instar 1.3.845 → 1.3.847

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.845",
+  "version": "1.3.847",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-07-16T19:39:41.854Z",
-  "instarVersion": "1.3.845",
+  "generatedAt": "2026-07-16T21:09:31.734Z",
+  "instarVersion": "1.3.847",
   "entryCount": 202,
   "entries": {
     "hook:session-start": {
@@ -418,7 +418,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6d6399818723a1de0855d94a63c75f5edd7782f69ab4251d9584c4f92463c45b",
+      "contentHash": "f57142bd5c08001335b0427583071a7d44aa1053b8c76afc5711183236e99334",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -426,7 +426,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6d6399818723a1de0855d94a63c75f5edd7782f69ab4251d9584c4f92463c45b",
+      "contentHash": "f57142bd5c08001335b0427583071a7d44aa1053b8c76afc5711183236e99334",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -434,7 +434,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6d6399818723a1de0855d94a63c75f5edd7782f69ab4251d9584c4f92463c45b",
+      "contentHash": "f57142bd5c08001335b0427583071a7d44aa1053b8c76afc5711183236e99334",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -442,7 +442,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6d6399818723a1de0855d94a63c75f5edd7782f69ab4251d9584c4f92463c45b",
+      "contentHash": "f57142bd5c08001335b0427583071a7d44aa1053b8c76afc5711183236e99334",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -450,7 +450,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6d6399818723a1de0855d94a63c75f5edd7782f69ab4251d9584c4f92463c45b",
+      "contentHash": "f57142bd5c08001335b0427583071a7d44aa1053b8c76afc5711183236e99334",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -458,7 +458,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6d6399818723a1de0855d94a63c75f5edd7782f69ab4251d9584c4f92463c45b",
+      "contentHash": "f57142bd5c08001335b0427583071a7d44aa1053b8c76afc5711183236e99334",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -466,7 +466,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6d6399818723a1de0855d94a63c75f5edd7782f69ab4251d9584c4f92463c45b",
+      "contentHash": "f57142bd5c08001335b0427583071a7d44aa1053b8c76afc5711183236e99334",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -474,7 +474,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6d6399818723a1de0855d94a63c75f5edd7782f69ab4251d9584c4f92463c45b",
+      "contentHash": "f57142bd5c08001335b0427583071a7d44aa1053b8c76afc5711183236e99334",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -482,7 +482,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6d6399818723a1de0855d94a63c75f5edd7782f69ab4251d9584c4f92463c45b",
+      "contentHash": "f57142bd5c08001335b0427583071a7d44aa1053b8c76afc5711183236e99334",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -490,7 +490,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6d6399818723a1de0855d94a63c75f5edd7782f69ab4251d9584c4f92463c45b",
+      "contentHash": "f57142bd5c08001335b0427583071a7d44aa1053b8c76afc5711183236e99334",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -498,7 +498,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6d6399818723a1de0855d94a63c75f5edd7782f69ab4251d9584c4f92463c45b",
+      "contentHash": "f57142bd5c08001335b0427583071a7d44aa1053b8c76afc5711183236e99334",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -506,7 +506,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6d6399818723a1de0855d94a63c75f5edd7782f69ab4251d9584c4f92463c45b",
+      "contentHash": "f57142bd5c08001335b0427583071a7d44aa1053b8c76afc5711183236e99334",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -514,7 +514,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6d6399818723a1de0855d94a63c75f5edd7782f69ab4251d9584c4f92463c45b",
+      "contentHash": "f57142bd5c08001335b0427583071a7d44aa1053b8c76afc5711183236e99334",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -522,7 +522,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6d6399818723a1de0855d94a63c75f5edd7782f69ab4251d9584c4f92463c45b",
+      "contentHash": "f57142bd5c08001335b0427583071a7d44aa1053b8c76afc5711183236e99334",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -530,7 +530,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6d6399818723a1de0855d94a63c75f5edd7782f69ab4251d9584c4f92463c45b",
