instar 1.3.670 → 1.3.672

package/dist/server/toneRecipientClass.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Operator-channel-sacred (outbound) recipient classifier for the tone-gate seam.
+ * Spec: outbound-gate-tiered-fail-direction.
+ *
+ * Returns 'operator' ONLY when BOTH hold:
+ *  - the topic has a VERIFIED, locally-auth-bound operator (`asVerifiedOperator`
+ *    is local-auth-only by the TopicOperatorStore invariant — NEVER a replicated
+ *    record or a content name; Know Your Principal), AND
+ *  - the agent has a SINGLE distinct human operator across all topics, so no
+ *    OTHER human could read a topic thread (all topics live in one forum
+ *    supergroup; there is no per-topic membership API).
+ *
+ * Returns 'external' (fail-closed — the safe side) on ANY ambiguity: no topicId,
+ * no store, no verified binding, a resolution error, or >1 distinct operator (a
+ * multi-user agent). The deliver-on-availability-failure direction is only ever
+ * the verified operator's own private channel.
+ */
+export interface ToneOperatorStoreLike {
+    asVerifiedOperator: (t: number | string) => unknown;
+    all: () => Record<string, {
+        uid?: string;
+    }>;
+}
+export declare function resolveToneRecipientClass(topicOperatorStore: ToneOperatorStoreLike | null | undefined, topicId: number | string | null | undefined): 'operator' | 'external';
+//# sourceMappingURL=toneRecipientClass.d.ts.map

package/dist/server/toneRecipientClass.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"toneRecipientClass.d.ts","sourceRoot":"","sources":["../../src/server/toneRecipientClass.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,qBAAqB;IACpC,kBAAkB,EAAE,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,KAAK,OAAO,CAAC;IACpD,GAAG,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC7C;AAED,wBAAgB,yBAAyB,CACvC,kBAAkB,EAAE,qBAAqB,GAAG,IAAI,GAAG,SAAS,EAC5D,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,GAC1C,UAAU,GAAG,UAAU,CAoBzB"}

package/dist/server/toneRecipientClass.js

@@ -0,0 +1,25 @@
+export function resolveToneRecipientClass(topicOperatorStore, topicId) {
+    if (topicId == null || !topicOperatorStore)
+        return 'external';
+    let verified;
+    try {
+        verified = topicOperatorStore.asVerifiedOperator(topicId);
+    }
+    catch {
+        return 'external';
+    }
+    if (!verified)
+        return 'external';
+    try {
+        const uids = new Set(Object.values(topicOperatorStore.all())
+            .map((o) => o?.uid)
+            .filter((u) => typeof u === 'string' && u.length > 0));
+        if (uids.size > 1)
+            return 'external'; // multi-operator agent → fail-closed
+    }
+    catch {
+        return 'external';
+    }
+    return 'operator';
+}
+//# sourceMappingURL=toneRecipientClass.js.map

