instar 1.3.669 → 1.3.671

package/dist/server/toneRecipientClass.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Operator-channel-sacred (outbound) recipient classifier for the tone-gate seam.
+ * Spec: outbound-gate-tiered-fail-direction.
+ *
+ * Returns 'operator' ONLY when BOTH hold:
+ *  - the topic has a VERIFIED, locally-auth-bound operator (`asVerifiedOperator`
+ *    is local-auth-only by the TopicOperatorStore invariant — NEVER a replicated
+ *    record or a content name; Know Your Principal), AND
+ *  - the agent has a SINGLE distinct human operator across all topics, so no
+ *    OTHER human could read a topic thread (all topics live in one forum
+ *    supergroup; there is no per-topic membership API).
+ *
+ * Returns 'external' (fail-closed — the safe side) on ANY ambiguity: no topicId,
+ * no store, no verified binding, a resolution error, or >1 distinct operator (a
+ * multi-user agent). The deliver-on-availability-failure direction is only ever
+ * the verified operator's own private channel.
+ */
+export interface ToneOperatorStoreLike {
+    asVerifiedOperator: (t: number | string) => unknown;
+    all: () => Record<string, {
+        uid?: string;
+    }>;
+}
+export declare function resolveToneRecipientClass(topicOperatorStore: ToneOperatorStoreLike | null | undefined, topicId: number | string | null | undefined): 'operator' | 'external';
+//# sourceMappingURL=toneRecipientClass.d.ts.map

package/dist/server/toneRecipientClass.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"toneRecipientClass.d.ts","sourceRoot":"","sources":["../../src/server/toneRecipientClass.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,qBAAqB;IACpC,kBAAkB,EAAE,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,KAAK,OAAO,CAAC;IACpD,GAAG,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC7C;AAED,wBAAgB,yBAAyB,CACvC,kBAAkB,EAAE,qBAAqB,GAAG,IAAI,GAAG,SAAS,EAC5D,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,GAC1C,UAAU,GAAG,UAAU,CAoBzB"}

package/dist/server/toneRecipientClass.js

@@ -0,0 +1,25 @@
+export function resolveToneRecipientClass(topicOperatorStore, topicId) {
+    if (topicId == null || !topicOperatorStore)
+        return 'external';
+    let verified;
+    try {
+        verified = topicOperatorStore.asVerifiedOperator(topicId);
+    }
+    catch {
+        return 'external';
+    }
+    if (!verified)
+        return 'external';
+    try {
+        const uids = new Set(Object.values(topicOperatorStore.all())
+            .map((o) => o?.uid)
+            .filter((u) => typeof u === 'string' && u.length > 0));
+        if (uids.size > 1)
+            return 'external'; // multi-operator agent → fail-closed
+    }
+    catch {
+        return 'external';
+    }
+    return 'operator';
+}
+//# sourceMappingURL=toneRecipientClass.js.map

