instar 1.3.661 → 1.3.663

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.661",
+  "version": "1.3.663",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-06-25T07:21:02.386Z",
-  "instarVersion": "1.3.661",
+  "generatedAt": "2026-06-25T08:31:55.420Z",
+  "instarVersion": "1.3.663",
   "entryCount": 202,
   "entries": {
     "hook:session-start": {
@@ -11,7 +11,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/session-start.sh",
-      "contentHash": "4c5fa1d050d577392ce8e682974c6d495df23727ff7622a0ed01ff8fd6663c48",
+      "contentHash": "1498dde6dd7c50457734d66245474781b703ecea97ea6d51391ca4de91ddaf3d",
       "since": "2025-01-01"
     },
     "hook:dangerous-command-guard": {
@@ -20,7 +20,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/dangerous-command-guard.sh",
-      "contentHash": "4c5fa1d050d577392ce8e682974c6d495df23727ff7622a0ed01ff8fd6663c48",
+      "contentHash": "1498dde6dd7c50457734d66245474781b703ecea97ea6d51391ca4de91ddaf3d",
       "since": "2025-01-01"
     },
     "hook:grounding-before-messaging": {
@@ -29,7 +29,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/grounding-before-messaging.sh",
-      "contentHash": "4c5fa1d050d577392ce8e682974c6d495df23727ff7622a0ed01ff8fd6663c48",
+      "contentHash": "1498dde6dd7c50457734d66245474781b703ecea97ea6d51391ca4de91ddaf3d",
       "since": "2025-01-01"
     },
     "hook:compaction-recovery": {
@@ -38,7 +38,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/compaction-recovery.sh",
-      "contentHash": "4c5fa1d050d577392ce8e682974c6d495df23727ff7622a0ed01ff8fd6663c48",
+      "contentHash": "1498dde6dd7c50457734d66245474781b703ecea97ea6d51391ca4de91ddaf3d",
       "since": "2025-01-01"
     },
     "hook:external-operation-gate": {
@@ -47,7 +47,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-operation-gate.js",
-      "contentHash": "4c5fa1d050d577392ce8e682974c6d495df23727ff7622a0ed01ff8fd6663c48",
+      "contentHash": "1498dde6dd7c50457734d66245474781b703ecea97ea6d51391ca4de91ddaf3d",
       "since": "2025-01-01"
     },
     "hook:deferral-detector": {
@@ -56,7 +56,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/deferral-detector.js",
-      "contentHash": "4c5fa1d050d577392ce8e682974c6d495df23727ff7622a0ed01ff8fd6663c48",
+      "contentHash": "1498dde6dd7c50457734d66245474781b703ecea97ea6d51391ca4de91ddaf3d",
       "since": "2025-01-01"
     },
     "hook:self-stop-guard": {
@@ -65,7 +65,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/self-stop-guard.js",
-      "contentHash": "4c5fa1d050d577392ce8e682974c6d495df23727ff7622a0ed01ff8fd6663c48",
+      "contentHash": "1498dde6dd7c50457734d66245474781b703ecea97ea6d51391ca4de91ddaf3d",
       "since": "2025-01-01"
     },
     "hook:post-action-reflection": {
@@ -74,7 +74,7 @@
       "domain": "evolution",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/post-action-reflection.js",
-      "contentHash": "4c5fa1d050d577392ce8e682974c6d495df23727ff7622a0ed01ff8fd6663c48",
+      "contentHash": "1498dde6dd7c50457734d66245474781b703ecea97ea6d51391ca4de91ddaf3d",
       "since": "2025-01-01"
     },
     "hook:external-communication-guard": {
@@ -83,7 +83,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-communication-guard.js",
-      "contentHash": "4c5fa1d050d577392ce8e682974c6d495df23727ff7622a0ed01ff8fd6663c48",
+      "contentHash": "1498dde6dd7c50457734d66245474781b703ecea97ea6d51391ca4de91ddaf3d",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-collector": {
@@ -92,7 +92,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-collector.js",
-      "contentHash": "4c5fa1d050d577392ce8e682974c6d495df23727ff7622a0ed01ff8fd6663c48",
+      "contentHash": "1498dde6dd7c50457734d66245474781b703ecea97ea6d51391ca4de91ddaf3d",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-checkpoint": {
@@ -101,7 +101,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-checkpoint.js",
-      "contentHash": "4c5fa1d050d577392ce8e682974c6d495df23727ff7622a0ed01ff8fd6663c48",
+      "contentHash": "1498dde6dd7c50457734d66245474781b703ecea97ea6d51391ca4de91ddaf3d",
       "since": "2025-01-01"
     },
     "hook:free-text-guard": {
@@ -110,7 +110,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/free-text-guard.sh",
-      "contentHash": "4c5fa1d050d577392ce8e682974c6d495df23727ff7622a0ed01ff8fd6663c48",
+      "contentHash": "1498dde6dd7c50457734d66245474781b703ecea97ea6d51391ca4de91ddaf3d",
       "since": "2025-01-01"
     },
     "hook:claim-intercept": {
@@ -119,7 +119,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept.js",
-      "contentHash": "4c5fa1d050d577392ce8e682974c6d495df23727ff7622a0ed01ff8fd6663c48",
+      "contentHash": "1498dde6dd7c50457734d66245474781b703ecea97ea6d51391ca4de91ddaf3d",
       "since": "2025-01-01"
     },
     "hook:claim-intercept-response": {
@@ -128,7 +128,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept-response.js",
-      "contentHash": "4c5fa1d050d577392ce8e682974c6d495df23727ff7622a0ed01ff8fd6663c48",
+      "contentHash": "1498dde6dd7c50457734d66245474781b703ecea97ea6d51391ca4de91ddaf3d",
       "since": "2025-01-01"
     },
     "hook:stop-gate-router": {
@@ -137,7 +137,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/stop-gate-router.js",
-      "contentHash": "4c5fa1d050d577392ce8e682974c6d495df23727ff7622a0ed01ff8fd6663c48",
+      "contentHash": "1498dde6dd7c50457734d66245474781b703ecea97ea6d51391ca4de91ddaf3d",
       "since": "2025-01-01"
     },
     "hook:auto-approve-permissions": {
@@ -146,7 +146,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/auto-approve-permissions.js",
-      "contentHash": "4c5fa1d050d577392ce8e682974c6d495df23727ff7622a0ed01ff8fd6663c48",
+      "contentHash": "1498dde6dd7c50457734d66245474781b703ecea97ea6d51391ca4de91ddaf3d",
       "since": "2025-01-01"
     },
     "job:health-check": {
@@ -418,7 +418,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
+      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -426,7 +426,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
