instar 1.3.793 → 1.3.794

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.793",
+  "version": "1.3.794",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/scripts/model-registry-freshness.manifest.json

@@ -36,9 +36,12 @@
       "status": "referenced-not-installed",
       "probe": { "kind": "cli-version", "bin": "codex", "metered": false, "freeDefaultCovered": false },
       "topModels": [
-        { "id": "gpt-5.5", "role": "capable-openai", "frontier": true, "pricing": null, "verifiedAt": "carried-over-from-allowlist" }
+        { "id": "gpt-5.5", "role": "capable-openai", "frontier": true, "pricing": null, "verifiedAt": "carried-over-from-allowlist" },
+        { "id": "gpt-5.6-sol", "role": "flagship-openai-recognized", "frontier": false, "pricing": { "inPerMtok": 5, "outPerMtok": 30, "currency": "USD" }, "verifiedAt": "2026-07-09" },
+        { "id": "gpt-5.6-terra", "role": "mid-openai-recognized", "frontier": false, "pricing": { "inPerMtok": 2.5, "outPerMtok": 15, "currency": "USD" }, "verifiedAt": "2026-07-09" },
+        { "id": "gpt-5.6-luna", "role": "small-openai-recognized", "frontier": false, "pricing": { "inPerMtok": 1, "outPerMtok": 6, "currency": "USD" }, "verifiedAt": "2026-07-09" }
       ],
-      "note": "codex CLI is NOT installed on this machine (which codex -> not found), yet componentFrameworks routes job/Usher/TopicIntentExtractor to it -> those fall back at runtime. Door-liveness gap flagged to operator. topModels seeded from the reviewed frontierAllowlist (spec D4 carry-over)."
+      "note": "codex CLI is NOT installed on this machine (which codex -> not found), yet componentFrameworks routes job/Usher/TopicIntentExtractor to it -> those fall back at runtime. Door-liveness gap flagged to operator. topModels seeded from the reviewed frontierAllowlist (spec D4 carry-over). The GPT-5.6 family (sol/terra/luna) went GA on the codex subscription + was live-verified 2026-07-09 (codex CLI >= 0.144.0 required); it is now RECOGNIZED/spawnable (added to the acceptance allowlists KNOWN_CODEX_MODEL_IDS + CODEX_MODELS_SUBSCRIPTION) but is deliberately NOT promoted to frontier=true / the capable pin here — the capable pin stays gpt-5.5 pending a benchmark-based promotion (a model earns the routing lane via benchmarks, not GA date). The -pro variants are excluded (plan-gated + pricier). Frontier/pin promotion of gpt-5.6-sol is a tracked follow-up."
     },
     "gemini-cli": {
       "name": "Gemini CLI",
@@ -101,7 +104,7 @@
       "note": "CLAUDE_REVIEWER_DEFAULT_MODEL — the Anthropic clean-door reviewer pin (REVIEWER-DOOR-REWIRING §1.3). Extraction matches a frontier CONSTANT (not a capable:'…' tier decl), so the non-vacuity test (tests/unit/model-registry-freshness-reviewer-pin.test.ts) rots this constant and asserts the strict lint fails — closing the vacuous-tooth risk."