+      "contentHash": "f57142bd5c08001335b0427583071a7d44aa1053b8c76afc5711183236e99334",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -538,7 +538,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6d6399818723a1de0855d94a63c75f5edd7782f69ab4251d9584c4f92463c45b",
+      "contentHash": "f57142bd5c08001335b0427583071a7d44aa1053b8c76afc5711183236e99334",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -546,7 +546,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6d6399818723a1de0855d94a63c75f5edd7782f69ab4251d9584c4f92463c45b",
+      "contentHash": "f57142bd5c08001335b0427583071a7d44aa1053b8c76afc5711183236e99334",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -554,7 +554,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6d6399818723a1de0855d94a63c75f5edd7782f69ab4251d9584c4f92463c45b",
+      "contentHash": "f57142bd5c08001335b0427583071a7d44aa1053b8c76afc5711183236e99334",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -562,7 +562,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6d6399818723a1de0855d94a63c75f5edd7782f69ab4251d9584c4f92463c45b",
+      "contentHash": "f57142bd5c08001335b0427583071a7d44aa1053b8c76afc5711183236e99334",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -570,7 +570,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6d6399818723a1de0855d94a63c75f5edd7782f69ab4251d9584c4f92463c45b",
+      "contentHash": "f57142bd5c08001335b0427583071a7d44aa1053b8c76afc5711183236e99334",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -578,7 +578,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6d6399818723a1de0855d94a63c75f5edd7782f69ab4251d9584c4f92463c45b",
+      "contentHash": "f57142bd5c08001335b0427583071a7d44aa1053b8c76afc5711183236e99334",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -586,7 +586,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6d6399818723a1de0855d94a63c75f5edd7782f69ab4251d9584c4f92463c45b",
+      "contentHash": "f57142bd5c08001335b0427583071a7d44aa1053b8c76afc5711183236e99334",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -594,7 +594,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6d6399818723a1de0855d94a63c75f5edd7782f69ab4251d9584c4f92463c45b",
+      "contentHash": "f57142bd5c08001335b0427583071a7d44aa1053b8c76afc5711183236e99334",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -602,7 +602,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6d6399818723a1de0855d94a63c75f5edd7782f69ab4251d9584c4f92463c45b",
+      "contentHash": "f57142bd5c08001335b0427583071a7d44aa1053b8c76afc5711183236e99334",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -610,7 +610,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6d6399818723a1de0855d94a63c75f5edd7782f69ab4251d9584c4f92463c45b",
+      "contentHash": "f57142bd5c08001335b0427583071a7d44aa1053b8c76afc5711183236e99334",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -618,7 +618,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6d6399818723a1de0855d94a63c75f5edd7782f69ab4251d9584c4f92463c45b",
+      "contentHash": "f57142bd5c08001335b0427583071a7d44aa1053b8c76afc5711183236e99334",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -626,7 +626,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6d6399818723a1de0855d94a63c75f5edd7782f69ab4251d9584c4f92463c45b",
+      "contentHash": "f57142bd5c08001335b0427583071a7d44aa1053b8c76afc5711183236e99334",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -634,7 +634,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6d6399818723a1de0855d94a63c75f5edd7782f69ab4251d9584c4f92463c45b",
+      "contentHash": "f57142bd5c08001335b0427583071a7d44aa1053b8c76afc5711183236e99334",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -642,7 +642,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6d6399818723a1de0855d94a63c75f5edd7782f69ab4251d9584c4f92463c45b",
+      "contentHash": "f57142bd5c08001335b0427583071a7d44aa1053b8c76afc5711183236e99334",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -650,7 +650,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6d6399818723a1de0855d94a63c75f5edd7782f69ab4251d9584c4f92463c45b",
+      "contentHash": "f57142bd5c08001335b0427583071a7d44aa1053b8c76afc5711183236e99334",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -658,7 +658,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6d6399818723a1de0855d94a63c75f5edd7782f69ab4251d9584c4f92463c45b",
