instar 1.3.601 → 1.3.603

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-06-16T15:30:58.206Z",
-  "instarVersion": "1.3.601",
+  "generatedAt": "2026-06-16T23:45:33.497Z",
+  "instarVersion": "1.3.603",
   "entryCount": 201,
   "entries": {
     "hook:session-start": {
@@ -11,7 +11,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/session-start.sh",
-      "contentHash": "5ac8860bfc95a287e494ecbb362d0a08e2c46674fc02f371fd5195558a29d3a3",
+      "contentHash": "95b0cb4cc6c58c2f75fdf411848c92d477dbdfcd3574e7369d740785643884cd",
       "since": "2025-01-01"
     },
     "hook:dangerous-command-guard": {
@@ -20,7 +20,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/dangerous-command-guard.sh",
-      "contentHash": "5ac8860bfc95a287e494ecbb362d0a08e2c46674fc02f371fd5195558a29d3a3",
+      "contentHash": "95b0cb4cc6c58c2f75fdf411848c92d477dbdfcd3574e7369d740785643884cd",
       "since": "2025-01-01"
     },
     "hook:grounding-before-messaging": {
@@ -29,7 +29,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/grounding-before-messaging.sh",
-      "contentHash": "5ac8860bfc95a287e494ecbb362d0a08e2c46674fc02f371fd5195558a29d3a3",
+      "contentHash": "95b0cb4cc6c58c2f75fdf411848c92d477dbdfcd3574e7369d740785643884cd",
       "since": "2025-01-01"
     },
     "hook:compaction-recovery": {
@@ -38,7 +38,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/compaction-recovery.sh",
-      "contentHash": "5ac8860bfc95a287e494ecbb362d0a08e2c46674fc02f371fd5195558a29d3a3",
+      "contentHash": "95b0cb4cc6c58c2f75fdf411848c92d477dbdfcd3574e7369d740785643884cd",
       "since": "2025-01-01"
     },
     "hook:external-operation-gate": {
@@ -47,7 +47,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-operation-gate.js",
-      "contentHash": "5ac8860bfc95a287e494ecbb362d0a08e2c46674fc02f371fd5195558a29d3a3",
+      "contentHash": "95b0cb4cc6c58c2f75fdf411848c92d477dbdfcd3574e7369d740785643884cd",
       "since": "2025-01-01"
     },
     "hook:deferral-detector": {
@@ -56,7 +56,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/deferral-detector.js",
-      "contentHash": "5ac8860bfc95a287e494ecbb362d0a08e2c46674fc02f371fd5195558a29d3a3",
+      "contentHash": "95b0cb4cc6c58c2f75fdf411848c92d477dbdfcd3574e7369d740785643884cd",
       "since": "2025-01-01"
     },
     "hook:self-stop-guard": {
@@ -65,7 +65,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/self-stop-guard.js",
-      "contentHash": "5ac8860bfc95a287e494ecbb362d0a08e2c46674fc02f371fd5195558a29d3a3",
+      "contentHash": "95b0cb4cc6c58c2f75fdf411848c92d477dbdfcd3574e7369d740785643884cd",
       "since": "2025-01-01"
     },
     "hook:post-action-reflection": {
@@ -74,7 +74,7 @@
       "domain": "evolution",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/post-action-reflection.js",
-      "contentHash": "5ac8860bfc95a287e494ecbb362d0a08e2c46674fc02f371fd5195558a29d3a3",
+      "contentHash": "95b0cb4cc6c58c2f75fdf411848c92d477dbdfcd3574e7369d740785643884cd",
       "since": "2025-01-01"
     },
     "hook:external-communication-guard": {
@@ -83,7 +83,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-communication-guard.js",
-      "contentHash": "5ac8860bfc95a287e494ecbb362d0a08e2c46674fc02f371fd5195558a29d3a3",
+      "contentHash": "95b0cb4cc6c58c2f75fdf411848c92d477dbdfcd3574e7369d740785643884cd",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-collector": {
@@ -92,7 +92,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-collector.js",
-      "contentHash": "5ac8860bfc95a287e494ecbb362d0a08e2c46674fc02f371fd5195558a29d3a3",
+      "contentHash": "95b0cb4cc6c58c2f75fdf411848c92d477dbdfcd3574e7369d740785643884cd",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-checkpoint": {
@@ -101,7 +101,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-checkpoint.js",
-      "contentHash": "5ac8860bfc95a287e494ecbb362d0a08e2c46674fc02f371fd5195558a29d3a3",
+      "contentHash": "95b0cb4cc6c58c2f75fdf411848c92d477dbdfcd3574e7369d740785643884cd",
       "since": "2025-01-01"
     },
     "hook:free-text-guard": {
@@ -110,7 +110,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/free-text-guard.sh",
