instar 1.3.696 → 1.3.698

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.696",
+  "version": "1.3.698",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-06-28T11:46:24.604Z",
-  "instarVersion": "1.3.696",
+  "generatedAt": "2026-06-29T23:38:11.629Z",
+  "instarVersion": "1.3.698",
   "entryCount": 202,
   "entries": {
     "hook:session-start": {
@@ -418,7 +418,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "6d5ddf97c62bce603a06d75a9197e708882fb6dc6925aaec14c855185a84d96a",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -426,7 +426,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "6d5ddf97c62bce603a06d75a9197e708882fb6dc6925aaec14c855185a84d96a",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -434,7 +434,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "6d5ddf97c62bce603a06d75a9197e708882fb6dc6925aaec14c855185a84d96a",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -442,7 +442,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "6d5ddf97c62bce603a06d75a9197e708882fb6dc6925aaec14c855185a84d96a",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -450,7 +450,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "6d5ddf97c62bce603a06d75a9197e708882fb6dc6925aaec14c855185a84d96a",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -458,7 +458,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "6d5ddf97c62bce603a06d75a9197e708882fb6dc6925aaec14c855185a84d96a",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -466,7 +466,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "6d5ddf97c62bce603a06d75a9197e708882fb6dc6925aaec14c855185a84d96a",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -474,7 +474,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "6d5ddf97c62bce603a06d75a9197e708882fb6dc6925aaec14c855185a84d96a",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -482,7 +482,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "6d5ddf97c62bce603a06d75a9197e708882fb6dc6925aaec14c855185a84d96a",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -490,7 +490,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "6d5ddf97c62bce603a06d75a9197e708882fb6dc6925aaec14c855185a84d96a",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -498,7 +498,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "6d5ddf97c62bce603a06d75a9197e708882fb6dc6925aaec14c855185a84d96a",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -506,7 +506,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "6d5ddf97c62bce603a06d75a9197e708882fb6dc6925aaec14c855185a84d96a",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -514,7 +514,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "6d5ddf97c62bce603a06d75a9197e708882fb6dc6925aaec14c855185a84d96a",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -522,7 +522,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "6d5ddf97c62bce603a06d75a9197e708882fb6dc6925aaec14c855185a84d96a",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -530,7 +530,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "6d5ddf97c62bce603a06d75a9197e708882fb6dc6925aaec14c855185a84d96a",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -538,7 +538,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "6d5ddf97c62bce603a06d75a9197e708882fb6dc6925aaec14c855185a84d96a",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -546,7 +546,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "6d5ddf97c62bce603a06d75a9197e708882fb6dc6925aaec14c855185a84d96a",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -554,7 +554,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "6d5ddf97c62bce603a06d75a9197e708882fb6dc6925aaec14c855185a84d96a",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -562,7 +562,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "6d5ddf97c62bce603a06d75a9197e708882fb6dc6925aaec14c855185a84d96a",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -570,7 +570,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "6d5ddf97c62bce603a06d75a9197e708882fb6dc6925aaec14c855185a84d96a",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -578,7 +578,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "6d5ddf97c62bce603a06d75a9197e708882fb6dc6925aaec14c855185a84d96a",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -586,7 +586,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "6d5ddf97c62bce603a06d75a9197e708882fb6dc6925aaec14c855185a84d96a",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -594,7 +594,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "6d5ddf97c62bce603a06d75a9197e708882fb6dc6925aaec14c855185a84d96a",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -602,7 +602,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "6d5ddf97c62bce603a06d75a9197e708882fb6dc6925aaec14c855185a84d96a",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -610,7 +610,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "6d5ddf97c62bce603a06d75a9197e708882fb6dc6925aaec14c855185a84d96a",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -618,7 +618,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "6d5ddf97c62bce603a06d75a9197e708882fb6dc6925aaec14c855185a84d96a",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -626,7 +626,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "6d5ddf97c62bce603a06d75a9197e708882fb6dc6925aaec14c855185a84d96a",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -634,7 +634,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "6d5ddf97c62bce603a06d75a9197e708882fb6dc6925aaec14c855185a84d96a",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -642,7 +642,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "6d5ddf97c62bce603a06d75a9197e708882fb6dc6925aaec14c855185a84d96a",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -650,7 +650,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "6d5ddf97c62bce603a06d75a9197e708882fb6dc6925aaec14c855185a84d96a",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -658,7 +658,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "6d5ddf97c62bce603a06d75a9197e708882fb6dc6925aaec14c855185a84d96a",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -666,7 +666,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "6d5ddf97c62bce603a06d75a9197e708882fb6dc6925aaec14c855185a84d96a",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -674,7 +674,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "6d5ddf97c62bce603a06d75a9197e708882fb6dc6925aaec14c855185a84d96a",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -682,7 +682,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "6d5ddf97c62bce603a06d75a9197e708882fb6dc6925aaec14c855185a84d96a",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -690,7 +690,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "6d5ddf97c62bce603a06d75a9197e708882fb6dc6925aaec14c855185a84d96a",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -698,7 +698,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "6d5ddf97c62bce603a06d75a9197e708882fb6dc6925aaec14c855185a84d96a",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -706,7 +706,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "6d5ddf97c62bce603a06d75a9197e708882fb6dc6925aaec14c855185a84d96a",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -714,7 +714,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "6d5ddf97c62bce603a06d75a9197e708882fb6dc6925aaec14c855185a84d96a",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -722,7 +722,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "6d5ddf97c62bce603a06d75a9197e708882fb6dc6925aaec14c855185a84d96a",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -730,7 +730,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "6d5ddf97c62bce603a06d75a9197e708882fb6dc6925aaec14c855185a84d96a",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -738,7 +738,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "6d5ddf97c62bce603a06d75a9197e708882fb6dc6925aaec14c855185a84d96a",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -746,7 +746,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "6d5ddf97c62bce603a06d75a9197e708882fb6dc6925aaec14c855185a84d96a",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -754,7 +754,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "6d5ddf97c62bce603a06d75a9197e708882fb6dc6925aaec14c855185a84d96a",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -770,7 +770,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "6d5ddf97c62bce603a06d75a9197e708882fb6dc6925aaec14c855185a84d96a",
       "since": "2025-01-01"
     },
     "cli:init": {