     }
   ],
-  "$flaggedStaleNote": "Both prior flagged pins RESOLVED (operator-confirmed 2026-07-03): gemini capable swapped gemini-2.5-pro -> gemini-3.1-pro-preview (pin + topModels updated in the same change); codex capable stays gpt-5.5 (GA flagship — gpt-5.6-sol is preview-only/gov-gated/unreachable, NOT pinned). Nothing pending confirmation.",
+  "$flaggedStaleNote": "Both prior flagged pins RESOLVED (operator-confirmed 2026-07-03): gemini capable swapped gemini-2.5-pro -> gemini-3.1-pro-preview (pin + topModels updated in the same change); codex capable stays gpt-5.5. UPDATE 2026-07-09: the GPT-5.6 family (sol/terra/luna) went GA on the codex subscription + was live-verified (codex CLI >= 0.144.0) — the earlier 'gpt-5.6-sol is preview-only/gov-gated/unreachable' statement is now superseded. gpt-5.6-sol/terra/luna are RECOGNIZED (in codex-cli.topModels + the acceptance allowlists) but deliberately NOT promoted to frontier / the capable pin yet — the capable pin stays gpt-5.5 pending a benchmark-based promotion. Nothing pending confirmation (a benchmark-driven promotion of gpt-5.6-sol is a tracked follow-up, not a pending flagged pin).",
   "flaggedStale": [],
   "$frontierAllowlistNote": "The hand-maintained frontierAllowlist{} was SUPERSEDED by derivation (spec §1.4): the frontier set for each door is now the ids in doors[door].topModels[] carrying frontier:true. This removes a second hand-maintained list (the rot this registry fights). The lint keeps a backward-compat path: a door with a literal frontierAllowlist[door] and NO topModels behaves exactly as before; a door with BOTH emits a transition finding so the old hand-list can't silently linger.",
   "$candidateDoorwaysNote": "candidateDoorways[] = the doorways the scan should PROBE FOR (spec §1.2/§2.5), INCLUDING ones not yet present in doors{}. A candidate reachable but absent from doors is surfaced as a newly-configured-doorway. The prober only activates a candidate whose probe.kind it supports; a candidate with no door entry / unsupported kind is recorded, never silently treated as reachable. openrouter / gemini-direct-api below are candidate-only (no door entry yet) so the candidate-detection machinery has real inputs to exercise.",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-07-09T21:29:43.497Z",
-  "instarVersion": "1.3.793",
+  "generatedAt": "2026-07-09T23:56:04.794Z",
+  "instarVersion": "1.3.794",
   "entryCount": 202,
   "entries": {
     "hook:session-start": {
@@ -418,7 +418,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "59884e1700f28276bccbc65f34b578851dd90c50ecbeb784bf32e46dd2817fb8",
+      "contentHash": "763322395fac35e71dc42414a152b11b43456bfc653c738febcf18d85e0d7d97",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -426,7 +426,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "59884e1700f28276bccbc65f34b578851dd90c50ecbeb784bf32e46dd2817fb8",
+      "contentHash": "763322395fac35e71dc42414a152b11b43456bfc653c738febcf18d85e0d7d97",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -434,7 +434,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "59884e1700f28276bccbc65f34b578851dd90c50ecbeb784bf32e46dd2817fb8",
+      "contentHash": "763322395fac35e71dc42414a152b11b43456bfc653c738febcf18d85e0d7d97",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -442,7 +442,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "59884e1700f28276bccbc65f34b578851dd90c50ecbeb784bf32e46dd2817fb8",
+      "contentHash": "763322395fac35e71dc42414a152b11b43456bfc653c738febcf18d85e0d7d97",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -450,7 +450,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "59884e1700f28276bccbc65f34b578851dd90c50ecbeb784bf32e46dd2817fb8",
+      "contentHash": "763322395fac35e71dc42414a152b11b43456bfc653c738febcf18d85e0d7d97",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -458,7 +458,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "59884e1700f28276bccbc65f34b578851dd90c50ecbeb784bf32e46dd2817fb8",
+      "contentHash": "763322395fac35e71dc42414a152b11b43456bfc653c738febcf18d85e0d7d97",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -466,7 +466,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "59884e1700f28276bccbc65f34b578851dd90c50ecbeb784bf32e46dd2817fb8",
+      "contentHash": "763322395fac35e71dc42414a152b11b43456bfc653c738febcf18d85e0d7d97",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -474,7 +474,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "59884e1700f28276bccbc65f34b578851dd90c50ecbeb784bf32e46dd2817fb8",
+      "contentHash": "763322395fac35e71dc42414a152b11b43456bfc653c738febcf18d85e0d7d97",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -482,7 +482,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "59884e1700f28276bccbc65f34b578851dd90c50ecbeb784bf32e46dd2817fb8",
+      "contentHash": "763322395fac35e71dc42414a152b11b43456bfc653c738febcf18d85e0d7d97",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -490,7 +490,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "59884e1700f28276bccbc65f34b578851dd90c50ecbeb784bf32e46dd2817fb8",
