instar 1.3.666 → 1.3.668

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.666",
+  "version": "1.3.668",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-06-25T23:12:52.494Z",
-  "instarVersion": "1.3.666",
+  "generatedAt": "2026-06-26T04:26:35.476Z",
+  "instarVersion": "1.3.668",
   "entryCount": 202,
   "entries": {
     "hook:session-start": {
@@ -418,7 +418,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
+      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -426,7 +426,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
+      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -434,7 +434,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
+      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -442,7 +442,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
+      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -450,7 +450,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
+      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -458,7 +458,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
+      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -466,7 +466,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
+      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -474,7 +474,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
+      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -482,7 +482,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
+      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -490,7 +490,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
+      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -498,7 +498,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
+      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -506,7 +506,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
+      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -514,7 +514,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
+      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -522,7 +522,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
+      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -530,7 +530,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
+      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -538,7 +538,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
+      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -546,7 +546,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
+      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -554,7 +554,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
+      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -562,7 +562,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
+      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -570,7 +570,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
+      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -578,7 +578,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
+      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -586,7 +586,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
+      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -594,7 +594,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
+      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -602,7 +602,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
+      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -610,7 +610,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
+      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -618,7 +618,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
+      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -626,7 +626,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
+      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -634,7 +634,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
+      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -642,7 +642,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
+      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -650,7 +650,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
+      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -658,7 +658,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
+      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -666,7 +666,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
+      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -674,7 +674,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
+      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -682,7 +682,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
+      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -690,7 +690,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
+      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -698,7 +698,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
+      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -706,7 +706,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
+      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -714,7 +714,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
+      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -722,7 +722,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
+      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -730,7 +730,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
+      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -738,7 +738,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
+      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -746,7 +746,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
+      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -754,7 +754,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
+      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -770,7 +770,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
+      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
       "since": "2025-01-01"
     },
     "cli:init": {

package/upgrades/1.3.667.md

@@ -0,0 +1,32 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+Fixed the "session paused" lockout (topic 28130): `MessageSentinel` was consuming the operator's benign inbound messages whenever its LLM classifier returned — or capacity-shed to — `'pause'`, and the "send a message to resume" recovery routed back through the same failing gate, an inescapable loop. New constitutional standard **"The Operator Channel Is Sacred — Critical-Path Gates Fail Toward Delivery"** (in `STANDARDS-REGISTRY.md`) + its exemplar fix:
+
+- `'pause'` now consumes a message ONLY on a DETERMINISTIC fast-path match; a bare-LLM or capacity-shed `'pause'` routes THROUGH (delivered to the agent), never consumed.
+- Before routing a non-deterministic result through, a non-word-count-gated stop-token scan rescues a long-form genuine "stop" to a kill (so a real stop is never dropped).
+- A per-topic circuit-breaker bounds blast radius (a misclassification stream can't permanently lock the operator out).
+- Both inbound consume paths (`onSentinelIntercept` + `/internal/telegram-forward`) decide via one shared `MessageSentinel.decideInboundDisposition`, so policy can't diverge.
+- `/sentinel/stats` now exposes disposition counters (consumed / routed-through / breaker-recovered).
+
+## What to Tell Your User
+
+If your agent ever appeared "paused" and ignored your messages — replying "Session paused. Send a message to resume." in a loop — that's fixed. A safety check could mislabel an ordinary message as a "pause" command and silently eat it (worse, under load it defaulted to pausing). Now your messages are delivered unless you *unambiguously* typed a pause/stop command, and a genuine "stop" is always honored. The channel to your agent can no longer be sealed by a wrong guess.
+
+## Summary of New Capabilities
+
+- Standard "The Operator Channel Is Sacred" — a gate on the operator's inbound channel must fail toward DELIVERY; a brittle signal may not consume/block a message; recovery must not route through the failing gate; decision-gates have bounded blast radius.
+- `MessageSentinel.decideInboundDisposition` + `hasStopToken` + disposition observability counters.
+
+## Evidence
+
+- `tests/unit/MessageSentinel-operator-channel-sacred.test.ts` (13) — deterministic pause consumes; benign LLM-pause + capacity-shed route through; long-form stop rescued to kill; circuit-breaker auto-recovers; per-topic isolation; counters; hasStopToken both-sides.
+- `tests/integration/operator-channel-sacred-wiring.test.ts` (3) — both consume sites use the shared disposition helper; old consume-on-any-pause gone.
+- `tests/integration/telegram-forward-sentinel-intercept.test.ts` — updated to the disposition contract incl. a new route-through-delivers test.
+- `tests/e2e/operator-channel-lockout-regression.test.ts` (4) — no benign stream (even with the LLM mislabeling every message, or sustained capacity-shed) can lock the channel; recovery is escapable; a genuine stop still honored.
+- `npm run build` + `tsc --noEmit` clean; consume-path + MessageSentinel suites green.
+- Converged + approved spec; convergence report at docs/specs/reports/operator-channel-sacred-convergence.md.