package/dist/server/toneRecipientClass.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"toneRecipientClass.js","sourceRoot":"","sources":["../../src/server/toneRecipientClass.ts"],"names":[],"mappings":"AAsBA,MAAM,UAAU,yBAAyB,CACvC,kBAA4D,EAC5D,OAA2C;IAE3C,IAAI,OAAO,IAAI,IAAI,IAAI,CAAC,kBAAkB;QAAE,OAAO,UAAU,CAAC;IAC9D,IAAI,QAAiB,CAAC;IACtB,IAAI,CAAC;QACH,QAAQ,GAAG,kBAAkB,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,IAAI,CAAC,QAAQ;QAAE,OAAO,UAAU,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,GAAG,CAClB,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC;aACpC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC;aAClB,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CACrE,CAAC;QACF,IAAI,IAAI,CAAC,IAAI,GAAG,CAAC;YAAE,OAAO,UAAU,CAAC,CAAC,qCAAqC;IAC7E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.669",
+  "version": "1.3.671",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-06-26T04:43:43.858Z",
-  "instarVersion": "1.3.669",
+  "generatedAt": "2026-06-26T05:02:42.173Z",
+  "instarVersion": "1.3.671",
   "entryCount": 202,
   "entries": {
     "hook:session-start": {
@@ -418,7 +418,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "6d096d3a97bcf27ea2bc7517828a261d53ad9c47ea197911d6ecdd5168c17729",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -426,7 +426,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "6d096d3a97bcf27ea2bc7517828a261d53ad9c47ea197911d6ecdd5168c17729",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -434,7 +434,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "6d096d3a97bcf27ea2bc7517828a261d53ad9c47ea197911d6ecdd5168c17729",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -442,7 +442,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "6d096d3a97bcf27ea2bc7517828a261d53ad9c47ea197911d6ecdd5168c17729",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -450,7 +450,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "6d096d3a97bcf27ea2bc7517828a261d53ad9c47ea197911d6ecdd5168c17729",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -458,7 +458,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "6d096d3a97bcf27ea2bc7517828a261d53ad9c47ea197911d6ecdd5168c17729",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -466,7 +466,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "6d096d3a97bcf27ea2bc7517828a261d53ad9c47ea197911d6ecdd5168c17729",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -474,7 +474,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "6d096d3a97bcf27ea2bc7517828a261d53ad9c47ea197911d6ecdd5168c17729",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -482,7 +482,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "6d096d3a97bcf27ea2bc7517828a261d53ad9c47ea197911d6ecdd5168c17729",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -490,7 +490,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "6d096d3a97bcf27ea2bc7517828a261d53ad9c47ea197911d6ecdd5168c17729",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -498,7 +498,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "6d096d3a97bcf27ea2bc7517828a261d53ad9c47ea197911d6ecdd5168c17729",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -506,7 +506,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "6d096d3a97bcf27ea2bc7517828a261d53ad9c47ea197911d6ecdd5168c17729",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -514,7 +514,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "6d096d3a97bcf27ea2bc7517828a261d53ad9c47ea197911d6ecdd5168c17729",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -522,7 +522,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "6d096d3a97bcf27ea2bc7517828a261d53ad9c47ea197911d6ecdd5168c17729",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -530,7 +530,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "6d096d3a97bcf27ea2bc7517828a261d53ad9c47ea197911d6ecdd5168c17729",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -538,7 +538,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "6d096d3a97bcf27ea2bc7517828a261d53ad9c47ea197911d6ecdd5168c17729",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -546,7 +546,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "6d096d3a97bcf27ea2bc7517828a261d53ad9c47ea197911d6ecdd5168c17729",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -554,7 +554,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "6d096d3a97bcf27ea2bc7517828a261d53ad9c47ea197911d6ecdd5168c17729",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -562,7 +562,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "6d096d3a97bcf27ea2bc7517828a261d53ad9c47ea197911d6ecdd5168c17729",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -570,7 +570,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "6d096d3a97bcf27ea2bc7517828a261d53ad9c47ea197911d6ecdd5168c17729",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -578,7 +578,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "6d096d3a97bcf27ea2bc7517828a261d53ad9c47ea197911d6ecdd5168c17729",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -586,7 +586,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "6d096d3a97bcf27ea2bc7517828a261d53ad9c47ea197911d6ecdd5168c17729",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -594,7 +594,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "6d096d3a97bcf27ea2bc7517828a261d53ad9c47ea197911d6ecdd5168c17729",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -602,7 +602,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "6d096d3a97bcf27ea2bc7517828a261d53ad9c47ea197911d6ecdd5168c17729",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -610,7 +610,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "6d096d3a97bcf27ea2bc7517828a261d53ad9c47ea197911d6ecdd5168c17729",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -618,7 +618,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "6d096d3a97bcf27ea2bc7517828a261d53ad9c47ea197911d6ecdd5168c17729",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -626,7 +626,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "6d096d3a97bcf27ea2bc7517828a261d53ad9c47ea197911d6ecdd5168c17729",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -634,7 +634,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "6d096d3a97bcf27ea2bc7517828a261d53ad9c47ea197911d6ecdd5168c17729",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -642,7 +642,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "6d096d3a97bcf27ea2bc7517828a261d53ad9c47ea197911d6ecdd5168c17729",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -650,7 +650,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "6d096d3a97bcf27ea2bc7517828a261d53ad9c47ea197911d6ecdd5168c17729",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -658,7 +658,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "6d096d3a97bcf27ea2bc7517828a261d53ad9c47ea197911d6ecdd5168c17729",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -666,7 +666,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "6d096d3a97bcf27ea2bc7517828a261d53ad9c47ea197911d6ecdd5168c17729",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -674,7 +674,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "6d096d3a97bcf27ea2bc7517828a261d53ad9c47ea197911d6ecdd5168c17729",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -682,7 +682,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "6d096d3a97bcf27ea2bc7517828a261d53ad9c47ea197911d6ecdd5168c17729",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -690,7 +690,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "6d096d3a97bcf27ea2bc7517828a261d53ad9c47ea197911d6ecdd5168c17729",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -698,7 +698,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "6d096d3a97bcf27ea2bc7517828a261d53ad9c47ea197911d6ecdd5168c17729",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -706,7 +706,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "6d096d3a97bcf27ea2bc7517828a261d53ad9c47ea197911d6ecdd5168c17729",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -714,7 +714,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "6d096d3a97bcf27ea2bc7517828a261d53ad9c47ea197911d6ecdd5168c17729",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -722,7 +722,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "6d096d3a97bcf27ea2bc7517828a261d53ad9c47ea197911d6ecdd5168c17729",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -730,7 +730,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "6d096d3a97bcf27ea2bc7517828a261d53ad9c47ea197911d6ecdd5168c17729",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -738,7 +738,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "6d096d3a97bcf27ea2bc7517828a261d53ad9c47ea197911d6ecdd5168c17729",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -746,7 +746,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "6d096d3a97bcf27ea2bc7517828a261d53ad9c47ea197911d6ecdd5168c17729",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -754,7 +754,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "6d096d3a97bcf27ea2bc7517828a261d53ad9c47ea197911d6ecdd5168c17729",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -770,7 +770,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "6d096d3a97bcf27ea2bc7517828a261d53ad9c47ea197911d6ecdd5168c17729",
       "since": "2025-01-01"
     },
     "cli:init": {