-      "contentHash": "5ac8860bfc95a287e494ecbb362d0a08e2c46674fc02f371fd5195558a29d3a3",
+      "contentHash": "95b0cb4cc6c58c2f75fdf411848c92d477dbdfcd3574e7369d740785643884cd",
       "since": "2025-01-01"
     },
     "hook:claim-intercept": {
@@ -119,7 +119,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept.js",
-      "contentHash": "5ac8860bfc95a287e494ecbb362d0a08e2c46674fc02f371fd5195558a29d3a3",
+      "contentHash": "95b0cb4cc6c58c2f75fdf411848c92d477dbdfcd3574e7369d740785643884cd",
       "since": "2025-01-01"
     },
     "hook:claim-intercept-response": {
@@ -128,7 +128,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept-response.js",
-      "contentHash": "5ac8860bfc95a287e494ecbb362d0a08e2c46674fc02f371fd5195558a29d3a3",
+      "contentHash": "95b0cb4cc6c58c2f75fdf411848c92d477dbdfcd3574e7369d740785643884cd",
       "since": "2025-01-01"
     },
     "hook:stop-gate-router": {
@@ -137,7 +137,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/stop-gate-router.js",
-      "contentHash": "5ac8860bfc95a287e494ecbb362d0a08e2c46674fc02f371fd5195558a29d3a3",
+      "contentHash": "95b0cb4cc6c58c2f75fdf411848c92d477dbdfcd3574e7369d740785643884cd",
       "since": "2025-01-01"
     },
     "hook:auto-approve-permissions": {
@@ -146,7 +146,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/auto-approve-permissions.js",
-      "contentHash": "5ac8860bfc95a287e494ecbb362d0a08e2c46674fc02f371fd5195558a29d3a3",
+      "contentHash": "95b0cb4cc6c58c2f75fdf411848c92d477dbdfcd3574e7369d740785643884cd",
       "since": "2025-01-01"
     },
     "job:health-check": {
@@ -418,7 +418,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ef1ab9fcdf7735731e3dd43cdb89ef2211c7ad6755311d1989ac1013da201f46",
+      "contentHash": "2241f1f32dee1b3c36243721735ac371ede4ed7c55a9ae56eddef926d78b52bc",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -426,7 +426,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ef1ab9fcdf7735731e3dd43cdb89ef2211c7ad6755311d1989ac1013da201f46",
+      "contentHash": "2241f1f32dee1b3c36243721735ac371ede4ed7c55a9ae56eddef926d78b52bc",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -434,7 +434,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ef1ab9fcdf7735731e3dd43cdb89ef2211c7ad6755311d1989ac1013da201f46",
+      "contentHash": "2241f1f32dee1b3c36243721735ac371ede4ed7c55a9ae56eddef926d78b52bc",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -442,7 +442,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ef1ab9fcdf7735731e3dd43cdb89ef2211c7ad6755311d1989ac1013da201f46",
+      "contentHash": "2241f1f32dee1b3c36243721735ac371ede4ed7c55a9ae56eddef926d78b52bc",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -450,7 +450,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ef1ab9fcdf7735731e3dd43cdb89ef2211c7ad6755311d1989ac1013da201f46",
+      "contentHash": "2241f1f32dee1b3c36243721735ac371ede4ed7c55a9ae56eddef926d78b52bc",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -458,7 +458,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ef1ab9fcdf7735731e3dd43cdb89ef2211c7ad6755311d1989ac1013da201f46",
+      "contentHash": "2241f1f32dee1b3c36243721735ac371ede4ed7c55a9ae56eddef926d78b52bc",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -466,7 +466,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ef1ab9fcdf7735731e3dd43cdb89ef2211c7ad6755311d1989ac1013da201f46",
+      "contentHash": "2241f1f32dee1b3c36243721735ac371ede4ed7c55a9ae56eddef926d78b52bc",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -474,7 +474,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ef1ab9fcdf7735731e3dd43cdb89ef2211c7ad6755311d1989ac1013da201f46",
+      "contentHash": "2241f1f32dee1b3c36243721735ac371ede4ed7c55a9ae56eddef926d78b52bc",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -482,7 +482,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ef1ab9fcdf7735731e3dd43cdb89ef2211c7ad6755311d1989ac1013da201f46",
+      "contentHash": "2241f1f32dee1b3c36243721735ac371ede4ed7c55a9ae56eddef926d78b52bc",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -490,7 +490,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ef1ab9fcdf7735731e3dd43cdb89ef2211c7ad6755311d1989ac1013da201f46",