package/upgrades/1.3.668.md

@@ -0,0 +1,24 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+The stale-worktree reaper (`AgentWorktreeReaper`) no longer treats harmless leftover files as "uncommitted work." Its cleanliness check now uses the existing residue-aware `classifyPorcelain` with a NARROW, reaper-specific never-work denylist (`dist/`, `node_modules/`, `.cache/`, `.turbo/`, `*.tsbuildinfo`, `.metadata_never_index`, `.instar/instar-dev-traces/`) — fail-CLOSED on any git error (a transient `git status` failure can never make a worktree look reapable). A new per-path reclaim-failure breaker stops retrying a permanently-unremovable worktree forever (surfaced as `keep('reclaim-failed')`).
+
+This fixes unbounded `.worktrees/` growth: on one agent, 246 of 289 worktrees were kept solely because of untracked droppings — overwhelmingly the `.metadata_never_index` Spotlight-exclusion marker that gets dropped into every worktree (so the file added to *reduce* indexing load was *blocking* the cleanup that reduces it). Real work is still always kept: ANY non-residue change — a tracked modification OR a hand-authored untracked file (including under `out/`/`build/`/`coverage/` or a `*.log`, which the narrow list deliberately excludes) — keeps the worktree.
+
+## What to Tell Your User
+
+If your agent's disk fills up with old throwaway worktrees (or a "machine overloaded" warning turns out to be a background file-indexer churning on a huge worktrees folder), the cleanup can now reclaim merged, idle worktrees whose only leftovers are build artifacts or the agent's own marker files — while never touching anything with real unsaved work. It stays off until you turn it on, and it can show you exactly the list it would remove before it deletes anything.
+
+## Summary of New Capabilities
+
+- Residue-aware, fail-closed worktree cleanliness check (a narrow never-delete list) so the cleanup reclaims droppings-only worktrees instead of hoarding them.
+- A per-worktree failure breaker so an un-removable worktree is given up on after a few tries instead of being retried forever.
+
+## Evidence
+
+- `tests/unit/agent-worktree-reaper.test.ts` (31 green): residue-only→clean, narrow-residue→clean, tracked-mod→dirty/KEEP, untracked-source→dirty/KEEP, broad-entry (`build/`,`*.log`,`out/`,`coverage/`)→dirty/KEEP, git-error→fail-CLOSED/KEEP, breaker trip+emit-once+clear-on-success.
+- Convergence (adversarial + lessons-aware + conformance gate) caught and resolved a deletion-safety BLOCKER (fail-open→fail-closed) + 2 MAJORs: `docs/specs/reports/worktree-reaper-untracked-blindspot-convergence.md`.

