instar 1.3.759 → 1.3.760

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-07-04T19:44:09.762Z",
-  "instarVersion": "1.3.759",
+  "generatedAt": "2026-07-04T20:03:31.063Z",
+  "instarVersion": "1.3.760",
   "entryCount": 202,
   "entries": {
     "hook:session-start": {
@@ -11,7 +11,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/session-start.sh",
-      "contentHash": "6d27d436c1c335d0858c480dda1499bc1f63a5ed5a61cc47950d04a887f6cd50",
+      "contentHash": "ae15e23b7525213595701aaac82b83f9ca3f74f99b0b6ab498930096d16ace7a",
       "since": "2025-01-01"
     },
     "hook:dangerous-command-guard": {
@@ -20,7 +20,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/dangerous-command-guard.sh",
-      "contentHash": "6d27d436c1c335d0858c480dda1499bc1f63a5ed5a61cc47950d04a887f6cd50",
+      "contentHash": "ae15e23b7525213595701aaac82b83f9ca3f74f99b0b6ab498930096d16ace7a",
       "since": "2025-01-01"
     },
     "hook:grounding-before-messaging": {
@@ -29,7 +29,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/grounding-before-messaging.sh",
-      "contentHash": "6d27d436c1c335d0858c480dda1499bc1f63a5ed5a61cc47950d04a887f6cd50",
+      "contentHash": "ae15e23b7525213595701aaac82b83f9ca3f74f99b0b6ab498930096d16ace7a",
       "since": "2025-01-01"
     },
     "hook:compaction-recovery": {
@@ -38,7 +38,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/compaction-recovery.sh",
-      "contentHash": "6d27d436c1c335d0858c480dda1499bc1f63a5ed5a61cc47950d04a887f6cd50",
+      "contentHash": "ae15e23b7525213595701aaac82b83f9ca3f74f99b0b6ab498930096d16ace7a",
       "since": "2025-01-01"
     },
     "hook:external-operation-gate": {
@@ -47,7 +47,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-operation-gate.js",
-      "contentHash": "6d27d436c1c335d0858c480dda1499bc1f63a5ed5a61cc47950d04a887f6cd50",
+      "contentHash": "ae15e23b7525213595701aaac82b83f9ca3f74f99b0b6ab498930096d16ace7a",
       "since": "2025-01-01"
     },
     "hook:deferral-detector": {
@@ -56,7 +56,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/deferral-detector.js",
-      "contentHash": "6d27d436c1c335d0858c480dda1499bc1f63a5ed5a61cc47950d04a887f6cd50",
+      "contentHash": "ae15e23b7525213595701aaac82b83f9ca3f74f99b0b6ab498930096d16ace7a",
       "since": "2025-01-01"
     },
     "hook:self-stop-guard": {
@@ -65,7 +65,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/self-stop-guard.js",
-      "contentHash": "6d27d436c1c335d0858c480dda1499bc1f63a5ed5a61cc47950d04a887f6cd50",
+      "contentHash": "ae15e23b7525213595701aaac82b83f9ca3f74f99b0b6ab498930096d16ace7a",
       "since": "2025-01-01"
     },
     "hook:post-action-reflection": {
@@ -74,7 +74,7 @@
       "domain": "evolution",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/post-action-reflection.js",
-      "contentHash": "6d27d436c1c335d0858c480dda1499bc1f63a5ed5a61cc47950d04a887f6cd50",
+      "contentHash": "ae15e23b7525213595701aaac82b83f9ca3f74f99b0b6ab498930096d16ace7a",
       "since": "2025-01-01"
     },
     "hook:external-communication-guard": {
@@ -83,7 +83,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-communication-guard.js",
-      "contentHash": "6d27d436c1c335d0858c480dda1499bc1f63a5ed5a61cc47950d04a887f6cd50",
+      "contentHash": "ae15e23b7525213595701aaac82b83f9ca3f74f99b0b6ab498930096d16ace7a",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-collector": {
@@ -92,7 +92,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-collector.js",
-      "contentHash": "6d27d436c1c335d0858c480dda1499bc1f63a5ed5a61cc47950d04a887f6cd50",
+      "contentHash": "ae15e23b7525213595701aaac82b83f9ca3f74f99b0b6ab498930096d16ace7a",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-checkpoint": {