+      "contentHash": "763322395fac35e71dc42414a152b11b43456bfc653c738febcf18d85e0d7d97",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -498,7 +498,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "59884e1700f28276bccbc65f34b578851dd90c50ecbeb784bf32e46dd2817fb8",
+      "contentHash": "763322395fac35e71dc42414a152b11b43456bfc653c738febcf18d85e0d7d97",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -506,7 +506,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "59884e1700f28276bccbc65f34b578851dd90c50ecbeb784bf32e46dd2817fb8",
+      "contentHash": "763322395fac35e71dc42414a152b11b43456bfc653c738febcf18d85e0d7d97",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -514,7 +514,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "59884e1700f28276bccbc65f34b578851dd90c50ecbeb784bf32e46dd2817fb8",
+      "contentHash": "763322395fac35e71dc42414a152b11b43456bfc653c738febcf18d85e0d7d97",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -522,7 +522,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "59884e1700f28276bccbc65f34b578851dd90c50ecbeb784bf32e46dd2817fb8",
+      "contentHash": "763322395fac35e71dc42414a152b11b43456bfc653c738febcf18d85e0d7d97",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -530,7 +530,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "59884e1700f28276bccbc65f34b578851dd90c50ecbeb784bf32e46dd2817fb8",
+      "contentHash": "763322395fac35e71dc42414a152b11b43456bfc653c738febcf18d85e0d7d97",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -538,7 +538,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "59884e1700f28276bccbc65f34b578851dd90c50ecbeb784bf32e46dd2817fb8",
+      "contentHash": "763322395fac35e71dc42414a152b11b43456bfc653c738febcf18d85e0d7d97",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -546,7 +546,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "59884e1700f28276bccbc65f34b578851dd90c50ecbeb784bf32e46dd2817fb8",
+      "contentHash": "763322395fac35e71dc42414a152b11b43456bfc653c738febcf18d85e0d7d97",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -554,7 +554,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "59884e1700f28276bccbc65f34b578851dd90c50ecbeb784bf32e46dd2817fb8",
+      "contentHash": "763322395fac35e71dc42414a152b11b43456bfc653c738febcf18d85e0d7d97",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -562,7 +562,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "59884e1700f28276bccbc65f34b578851dd90c50ecbeb784bf32e46dd2817fb8",
+      "contentHash": "763322395fac35e71dc42414a152b11b43456bfc653c738febcf18d85e0d7d97",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -570,7 +570,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "59884e1700f28276bccbc65f34b578851dd90c50ecbeb784bf32e46dd2817fb8",
+      "contentHash": "763322395fac35e71dc42414a152b11b43456bfc653c738febcf18d85e0d7d97",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -578,7 +578,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "59884e1700f28276bccbc65f34b578851dd90c50ecbeb784bf32e46dd2817fb8",
+      "contentHash": "763322395fac35e71dc42414a152b11b43456bfc653c738febcf18d85e0d7d97",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -586,7 +586,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "59884e1700f28276bccbc65f34b578851dd90c50ecbeb784bf32e46dd2817fb8",
+      "contentHash": "763322395fac35e71dc42414a152b11b43456bfc653c738febcf18d85e0d7d97",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -594,7 +594,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "59884e1700f28276bccbc65f34b578851dd90c50ecbeb784bf32e46dd2817fb8",
+      "contentHash": "763322395fac35e71dc42414a152b11b43456bfc653c738febcf18d85e0d7d97",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -602,7 +602,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "59884e1700f28276bccbc65f34b578851dd90c50ecbeb784bf32e46dd2817fb8",
+      "contentHash": "763322395fac35e71dc42414a152b11b43456bfc653c738febcf18d85e0d7d97",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -610,7 +610,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "59884e1700f28276bccbc65f34b578851dd90c50ecbeb784bf32e46dd2817fb8",
+      "contentHash": "763322395fac35e71dc42414a152b11b43456bfc653c738febcf18d85e0d7d97",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -618,7 +618,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "59884e1700f28276bccbc65f34b578851dd90c50ecbeb784bf32e46dd2817fb8",
+      "contentHash": "763322395fac35e71dc42414a152b11b43456bfc653c738febcf18d85e0d7d97",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -626,7 +626,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "59884e1700f28276bccbc65f34b578851dd90c50ecbeb784bf32e46dd2817fb8",
+      "contentHash": "763322395fac35e71dc42414a152b11b43456bfc653c738febcf18d85e0d7d97",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -634,7 +634,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "59884e1700f28276bccbc65f34b578851dd90c50ecbeb784bf32e46dd2817fb8",
+      "contentHash": "763322395fac35e71dc42414a152b11b43456bfc653c738febcf18d85e0d7d97",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -642,7 +642,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "59884e1700f28276bccbc65f34b578851dd90c50ecbeb784bf32e46dd2817fb8",