+      "contentHash": "2241f1f32dee1b3c36243721735ac371ede4ed7c55a9ae56eddef926d78b52bc",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -498,7 +498,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ef1ab9fcdf7735731e3dd43cdb89ef2211c7ad6755311d1989ac1013da201f46",
+      "contentHash": "2241f1f32dee1b3c36243721735ac371ede4ed7c55a9ae56eddef926d78b52bc",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -506,7 +506,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ef1ab9fcdf7735731e3dd43cdb89ef2211c7ad6755311d1989ac1013da201f46",
+      "contentHash": "2241f1f32dee1b3c36243721735ac371ede4ed7c55a9ae56eddef926d78b52bc",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -514,7 +514,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ef1ab9fcdf7735731e3dd43cdb89ef2211c7ad6755311d1989ac1013da201f46",
+      "contentHash": "2241f1f32dee1b3c36243721735ac371ede4ed7c55a9ae56eddef926d78b52bc",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -522,7 +522,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ef1ab9fcdf7735731e3dd43cdb89ef2211c7ad6755311d1989ac1013da201f46",
+      "contentHash": "2241f1f32dee1b3c36243721735ac371ede4ed7c55a9ae56eddef926d78b52bc",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -530,7 +530,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ef1ab9fcdf7735731e3dd43cdb89ef2211c7ad6755311d1989ac1013da201f46",
+      "contentHash": "2241f1f32dee1b3c36243721735ac371ede4ed7c55a9ae56eddef926d78b52bc",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -538,7 +538,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ef1ab9fcdf7735731e3dd43cdb89ef2211c7ad6755311d1989ac1013da201f46",
+      "contentHash": "2241f1f32dee1b3c36243721735ac371ede4ed7c55a9ae56eddef926d78b52bc",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -546,7 +546,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ef1ab9fcdf7735731e3dd43cdb89ef2211c7ad6755311d1989ac1013da201f46",
+      "contentHash": "2241f1f32dee1b3c36243721735ac371ede4ed7c55a9ae56eddef926d78b52bc",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -554,7 +554,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ef1ab9fcdf7735731e3dd43cdb89ef2211c7ad6755311d1989ac1013da201f46",
+      "contentHash": "2241f1f32dee1b3c36243721735ac371ede4ed7c55a9ae56eddef926d78b52bc",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -562,7 +562,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ef1ab9fcdf7735731e3dd43cdb89ef2211c7ad6755311d1989ac1013da201f46",
+      "contentHash": "2241f1f32dee1b3c36243721735ac371ede4ed7c55a9ae56eddef926d78b52bc",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -570,7 +570,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ef1ab9fcdf7735731e3dd43cdb89ef2211c7ad6755311d1989ac1013da201f46",
+      "contentHash": "2241f1f32dee1b3c36243721735ac371ede4ed7c55a9ae56eddef926d78b52bc",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -578,7 +578,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ef1ab9fcdf7735731e3dd43cdb89ef2211c7ad6755311d1989ac1013da201f46",
+      "contentHash": "2241f1f32dee1b3c36243721735ac371ede4ed7c55a9ae56eddef926d78b52bc",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -586,7 +586,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ef1ab9fcdf7735731e3dd43cdb89ef2211c7ad6755311d1989ac1013da201f46",
+      "contentHash": "2241f1f32dee1b3c36243721735ac371ede4ed7c55a9ae56eddef926d78b52bc",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -594,7 +594,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ef1ab9fcdf7735731e3dd43cdb89ef2211c7ad6755311d1989ac1013da201f46",
+      "contentHash": "2241f1f32dee1b3c36243721735ac371ede4ed7c55a9ae56eddef926d78b52bc",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -602,7 +602,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ef1ab9fcdf7735731e3dd43cdb89ef2211c7ad6755311d1989ac1013da201f46",
+      "contentHash": "2241f1f32dee1b3c36243721735ac371ede4ed7c55a9ae56eddef926d78b52bc",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -610,7 +610,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ef1ab9fcdf7735731e3dd43cdb89ef2211c7ad6755311d1989ac1013da201f46",
+      "contentHash": "2241f1f32dee1b3c36243721735ac371ede4ed7c55a9ae56eddef926d78b52bc",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -618,7 +618,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ef1ab9fcdf7735731e3dd43cdb89ef2211c7ad6755311d1989ac1013da201f46",
