instar 1.3.697 → 1.3.699

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.697",
+  "version": "1.3.699",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-06-28T18:53:00.750Z",
-  "instarVersion": "1.3.697",
+  "generatedAt": "2026-06-30T05:38:13.079Z",
+  "instarVersion": "1.3.699",
   "entryCount": 202,
   "entries": {
     "hook:session-start": {
@@ -418,7 +418,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "0cc2eb0170501a43c818c88863303c7cb20fd905a0cddc0ec57352138c3b004c",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -426,7 +426,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "0cc2eb0170501a43c818c88863303c7cb20fd905a0cddc0ec57352138c3b004c",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -434,7 +434,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "0cc2eb0170501a43c818c88863303c7cb20fd905a0cddc0ec57352138c3b004c",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -442,7 +442,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "0cc2eb0170501a43c818c88863303c7cb20fd905a0cddc0ec57352138c3b004c",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -450,7 +450,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "0cc2eb0170501a43c818c88863303c7cb20fd905a0cddc0ec57352138c3b004c",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -458,7 +458,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "0cc2eb0170501a43c818c88863303c7cb20fd905a0cddc0ec57352138c3b004c",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -466,7 +466,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "0cc2eb0170501a43c818c88863303c7cb20fd905a0cddc0ec57352138c3b004c",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -474,7 +474,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "0cc2eb0170501a43c818c88863303c7cb20fd905a0cddc0ec57352138c3b004c",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -482,7 +482,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "0cc2eb0170501a43c818c88863303c7cb20fd905a0cddc0ec57352138c3b004c",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -490,7 +490,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "0cc2eb0170501a43c818c88863303c7cb20fd905a0cddc0ec57352138c3b004c",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -498,7 +498,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "0cc2eb0170501a43c818c88863303c7cb20fd905a0cddc0ec57352138c3b004c",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -506,7 +506,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "0cc2eb0170501a43c818c88863303c7cb20fd905a0cddc0ec57352138c3b004c",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -514,7 +514,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "0cc2eb0170501a43c818c88863303c7cb20fd905a0cddc0ec57352138c3b004c",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -522,7 +522,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "0cc2eb0170501a43c818c88863303c7cb20fd905a0cddc0ec57352138c3b004c",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -530,7 +530,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "0cc2eb0170501a43c818c88863303c7cb20fd905a0cddc0ec57352138c3b004c",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -538,7 +538,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "0cc2eb0170501a43c818c88863303c7cb20fd905a0cddc0ec57352138c3b004c",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -546,7 +546,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "0cc2eb0170501a43c818c88863303c7cb20fd905a0cddc0ec57352138c3b004c",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -554,7 +554,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "0cc2eb0170501a43c818c88863303c7cb20fd905a0cddc0ec57352138c3b004c",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -562,7 +562,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "0cc2eb0170501a43c818c88863303c7cb20fd905a0cddc0ec57352138c3b004c",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -570,7 +570,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "0cc2eb0170501a43c818c88863303c7cb20fd905a0cddc0ec57352138c3b004c",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -578,7 +578,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "0cc2eb0170501a43c818c88863303c7cb20fd905a0cddc0ec57352138c3b004c",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -586,7 +586,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "0cc2eb0170501a43c818c88863303c7cb20fd905a0cddc0ec57352138c3b004c",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -594,7 +594,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "0cc2eb0170501a43c818c88863303c7cb20fd905a0cddc0ec57352138c3b004c",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -602,7 +602,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "0cc2eb0170501a43c818c88863303c7cb20fd905a0cddc0ec57352138c3b004c",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -610,7 +610,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "0cc2eb0170501a43c818c88863303c7cb20fd905a0cddc0ec57352138c3b004c",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -618,7 +618,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "0cc2eb0170501a43c818c88863303c7cb20fd905a0cddc0ec57352138c3b004c",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -626,7 +626,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "0cc2eb0170501a43c818c88863303c7cb20fd905a0cddc0ec57352138c3b004c",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -634,7 +634,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "0cc2eb0170501a43c818c88863303c7cb20fd905a0cddc0ec57352138c3b004c",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -642,7 +642,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "0cc2eb0170501a43c818c88863303c7cb20fd905a0cddc0ec57352138c3b004c",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -650,7 +650,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "0cc2eb0170501a43c818c88863303c7cb20fd905a0cddc0ec57352138c3b004c",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -658,7 +658,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "0cc2eb0170501a43c818c88863303c7cb20fd905a0cddc0ec57352138c3b004c",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -666,7 +666,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "0cc2eb0170501a43c818c88863303c7cb20fd905a0cddc0ec57352138c3b004c",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -674,7 +674,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "0cc2eb0170501a43c818c88863303c7cb20fd905a0cddc0ec57352138c3b004c",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -682,7 +682,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "0cc2eb0170501a43c818c88863303c7cb20fd905a0cddc0ec57352138c3b004c",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -690,7 +690,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "0cc2eb0170501a43c818c88863303c7cb20fd905a0cddc0ec57352138c3b004c",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -698,7 +698,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "0cc2eb0170501a43c818c88863303c7cb20fd905a0cddc0ec57352138c3b004c",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -706,7 +706,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "0cc2eb0170501a43c818c88863303c7cb20fd905a0cddc0ec57352138c3b004c",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -714,7 +714,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "0cc2eb0170501a43c818c88863303c7cb20fd905a0cddc0ec57352138c3b004c",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -722,7 +722,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "0cc2eb0170501a43c818c88863303c7cb20fd905a0cddc0ec57352138c3b004c",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -730,7 +730,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "0cc2eb0170501a43c818c88863303c7cb20fd905a0cddc0ec57352138c3b004c",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -738,7 +738,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "0cc2eb0170501a43c818c88863303c7cb20fd905a0cddc0ec57352138c3b004c",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -746,7 +746,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "0cc2eb0170501a43c818c88863303c7cb20fd905a0cddc0ec57352138c3b004c",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -754,7 +754,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "0cc2eb0170501a43c818c88863303c7cb20fd905a0cddc0ec57352138c3b004c",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -770,7 +770,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e41424c2003a76d2538ff115cf9304afd47e5558e174619e641cdc066c2f3048",
+      "contentHash": "0cc2eb0170501a43c818c88863303c7cb20fd905a0cddc0ec57352138c3b004c",
       "since": "2025-01-01"
     },
     "cli:init": {
@@ -1530,7 +1530,7 @@
       "type": "subsystem",
       "domain": "server",
       "sourcePath": "src/server/AgentServer.ts",
-      "contentHash": "32ae3f7ec0dd6a95725dcc3f2773327fddba815d408743914f3b65e11ce80899",
+      "contentHash": "c55b920cb89980f73d9226b5770c63a94170e9fca13c81a501a2664d73c6bd96",
       "since": "2025-01-01"
     },
     "subsystem:session-manager": {

package/upgrades/1.3.698.md

@@ -0,0 +1,90 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+**Standing-authorization signal for the B17_FALSE_BLOCKER outbound-tone-gate rule**
+(BIAS-TO-ACTION-SPEC) — the structural fix for "re-asking the operator for an
+approval they already granted." The gate's existing B17 rule catches handing a
+doable task back to a human, but its legitimate "asking for an approval the agent
+must obtain" carve-out had no notion of an approval ALREADY IN HAND, so re-asking
+for held authority slipped through as legitimate escalation.
+
+Two cheap, deterministic, deps-injected producers now feed the existing LLM gate:
+`detectAskWhenAuthorized` (does the outbound text seek permission?) and
+`resolveStandingAuthorization` (is there a VERIFIED-operator, PROVABLY-non-forwarded,
+in-window grant in the topic?). The gate makes the semantic call — does this grant
+plausibly cover THIS specific, **non-FLOOR** action? — by meaning, with a decisive
+under-fire bias (any uncertainty → do not fire B17; a needless ask is harmless,
+suppressing a needed one is the harm). The standing-authorization evidence is
+rendered as boundary-quoted, secret-scrubbed **untrusted DATA** and can never flip a
+B1–B7/B15 leak HOLD; citation precedence (B15 > B16 > B17 > B18) is unchanged.