+      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -434,7 +434,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
+      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -442,7 +442,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
+      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -450,7 +450,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
+      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -458,7 +458,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
+      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -466,7 +466,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
+      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -474,7 +474,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
+      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -482,7 +482,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
+      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -490,7 +490,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
+      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -498,7 +498,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
+      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -506,7 +506,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
+      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -514,7 +514,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
+      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -522,7 +522,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
+      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -530,7 +530,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
+      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -538,7 +538,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
+      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -546,7 +546,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
+      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -554,7 +554,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
+      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -562,7 +562,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
+      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -570,7 +570,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
+      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -578,7 +578,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
+      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -586,7 +586,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
+      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -594,7 +594,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
+      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -602,7 +602,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
+      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -610,7 +610,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
+      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -618,7 +618,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
+      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -626,7 +626,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
+      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -634,7 +634,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
+      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -642,7 +642,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
+      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -650,7 +650,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
+      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -658,7 +658,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
+      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -666,7 +666,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
+      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -674,7 +674,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
+      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -682,7 +682,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
+      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -690,7 +690,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
+      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -698,7 +698,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
+      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -706,7 +706,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
+      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -714,7 +714,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
+      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -722,7 +722,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
+      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -730,7 +730,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
+      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -738,7 +738,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
+      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -746,7 +746,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
+      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -754,7 +754,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
+      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -770,7 +770,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
+      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
       "since": "2025-01-01"
     },
     "cli:init": {
@@ -1562,7 +1562,7 @@
       "type": "subsystem",
       "domain": "updates",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
-      "contentHash": "4c5fa1d050d577392ce8e682974c6d495df23727ff7622a0ed01ff8fd6663c48",
+      "contentHash": "1498dde6dd7c50457734d66245474781b703ecea97ea6d51391ca4de91ddaf3d",
       "since": "2025-01-01"
     },
     "subsystem:scheduler": {

package/src/scaffold/templates.ts

@@ -1552,6 +1552,10 @@ instar playbook doctor     # Verify everything is healthy
 
 Record what I learn. Build infrastructure, not one-offs. Grow to meet the user's needs. Every session should leave things slightly better than I found them.
 