+      "contentHash": "2241f1f32dee1b3c36243721735ac371ede4ed7c55a9ae56eddef926d78b52bc",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -626,7 +626,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ef1ab9fcdf7735731e3dd43cdb89ef2211c7ad6755311d1989ac1013da201f46",
+      "contentHash": "2241f1f32dee1b3c36243721735ac371ede4ed7c55a9ae56eddef926d78b52bc",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -634,7 +634,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ef1ab9fcdf7735731e3dd43cdb89ef2211c7ad6755311d1989ac1013da201f46",
+      "contentHash": "2241f1f32dee1b3c36243721735ac371ede4ed7c55a9ae56eddef926d78b52bc",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -642,7 +642,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ef1ab9fcdf7735731e3dd43cdb89ef2211c7ad6755311d1989ac1013da201f46",
+      "contentHash": "2241f1f32dee1b3c36243721735ac371ede4ed7c55a9ae56eddef926d78b52bc",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -650,7 +650,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ef1ab9fcdf7735731e3dd43cdb89ef2211c7ad6755311d1989ac1013da201f46",
+      "contentHash": "2241f1f32dee1b3c36243721735ac371ede4ed7c55a9ae56eddef926d78b52bc",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -658,7 +658,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ef1ab9fcdf7735731e3dd43cdb89ef2211c7ad6755311d1989ac1013da201f46",
+      "contentHash": "2241f1f32dee1b3c36243721735ac371ede4ed7c55a9ae56eddef926d78b52bc",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -666,7 +666,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ef1ab9fcdf7735731e3dd43cdb89ef2211c7ad6755311d1989ac1013da201f46",
+      "contentHash": "2241f1f32dee1b3c36243721735ac371ede4ed7c55a9ae56eddef926d78b52bc",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -674,7 +674,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ef1ab9fcdf7735731e3dd43cdb89ef2211c7ad6755311d1989ac1013da201f46",
+      "contentHash": "2241f1f32dee1b3c36243721735ac371ede4ed7c55a9ae56eddef926d78b52bc",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -682,7 +682,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ef1ab9fcdf7735731e3dd43cdb89ef2211c7ad6755311d1989ac1013da201f46",
+      "contentHash": "2241f1f32dee1b3c36243721735ac371ede4ed7c55a9ae56eddef926d78b52bc",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -690,7 +690,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ef1ab9fcdf7735731e3dd43cdb89ef2211c7ad6755311d1989ac1013da201f46",
+      "contentHash": "2241f1f32dee1b3c36243721735ac371ede4ed7c55a9ae56eddef926d78b52bc",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -698,7 +698,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ef1ab9fcdf7735731e3dd43cdb89ef2211c7ad6755311d1989ac1013da201f46",
+      "contentHash": "2241f1f32dee1b3c36243721735ac371ede4ed7c55a9ae56eddef926d78b52bc",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -706,7 +706,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ef1ab9fcdf7735731e3dd43cdb89ef2211c7ad6755311d1989ac1013da201f46",
+      "contentHash": "2241f1f32dee1b3c36243721735ac371ede4ed7c55a9ae56eddef926d78b52bc",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -714,7 +714,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ef1ab9fcdf7735731e3dd43cdb89ef2211c7ad6755311d1989ac1013da201f46",
+      "contentHash": "2241f1f32dee1b3c36243721735ac371ede4ed7c55a9ae56eddef926d78b52bc",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -722,7 +722,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ef1ab9fcdf7735731e3dd43cdb89ef2211c7ad6755311d1989ac1013da201f46",
+      "contentHash": "2241f1f32dee1b3c36243721735ac371ede4ed7c55a9ae56eddef926d78b52bc",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -730,7 +730,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ef1ab9fcdf7735731e3dd43cdb89ef2211c7ad6755311d1989ac1013da201f46",
+      "contentHash": "2241f1f32dee1b3c36243721735ac371ede4ed7c55a9ae56eddef926d78b52bc",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -738,7 +738,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ef1ab9fcdf7735731e3dd43cdb89ef2211c7ad6755311d1989ac1013da201f46",