@@ -101,7 +101,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-checkpoint.js",
-      "contentHash": "6d27d436c1c335d0858c480dda1499bc1f63a5ed5a61cc47950d04a887f6cd50",
+      "contentHash": "ae15e23b7525213595701aaac82b83f9ca3f74f99b0b6ab498930096d16ace7a",
       "since": "2025-01-01"
     },
     "hook:free-text-guard": {
@@ -110,7 +110,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/free-text-guard.sh",
-      "contentHash": "6d27d436c1c335d0858c480dda1499bc1f63a5ed5a61cc47950d04a887f6cd50",
+      "contentHash": "ae15e23b7525213595701aaac82b83f9ca3f74f99b0b6ab498930096d16ace7a",
       "since": "2025-01-01"
     },
     "hook:claim-intercept": {
@@ -119,7 +119,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept.js",
-      "contentHash": "6d27d436c1c335d0858c480dda1499bc1f63a5ed5a61cc47950d04a887f6cd50",
+      "contentHash": "ae15e23b7525213595701aaac82b83f9ca3f74f99b0b6ab498930096d16ace7a",
       "since": "2025-01-01"
     },
     "hook:claim-intercept-response": {
@@ -128,7 +128,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept-response.js",
-      "contentHash": "6d27d436c1c335d0858c480dda1499bc1f63a5ed5a61cc47950d04a887f6cd50",
+      "contentHash": "ae15e23b7525213595701aaac82b83f9ca3f74f99b0b6ab498930096d16ace7a",
       "since": "2025-01-01"
     },
     "hook:stop-gate-router": {
@@ -137,7 +137,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/stop-gate-router.js",
-      "contentHash": "6d27d436c1c335d0858c480dda1499bc1f63a5ed5a61cc47950d04a887f6cd50",
+      "contentHash": "ae15e23b7525213595701aaac82b83f9ca3f74f99b0b6ab498930096d16ace7a",
       "since": "2025-01-01"
     },
     "hook:auto-approve-permissions": {
@@ -146,7 +146,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/auto-approve-permissions.js",
-      "contentHash": "6d27d436c1c335d0858c480dda1499bc1f63a5ed5a61cc47950d04a887f6cd50",
+      "contentHash": "ae15e23b7525213595701aaac82b83f9ca3f74f99b0b6ab498930096d16ace7a",
       "since": "2025-01-01"
     },
     "job:health-check": {
@@ -1562,7 +1562,7 @@
       "type": "subsystem",
       "domain": "updates",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
-      "contentHash": "6d27d436c1c335d0858c480dda1499bc1f63a5ed5a61cc47950d04a887f6cd50",
+      "contentHash": "ae15e23b7525213595701aaac82b83f9ca3f74f99b0b6ab498930096d16ace7a",
       "since": "2025-01-01"
     },
     "subsystem:scheduler": {

package/upgrades/1.3.760.md

@@ -0,0 +1,100 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+Maintainer-only development machinery — the first product-code member of the
+class-closure program (#1347), and the constitution standard it enforces.
+
+- **New defect class `unbounded-self-action`** in `docs/defect-classes.json`
+  (severity `critical`, seeded-closed at the 20 already-fixed instances). A
+  post-seed recurrence fires the deterministic re-raise at lint time.
+- **The live guard** — `tests/unit/self-action-convergence.test.ts` drives every
+  controller in the new `src/testing/selfActionRegistry.ts` registry N ticks
+  under a pinned sustained-pressure fixture (all accounts hot / veto never clears
+  / no progress) and asserts the action count SETTLES to a small bound that does
+  NOT scale with the horizon. Seeded with faithful convergence models of four
+  real controllers (proactive swap monitor, age-kill backoff, promise-beacon
+  notify, and a declared Eternal-Sentinel liveness heartbeat exercising the P19
+  exemption).
+- **The forcing lint** — `scripts/lint-no-unregistered-self-action.js`
+  (emit-anchored, fail-closed once enforcing) refuses an unregistered self-action
+  controller emit so a NEW self-action inherits the invariant. **Report-only by
+  default** — it reports the population of unregistered controllers and exits 0
+  until `prGate.classClosure.dryRun:false`.