+      "contentHash": "f57142bd5c08001335b0427583071a7d44aa1053b8c76afc5711183236e99334",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -666,7 +666,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6d6399818723a1de0855d94a63c75f5edd7782f69ab4251d9584c4f92463c45b",
+      "contentHash": "f57142bd5c08001335b0427583071a7d44aa1053b8c76afc5711183236e99334",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -674,7 +674,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6d6399818723a1de0855d94a63c75f5edd7782f69ab4251d9584c4f92463c45b",
+      "contentHash": "f57142bd5c08001335b0427583071a7d44aa1053b8c76afc5711183236e99334",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -682,7 +682,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6d6399818723a1de0855d94a63c75f5edd7782f69ab4251d9584c4f92463c45b",
+      "contentHash": "f57142bd5c08001335b0427583071a7d44aa1053b8c76afc5711183236e99334",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -690,7 +690,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6d6399818723a1de0855d94a63c75f5edd7782f69ab4251d9584c4f92463c45b",
+      "contentHash": "f57142bd5c08001335b0427583071a7d44aa1053b8c76afc5711183236e99334",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -698,7 +698,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6d6399818723a1de0855d94a63c75f5edd7782f69ab4251d9584c4f92463c45b",
+      "contentHash": "f57142bd5c08001335b0427583071a7d44aa1053b8c76afc5711183236e99334",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -706,7 +706,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6d6399818723a1de0855d94a63c75f5edd7782f69ab4251d9584c4f92463c45b",
+      "contentHash": "f57142bd5c08001335b0427583071a7d44aa1053b8c76afc5711183236e99334",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -714,7 +714,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6d6399818723a1de0855d94a63c75f5edd7782f69ab4251d9584c4f92463c45b",
+      "contentHash": "f57142bd5c08001335b0427583071a7d44aa1053b8c76afc5711183236e99334",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -722,7 +722,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6d6399818723a1de0855d94a63c75f5edd7782f69ab4251d9584c4f92463c45b",
+      "contentHash": "f57142bd5c08001335b0427583071a7d44aa1053b8c76afc5711183236e99334",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -730,7 +730,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6d6399818723a1de0855d94a63c75f5edd7782f69ab4251d9584c4f92463c45b",
+      "contentHash": "f57142bd5c08001335b0427583071a7d44aa1053b8c76afc5711183236e99334",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -738,7 +738,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6d6399818723a1de0855d94a63c75f5edd7782f69ab4251d9584c4f92463c45b",
+      "contentHash": "f57142bd5c08001335b0427583071a7d44aa1053b8c76afc5711183236e99334",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -746,7 +746,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6d6399818723a1de0855d94a63c75f5edd7782f69ab4251d9584c4f92463c45b",
+      "contentHash": "f57142bd5c08001335b0427583071a7d44aa1053b8c76afc5711183236e99334",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -754,7 +754,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6d6399818723a1de0855d94a63c75f5edd7782f69ab4251d9584c4f92463c45b",
+      "contentHash": "f57142bd5c08001335b0427583071a7d44aa1053b8c76afc5711183236e99334",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -770,7 +770,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "6d6399818723a1de0855d94a63c75f5edd7782f69ab4251d9584c4f92463c45b",
+      "contentHash": "f57142bd5c08001335b0427583071a7d44aa1053b8c76afc5711183236e99334",
       "since": "2025-01-01"
     },
     "cli:init": {
@@ -1530,7 +1530,7 @@
       "type": "subsystem",
       "domain": "server",
       "sourcePath": "src/server/AgentServer.ts",
-      "contentHash": "ce5540e419322933aa47c6130cd3862c4a56bfb0df127c82e366f4e1cd17a457",
+      "contentHash": "011e7607b5e1c77f6c0ea5dc88a96bc7c57f29011c7b320e7e2db7c739076df7",
       "since": "2025-01-01"
     },
     "subsystem:session-manager": {
@@ -1538,7 +1538,7 @@
       "type": "subsystem",
       "domain": "sessions",
       "sourcePath": "src/core/SessionManager.ts",
-      "contentHash": "5a3ab1757ddff12d07fcb0488c586cb07678e348f3c02bd93357430f161e7017",
+      "contentHash": "fbcafb9c34120283417e8bb6807e1d67101e6526867ce8669a404169e4739144",
       "since": "2025-01-01"
     },
     "subsystem:auto-updater": {