package/upgrades/1.3.697.md

@@ -0,0 +1,56 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+Tone-gate deterministic-floor **click-link carve-out** (fixes the floor blocking
+legitimate user-facing links during an LLM outage). When the LLM tone-judge is
+slow or unavailable, outbound messages fall back to a fast pattern-only
+"deterministic floor" so the user is never silently cut off (the F4
+graceful-degradation path). That floor could not tell a clickable link from a
+callable endpoint, so it hard-blocked **every** link an agent tried to share —
+private views, dashboard links, Secret-Drop one-time URLs, Telegraph pages, file
+downloads — fleet-wide, whenever the LLM was degraded.
+
+The fix adds `scrubClickLinksForFloor`: before the floor's signal scan, scheme'd
+`http(s)://…` URLs shared as click destinations are neutralized so their
+host/port/path/token don't trip the floor's "looks like an endpoint" detectors —
+**unless** the text carries a real call instruction (`curl`/`wget`, an uppercase
+HTTP method against a URL, or "hit/call/invoke … the endpoint"), in which case
+nothing is scrubbed and the floor blocks as before. This mirrors the LLM path's
+existing intent-based (open-vs-call) carve-out, now at the degraded floor too.
+Safe-direction only: it loosens a false positive on clickable links and never
+lets a command, file path, config key, secret, or internal id escape.
+
+## What to Tell Your User
+
+You'll notice this only as the absence of a bug: when my LLM backend is
+rate-limited or slow, a link I send you (a report, a dashboard, a one-time
+Secret-Drop link) now actually reaches you instead of being silently held.
+Nothing to configure — it's always on, and it never weakens the gate that keeps
+raw commands and secrets out of our chat.
+
+## Summary of New Capabilities
+
+- The outbound tone gate's degraded "deterministic floor" no longer blocks
+  legitimate clickable links (private view / tunnel / dashboard / Secret-Drop /
+  Telegraph / download). Always-on correctness fix; no config knob. Real call
+  instructions (curl / uppercase-method-vs-URL / "hit the endpoint") are still
+  held, and command/path/secret/internal-id leaks are unaffected.
+
+## Evidence
+
+- New `deterministic floor — click-link carve-out` test block in
+  `tests/unit/MessagingToneGate.test.ts` (14 cases): each click-link class PASSES
+  the floor; curl / uppercase-method / "hit the endpoint" / no-article "call api"
+  calls still HOLD; file-path (`B2_FILE_PATH`) + bare-CLI leaks still HOLD; a
+  200k-char adversarial input proves the hardened call-phrase regex runs in
+  linear time (< 200ms); end-to-end `review()` degrades-and-SENDS a Secret-Drop
+  link on provider throw. Full file 55/55 green.
+- Independent Phase-5 second-pass review: **CONCUR** (leak-safety preserved across
+  eight bypass attempts; safe direction verified). One non-blocking latent-ReDoS
+  note **resolved in this PR** (no deferral): the call-phrase regex was hardened
+  to remove ambiguous whitespace backtracking.
+- tsc clean; budget + no-silent-fallbacks + dark-gate lint ratchets green.

