrees with uncommitted work whose owning session is dead + settled, records them durably, and raises ONE deduped agent-health attention item. Optional off-by-default non-destructive preservation patch.
+
+- `src/monitoring/OrphanedWorkSentinel.ts` — class + pure classifier + config.
+- `src/monitoring/orphanedWorkGit.ts` — git/fs-backed deps (reuses `agentWorktreeGit` helpers).
+- Config type (`src/core/types.ts`), default with `enabled` OMITTED (`src/config/ConfigDefaults.ts`).
+- Dev-gate registration (`src/core/devGatedFeatures.ts`).
+- Server wiring (`src/commands/server.ts`), route ctx + `GET /orphaned-work` (`src/server/AgentServer.ts`, `src/server/routes.ts`).
+- Route classification in `src/server/CapabilityIndex.ts` (INTERNAL — observability the agent reads).
+- 3-tier tests: unit (classifier + real-git deps), integration (route), e2e (feature alive).
+
+## 2. Blast radius
+
+Read-only on the fleet (dark; route 503s). On a dev agent: a background timer runs one git/lsof scan per `scanIntervalMs` (default 10 min) over the agent's `.worktrees/`, records to `state/orphaned-work.jsonl`, and may raise ONE agent-health attention item per stranded worktree episode (deduped on path+content-signature; the agent-health lane routes to the calm "🩺 Agent Health" topic — never a per-item topic flood).
+
+## 3. Destructive actions
+
+None by default. The only mutation is the optional `preserveWork` sub-flag (off for everyone): it writes a patch FILE under the state dir from `git diff HEAD` (read-only) + the untracked file list. It never touches the worktree, its index, or any ref, and never deletes anything.
+
+## 4. Reversibility
+
+Fully reversible: it ships dark; disabling the dev-gate (or `enabled: false`) stops it. No data migration, no schema change. The durable jsonl + patch files are additive and bounded.
+
+## 5. Failure modes
+
+- `lsof`/git read failure → empty/clean signal → SKIP (never a false orphan). Recording/attention are best-effort (wrapped) and never throw the scan pass. Server wiring is wrapped in try/catch (non-fatal). Episode dedupe prevents re-alert spam; `maxFlagsPerPass` bounds blast radius.
+
+## 6. Operator-surface quality
+
+N/A — this change touches NO operator surface (no dashboard renderer/markup, no approval/grant/secret form). The only user-facing output is a plain-language agent-health attention item, authored in plain English ("a build died here with uncommitted changes — open the worktree to finish it, or discard"). No raw internals are surfaced to the user.
+
+## 7. Standards
+
+- Dev-agent dark-gate: `enabled` OMITTED + registered in `DEV_GATED_FEATURES` (lint + wiring test green).
+- Migration Parity: default added to `ConfigDefaults.ts` → `applyDefaults` propagates to existing agents automatically.
+- Testing Integrity: all 3 tiers + real-git wiring-integrity test.
+- Capability discoverability: route prefix classified INTERNAL.