+### Outbound Message Gate
+
+Your messages to the user pass an always-on LLM gate (the tone gate) before they send. It blocks high-stakes leaks (CLI commands, file paths, config keys, endpoints) AND the self-stop anti-patterns (B15–B18: quitting on yourself for a context/fatigue reason, calling a doable thing impossible, parking your own work on the user). It judges the behavioral rules **by MEANING, not by literal phrases — a paraphrase of the anti-pattern is caught exactly the same as the canonical wording**, so do not assume rewording evades it. The gate FAILS CLOSED (holds the message, queued for retry — never silently delivers) if it can't produce a verdict (provider down, unparseable output, or a slow-review timeout); the operator kill-switch is \`messaging.toneGate.failClosedOnExhaustion\`. Constitution: "Intelligent Prompts — An LLM Gate Must Not String-Match".
+
 ## Worktree Convention
 
 Create worktrees for collaborator repos with \`instar worktree create <branch>\` — it resolves your agent's home automatically. Never hardcode another agent's name or place worktrees inside the shared checkout.

package/upgrades/1.3.662.md

@@ -0,0 +1,30 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+The outbound tone gate's behavioral rules (B15–B18 — the "don't quit on yourself / don't call a doable thing impossible / don't park your work on the user" rules) now judge by **meaning**, not by matching a fixed list of literal phrases. Previously B15's prompt told the LLM to block only if the message contained an exact phrase from a list, so a reworded self-stop ("fresh focus, not tired at the tail of a long run") walked straight through. The rule now states the *intent* and judges any paraphrase, with an explicit reason-gate (the agent-state reason is controlling; every carve-out is subordinate to it) and a structured-intermediate the model fills so the verdict is derived from its own reasoning.
+
+Alongside it:
+- A new constitution standard, **"Intelligent Prompts — An LLM Gate Must Not String-Match"** (`docs/STANDARDS-REGISTRY.md`), enforced by a forward CI ratchet (`tests/unit/gate-prompts-judge-by-meaning.test.ts`) keyed off a machine-readable `RULE_CLASSES` registry.
+- A deterministic **agent-state signal** (the session clock) fed into B15 so a "near the limit" claim is judged against ground truth (time-box claims only).
+- The gate now **fails CLOSED** (holds the message — never silently delivers) on every no-verdict path: an invalid/empty rule citation (re-prompt then hold), unparseable output (retry then hold), provider exhaustion, and the route-budget slow-timeout (the easiest bypass). Operator kill-switch: `messaging.toneGate.failClosedOnExhaustion` (default true).
+- B1–B7 (literal-artifact detectors) keep matching in-prompt for now — tracked migration to detect-outside-feed-signal is CMT-1793; the codebase-wide convergent audit of the two standards is CMT-1794.
+
+## What to Tell Your User
+
+Your messages still pass the same outbound safety gate — it's just smarter now. It catches the "I'll pick this up fresh later" self-stop pattern however it's worded, instead of only when an exact phrase appears, and it holds (rather than silently sends) a message if the gate can't reach a verdict. Nothing you do changes; the gate is more reliable.
+
+## Summary of New Capabilities
+
+- Constitution standard "Intelligent Prompts — An LLM Gate Must Not String-Match" + its CI ratchet.
+- Config: `messaging.toneGate.failClosedOnExhaustion` (default true) — kill-switch to revert the exhaustion/timeout paths to fail-open without a deploy.
+- The outbound tone gate now judges its behavioral rules by meaning and fails closed on any no-verdict path.
+
+## Evidence
+
+- New + updated tests, all green: the ratchet (8), the reason-gate / structured-intermediate / agentState (15), budget fail-closed (1 new), awareness migration (2), updated existing tone-gate suites (B15/B16/B17/B18/health-alerts/MessagingToneGate, 131), and the route-level integration test (4: paraphrased-incident suppressed, structured-derivation suppressed, fail-closed-holds end-to-end, completion delivers). `npx tsc --noEmit` clean (0 errors).
+- 5-round spec-converge + closing cross-model pass; the Standards-Conformance Gate returns 0 findings on the spec. Convergence report: `docs/specs/reports/gate-prompts-judge-by-meaning-not-literal-lists-convergence.md`.
+- Side-effects review (8 questions + Phase-5 second-pass): `upgrades/side-effects/gate-prompts-judge-by-meaning.md`.