package/upgrades/side-effects/operator-channel-sacred.md

@@ -0,0 +1,31 @@
+# Side-Effects Review — Operator Channel Is Sacred (MessageSentinel pause-lockout fix)
+
+Spec: docs/specs/operator-channel-sacred.md (converged + approved). Standard integrated into docs/STANDARDS-REGISTRY.md.
+Change: MessageSentinel `'pause'` consumes a message ONLY on a deterministic match; a bare-LLM or capacity-shed `'pause'` routes THROUGH (with a stop-token rescue); a per-topic circuit-breaker bounds blast radius; both inbound consume paths (server.ts onSentinelIntercept + routes.ts /internal/telegram-forward) decide via one shared `decideInboundDisposition`.
+
+## 1. Over-block
+The change can ONLY reduce consumption (more messages delivered). The one residual: `hasStopToken` is intentionally conservative (a whole-word "stop" anywhere → rescue to kill), so a benign message that the classifier already called 'pause' AND contains a whole-word stop ("non-stop") would be killed. Accepted: a kill is RECOVERABLE ("send a new message to start fresh"), unlike the pause lockout; and it only triggers on an already-pause-classified message, not normal traffic.
+
+## 2. Under-block
+A genuine pause directive that is non-deterministic (LLM-only) is now NOT honored (routes through). Accepted per the standard + the code's own comment ("pause's value is politeness, not safety"). A genuine STOP is preserved: deterministic fast-path stop fires instantly; a long-form/capacity-shed stop is rescued by `hasStopToken`.
+
+## 3. Level-of-abstraction fit
+The standard lives in ONE place (`MessageSentinel.decideInboundDisposition`); both consume sites call it, so policy cannot diverge between the poll path and the lifeline-forward path. Signal-vs-Authority: the classifier signals; the deterministic gate holds consume authority.
+
+## 4. Signal vs authority compliance
+Compliant + the exemplar of the new standard. A brittle (LLM/capacity-shed) signal no longer has authority to consume the operator's message; only a deterministic match (or a rescued stop) actuates.
+
+## 5. Interactions
+- detectRateLimited / throttle path: unchanged (separate).
+- The capacity-shed return (llmClassify catch, confidence 0.4) now routes through instead of consuming — reconciled with the fork-bomb/No-Silent-Degradation fail-closed posture as a NAMED inbound exception (the deterministic emergency-stop pre-check + the stop-token rescue keep a real stop from ever being dropped).
+- Emergency-stop kill path + resume-queue stop custody: unchanged for `disposition: 'kill'`.
+- Circuit-breaker is in-memory shared across both paths (same MessageSentinel instance); in-memory is safe because the PRIMARY guard is deterministic-only-consume — a restart resetting the breaker cannot reintroduce the lockout. (Reasoned deviation from the spec's "durable" FD2: the build showed deterministic-only-consume makes breaker durability non-load-bearing; documented here.)
+
+## 6. External surfaces
+The user-facing change: benign messages that were being eaten as "Session paused" now reach the agent. `getStats()` (/sentinel/stats) now also exposes `disposition` counters (pause.consumed / .routed-through / breaker.recovered) — additive. No new route, no config schema change (the existing `externalOperations.sentinel.enabled` still gates the whole sentinel).
+
+## 7. Multi-machine posture
+Machine-local: each machine's MessageSentinel decides for its own inbound; both consume paths on a machine share its one instance + breaker. No cross-machine state. (Lifeline-owned agents hit the routes.ts path; poll-mode hits onSentinelIntercept — both on the same machine, same sentinel.)
+
+## 8. Rollback cost
+Single-commit revert restores the prior classify-then-consume logic. No migration, no durable state. The interim safeguard (`externalOperations.sentinel.enabled:false`) can stay until this merges, then be re-enabled (this fix makes the sentinel safe to re-enable).