+      "contentHash": "763322395fac35e71dc42414a152b11b43456bfc653c738febcf18d85e0d7d97",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -650,7 +650,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "59884e1700f28276bccbc65f34b578851dd90c50ecbeb784bf32e46dd2817fb8",
+      "contentHash": "763322395fac35e71dc42414a152b11b43456bfc653c738febcf18d85e0d7d97",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -658,7 +658,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "59884e1700f28276bccbc65f34b578851dd90c50ecbeb784bf32e46dd2817fb8",
+      "contentHash": "763322395fac35e71dc42414a152b11b43456bfc653c738febcf18d85e0d7d97",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -666,7 +666,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "59884e1700f28276bccbc65f34b578851dd90c50ecbeb784bf32e46dd2817fb8",
+      "contentHash": "763322395fac35e71dc42414a152b11b43456bfc653c738febcf18d85e0d7d97",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -674,7 +674,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "59884e1700f28276bccbc65f34b578851dd90c50ecbeb784bf32e46dd2817fb8",
+      "contentHash": "763322395fac35e71dc42414a152b11b43456bfc653c738febcf18d85e0d7d97",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -682,7 +682,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "59884e1700f28276bccbc65f34b578851dd90c50ecbeb784bf32e46dd2817fb8",
+      "contentHash": "763322395fac35e71dc42414a152b11b43456bfc653c738febcf18d85e0d7d97",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -690,7 +690,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "59884e1700f28276bccbc65f34b578851dd90c50ecbeb784bf32e46dd2817fb8",
+      "contentHash": "763322395fac35e71dc42414a152b11b43456bfc653c738febcf18d85e0d7d97",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -698,7 +698,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "59884e1700f28276bccbc65f34b578851dd90c50ecbeb784bf32e46dd2817fb8",
+      "contentHash": "763322395fac35e71dc42414a152b11b43456bfc653c738febcf18d85e0d7d97",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -706,7 +706,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "59884e1700f28276bccbc65f34b578851dd90c50ecbeb784bf32e46dd2817fb8",
+      "contentHash": "763322395fac35e71dc42414a152b11b43456bfc653c738febcf18d85e0d7d97",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -714,7 +714,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "59884e1700f28276bccbc65f34b578851dd90c50ecbeb784bf32e46dd2817fb8",
+      "contentHash": "763322395fac35e71dc42414a152b11b43456bfc653c738febcf18d85e0d7d97",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -722,7 +722,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "59884e1700f28276bccbc65f34b578851dd90c50ecbeb784bf32e46dd2817fb8",
+      "contentHash": "763322395fac35e71dc42414a152b11b43456bfc653c738febcf18d85e0d7d97",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -730,7 +730,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "59884e1700f28276bccbc65f34b578851dd90c50ecbeb784bf32e46dd2817fb8",
+      "contentHash": "763322395fac35e71dc42414a152b11b43456bfc653c738febcf18d85e0d7d97",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -738,7 +738,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "59884e1700f28276bccbc65f34b578851dd90c50ecbeb784bf32e46dd2817fb8",
+      "contentHash": "763322395fac35e71dc42414a152b11b43456bfc653c738febcf18d85e0d7d97",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -746,7 +746,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "59884e1700f28276bccbc65f34b578851dd90c50ecbeb784bf32e46dd2817fb8",
+      "contentHash": "763322395fac35e71dc42414a152b11b43456bfc653c738febcf18d85e0d7d97",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -754,7 +754,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "59884e1700f28276bccbc65f34b578851dd90c50ecbeb784bf32e46dd2817fb8",
+      "contentHash": "763322395fac35e71dc42414a152b11b43456bfc653c738febcf18d85e0d7d97",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -770,7 +770,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "59884e1700f28276bccbc65f34b578851dd90c50ecbeb784bf32e46dd2817fb8",
+      "contentHash": "763322395fac35e71dc42414a152b11b43456bfc653c738febcf18d85e0d7d97",
       "since": "2025-01-01"
     },
     "cli:init": {

package/upgrades/1.3.794.md

@@ -0,0 +1,19 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+The GPT-5.6 model family (`gpt-5.6-sol`, `gpt-5.6-terra`, `gpt-5.6-luna`) went GA on the Codex subscription and is now on instar's accepted-model allowlists for the `codex-cli` framework. Two mirrored lists gained the three ids: `KNOWN_CODEX_MODEL_IDS` (the model-tier-escalation resolver's closed enum, `src/core/ModelTierEscalation.ts`) and `CODEX_MODELS_SUBSCRIPTION` (the `POST /sessions/spawn` model validator, `src/server/routes.ts`). The topic-profile validator reads the same enum, so it accepts the new ids automatically. The fail-closed design is unchanged — an id outside the closed enum is still rejected; we only widened the set of recognized ids.