package/dist/server/toneRecipientClass.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"toneRecipientClass.js","sourceRoot":"","sources":["../../src/server/toneRecipientClass.ts"],"names":[],"mappings":"AAsBA,MAAM,UAAU,yBAAyB,CACvC,kBAA4D,EAC5D,OAA2C;IAE3C,IAAI,OAAO,IAAI,IAAI,IAAI,CAAC,kBAAkB;QAAE,OAAO,UAAU,CAAC;IAC9D,IAAI,QAAiB,CAAC;IACtB,IAAI,CAAC;QACH,QAAQ,GAAG,kBAAkB,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,IAAI,CAAC,QAAQ;QAAE,OAAO,UAAU,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,GAAG,CAClB,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC;aACpC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC;aAClB,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CACrE,CAAC;QACF,IAAI,IAAI,CAAC,IAAI,GAAG,CAAC;YAAE,OAAO,UAAU,CAAC,CAAC,qCAAqC;IAC7E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.670",
+  "version": "1.3.672",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-06-26T04:47:20.369Z",
-  "instarVersion": "1.3.670",
+  "generatedAt": "2026-06-26T08:03:29.818Z",
+  "instarVersion": "1.3.672",
   "entryCount": 202,
   "entries": {
     "hook:session-start": {
@@ -418,7 +418,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "b4db46b3171f84b9c8bc2aa3580c8bd4ac1e98ab36f89470d1cee78dfb4bd9f3",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -426,7 +426,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "b4db46b3171f84b9c8bc2aa3580c8bd4ac1e98ab36f89470d1cee78dfb4bd9f3",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -434,7 +434,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "b4db46b3171f84b9c8bc2aa3580c8bd4ac1e98ab36f89470d1cee78dfb4bd9f3",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -442,7 +442,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "b4db46b3171f84b9c8bc2aa3580c8bd4ac1e98ab36f89470d1cee78dfb4bd9f3",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -450,7 +450,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "b4db46b3171f84b9c8bc2aa3580c8bd4ac1e98ab36f89470d1cee78dfb4bd9f3",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -458,7 +458,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "b4db46b3171f84b9c8bc2aa3580c8bd4ac1e98ab36f89470d1cee78dfb4bd9f3",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -466,7 +466,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "b4db46b3171f84b9c8bc2aa3580c8bd4ac1e98ab36f89470d1cee78dfb4bd9f3",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -474,7 +474,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "b4db46b3171f84b9c8bc2aa3580c8bd4ac1e98ab36f89470d1cee78dfb4bd9f3",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -482,7 +482,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "b4db46b3171f84b9c8bc2aa3580c8bd4ac1e98ab36f89470d1cee78dfb4bd9f3",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -490,7 +490,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "b4db46b3171f84b9c8bc2aa3580c8bd4ac1e98ab36f89470d1cee78dfb4bd9f3",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -498,7 +498,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "b4db46b3171f84b9c8bc2aa3580c8bd4ac1e98ab36f89470d1cee78dfb4bd9f3",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -506,7 +506,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "b4db46b3171f84b9c8bc2aa3580c8bd4ac1e98ab36f89470d1cee78dfb4bd9f3",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -514,7 +514,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "b4db46b3171f84b9c8bc2aa3580c8bd4ac1e98ab36f89470d1cee78dfb4bd9f3",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -522,7 +522,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "b4db46b3171f84b9c8bc2aa3580c8bd4ac1e98ab36f89470d1cee78dfb4bd9f3",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -530,7 +530,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "b4db46b3171f84b9c8bc2aa3580c8bd4ac1e98ab36f89470d1cee78dfb4bd9f3",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -538,7 +538,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "b4db46b3171f84b9c8bc2aa3580c8bd4ac1e98ab36f89470d1cee78dfb4bd9f3",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -546,7 +546,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "b4db46b3171f84b9c8bc2aa3580c8bd4ac1e98ab36f89470d1cee78dfb4bd9f3",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -554,7 +554,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "b4db46b3171f84b9c8bc2aa3580c8bd4ac1e98ab36f89470d1cee78dfb4bd9f3",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -562,7 +562,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "b4db46b3171f84b9c8bc2aa3580c8bd4ac1e98ab36f89470d1cee78dfb4bd9f3",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -570,7 +570,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "b4db46b3171f84b9c8bc2aa3580c8bd4ac1e98ab36f89470d1cee78dfb4bd9f3",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -578,7 +578,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "b4db46b3171f84b9c8bc2aa3580c8bd4ac1e98ab36f89470d1cee78dfb4bd9f3",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -586,7 +586,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "b4db46b3171f84b9c8bc2aa3580c8bd4ac1e98ab36f89470d1cee78dfb4bd9f3",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -594,7 +594,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "b4db46b3171f84b9c8bc2aa3580c8bd4ac1e98ab36f89470d1cee78dfb4bd9f3",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -602,7 +602,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "b4db46b3171f84b9c8bc2aa3580c8bd4ac1e98ab36f89470d1cee78dfb4bd9f3",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -610,7 +610,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "b4db46b3171f84b9c8bc2aa3580c8bd4ac1e98ab36f89470d1cee78dfb4bd9f3",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -618,7 +618,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "b4db46b3171f84b9c8bc2aa3580c8bd4ac1e98ab36f89470d1cee78dfb4bd9f3",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -626,7 +626,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "b4db46b3171f84b9c8bc2aa3580c8bd4ac1e98ab36f89470d1cee78dfb4bd9f3",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -634,7 +634,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "b4db46b3171f84b9c8bc2aa3580c8bd4ac1e98ab36f89470d1cee78dfb4bd9f3",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -642,7 +642,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "b4db46b3171f84b9c8bc2aa3580c8bd4ac1e98ab36f89470d1cee78dfb4bd9f3",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -650,7 +650,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "b4db46b3171f84b9c8bc2aa3580c8bd4ac1e98ab36f89470d1cee78dfb4bd9f3",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -658,7 +658,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "b4db46b3171f84b9c8bc2aa3580c8bd4ac1e98ab36f89470d1cee78dfb4bd9f3",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -666,7 +666,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "b4db46b3171f84b9c8bc2aa3580c8bd4ac1e98ab36f89470d1cee78dfb4bd9f3",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -674,7 +674,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "b4db46b3171f84b9c8bc2aa3580c8bd4ac1e98ab36f89470d1cee78dfb4bd9f3",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -682,7 +682,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "b4db46b3171f84b9c8bc2aa3580c8bd4ac1e98ab36f89470d1cee78dfb4bd9f3",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -690,7 +690,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "b4db46b3171f84b9c8bc2aa3580c8bd4ac1e98ab36f89470d1cee78dfb4bd9f3",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -698,7 +698,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "b4db46b3171f84b9c8bc2aa3580c8bd4ac1e98ab36f89470d1cee78dfb4bd9f3",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -706,7 +706,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "b4db46b3171f84b9c8bc2aa3580c8bd4ac1e98ab36f89470d1cee78dfb4bd9f3",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -714,7 +714,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "b4db46b3171f84b9c8bc2aa3580c8bd4ac1e98ab36f89470d1cee78dfb4bd9f3",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -722,7 +722,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "b4db46b3171f84b9c8bc2aa3580c8bd4ac1e98ab36f89470d1cee78dfb4bd9f3",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -730,7 +730,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "b4db46b3171f84b9c8bc2aa3580c8bd4ac1e98ab36f89470d1cee78dfb4bd9f3",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -738,7 +738,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "b4db46b3171f84b9c8bc2aa3580c8bd4ac1e98ab36f89470d1cee78dfb4bd9f3",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -746,7 +746,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "b4db46b3171f84b9c8bc2aa3580c8bd4ac1e98ab36f89470d1cee78dfb4bd9f3",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -754,7 +754,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "b4db46b3171f84b9c8bc2aa3580c8bd4ac1e98ab36f89470d1cee78dfb4bd9f3",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -770,7 +770,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6ae21e4fd87307ef55497fdcae8d20b5d3cb4b0040e9eee1cd6deececa91a8c2",
+      "contentHash": "b4db46b3171f84b9c8bc2aa3580c8bd4ac1e98ab36f89470d1cee78dfb4bd9f3",
       "since": "2025-01-01"
     },
     "cli:init": {