package/src/scaffold/templates.ts

@@ -678,6 +678,7 @@ I declare owner/blockedOn at commitment creation; a later state change goes thro
 - Record a manual cycle: \`POST /apprenticeship/cycles\` with the id of an existing \`active\` registry instance plus positive \`cycleNumber\`, \`task\`, \`menteeOutput\`, optional \`mentorFlagged\` / \`overseerDifferential\` / \`coaching\` / \`infraItems\`, \`kind\` (\`mentor-mentee-differential\`, \`overseer-apprentice-devreview\`, \`overseer-mentee-direct\`), and \`channel\` (\`telegram-playwright\`, \`threadline-backup\`, \`direct-shortcut\`, \`unknown\`). Unknown, pending, blocked, complete, and abandoned instance references are refused. A \`telegram-playwright\` cycle additionally REQUIRES a \`transcriptAudit\` block — \`{ topicIds, window: {start,end}, summary, findingDedupKeys, generatedAt, ledger: 'local'|'remote'|'dry-run'|'failed' }\` — built from \`instar dev:post-drive-transcript-audit\` run over the drive window (use \`--history-base-url\` when the transcript lives on the mentee's server; \`ledger:'local'\` claims are cross-checked against the real framework ledger). Existing legacy dangling rows are never rewritten: inspect them with \`GET /apprenticeship/cycles/integrity\`. Use this when the overseer or manual loop found a differential outside the automated mentor tick.
 - **When to use** (PROACTIVE): when starting or closing a mentorship/apprenticeship instance, drive it through the registry + transitions so the retro-harvest is reviewed before the next instance starts and the lessons are captured before this one closes — never track an instance's lifecycle by memory.
 - Layer-balance health: \`GET /apprenticeship/instances/:id/role-coverage\` now returns a \`keystoneBalance\` block — \`{ keystoneAxis, keystoneCycleCount, lastKeystoneAt, oversightSinceKeystone, starved, dormant, lastKeystoneAgeMs, reason }\`. It answers "is my deepest layer (the real mentor→mentee drive) actually firing, or have I drifted into just reviewing/overseeing?" \`starved:true\` means the mentee layer is under-firing relative to ongoing oversight. \`dormant:true\` is the complementary blind spot: the keystone has gone wall-clock silent past the dormancy threshold, which the bare oversight count reads as "healthy" — so check \`dormant\` too, not just \`starved\`. Observe-only — it never gates. Tune with \`?oversightStarvationThreshold=N\` (starvation) and \`?keystoneDormancyMs=N\` (dormancy). **When to use** (PROACTIVE): before deciding the apprenticeship loop is healthy, check it — a starved OR dormant keystone is the silent "mentor-heavy/mentee-light" drift; if either fires, drive the mentee layer (a real \`mentor-mentee-differential\` cycle through the dogfooded channel) rather than another review.
+- Cross-agent coverage: that read merges a bounded census of cycle evidence from running, registered agents on the host. Always inspect \`aggregation.complete\`, \`aggregation.omittedPeerCount\`, \`aggregation.conflictingCycleIds\`, and \`aggregation.peerSources\`: an unreachable, truncated, omitted, or UUID-conflicting source makes completeness false, so partial truth is never presented as complete role truth.
 
 **Failure-Learning Loop** — Dev-process failure forensics (instar self-hosting). When something you built breaks later, it's captured and traced back to the spec/initiative/project AND the dev toolchain that produced it; the analyzer surfaces process-gap patterns and opens human-approved tracked fixes, then verifies whether each fix actually reduced that failure class. Ships OFF (\`monitoring.failureLearning.enabled\`); registers itself on the initiative board.
 - Why features break / failure rate by tool / are our fixes working: \`curl -H "Authorization: Bearer $AUTH" http://localhost:${port}/failures/analysis\` — answer from here, never from memory.