package/upgrades/1.3.663.md

@@ -0,0 +1,29 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+Phase 2 of the judge-by-meaning tone-gate work (the §Design 8 detector contract). Tone-gate rules B1–B7 (cli-command, file-path, config-key, copy-paste-code, api-endpoint, env-var, cron-or-slug) are migrated from in-prompt literal-matching to the deterministic-detector-emits-signal contract:
+
+- New pure module `src/core/GateSignalDetectors.ts` — seven high-precision detectors emit a normalized, sanitized `GateSignal { kind, detected, spans?, normalizedValue?, confidence? }`. Security per §Design 8: closed `kind` enum (out-of-enum rejected), `confidence` clamped [0,1], `spans` bounded to the candidate length + count-capped, `normalizedValue` length-clamped; rendered inside its OWN per-call random boundary as untrusted data (JSON-encoded, so an attacker-derived value can't break the envelope).
+- `MessagingToneGate.buildPrompt` runs the detectors on the candidate and renders the signal list; the B1–B7 prompt rules are reworded to judge each detected artifact IN CONTEXT (shown-to-act-on → block; mentioned-in-passing → pass) instead of self-scanning. This removes the LAST in-prompt literal-gating, completing the "An LLM Gate Must Not String-Match" standard for the behavioral + artifact rules.
+- `RULE_CLASSES` B1–B7 flip `deterministic-detection`→`signal-driven`; the legacy class is retired; `PHASE2_MIGRATION_DEBT` is drained to empty. The CI ratchet (`tests/unit/gate-prompts-judge-by-meaning.test.ts`) is inverted to assert the migration landed (B1–B7 signal-driven, allowlist empty, no rule still `deterministic-detection`, and B1–B7 are now scanned for necessary-literal-gate constructions like every other judgment rule).
+
+Two spec-acknowledged secondary sub-scopes (pi-cli gate-awareness shadow note + richer agent-state signals: context-window % / turn-count plumbing for B15) are tracked under CMT-1800, not bundled here. <!-- tracked: CMT-1800 -->
+
+## What to Tell Your User
+
+Nothing you need to do. Under the hood, the safety check that screens your agent's outbound messages for leaked internals (raw shell commands, file paths, config keys, URLs, env vars, internal ids) got smarter: instead of the language model eyeballing the text for those patterns itself (which a slightly-different format could slip past), a precise deterministic detector finds them and hands the model an exact, in-context note, and the model decides whether the artifact is actually being handed to you to act on (worth blocking) or just mentioned in passing (fine). Net effect: fewer leaks slip through AND fewer false alarms on harmless mentions. Message behavior is otherwise unchanged.
+
+## Summary of New Capabilities
+
+- `GateSignalDetectors` — a deterministic detector layer for the tone gate's artifact rules (B1–B7): it finds leaked CLI commands, file paths, config keys, code, API endpoints, env vars, and cron/slug ids and emits a sanitized, bounded signal the gate's model judges in context. The model no longer string-matches these patterns in its own prompt — completing the "an LLM gate must not string-match" standard across the gate's rule set.
+
+## Evidence
+
+- `tests/unit/GateSignalDetectors.test.ts` — 19 tests: detection precision both-sides (artifacts fire; prose, hostnames, and digit-less hyphenation do NOT) + security clamping (enum rejection, confidence [0,1], bounded spans, length-clamped normalizedValue).
+- `tests/unit/gate-prompts-judge-by-meaning.test.ts` — the ratchet, inverted to lock the migration.
+- Regression: b15/b16/b17 integration + MessagingToneGate + spawn-cap + post-update + attention + feature-delivery — all green. `npm run build` + `tsc --noEmit` clean.
+- Independent second-pass review: concur (Signal-vs-Authority, §Design 8 envelope security, ratchet integrity, ReDoS all PASS); one non-blocking B3/B7 precision concern raised and fixed in-PR with prose-negative tests.