package/upgrades/1.3.671.md

@@ -0,0 +1,26 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+The outbound tone gate (which screens the agent's replies for leaks like passwords, commands, or file paths) used to do the same thing for everyone when it couldn't get a verdict under load — it HELD the message. That sealed the operator out of their own channel: under heavy load, status replies to the operator were held with "could not produce a verdict within the budget," so the operator saw delivery receipts but no reply.
+
+The fix tiers that no-verdict behavior by who the message is going to. On the operator's own verified channel, a no-verdict availability failure now DELIVERS (the operator must never be locked out of their own agent). For anyone external, it still HOLDS, fail-closed (never leak an unreviewed message to a third party). A real "this leaks — block it" verdict still blocks for everyone — only the case where the reviewer couldn't decide is tiered.
+
+Who counts as "the operator" is resolved strictly from the verified, locally-authenticated operator binding (never a name in a message, never a spoofable field) AND only when the agent has a single human operator — so a multi-user agent always fails closed. It ships OFF by default (today's hold-everywhere behavior is unchanged) and is an explicit opt-in with a dry-run mode to soak first. This is the outbound twin of the inbound "operator channel is sacred" fix.
+
+## What to Tell Your User
+
+If you ever saw a delivery receipt but no reply from your agent under heavy load, that was the safety screen holding your own message because it could not finish reviewing it in time. Your own channel will now get the message through in that situation, while messages to anyone else stay held until they can be checked. It is off until you turn it on, with a try-it-safely mode that just logs what it would do first.
+
+## Summary of New Capabilities
+
+- Operator-channel-sacred outbound: a no-verdict tone-gate failure delivers on the operator's own verified channel and holds for everyone else, instead of sealing the operator out under load.
+- Resolved strictly from the verified operator identity, single-human-operator only, fail-closed on any doubt; off by default with a dry-run soak mode.
+
+## Evidence
+
+- `tests/unit/messaging-tone-gate-operator-channel-tiering.test.ts` (12) + `tests/unit/tone-recipient-class.test.ts` (10): both sides of every boundary — operator delivers on capacity-shed/provider-error/unparseable/budget-timeout; external + absent-binding + multi-operator + resolution-error all HOLD; a real content block always holds; dry-run holds + logs; legacy modes preserved. 46 existing tone-gate/budget tests still green (no default-behavior change).
+- 3-round convergence caught + fixed a spoofable-leak design: `docs/specs/reports/outbound-gate-tiered-fail-direction-convergence.md`.