package/upgrades/{1.3.669.md → 1.3.670.md}

@@ -5,6 +5,16 @@
 
 ## What Changed
 
+Added a regression test that pins the per-framework circuit-breaker isolation
+contract: each framework provider (`claude-code`, `codex-cli`, `pi-cli`,
+`gemini-cli`) carries its OWN `LlmCircuitBreaker`, so a claude-code rate-limit trip
+does NOT block a call routed to a different framework. The test opens claude's real
+breaker via a rate-limit error and asserts a pi-cli-routed gating call still
+succeeds while a claude-routed call is short-circuited. Also corrected the breaker's
+OPEN log line — it said "pausing ALL LLM-backed work" (reads as global; caused a
+real misdiagnosis on 2026-06-25) to "pausing further calls on THIS provider … other
+frameworks have their own breakers." No behavior change; pure clarity + a test.
+
 Fixed a config load-path bug that made the `pi-cli` framework permanently
 unavailable on every deployed agent. `loadConfig` built the `sessions` block from
 an explicit field list and never copied `sessions.frameworkDefaultModels` from
@@ -18,6 +28,11 @@ valid binary and correct config. Added the `frameworkDefaultModels` pass-through
 
 ## What to Tell Your User
 
+Nothing changes in how the system behaves — the AI engines were already isolated, so
+one engine getting rate-limited never actually froze the others. This just locks
+that guarantee in with a test and fixes a log message that made it look like one
+engine's trouble froze everything. There is nothing to configure.
+
 If you set up a default model for the Pi engine in your config, it now actually
 takes effect — before, it was silently dropped at startup, so Pi could never turn
 on. If you did not set one, nothing changes: Pi still only activates when both its
@@ -26,12 +41,25 @@ backend and gives you a real fallback option instead of a single point of failur
 
 ## Summary of New Capabilities
 
+- A regression test now guarantees one engine's rate-limit trip cannot freeze the
+  other engines (it would fail if anyone ever wired them together).
+- The breaker's log message is accurate about its per-engine scope.
+
 - The per-framework default-model setting in your config is now honored at boot,
   unblocking Pi (and any per-framework default-model) routing.
 - No new API surface; one additive, default-absent config field is now read.
 
 ## Evidence
 
+- **Reproduction:** With a router whose default (claude-code) provider is wrapped in
+  a real breaker, send a rate-limited gating call to trip claude's breaker.
+- **Observed (the contract):** A subsequent gating call routed to pi-cli returns its
+  verdict normally; a call routed back to claude-code is rejected with the open-circuit
+  error; pi-cli remains usable across repeated calls and its breaker never trips.
+- **Before/after on the log:** previously the OPEN line read "pausing ALL LLM-backed
+  work"; now it reads "pausing further calls on THIS provider … other frameworks have
+  their own breakers." 38/38 breaker-related unit tests pass.
+
 - **Reproduction:** Load the real agent config through the v1.3.667 loader and
   inspect the sessions block — `sessions.frameworkDefaultModels` comes back
   `undefined` even though it is present in the config file (the loader omits it

package/upgrades/1.3.671.md

@@ -0,0 +1,26 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+The outbound tone gate (which screens the agent's replies for leaks like passwords, commands, or file paths) used to do the same thing for everyone when it couldn't get a verdict under load — it HELD the message. That sealed the operator out of their own channel: under heavy load, status replies to the operator were held with "could not produce a verdict within the budget," so the operator saw delivery receipts but no reply.
+
+The fix tiers that no-verdict behavior by who the message is going to. On the operator's own verified channel, a no-verdict availability failure now DELIVERS (the operator must never be locked out of their own agent). For anyone external, it still HOLDS, fail-closed (never leak an unreviewed message to a third party). A real "this leaks — block it" verdict still blocks for everyone — only the case where the reviewer couldn't decide is tiered.
+
+Who counts as "the operator" is resolved strictly from the verified, locally-authenticated operator binding (never a name in a message, never a spoofable field) AND only when the agent has a single human operator — so a multi-user agent always fails closed. It ships OFF by default (today's hold-everywhere behavior is unchanged) and is an explicit opt-in with a dry-run mode to soak first. This is the outbound twin of the inbound "operator channel is sacred" fix.
+
+## What to Tell Your User
+
+If you ever saw a delivery receipt but no reply from your agent under heavy load, that was the safety screen holding your own message because it could not finish reviewing it in time. Your own channel will now get the message through in that situation, while messages to anyone else stay held until they can be checked. It is off until you turn it on, with a try-it-safely mode that just logs what it would do first.
+
+## Summary of New Capabilities
+
+- Operator-channel-sacred outbound: a no-verdict tone-gate failure delivers on the operator's own verified channel and holds for everyone else, instead of sealing the operator out under load.
+- Resolved strictly from the verified operator identity, single-human-operator only, fail-closed on any doubt; off by default with a dry-run soak mode.
+
+## Evidence
+
+- `tests/unit/messaging-tone-gate-operator-channel-tiering.test.ts` (12) + `tests/unit/tone-recipient-class.test.ts` (10): both sides of every boundary — operator delivers on capacity-shed/provider-error/unparseable/budget-timeout; external + absent-binding + multi-operator + resolution-error all HOLD; a real content block always holds; dry-run holds + logs; legacy modes preserved. 46 existing tone-gate/budget tests still green (no default-behavior change).
+- 3-round convergence caught + fixed a spoofable-leak design: `docs/specs/reports/outbound-gate-tiered-fail-direction-convergence.md`.