package/upgrades/side-effects/worktree-reaper-untracked-blindspot.md

@@ -0,0 +1,22 @@
+# Side-effects review — worktree-reaper-untracked-blindspot
+
+Change: the AgentWorktreeReaper's `isClean` now treats reaper-residue-only worktrees (build artifacts + instar markers, esp. `.metadata_never_index`) as clean via the PURE `classifyPorcelain` + a NARROW `REAPER_RESIDUE_DENYLIST`, fail-CLOSED on git error; plus a per-path reclaim-failure breaker. Files: `src/monitoring/agentWorktreeGit.ts`, `src/monitoring/AgentWorktreeReaper.ts`, `tests/unit/agent-worktree-reaper.test.ts`.
+
+1. **Over-block (reject legit inputs it shouldn't):** N/A in the gating sense — this LOOSENS an over-conservative KEEP gate. The "over-block" analog (keeping a reclaimable worktree) is the bug being fixed. No new over-block.
+
+2. **Under-block (still misses failure modes):** A worktree whose ONLY change is a *non-residue* untracked file (a hand-authored `.ts`/`.md`/`.log`/`build/*` never `git add`ed) is still KEPT — by design (conservative; possibly-precious). The narrow denylist deliberately excludes `out/`/`build/`/`coverage/`/`*.log` so user-authored files there are never silently reaped. Multi-commit squash-merges are still reported unmerged → KEPT (pre-existing `git cherry` conservatism).
+
+3. **Level-of-abstraction fit:** Correct layer. `isClean` is the reaper's per-worktree cleanliness signal; residue-awareness belongs exactly there. Reuses the existing tested PURE `classifyPorcelain` rather than a parallel re-implementation.
+
+4. **Signal vs authority:** This is a deterministic policy evaluator over an objective git fact (porcelain + denylist), feeding a gate that is ANDed with `isMerged` (git cherry patch-id) + `isInUse`. No brittle string-matcher gains block authority; it REFINES a KEEP gate. Fail direction is the safety crux: **fail-CLOSED** (git error → dirty → KEEP), the opposite of the fail-open `makeWorktreeDirtyCheck` wrapper which would be unsafe for a deletion gate (the convergence BLOCKER).
+
+5. **Interactions / shared consumers:** `isClean` (from `makeAgentWorktreeReaperDeps`) is shared by THREE consumers — the reaper (delete), and via `orphanedWorkGit.ts` the `OrphanedWorkSentinel` (preserve work) and any other caller. Widening "clean" to ignore the narrow never-work set is correct for all three (none should treat a marker-only worktree as holding work). `DEFAULT_RESIDUE_DENYLIST` is NOT modified, so the build-session-yield-safety killer's config-sourced list and other consumers are untouched. Tested: marker-only → clean; tracked diff → never hidden.
+
+6. **External surfaces:** No new routes/messages. `GET /worktrees/agent-reaper` now reports more `reap-eligible` worktrees (and a new `reclaim-failed` keep reason when the breaker trips). A new `reclaim-breaker` event is emitted (consumed for observability only).
+
+7. **Multi-machine posture:** Machine-local BY DESIGN. Worktrees live on one disk; the reaper only ever evaluates its own machine's `.worktrees/`. No replication/proxy/URL surface. (Cross-Machine Coherence: machine-local with reason.)
+
+8. **Rollback cost:** Low. `agentWorktreeReaper.enabled: false` fully disables (existing knob); `dryRun: true` classifies without deleting (review the report first); `maxReclaimFailuresPerPath: 0` disables the breaker. The denylist is a code const (revert = one-line). No data migration. A reclaimed worktree's branch + commits remain in git (only the redundant checkout is removed), so even a wrong reap loses no committed work — and non-residue/tracked work is never reaped.
+
+## Second-pass review (required — touches a destructive safety gate)
+Convergence ran an adversarial + lessons-aware reviewer (see `docs/specs/reports/worktree-reaper-untracked-blindspot-convergence.md`). They caught a deletion-safety BLOCKER (fail-open→fail-closed), the broad-denylist hazard (→ narrow list), and the undisclosed OrphanedWorkSentinel consumer. ALL addressed in the implementation and pinned by unit tests (residue→clean, non-residue→dirty, broad-entry→dirty, git-error→KEEP, breaker trip+clear; 31 tests green). Concur with the resolved design.