package/upgrades/1.3.672.md

@@ -0,0 +1,63 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+The outbound message tone gate (`MessagingToneGate.review()`) used to HOLD every
+outbound message when its LLM reviewer was unavailable (provider rate-limited /
+circuit breaker open). During a sustained backend outage that turned the safety
+gate itself into the outage — the user saw delivery receipts but no replies for
+hours. (Postmortem failure F4.)
+
+Now, on a sustained provider-outage, the gate degrades to an in-process
+**deterministic leak floor** (the same B1–B7 artifact detectors + internal-id
+leak detector, run with NO LLM and NO subprocess): a clean message SENDS, a
+message carrying a high-stakes artifact (command, path, config key, endpoint,
+internal id) still HOLDS. The same outage has **two manifestations and both
+degrade**: the FAST one (the breaker throws inside `review()`) and the SLOW one
+(the gate stalls past the outbound route budget — the documented 2026-06-08
+failure) — covered via one shared degrade path so the slow stall no longer
+silently holds either. The fix distinguishes these dispositions:
+
+- INFRA-unavailable (provider error / breaker open, OR slow-stall budget timeout) → **degrade** to the floor (default).
+- CONTENT-unsafe (the model produced a real block verdict) → still **HOLD** (never degraded).
+- Host spawn-cap shed (transient capacity) → still **fail-closed** (P3 invariant intact).
+
+Operator override `messaging.toneGate.failClosedOnExhaustion` (governs both the
+throw and the budget-timeout paths): `true` restores the strict hold-everything
+behavior, `false` is legacy fail-open, unset is the new degrade default.
+
+## What to Tell Your User
+
+During a sustained AI-backend outage you now stay reachable — your clean replies
+still go through a fast safety check instead of being silently held, while any
+message that would leak a sensitive artifact is still held. You are never again
+silently cut off because the message-safety check lost its AI engine.
+
+## Summary of New Capabilities
+
+- The outbound tone gate degrades gracefully when its LLM reviewer is unavailable:
+  clean replies still send (via a fast in-process safety scan), leaks still hold.
+  Covers both the fast (breaker) and slow (budget-timeout) manifestations of an
+  LLM-backend outage, so you are not silently cut off during a rate-limit window.
+- New operator control: `messaging.toneGate.failClosedOnExhaustion` is now
+  three-valued — unset = degrade (default), `true` = strict hold-everything,
+  `false` = legacy fail-open. Read live (no restart).
+
+## Evidence
+
+- Fixes the 2026-06-25 silent-outbound outage (postmortem F4): a rate-limited
+  engine opened the circuit breaker and the gate held every message for hours.
+- 61 unit tests pass (MessagingToneGate + spawn-cap-fail-closed-gates +
+  outbound-gate-budget), covering BOTH paths: provider-throw + clean → sends;
+  provider-throw + leak → holds; budget-timeout + clean → sends; budget-timeout +
+  leak → holds; capacity-shed → fail-closed; content-block verdict → never
+  degraded; all three operator-override values.
+- Independent second-pass review concurred and surfaced the slow-path
+  (budget-timeout) sibling as a concern — closed in this same change (no deferral)
+  rather than shipped partial. The deterministic floor reuses the exact detector
+  set the LLM uses and is strictly more conservative (over-blocks, never
+  under-blocks); secret values remain handled by the separate unchanged redaction
+  pass.