+
+The Doorway/Model Knowledge Registry (`scripts/model-registry-freshness.manifest.json`) also learned the three models as recognized, reachable entries with pricing, so `GET /doorways` knows they exist. They are deliberately NOT promoted to the frontier pin — the capable tier still resolves to `gpt-5.5`; a benchmark-driven promotion is a tracked follow-up.
+
+## What to Tell Your User
+
+If you run Codex sessions, you can now pin a topic or spawn a session on the new GPT-5.6 models — sol (the flagship), terra (mid-size), or luna (small and cheap) — and instar accepts them instead of rejecting them as unknown. This needs the Codex CLI at version 0.144.0 or newer; older CLIs reject GPT-5.6 with a "requires a newer version" error, so update the Codex CLI if you hit that. If your setup already escalates heavy work onto the GPT-5.6 flagship, it becomes live with this update. The Pro variants are intentionally not accepted yet (they're likely plan-gated and pricier — a future follow-up), and for now instar still picks GPT-5.5 for its heavy tier until the new models earn that spot through benchmarks.
+
+## Summary of New Capabilities
+
+- `codex-cli` sessions and topic profiles accept `gpt-5.6-sol`, `gpt-5.6-terra`, and `gpt-5.6-luna` (model-tier escalation, `/sessions/spawn`, and topic-profile pins).
+- `GET /doorways` reports the three GPT-5.6 models (with pricing) as recognized, reachable Codex models.

package/upgrades/side-effects/codex-gpt56-allowlist.md

@@ -0,0 +1,60 @@
+# Side-Effects Review — Add the GPT-5.6 family to the codex model allowlists
+
+**Change:** additive model-id allowlist extension for the `codex-cli` framework. **Tier 1** (small, low-risk, fail-closed design unchanged). **Parent principle:** Structure > Willpower (the closed model-id enumeration is a code-enforced gate; this widens the allowed set, it does not weaken the gate).
+
+**Files changed:**
+- `src/core/ModelTierEscalation.ts` — `KNOWN_CODEX_MODEL_IDS` gains `gpt-5.6-sol`, `gpt-5.6-terra`, `gpt-5.6-luna`.
+- `src/server/routes.ts` — `CODEX_MODELS_SUBSCRIPTION` (the `POST /sessions/spawn` codex model validator) gains the same three ids, keeping the two lists identical (the comment pins them as mirrors).
+- `scripts/model-registry-freshness.manifest.json` — the Doorway/Model Knowledge Registry's `codex-cli.topModels` gains the three ids as recognized entries (`frontier: false`, pricing populated) + the door note / `$flaggedStaleNote` prose corrected to reflect the 2026-07-09 GA (the earlier "gpt-5.6-sol is preview-only/unreachable" line was now false).
+- `tests/unit/modelTierEscalation-resolver.test.ts`, `tests/unit/route-validation-edge.test.ts`, `tests/unit/topicProfileValidation.test.ts` — allowlist + resolver + spawn + validation coverage.
+- `docs/specs/codex-gpt56-allowlist.eli16.md`, `upgrades/next/codex-gpt56-allowlist.md` — the ELI16 + release fragment.
+
+## What changed
+
+The GPT-5.6 family (sol/terra/luna) went GA on the codex subscription on 2026-07-09 and was live-verified working (codex CLI >= 0.144.0 required; older CLIs 400 with "requires a newer version"). instar fails closed on model ids outside its closed per-framework enums, so these ids were rejected everywhere. This change adds the three ids to the two mirrored acceptance lists (`KNOWN_CODEX_MODEL_IDS` + `CODEX_MODELS_SUBSCRIPTION`). The `-pro` variants are deliberately excluded (plan-gated + pricier — tracked follow-up).
+
+## Lists touched vs deliberately left
+
+**Touched (acceptance / validation lists):**
+- `KNOWN_CODEX_MODEL_IDS` (`src/core/ModelTierEscalation.ts`) — the escalation resolver's closed enum, and (via `KNOWN_MODEL_IDS`) the source for `topicProfileValidation.validateModelId`. One edit flows to both surfaces.
+- `CODEX_MODELS_SUBSCRIPTION` (`src/server/routes.ts`) — the `/sessions/spawn` codex-cli model validator. Kept byte-identical in membership to the enum above (they are documented mirrors).
+- `scripts/model-registry-freshness.manifest.json` → `doors.codex-cli.topModels` — the Doorway/Model Knowledge registry, added the three ids with `frontier: false` + pricing so `GET /doorways` knows they exist and their cost.