package/upgrades/1.3.698.md

@@ -0,0 +1,90 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+**Standing-authorization signal for the B17_FALSE_BLOCKER outbound-tone-gate rule**
+(BIAS-TO-ACTION-SPEC) — the structural fix for "re-asking the operator for an
+approval they already granted." The gate's existing B17 rule catches handing a
+doable task back to a human, but its legitimate "asking for an approval the agent
+must obtain" carve-out had no notion of an approval ALREADY IN HAND, so re-asking
+for held authority slipped through as legitimate escalation.
+
+Two cheap, deterministic, deps-injected producers now feed the existing LLM gate:
+`detectAskWhenAuthorized` (does the outbound text seek permission?) and
+`resolveStandingAuthorization` (is there a VERIFIED-operator, PROVABLY-non-forwarded,
+in-window grant in the topic?). The gate makes the semantic call — does this grant
+plausibly cover THIS specific, **non-FLOOR** action? — by meaning, with a decisive
+under-fire bias (any uncertainty → do not fire B17; a needless ask is harmless,
+suppressing a needed one is the harm). The standing-authorization evidence is
+rendered as boundary-quoted, secret-scrubbed **untrusted DATA** and can never flip a
+B1–B7/B15 leak HOLD; citation precedence (B15 > B16 > B17 > B18) is unchanged.
+
+Load-bearing security substrate: a forwarded operator message carries third-party
+content, so the Telegram message log now persists an **explicit `forwarded` boolean**
+on BOTH ingress paths (polling `appendToLog` + lifeline `logInboundMessage`),
+including an explicit `false` on genuine rows — a grant counts only when provably
+non-forwarded; a legacy row with no flag never counts (fail-safe).
+
+Ships **observe-only + dev-gated dark** (`monitoring.biasToAction`, registered in
+`DEV_GATED_FEATURES`): on a development agent the resolver runs and records a
+would-fire to `logs/bias-to-action.jsonl` (operator-uid HASH + ask-phrase token +
+source enum + grant timestamp — never a raw uid or the operator's words), and it
+changes **no message**. Live B17 firing is a separate future `observeOnly:false`
+operator decision, gated on a measured low false-positive rate.
+
+## What to Tell Your User
+
+⚗️ **Experimental, off by default — nothing changes for you yet.** This is an internal
+guardrail that, once matured, will stop me re-asking you for permission I already
+have — when you've said "go ahead, you have my preapproval, run autonomously," I
+should act on that instead of stopping to ask again. For now it only *watches* and
+records what it would have done, on a development agent, without altering a single
+message. It will never override a genuine FLOOR decision (anything irreversible,
+cost-bearing, out-of-scope, or policy-sensitive) — those always still get your
+explicit yes — and it can never weaken the safety gate that stops credential/path
+leaks. Most agents (the fleet) are wholly unaffected until it's deliberately turned on.
+
+## Summary of New Capabilities
+
+- Standing-authorization signal for B17 — recognizes "re-asking for authority you
+  already hold" as the false blocker it is (observe-only + dev-gated dark).
+- Verified-operator-only, provably-non-forwarded, in-window grant resolution
+  (Know Your Principal; fail-safe toward sending the ask on any uncertainty).
+- Explicit `forwarded` provenance persisted on both Telegram ingress paths.
+- `logs/bias-to-action.jsonl` observe-only telemetry (hashed uid, no raw quote) for
+  measuring the false-positive rate before any live firing.
+
+## Evidence
+
+**The gap (reproduction):** on 2026-06-27 (Telegram topic 28130) the operator said
+"Please enter an autonomy session and continue until this is fully fixed" + "you have
+my preapproval for any decisions needed." With that live grant in hand I still stopped
+at "ready for your go-ahead to build" and waited — the operator had to chase me ("did
+you get my last message?"). The existing B17_FALSE_BLOCKER rule is meant to catch
+handing a doable task back to a human, but its "asking for an approval the agent must
+obtain" carve-out treated re-asking for an ALREADY-GRANTED approval as legitimate
+escalation, so the surrender passed the gate.
+
+**Before:** a verified, in-window operator grant ("you have my preapproval…") followed
+by an agent message asking permission to proceed → B17 does NOT fire (the carve-out
+exempts the ask); the agent stalls on the operator.
+
+**After (observe-only, verified on the real read/write paths):** the same situation now
+resolves a verified-operator, provably-non-forwarded, in-window grant from the real
+Telegram message log and records a would-fire to `logs/bias-to-action.jsonl` (uid hash +
+ask-phrase token), demonstrating the live clause would recognize the false blocker —
+while changing no message. Verified by `tests/unit/bias-to-action-wiring.test.ts`, which
+drives the resolver through the real `getTopicHistory` read path: an identical grant
+from a DIFFERENT uid does NOT count, a FORWARDED grant does NOT count, a legacy row with
+no `forwarded` field does NOT count, and a topic with no bound operator does NOT count —
+each a fail-safe toward sending the ask. Forwarded persistence asserted on BOTH ingress
+writers including the explicit `false` on genuine rows.
+
+**Safety (before/after unchanged):** supplying a standing-authorization grant can never
+flip a B1–B7/B15 credential-leak HOLD — confirmed by the existing leak-HOLD regressions
+in the 55-test `MessagingToneGate` suite, which pass against the new B17 sub-clause; and
+the independent Phase-5 adversarial review traced all six security-critical claims and
+could not break any (CONCUR).