+
+Load-bearing security substrate: a forwarded operator message carries third-party
+content, so the Telegram message log now persists an **explicit `forwarded` boolean**
+on BOTH ingress paths (polling `appendToLog` + lifeline `logInboundMessage`),
+including an explicit `false` on genuine rows — a grant counts only when provably
+non-forwarded; a legacy row with no flag never counts (fail-safe).
+
+Ships **observe-only + dev-gated dark** (`monitoring.biasToAction`, registered in
+`DEV_GATED_FEATURES`): on a development agent the resolver runs and records a
+would-fire to `logs/bias-to-action.jsonl` (operator-uid HASH + ask-phrase token +
+source enum + grant timestamp — never a raw uid or the operator's words), and it
+changes **no message**. Live B17 firing is a separate future `observeOnly:false`
+operator decision, gated on a measured low false-positive rate.
+
+## What to Tell Your User
+
+⚗️ **Experimental, off by default — nothing changes for you yet.** This is an internal
+guardrail that, once matured, will stop me re-asking you for permission I already
+have — when you've said "go ahead, you have my preapproval, run autonomously," I
+should act on that instead of stopping to ask again. For now it only *watches* and
+records what it would have done, on a development agent, without altering a single
+message. It will never override a genuine FLOOR decision (anything irreversible,
+cost-bearing, out-of-scope, or policy-sensitive) — those always still get your
+explicit yes — and it can never weaken the safety gate that stops credential/path
+leaks. Most agents (the fleet) are wholly unaffected until it's deliberately turned on.
+
+## Summary of New Capabilities
+
+- Standing-authorization signal for B17 — recognizes "re-asking for authority you
+  already hold" as the false blocker it is (observe-only + dev-gated dark).
+- Verified-operator-only, provably-non-forwarded, in-window grant resolution
+  (Know Your Principal; fail-safe toward sending the ask on any uncertainty).
+- Explicit `forwarded` provenance persisted on both Telegram ingress paths.
+- `logs/bias-to-action.jsonl` observe-only telemetry (hashed uid, no raw quote) for
+  measuring the false-positive rate before any live firing.
+
+## Evidence
+
+**The gap (reproduction):** on 2026-06-27 (Telegram topic 28130) the operator said
+"Please enter an autonomy session and continue until this is fully fixed" + "you have
+my preapproval for any decisions needed." With that live grant in hand I still stopped
+at "ready for your go-ahead to build" and waited — the operator had to chase me ("did
+you get my last message?"). The existing B17_FALSE_BLOCKER rule is meant to catch
+handing a doable task back to a human, but its "asking for an approval the agent must
+obtain" carve-out treated re-asking for an ALREADY-GRANTED approval as legitimate
+escalation, so the surrender passed the gate.
+
+**Before:** a verified, in-window operator grant ("you have my preapproval…") followed
+by an agent message asking permission to proceed → B17 does NOT fire (the carve-out
+exempts the ask); the agent stalls on the operator.
+
+**After (observe-only, verified on the real read/write paths):** the same situation now
+resolves a verified-operator, provably-non-forwarded, in-window grant from the real
+Telegram message log and records a would-fire to `logs/bias-to-action.jsonl` (uid hash +
+ask-phrase token), demonstrating the live clause would recognize the false blocker —
+while changing no message. Verified by `tests/unit/bias-to-action-wiring.test.ts`, which
+drives the resolver through the real `getTopicHistory` read path: an identical grant
+from a DIFFERENT uid does NOT count, a FORWARDED grant does NOT count, a legacy row with
+no `forwarded` field does NOT count, and a topic with no bound operator does NOT count —
+each a fail-safe toward sending the ask. Forwarded persistence asserted on BOTH ingress
+writers including the explicit `false` on genuine rows.