+- **The detector + scope** — `scripts/lib/self-action-detect.mjs` is the single
+  shared source (emit set + controller-shape predicate + the gate decision). It
+  widens the class-closure CI lint's scope (`scripts/class-closure-lint.mjs`) so
+  a self-action diff requires a `classClosure` declaration, adds a
+  convergence-addressed check (a per-tick-cap-only `howCaught` is flagged), and
+  powers `assertSelfActionDeclared` in `scripts/instar-dev-precommit.js` — the
+  early arm at the LIGHT commit path #1035 (swap-thrash) slipped through. Both new
+  hard-violation conditions land report-only under the existing
+  `prGate.classClosure.dryRun` default.
+- **`scripts/class-closure-declare.mjs`** gains `--to-trace` (write the block into
+  the instar-dev trace, the E3 declaration host) and an explicit negative
+  declaration (`--closure n/a --reason`), the trace-level analog of the lint's
+  allowlist.
+- **The standard** "Capacity Safety — No Unbounded Self-Action" added to
+  `docs/STANDARDS-REGISTRY.md` (operator-ratified 2026-07-04) — BBR's temporal
+  twin: BBR bounds instantaneous MASS, this bounds steady-state FREQUENCY under
+  feedback.
+- **Migration Parity** — `migrateClassClosureTemplateSelfActionClause` extends the
+  deployed side-effects template's Class-Closure trigger with the self-action
+  clause for existing agents.
+
+Named follow-on increments (own specs, NOT built here): the unified default-on
+self-action backpressure primitive (the obfuscation-resistant funnel), and the
+swap decoupling / live credential re-pointing (the durable swap fix).
+<!-- tracked: CMT-1911 -->
+
+## What to Tell Your User
+
+This is maintainer-only development machinery — there is nothing for you to do or
+notice in day-to-day use. If your operator asks "why do we keep fighting the same
+runaway loops (account swaps, notification floods, the reaper firing thousands of
+kill requests)?" — the answer is: those were 20 instances of ONE unnamed defect
+class, and this change names it (unbounded self-action) and builds the automatic
+CI test that proves any self-triggered action settles under sustained pressure
+instead of running away. It ships report-only first (it logs what it would flag)
+and only starts blocking after a clean soak, per the class-closure gate's own dark
+default — so it changes nothing about how I respond to you today.
+
+## Summary of New Capabilities
+
+- **A new defect class + its guard.** "Unbounded / oscillating self-action" is now
+  a registered class with a live CI ratchet (`tests/unit/self-action-convergence.test.ts`)
+  that drives every self-triggered controller under worst-case pressure and fails
+  the build if the action count doesn't converge — the temporal twin of Bounded
+  Blast Radius (which caps how many run at once; this caps how often one fires).
+- **A forcing lint + a shared detector** so a NEW self-triggered action inherits
+  the convergence check instead of earning a bespoke brake after it breaks
+  something — caught at both the commit gate and CI.
+- **A ratified constitution standard** — "Capacity Safety — No Unbounded
+  Self-Action" (`docs/STANDARDS-REGISTRY.md`).
+- No user-facing surface, no routes, no config to set. Report-only until the
+  operator flips enforcing.
+
+## Evidence
+
+- `tests/unit/self-action-convergence.test.ts` — the ratchet: 26 cases, every
+  registered controller settles (count ≤ boundK, horizon-independent at 2×ticks,
+  no single target thrashed), the Eternal-Sentinel honors its P19 rate floor,
+  wiring-integrity (no vacuous/no-op controllers), verb-superset coherence, and
+  grader-parity (the three new guards grade ratchet/lint/gate).
+- `tests/unit/self-action-detect.test.ts` — the shared detector + the pure gate
+  decision (both precommit call sites): emit true-positives, comment/prose
+  false, fail-open on empty diff, all declaration branches.
+- `tests/unit/lint-no-unregistered-self-action.test.ts` — the forcing lint's pure
+  evaluator: unmarked → violation, marked+registered → clean, marked-unregistered
+  → violation, allowlisted → clean, no-emit / non-shape → skipped.