+
+**Deliberately LEFT (routing/selection — a model earns a lane via benchmarks, not by GA date):**
+- `src/providers/adapters/openai-codex/models.ts` `TIER_MODEL` (capable → gpt-5.5, fast/balanced → gpt-5.4-mini) — model CHOICES per tier, not an acceptance list.
+- `src/core/frameworkSessionLaunch.ts` tier→model resolution — same reason.
+- `src/data/llmBenchCoverage.ts` (`ROUTING_LABEL_TO_MODEL_ID`, bench coverage, nature-routing chains) — the routing chains that pick models for lanes; models earn these via benchmarks.
+- The doorway manifest's `codex-capable-tier` PIN and the `frontier: true` flag — left at `gpt-5.5`. Promoting `gpt-5.6-sol` to the capable pin / frontier is a benchmark-driven follow-up, not this acceptance PR.
+
+## Blast radius
+
+- **Purely additive.** No id removed, no existing id's behavior changed. A caller not asking for a GPT-5.6 id is entirely unaffected.
+- **Fail-closed preserved.** A well-shaped id outside the enum is still rejected (`id-not-in-closed-enum`); a made-up `gpt-9.9-fake` still 400s at spawn and resolves to null in escalation — both covered by new tests.
+- **No new route, no new config default, no schema change.** No dark-gate line shift (no `enabled:` line added to `ConfigDefaults.ts`).
+
+## Risk + mitigation
+
+- **Risk:** the two mirror lists drift apart. **Mitigation:** both edited in the same commit with a cross-referencing comment on each; new tests assert acceptance through both the resolver and the spawn route.
+- **Risk:** the doorway manifest edit trips the CI-gating model-registry-freshness lint. **Mitigation:** the new entries are `frontier: false`, so the codex-cli derived frontier set stays `['gpt-5.5']` and the `codex-capable-tier` pin (still `gpt-5.5`) remains a member — the drift tooth is unaffected. Staleness is unchanged (`lastReviewedAt` untouched, well within the 45-day window). Verified: `node scripts/lint-model-registry-freshness.mjs` → PASS.
+- **Risk:** a user on an old codex CLI selects a GPT-5.6 id and gets an opaque failure. **Mitigation:** the ELI16 + release fragment both call out the codex CLI >= 0.144.0 requirement explicitly.
+
+## Framework generality
+
+The change is scoped to the `codex-cli` framework's own acceptance surfaces and routes through the existing per-framework `KNOWN_MODEL_IDS` / spawn-validator abstraction — it does not touch the session-launch/inject abstraction and makes no Claude-specific assumption. Other frameworks (claude-code, gemini-cli, pi-cli) are untouched.
+
+## Migration parity
+
+- No agent-installed file changes (no `.claude/settings.json`, no `.instar/config.json` default, no CLAUDE.md template section, no hook/skill). The allowlists are shipped code read at runtime, so existing agents pick up the new ids on the normal server/dist update — no `PostUpdateMigrator` entry needed. The operator's already-set `models.tierEscalation.frameworks.codex-cli.escalated = "gpt-5.6-sol"` becomes live purely by deploying this code.
+
+## Tests
+
+- `tests/unit/modelTierEscalation-resolver.test.ts` — codex-cli escalated tier accepts each of gpt-5.6-sol/terra/luna; a made-up id fails closed (`id-not-in-closed-enum`); the `-pro` variants are asserted absent.
+- `tests/unit/route-validation-edge.test.ts` — `POST /sessions/spawn` with framework `codex-cli` accepts the three GPT-5.6 ids (not 400) and rejects `gpt-9.9-fake` (400, error names "model").
+- `tests/unit/topicProfileValidation.test.ts` — `validateModelId(..., 'codex-cli')` returns null for the three ids (the KNOWN_MODEL_IDS mirror path).
+- Adjacent suites re-run green: `model-registry-freshness`, `codex-model-tier-resolution`, `frameworkSessionLaunch`, `model-tier-swap-route`, `model-tier-escalation-lifecycle`. `npx tsc --noEmit` clean.
+
+## Follow-ups
+
+- Add the `-pro` GPT-5.6 variants once their plan-gating + pricing are confirmed.
+- Benchmark GPT-5.6-sol and, if it wins the lane, promote it to the codex capable tier pin (`TIER_MODEL.capable` + the manifest `frontier: true` + `lastReviewedAt` bump) and into the routing chains — a routing decision, not an acceptance change.
+- Populate real per-token pricing across the doorway registry if/when the metered doorway-scan scopes consume it.