package/upgrades/side-effects/llm-breaker-per-framework-isolation.md

@@ -0,0 +1,44 @@
+# Side-Effects — per-framework circuit-breaker isolation: regression test + log-wording clarity
+
+**Tier:** 1 (one log-string change + one new unit test; no behavior change)
+**Branch:** echo/llm-breaker-isolation-test (off JKHeadley/main @ v1.3.667)
+**Files:** `src/core/LlmCircuitBreaker.ts`, `tests/unit/llm-breaker-per-framework-isolation.test.ts`
+
+## What changed
+1. **Test (new):** `tests/unit/llm-breaker-per-framework-isolation.test.ts` pins the
+   contract that each framework provider carries its OWN `LlmCircuitBreaker`
+   instance, so a claude-code (claude -p) rate-limit trip does NOT block a call
+   routed to a different framework (pi-cli). It opens claude's real breaker via a
+   rate-limit error, then asserts: a pi-cli-routed gating call still succeeds; a
+   claude-routed call is short-circuited with `LlmCircuitOpenError`; pi stays usable
+   across repeated calls.
+2. **Log wording:** the breaker's OPEN log said "pausing ALL LLM-backed work" — which
+   reads as a GLOBAL pause and directly caused a misdiagnosis during the 2026-06-25
+   incident. Changed to "pausing further calls on THIS provider … other frameworks
+   have their own breakers" — accurate (the breaker is per-provider; an account-wide
+   rate-limit legitimately backs off every call to THAT provider, never cross-provider).
+
+## Why
+During the 2026-06-25 backend-reliability incident, the operator and I both read
+"pausing ALL LLM-backed work" as evidence of a global pause. The real cause of the
+perceived global pause was the tone gate FALLING BACK to rate-limited claude-code via
+the failure-swap chain (fixed separately at config level). This change makes the
+breaker's true (per-provider) scope explicit in both the log and a regression test.
+
+## Blast radius
+- **Log line:** one string; cosmetic, no behavior change. Nothing parses this line
+  (verified: no test asserts the old wording).
+- **Test:** additive; uses only public APIs (IntelligenceRouter, LlmCircuitBreaker,
+  CircuitBreakingIntelligenceProvider). Pins existing behavior — it does not change it.
+- **Risk:** negligible. No production code path alters.
+
+## Rollback
+Revert the one-line wording change; delete the test file.
+
+## Verification
+- New test green; full LlmCircuitBreaker.test.ts (31) + CircuitBreakingIntelligenceProvider.test.ts (6) + the new isolation test (1) = 38/38 pass.
+- Confirms completion-condition #2 of the topic-28744 fix session ("breaker is
+  per-framework — a claude-code trip does NOT pause pi/gemini/codex — code + test").
+
+## Tests
+- `tests/unit/llm-breaker-per-framework-isolation.test.ts` — the isolation contract.