+- `tests/integration/class-closure-lint-self-action.test.ts` — the CI lint's
+  self-action scope arm over synthetic diffs: good guard declaration → clean; no
+  declaration → hard violation (report-only exit 0, enforcing exit 1); a
+  per-tick-cap-only `howCaught` → convergence-addressed violation.
+- `tests/unit/migrate-class-closure-self-action-clause.test.ts` — the migration:
+  stock template updated, idempotent, customized-left-untouched, no-op when absent.
+- Full lint chain (`npm run lint`) green — including the new forcing lint
+  (report-only) and the class-closure grader-parity. `tsc --noEmit` clean.

package/upgrades/side-effects/self-action-convergence.md

@@ -0,0 +1,62 @@
+# Side-Effects Review — Self-Action Convergence (the class-closure guard for self-inflicted loops)
+
+**Version / slug:** `self-action-convergence`
+**Date:** `2026-07-04`
+**Author:** `echo`
+**Second-pass reviewer:** `not required — additive dev-tooling (a defect-class entry, a test ratchet, two lints, a shared detector, a precommit arm, a template clause, a migration, a constitution standard). No runtime decision surface, no routes, no user-facing behavior, no data migration. Everything ships report-only under the pre-existing prGate.classClosure dark default.`
+
+## Summary of the change
+
+Registers `unbounded-self-action` as a formal defect class in the class-closure registry (#1347) — the FIRST product-code member of that program — and builds the live guard that ends it: an N-tick sustained-pressure convergence ratchet (`tests/unit/self-action-convergence.test.ts` + the `src/testing/selfActionRegistry.ts` controller registry), a fail-closed forcing lint (`scripts/lint-no-unregistered-self-action.js`), a shared detector (`scripts/lib/self-action-detect.mjs`), a scope+convergence arm added to the class-closure CI lint (`scripts/class-closure-lint.mjs`), an early-detection arm at instar-dev commit time (`assertSelfActionDeclared` in `scripts/instar-dev-precommit.js`), a `--to-trace`/negative-declaration mode in `scripts/class-closure-declare.mjs`, a one-line side-effects-template clause, its migration (`migrateClassClosureTemplateSelfActionClause`), and the ratified constitution standard "Capacity Safety — No Unbounded Self-Action."
+
+This is the structural fix for the entire self-inflicted-loop class (swap-thrash being the presenting case). It is BBR's temporal twin: Bounded Blast Radius bounds instantaneous MASS; this bounds steady-state FREQUENCY under feedback.
+
+Files touched: `docs/defect-classes.json`, `docs/STANDARDS-REGISTRY.md`, `docs/specs/self-action-convergence.md` (+ `.eli16.md`), `scripts/lib/self-action-detect.mjs` (new), `src/testing/selfActionRegistry.ts` (new), `tests/unit/self-action-convergence.test.ts` (new), `scripts/lint-no-unregistered-self-action.js` (new), `scripts/class-closure-lint.mjs`, `scripts/class-closure-declare.mjs`, `scripts/instar-dev-precommit.js`, `skills/instar-dev/templates/side-effects-artifact.md`, `src/core/PostUpdateMigrator.ts`, `package.json`, plus tests (`tests/unit/self-action-detect.test.ts`, `tests/unit/lint-no-unregistered-self-action.test.ts`, `tests/unit/migrate-class-closure-self-action-clause.test.ts`, `tests/integration/class-closure-lint-self-action.test.ts`).
+
+## Decision-point inventory
+
+- **`unbounded-self-action` defect class** — add (registry semantics) — a protected-path registry entry. Governs fix-time declarations; does not gate runtime.
+- **Convergence ratchet + controller registry** — add (CI test) — drives modeled controllers under a pinned worst-case fixture; fails the build (once green) if a registered controller does not settle. Zero runtime authority.
+- **Forcing lint** — add (CI lint) — refuses an unregistered self-action controller emit. **Report-only by default** (exits 0 unless `prGate.classClosure.enabled && !dryRun`).
+- **Class-closure CI lint scope arm + convergence check** — modify (CI lint) — a self-action diff now requires a declaration; a per-tick-cap-only `howCaught` is flagged. Hard-violations recorded; **fail the build only when enforcing** (dark default).
+- **`assertSelfActionDeclared` precommit arm** — add (commit gate) — blocks a self-action src/ change with no declaration/negative. FAIL-OPEN on tooling failure; a genuine one-shot costs one attested negative line.