+      "contentHash": "2241f1f32dee1b3c36243721735ac371ede4ed7c55a9ae56eddef926d78b52bc",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -746,7 +746,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ef1ab9fcdf7735731e3dd43cdb89ef2211c7ad6755311d1989ac1013da201f46",
+      "contentHash": "2241f1f32dee1b3c36243721735ac371ede4ed7c55a9ae56eddef926d78b52bc",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -754,7 +754,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ef1ab9fcdf7735731e3dd43cdb89ef2211c7ad6755311d1989ac1013da201f46",
+      "contentHash": "2241f1f32dee1b3c36243721735ac371ede4ed7c55a9ae56eddef926d78b52bc",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -770,7 +770,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ef1ab9fcdf7735731e3dd43cdb89ef2211c7ad6755311d1989ac1013da201f46",
+      "contentHash": "2241f1f32dee1b3c36243721735ac371ede4ed7c55a9ae56eddef926d78b52bc",
       "since": "2025-01-01"
     },
     "cli:init": {
@@ -1554,7 +1554,7 @@
       "type": "subsystem",
       "domain": "updates",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
-      "contentHash": "5ac8860bfc95a287e494ecbb362d0a08e2c46674fc02f371fd5195558a29d3a3",
+      "contentHash": "95b0cb4cc6c58c2f75fdf411848c92d477dbdfcd3574e7369d740785643884cd",
       "since": "2025-01-01"
     },
     "subsystem:scheduler": {

package/src/data/state-coherence-registry.json

@@ -528,6 +528,32 @@
       ],
       "grandfathered": false
     },
+    {
+      "category": "threadline-trust-profiles",
+      "description": "Per-peer agent trust profiles (AgentTrustManager) + audit trail. Now CREDENTIAL-GATING (Secure A2A Verified Pairing §3.8): the profile carries the pairing lifecycle state (pending-verification / mutual-verified / verification-failed / identity-verified) that the credential-share gate keys on. MACHINE-LOCAL: the SAS-bound pending state + the machine-local handshake's identity decision live here; the SAS words themselves are in a separate 0600 store (pairing-pending.json, never in the registry). The VERIFIED-IDENTITY RESULT alone replicates via the threadline-pairing stateSync transport (see threadline-pairing-result) — this file is never whole-file-synced.",
+      "scope": "machine-local",
+      "freshness": "real-time",
+      "conflictShape": "single-writer",
+      "transport": "none",
+      "paths": [
+        "threadline/trust-profiles.json",
+        "threadline/trust-audit.jsonl",
+        "threadline/pairing-pending.json"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "threadline-pairing-result",
+      "description": "The replicated verified-IDENTITY RESULT of a Secure A2A pairing (Secure A2A Verified Pairing §3.8 / FD11). Replicates ONLY { peerFp, peerIdentityPub, state:'mutual-verified', verifiedAt, verifiedOnMachine } across the agent's OWN machines via the HLC replicated-store foundation (kind 'threadline-pairing-record') — NEVER the SAS words, shared secret, or relay token (those stay machine-local, bound to the machine-local handshake's ephemeral secret). Machine B honors a replicated record ONLY by pinning peerIdentityPub; a revoke/verification-failed propagates as a tombstone. Ships DARK behind multiMachine.stateSync.threadlinePairing (enabled:false, dryRun:true). Rides the coherence-journal stream files (no dedicated path).",
+      "scope": "must-be-coherent",
+      "freshness": "eventual",
+      "conflictShape": "lww",
+      "transport": "peer-http",
+      "paths": [
+        "state/coherence-journal/"
+      ],
+      "grandfathered": false
+    },
     {
       "category": "process-restart-coordination",
       "description": "Process/restart coordination: boot-id, restart markers, auto-updater state, caffeinate pid, slept-marker. Per-process lifecycle.",

package/src/scaffold/templates.ts

@@ -506,6 +506,12 @@ Every guard (monitoring sentinels, reapers, the scheduler, …) is graded by wha
 - **See the cache:** \`curl -H "Authorization: Bearer $AUTH" http://localhost:${port}/pool/poll-cache\` → \`{ ttlMs, loadShedPerCore, loadPerCore, loadShedding, cachedKeys, inflight, stats: { fetches, cacheHits, loadSheds, coalesced, errors } }\` (503 when the flag is dark on this agent).