package/upgrades/side-effects/outbound-gate-tiered-fail-direction.md

@@ -0,0 +1,26 @@
+# Side-effects review — outbound-gate-tiered-fail-direction
+
+Change: the MessagingToneGate's AVAILABILITY-failure fail-direction (capacity-shed / provider-error / unparseable-after-retry / route-budget-timeout — the no-verdict branches) is now TIERED by a structurally-resolved recipient class — operator's own channel DELIVERS (so the operator isn't sealed out), external HOLDS (fail-closed). Default OFF (`failClosedMode:'always'` = today's behavior); `tiered` is an explicit opt-in, dryRun-first. Files: `src/core/MessagingToneGate.ts`, `src/server/outboundGateBudget.ts`, `src/server/toneRecipientClass.ts` (new), `src/server/routes.ts`, `src/commands/server.ts`, tests.
+
+1. **Over-block:** REDUCES a specific over-block — operator-bound status replies held under capacity/timeout pressure (the confirmed 2026-06-25 live lockout). Only on the operator's own verified channel, only on a no-verdict availability failure, only when `tiered` is opted in.
+
+2. **Under-block:** None new. External channels keep today's fail-CLOSED hold verbatim. A real CONTENT/B15 BLOCK verdict ALWAYS holds on every channel (tiering touches ONLY the no-verdict availability branches — `interpret()` verdicts return before the tier). `recipientClass` defaults `external` (fail-closed) on ANY ambiguity.
+
+3. **Level-of-abstraction fit:** Correct. Recipient resolution at the route seam (where the verified-operator binding + topicId live); the gate consumes a resolved `recipientClass` (it never sniffs identity). The budget-timeout seam — a SEPARATE fail-point from the in-gate paths — tiers on the SAME resolved value, so they can't disagree.
+
+4. **Signal vs authority:** The tone gate remains the single authority for outbound behavioral VERDICTS. This tiers only the DEGRADATION policy (what to do when no verdict could be produced) — not a behavioral verdict. recipientClass is resolved STRUCTURALLY from the verified, locally-auth-bound operator (`asVerifiedOperator` — local-auth-only by the store invariant), NEVER from the launderable `recipientType` and NEVER from content (Know Your Principal). This was the convergence BLOCKER: the first draft keyed on `recipientType` (spoofable, defaults primary-user) — fixed.
+
+5. **Interactions:** Reconciles two standards by channel-tiering — No-Silent-Degradation (external still fail-closed) × Operator-Channel-Sacred (operator delivers). The CoherenceReviewer/CoherenceGate half of the same blindspot already shipped (CMT-1794, abstain-tiering) and is untouched. The deliver-on-failure is AUDITED via `failedOpenOperatorChannel` through `logToneGateDecision` (never silent). Capacity-shed delivery for the operator spawns NOTHING (message already composed), so the fork-bomb P3 floor is intact.
+
+6. **External surfaces:** No new routes. A new `ToneReviewResult.failedOpenOperatorChannel` disposition + a `[tone-gate]` decision-log field. Behavior change is gated behind `messaging.toneGate.failClosedMode:'tiered'` (default `always`).
+
+7. **Multi-machine posture:** Machine-local per send. The verified-operator binding is the LOCAL auth-bound record (the replicated topic-operator store is explicitly never authoritative); the gate runs on whichever machine sends. No new cross-machine surface.
+
+8. **Rollback cost:** Low. `failClosedMode` unset / `'always'` = today's behavior (the default — zero change on upgrade). `'never'` restores legacy fail-open. `toneTierDryRun:true` soaks (logs would-deliver, still holds). All live-config (the getter is read per-review). No data migration.
+
+## Build-time wiring preconditions honored (convergence confirmation)
+- recipientClass reads the LOCAL auth-bound operator (`asVerifiedOperator`, local-only by store invariant), not the replicated store. ✓
+- 1:1-operator-topic signal is concrete: a SINGLE distinct verified operator uid across `topicOperatorStore.all()` (multi-operator agent → external). Defaults external on any error. ✓
+
+## Second-pass review (required — touches an outbound message gate)
+The 3-round convergence (adversarial + lessons-aware reviewers + Standards-Conformance Gate + a confirmation pass) IS the second-pass review: it caught a spoofable-leak design (recipientType→structural), a live-default→dark-default posture fix, a confabulated consistency claim, and 4 other majors — ALL resolved in this implementation and pinned by 22 unit tests (gate boundary + route resolution + budget seam). The confirmation pass verified every blocker resolved. Concur with the implemented design.