+- **Shared detector** — add (pure library) — the single source for the emit set + scope predicate + the gate decision. Deterministic; never LLM-guesses.
+- **Side-effects template clause + migration** — modify (skill template) — the Class-Closure Declaration trigger now names the self-action case; the migration reaches existing agents (Migration Parity).
+- **Constitution standard** — add (standards text) — "Capacity Safety — No Unbounded Self-Action," ratified by the operator 2026-07-04.
+- **All existing gates** — pass-through — the tone gate, coherence gate, external-operation gate, class-closure gate's existing behavior are unchanged; this composes with #1347, it does not fork it.
+
+## 1. Over-block
+
+**No runtime block/allow surface — over-block N/A.** The only new blocking paths are DEV-TIME gates (the precommit arm + the CI lints), and both ship report-only under the pre-existing `prGate.classClosure` dark default. The precommit arm fails OPEN on any tooling failure (empty diff, no src/ file, unreadable artifact) and offers an explicit one-line negative-declaration escape, so a genuine one-shot / user-driven action is never unescapably blocked. The forcing lint is scoped to controller-SHAPE files to avoid flagging every `retry(` in src/.
+
+## 2. Under-block
+
+**No runtime under-block surface.** The completeness guarantee (every controller registered) is report-only until the operator flips enforcing on measured declaration population, per #1347's own criterion. Until then a NEW self-action can still ship un-registered — the honest, deliberate soak posture; the E2 CI lint + E3 precommit arm are the earlier backstops, and the string-based scope is named as an accident-deterrent (the obfuscation-resistant closure is the follow-on funnel, Part B).
+
+## 3. Ordering / idempotency
+
+The migration is idempotent (marker short-circuit). The declare `--to-trace` mode is idempotent (identical block → no change). The ratchet + lints are pure re-runnable evaluations. No persistent runtime state, no ordering dependency.
+
+## 4. Signal vs. Authority
+
+Compliant. The detector is DETERMINISTIC — it forces a declaration, it never LLM-guesses (Signal vs. Authority). The ratchet + lints are structure, not willpower. The convergence proof is a CI ratchet, not discretionary prose. No new blocking authority is granted to any LLM path.
+
+## 5. Feedback loops
+
+**This spec IS the answer to the feedback-loop question** the swap-thrash review never answered. The change adds NO new runtime control loop — it adds a CI/commit-time invariant that PROVES other control loops converge. It cannot itself spiral (it is a stateless test/lint run per CI invocation).
+
+## 6. External surfaces
+
+None. No HTTP routes, no external API calls, no network egress. All new surfaces are local dev-tooling (a test, two lints, a shared library, a commit-gate arm, a registry entry, a template clause, a migration, a standard).
+
+## 7. Multi-machine posture
+
+`unified` (repo-resident). The registry entry, the lints, the detector, the ratchet, and the standard all ride the git repo itself (the replication medium), reaching every checkout on `git pull` — matching #1347's declared posture. The template clause reaches existing deployed agents through the PostUpdateMigrator migration. No machine-local state, no per-machine divergence.
+
+## Class-Closure Declaration (display-only mirror)
+
+- **`defectClass`** — `unbounded-self-action` (this change REGISTERS the class AND builds its closing guard; the self-referential canonical closure).
+- **`closure`** — `guard`.
+- **`guardEvidence`** — `{ enforcementType: ratchet, citation: tests/unit/self-action-convergence.test.ts, howCaught: the ratchet drives every registered self-action controller N ticks under a pinned sustained-pressure fixture (all accounts hot / veto never clears / no progress) and asserts the action count SETTLES to a small bound that does NOT scale with the horizon — steady-state convergence via each controller's settling brake (all-hot / projected-load / exponential-backoff+breaker / suppress-unchanged), with the declared Eternal-Sentinel exemption asserting a P19 rate floor instead. A per-tick cap would NOT satisfy this — it bounds one pass, never the loop. }`
+
+The machine-readable counterpart lives in the commit's decision-audit entry (persisted from the instar-dev trace by `writeDecisionAudit`), which the CI class-closure lint reads. This mirror is display-only and is never summed with it (C1).