+
+**Safety (before/after unchanged):** supplying a standing-authorization grant can never
+flip a B1–B7/B15 credential-leak HOLD — confirmed by the existing leak-HOLD regressions
+in the 55-test `MessagingToneGate` suite, which pass against the new B17 sub-clause; and
+the independent Phase-5 adversarial review traced all six security-critical claims and
+could not break any (CONCUR).

package/upgrades/1.3.699.md

@@ -0,0 +1,31 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+Closes the cross-machine "stuck move" bug: a conversation pinned to one machine while another still owned it never converged. Three root causes are fixed:
+
+1. **Clock-skew quarantine false-positive** — the pool-refresh fed the coarse, git-synced file heartbeat's timestamp into the live 5-minute clock-skew check, permanently quarantining a peer whose clock was actually fine. A `coarseHeartbeat` flag now makes coarse beats refresh liveness without ever driving the skew FSM.
+2. **The pin (move-instruction) never reached the owning machine** — it was written only on the lease-holder. A new `topic-pin-record` replicated-record kind (on the existing WS2 replicated-record rails: HLC ordering, tombstone-on-clear, quarantine) replicates the pin; the owning machine's reconciler reads it as an HLC-ordered, validated (known + online target) advisory move-intent and starts the cooperative transfer.
+3. **The `transferring` handoff signal never replicated** — `PlacementData` is extended with `status`/`transferTo`/`timestamp`/`drainInFlight`, threaded at the shared `emitPlacement` helper, and `OwnershipApplier` now materializes the transferring state (validated `transferTo`→downgrade, epoch-fenced, timestamp-clamped) so the target machine claims and the handoff completes.
+
+Also: a stuck-transferring `abort-transfer` recovery (a dead-target handoff self-heals back to active instead of freezing), a read-only `GET /pool/reconciler` observability route, and the testing-integrity root fix — the reconciler test harness is rebuilt so every test runs separate-per-machine stores joined only by a journal pump (the shared-store harness had masked this bug class for months).
+
+Ships dark behind `multiMachine.seamlessness.ws13Reconcile` / `ws13DryRun` and an independent `ws13PinReplicate` sub-flag (dev-agent live, fleet dark). A single-machine agent is a strict no-op.
+
+## What to Tell Your User
+
+Nothing yet — this ships **off by default** (infrastructure, fleet-dark). When it is enabled, moving a conversation between your machines will reliably converge instead of silently getting stuck, and a move that can't complete will surface honestly ("still moving / couldn't move") rather than freezing. There is no change to how things work today until it is deliberately turned on.
+
+## Summary of New Capabilities
+
+- (Dark) Reliable cross-machine conversation moves: the owning machine learns it is pinned away and completes the hand-off, with skew-proof ordering, validated targets, and self-healing recovery.
+- `GET /pool/reconciler` — read-only observability for the cross-machine reconciler (last-tick status + per-topic decision explanation).
+
+## Evidence
+
+- Spec converged through 3 review rounds (8 internal reviewers + codex/gemini external each round, ~24 findings folded): `docs/specs/cross-machine-reconciler-convergence.md` (`review-convergence` + `approved: true`); report at `docs/specs/reports/cross-machine-reconciler-convergence-convergence.md`.
+- Unit: full suite `npx vitest run tests/unit` exits 0. New/changed unit coverage: `MachinePoolRegistry.test.ts` (coarse-heartbeat skew abstention, both sides), `OwnershipApplier.test.ts` (transferring materialization, transferTo downgrade, epoch fence, timestamp clamp, owner-anchored tie-break), `OwnershipReconciler.test.ts` (rebuilt to the real two-machine topology + advisory-pin precedence/N3/offline-target + abort-transfer recovery), `TopicPinReplicatedStore.test.ts` (HLC merge, tombstone, malformed-reject).
+- Integration: `tests/integration/topic-pin-replication.test.ts` (pin round-trips the real CoherenceJournal: emit→validate→append→read→merge; tombstone; re-pin HLC; malformed-reject; op-key dedupe) + `tests/integration/pool-reconciler-route.test.ts` (401 / 503-when-dark / 200-status / 200-topic-explain).