package/upgrades/1.3.846.md

@@ -0,0 +1,20 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+`GET /apprenticeship/instances/:id/role-coverage` now combines the serving agent's cycle rows with bounded authenticated reads from running, registered non-lifeline agents on the same host. Exact cycle UUIDs are deduplicated before the existing keystone calculation runs. The response adds `aggregation.complete`, `omittedPeerCount`, `conflictingCycleIds`, and `peerSources` so failed, capped, truncated, or contradictory peer reads remain explicit.
+
+## What to Tell Your User
+
+Apprenticeship role health now reflects cycles recorded by other agents on the same machine, instead of treating this agent's local database as the whole program. If a peer cannot be read, the answer says the census is incomplete rather than quietly claiming the keystone is starved.
+
+## Summary of New Capabilities
+
+The existing role-coverage endpoint provides a same-host cross-agent merged view with per-source completeness metadata. It remains read-only and never gates apprenticeship lifecycle actions.
+
+## Evidence
+
+Unit coverage proves bounded peer discovery, authenticated fetches, explicit partial results, and deduplication. Integration coverage proves a remote keystone changes a formerly false-starved route result. The AgentServer E2E proves the merged result and source metadata are live through the production route. TypeScript and the affected apprenticeship suites pass.

package/upgrades/1.3.847.md

@@ -0,0 +1,20 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+Framework switches into Codex now recognize the Codex prompt promptly and wait until the continuation
+bootstrap is injected before handing the new session back to the messaging bridge. A switch with no
+new user message loads its history silently instead of inventing a new scope response.
+
+## What to Tell Your User
+
+Switching a live topic from Claude to Codex now carries the recent conversation before Codex can
+answer the next message.
+
+## Summary of New Capabilities
+
+- Framework-aware interactive readiness recognizes both Claude and Codex prompts.
+- Framework handoffs can require bootstrap delivery before session registration completes.