package/upgrades/side-effects/outbound-gate-tiered-fail-direction.md

@@ -0,0 +1,26 @@
+# Side-effects review — outbound-gate-tiered-fail-direction
+
+Change: the MessagingToneGate's AVAILABILITY-failure fail-direction (capacity-shed / provider-error / unparseable-after-retry / route-budget-timeout — the no-verdict branches) is now TIERED by a structurally-resolved recipient class — operator's own channel DELIVERS (so the operator isn't sealed out), external HOLDS (fail-closed). Default OFF (`failClosedMode:'always'` = today's behavior); `tiered` is an explicit opt-in, dryRun-first. Files: `src/core/MessagingToneGate.ts`, `src/server/outboundGateBudget.ts`, `src/server/toneRecipientClass.ts` (new), `src/server/routes.ts`, `src/commands/server.ts`, tests.
+
+1. **Over-block:** REDUCES a specific over-block — operator-bound status replies held under capacity/timeout pressure (the confirmed 2026-06-25 live lockout). Only on the operator's own verified channel, only on a no-verdict availability failure, only when `tiered` is opted in.
+
+2. **Under-block:** None new. External channels keep today's fail-CLOSED hold verbatim. A real CONTENT/B15 BLOCK verdict ALWAYS holds on every channel (tiering touches ONLY the no-verdict availability branches — `interpret()` verdicts return before the tier). `recipientClass` defaults `external` (fail-closed) on ANY ambiguity.
+
+3. **Level-of-abstraction fit:** Correct. Recipient resolution at the route seam (where the verified-operator binding + topicId live); the gate consumes a resolved `recipientClass` (it never sniffs identity). The budget-timeout seam — a SEPARATE fail-point from the in-gate paths — tiers on the SAME resolved value, so they can't disagree.
+
+4. **Signal vs authority:** The tone gate remains the single authority for outbound behavioral VERDICTS. This tiers only the DEGRADATION policy (what to do when no verdict could be produced) — not a behavioral verdict. recipientClass is resolved STRUCTURALLY from the verified, locally-auth-bound operator (`asVerifiedOperator` — local-auth-only by the store invariant), NEVER from the launderable `recipientType` and NEVER from content (Know Your Principal). This was the convergence BLOCKER: the first draft keyed on `recipientType` (spoofable, defaults primary-user) — fixed.
+
+5. **Interactions:** Reconciles two standards by channel-tiering — No-Silent-Degradation (external still fail-closed) × Operator-Channel-Sacred (operator delivers). The CoherenceReviewer/CoherenceGate half of the same blindspot already shipped (CMT-1794, abstain-tiering) and is untouched. The deliver-on-failure is AUDITED via `failedOpenOperatorChannel` through `logToneGateDecision` (never silent). Capacity-shed delivery for the operator spawns NOTHING (message already composed), so the fork-bomb P3 floor is intact.
+
+6. **External surfaces:** No new routes. A new `ToneReviewResult.failedOpenOperatorChannel` disposition + a `[tone-gate]` decision-log field. Behavior change is gated behind `messaging.toneGate.failClosedMode:'tiered'` (default `always`).
+
+7. **Multi-machine posture:** Machine-local per send. The verified-operator binding is the LOCAL auth-bound record (the replicated topic-operator store is explicitly never authoritative); the gate runs on whichever machine sends. No new cross-machine surface.
+
+8. **Rollback cost:** Low. `failClosedMode` unset / `'always'` = today's behavior (the default — zero change on upgrade). `'never'` restores legacy fail-open. `toneTierDryRun:true` soaks (logs would-deliver, still holds). All live-config (the getter is read per-review). No data migration.
+
+## Build-time wiring preconditions honored (convergence confirmation)
+- recipientClass reads the LOCAL auth-bound operator (`asVerifiedOperator`, local-only by store invariant), not the replicated store. ✓
+- 1:1-operator-topic signal is concrete: a SINGLE distinct verified operator uid across `topicOperatorStore.all()` (multi-operator agent → external). Defaults external on any error. ✓
+
+## Second-pass review (required — touches an outbound message gate)
+The 3-round convergence (adversarial + lessons-aware reviewers + Standards-Conformance Gate + a confirmation pass) IS the second-pass review: it caught a spoofable-leak design (recipientType→structural), a live-default→dark-default posture fix, a confabulated consistency claim, and 4 other majors — ALL resolved in this implementation and pinned by 22 unit tests (gate boundary + route resolution + budget seam). The confirmation pass verified every blocker resolved. Concur with the implemented design.