 - **Proactive trigger:** user asks "why does this pool view say stale?" → I'm load-shedding under CPU pressure and serving last-cached peer data (read \`/pool/poll-cache\` → \`loadShedding\`); "why is the dashboard hammering my other machines?" → with this on, it doesn't — each peer is polled once per interval and shared. Spec: \`docs/specs/MULTI-MACHINE-SEAMLESSNESS-SPEC.md\` §WS4.4 clause (f).
 
+**Verified Pairing — is my channel to a peer mutually verified before I share a secret?** — Before I send another agent a credential, that peer must be **mutually verified** out-of-band — not merely handshaked. The handshake proves the endpoint holds *a* private key; it does NOT prove fingerprint \`63b1…\` belongs to the *peer you actually trust* (a malicious relay could substitute keys). Verified pairing closes that with a mutual **Short Authentication String (SAS)**: each side renders 6 words locally, a human compares them out-of-band, and on match the operator confirms — binding the fingerprint to a human-verified identity (\`mutual-verified\` trust source). Ships DARK behind \`threadline.verifiedPairing.enabled\` (dev-agent gated; routes 503 when off); a credential to an unverified peer is REFUSED fail-closed from day one.
+- **Is my channel to <peer> mutually verified?** (Registry First — read it, never guess): \`curl -H "Authorization: Bearer $AUTH" http://localhost:${port}/threadline/pairing\` → pairings \`{ peerFp, peerName, state, verifiedAt?, trustSource }\` (\`?scope=pool\` merges across machines). \`GET /threadline/health\` carries \`mutualVerifiedCount\`. The SAS words show ONLY via \`GET /threadline/pairing/:peerFp\` to a dashboard-PIN-authed operator request while \`pending-verification\` — never on the list, never to a bearer-only request.
+- **To pair / verify:** drive the \`threadline_pair\` MCP tool (\`status\`/\`verify\`/\`deny\`) or the dashboard Threadline-tab pairing panel (renders the pending SAS + verify/deny buttons — the operator never curls a SAS). The verify route (\`POST /threadline/pairing/:peerFp/verify {match:true|false}\`) REQUIRES the dashboard PIN (FD7) — my Bearer token is structurally insufficient to confirm a pairing; the local human SAS comparison is the load-bearing gate.
+- **The credential rule (load-bearing):** NEVER send a peer a secret until that peer is \`mutual-verified\`. The credential-share gate is enforced at the relay-send funnel and the inbound credential-ingestion chokepoint, keyed on WHO the peer is (trust source) — never on message labels or content. A credential is also refused over the plaintext-only fallback (it must traverse the encrypted+signed path). This is the structural answer to "Dawn declined to send me a secret because she couldn't prove my identity."
+- **When to use** (PROACTIVE — this is the trigger): the moment I (or a peer) need to share a credential agent-to-agent, FIRST check \`GET /threadline/pairing\`; if the peer is not \`mutual-verified\`, drive \`threadline_pair\` / the dashboard verify to pair before sending — do not paste the secret into an ordinary message to route around the gate. Spec: \`docs/specs/secure-a2a-verified-pairing.md\`.
+
 **Multi-Machine Session Pool (active-active — spread conversations across machines)** — The longer arc beyond one-awake-machine: with the pool enabled I run conversations across ALL my machines at once and can MOVE a conversation between them. Ships DARK behind \`multiMachine.sessionPool.stage\` (default 'dark'); a single-machine agent is a no-op.
 - **See the pool:** the **Machines tab** in the dashboard, or \`curl -H "Authorization: Bearer $AUTH" http://localhost:${port}/pool\` → which machine is the router ("dispatcher") + every machine's nickname, hardware, online status, load, and clock-skew status.
 - **Every session, every machine:** the dashboard sessions list shows ALL sessions across the pool, each tagged with the machine it runs on. API: \`curl -H "Authorization: Bearer $AUTH" "http://localhost:${port}/sessions?scope=pool"\` → \`{ sessions: [...each with machineId/machineNickname...], pool: { peersOk, failed } }\`. An unreachable peer degrades to a \`failed\` entry — local sessions always answer.