package/upgrades/side-effects/apprenticeship-cross-agent-role-coverage.md

@@ -0,0 +1,82 @@
+# Side-Effects Review — Cross-agent apprenticeship role coverage
+
+**Version / slug:** `apprenticeship-cross-agent-role-coverage`
+**Date:** `2026-07-16`
+**Author:** `instar-codey`
+**Second-pass reviewer:** `not required`
+
+## Summary of the change
+
+The role-coverage route now performs a bounded read of cycle evidence held by other running agents registered on the same host, deduplicates remote rows against the local store, and calculates the existing role and keystone signals over the union. `ApprenticeshipPeerCycleReader` owns peer discovery and HTTP reads; `ApprenticeshipCycleStore.roleCoverage` remains the single calculation layer. The response names completeness, capped omissions, truncation, UUID conflicts, and per-peer failures. No lifecycle decision changes.
+
+## Decision-point inventory
+
+No block/allow decision point is added or modified. The route remains observe-only. Peer inclusion uses structural registry facts (running, non-self, non-lifeline) and bounded transport validation.
+
+## 1. Over-block
+
+No block/allow surface — over-block not applicable. A peer failure does not block the local read.
+
+## 2. Under-block
+
+No block/allow surface — under-block not applicable. The read can still be incomplete when a peer is unreachable, lacks an agent token, returns malformed rows, or holds more than 500 matching cycles; every such case is named through `aggregation.complete:false` and `peerSources` rather than hidden.
+
+## 3. Level-of-abstraction fit
+
+The peer reader is the transport/collection layer and the cycle store remains the only role-coverage calculation layer. This avoids parallel keystone math in the route and avoids turning derived visibility into replicated authoritative state.
+
+## 4. Signal vs authority compliance
+
+**Required reference:** [docs/signal-vs-authority.md](../../docs/signal-vs-authority.md)
+
+- [x] No — this change has no block/allow surface.
+
+`starved`, `dormant`, and completeness are observations. Nothing acts on them automatically.
+
+## 4b. Judgment-point check (Judgment Within Floors standard)
+
+No new static heuristic at a competing-signals decision point. Registry filtering and record-shape checks are enumerable transport invariants; they do not decide what work an agent may do.
+
+## 5. Interactions
+
+- **Shadowing:** the merged route calls the existing store calculation after peer collection; it does not shadow the local store.
+- **Double-fire:** exact cycle UUID mirrors count once. A duplicate UUID with different coverage fields makes completeness false and is named in `conflictingCycleIds`; the first/local copy remains the deterministic calculation input.
+- **Races:** concurrent cycle writes may land just after a peer responds, as with any read snapshot. The next read sees them. No write lock is taken.
+- **Feedback loops:** none; the result remains observe-only and is not written back into a cycle store.
+
+## 6. External surfaces
+
+The existing JSON response gains additive `aggregation` metadata and its counts can increase when another registered agent holds matching evidence. Reads add bounded localhost HTTP traffic: at most 32 concurrent peer requests, five seconds each, 500 rows each. Eligible peers beyond 32 are counted as omitted and force `complete:false`. No persistent state or external service changes. No operator-facing action is added.
+
+## 6b. Operator-surface quality (Operator-Surface Quality standard)
+
+No operator surface — not applicable.
+
+## 7. Multi-machine posture (Cross-Machine Coherence)
+
+**Proxied-on-read within the host's cross-agent registry.** Agent cycle stores remain deliberately per-agent; the merged role-coverage read proxies up to 32 running agents registered on that host and explicitly counts any omitted remainder. A single agent replicated across multiple machines is a separate machine-pool topology and is not silently claimed here: `scope: registered-agents` names the boundary. The endpoint emits no notices, generates no URLs, and moves no durable state, so topic transfer does not strand new state.
+
+## 8. Rollback cost
+
+Pure read-path code and additive response metadata. Revert and ship a patch; no data migration or agent-state repair is required. Rollback temporarily restores the known local-only false-starvation view.
+
+## Conclusion
+
+The design fixes the real same-host cross-agent blind spot at read time, preserves local storage ownership, and makes partial or contradictory truth explicit. Independent review caught two honesty gaps—silent peer-cap omission and divergent duplicate UUIDs—and both now force `complete:false`. The bounded peer collector and single calculation layer are clear to ship.
+
+## Second-pass review (if required)
+
+**Reviewer:** independent item-15 reviewer
+
+**Independent read of the artifact: concur.** Initial concerns about silent peer-cap omissions and divergent duplicate UUIDs were resolved by explicit omission/conflict fields, completeness downgrade, and regression tests.
+
+## Evidence pointers
+
+- `tests/unit/apprenticeship-peer-cycle-reader.test.ts`
+- `tests/unit/apprenticeship-cycle-store.test.ts`
+- `tests/integration/apprenticeship-routes.test.ts`
+- `tests/e2e/apprenticeship-lifecycle.test.ts`
+
+## Class-Closure Declaration (display-only mirror)
+
+No agent-authored-artifact defect and no self-triggered controller — not applicable.

package/upgrades/side-effects/codex-framework-continuation-history.md

@@ -0,0 +1,26 @@
+# Side-Effects Review — Codex framework-switch continuation
+
+**Date:** 2026-07-16  
+**Author:** instar-codey  
+**Second-pass reviewer:** pending Echo PR review
+
+## Summary
+
+The existing continuation context was correct, but interactive readiness recognized only Claude's
+prompt. Codex therefore waited through the primary and extended readiness timeouts before the
+best-effort injection, while the bridge could already route a new user message to that context-free
+session. The fix recognizes Codex's prompt and makes framework handoffs await the durable bootstrap
+injection before returning. A handoff with no new user message now explicitly loads context silently,
+which also removes the trigger for the observed unsolicited scope narration.
+
+## Interaction review
+
+- Normal cold spawns keep their asynchronous durable pending-inject behavior; only framework handoffs
+  opt into the await.
+- The pending-inject record is still written before readiness and cleared only after injection.
+- Claude readiness remains unchanged; generic shell prompts are still excluded.
+- No endpoint, schema, authority, timer, or history source changes.
+
+## Rollback
+
+Code-only revert. Pending-inject records remain compatible and require no repair.