instar 1.3.899 → 1.3.900

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.899",
+  "version": "1.3.900",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-07-21T19:30:16.949Z",
-  "instarVersion": "1.3.899",
+  "generatedAt": "2026-07-21T20:08:41.591Z",
+  "instarVersion": "1.3.900",
   "entryCount": 202,
   "entries": {
     "hook:session-start": {
@@ -418,7 +418,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8b7bd933ba22b93f6464e4cf95e1590e13f419957ea50b1f6ebe233a6ec13f93",
+      "contentHash": "b02ba8f24751e8c6083de6c5316c4d2903ab0cff592bec33ed4842755d18d6f9",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -426,7 +426,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8b7bd933ba22b93f6464e4cf95e1590e13f419957ea50b1f6ebe233a6ec13f93",
+      "contentHash": "b02ba8f24751e8c6083de6c5316c4d2903ab0cff592bec33ed4842755d18d6f9",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -434,7 +434,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8b7bd933ba22b93f6464e4cf95e1590e13f419957ea50b1f6ebe233a6ec13f93",
+      "contentHash": "b02ba8f24751e8c6083de6c5316c4d2903ab0cff592bec33ed4842755d18d6f9",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -442,7 +442,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8b7bd933ba22b93f6464e4cf95e1590e13f419957ea50b1f6ebe233a6ec13f93",
+      "contentHash": "b02ba8f24751e8c6083de6c5316c4d2903ab0cff592bec33ed4842755d18d6f9",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -450,7 +450,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8b7bd933ba22b93f6464e4cf95e1590e13f419957ea50b1f6ebe233a6ec13f93",
+      "contentHash": "b02ba8f24751e8c6083de6c5316c4d2903ab0cff592bec33ed4842755d18d6f9",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -458,7 +458,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8b7bd933ba22b93f6464e4cf95e1590e13f419957ea50b1f6ebe233a6ec13f93",
+      "contentHash": "b02ba8f24751e8c6083de6c5316c4d2903ab0cff592bec33ed4842755d18d6f9",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -466,7 +466,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8b7bd933ba22b93f6464e4cf95e1590e13f419957ea50b1f6ebe233a6ec13f93",
+      "contentHash": "b02ba8f24751e8c6083de6c5316c4d2903ab0cff592bec33ed4842755d18d6f9",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -474,7 +474,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8b7bd933ba22b93f6464e4cf95e1590e13f419957ea50b1f6ebe233a6ec13f93",
+      "contentHash": "b02ba8f24751e8c6083de6c5316c4d2903ab0cff592bec33ed4842755d18d6f9",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -482,7 +482,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8b7bd933ba22b93f6464e4cf95e1590e13f419957ea50b1f6ebe233a6ec13f93",
+      "contentHash": "b02ba8f24751e8c6083de6c5316c4d2903ab0cff592bec33ed4842755d18d6f9",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -490,7 +490,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8b7bd933ba22b93f6464e4cf95e1590e13f419957ea50b1f6ebe233a6ec13f93",
+      "contentHash": "b02ba8f24751e8c6083de6c5316c4d2903ab0cff592bec33ed4842755d18d6f9",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -498,7 +498,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8b7bd933ba22b93f6464e4cf95e1590e13f419957ea50b1f6ebe233a6ec13f93",
+      "contentHash": "b02ba8f24751e8c6083de6c5316c4d2903ab0cff592bec33ed4842755d18d6f9",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -506,7 +506,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8b7bd933ba22b93f6464e4cf95e1590e13f419957ea50b1f6ebe233a6ec13f93",
+      "contentHash": "b02ba8f24751e8c6083de6c5316c4d2903ab0cff592bec33ed4842755d18d6f9",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -514,7 +514,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8b7bd933ba22b93f6464e4cf95e1590e13f419957ea50b1f6ebe233a6ec13f93",
+      "contentHash": "b02ba8f24751e8c6083de6c5316c4d2903ab0cff592bec33ed4842755d18d6f9",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -522,7 +522,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8b7bd933ba22b93f6464e4cf95e1590e13f419957ea50b1f6ebe233a6ec13f93",
+      "contentHash": "b02ba8f24751e8c6083de6c5316c4d2903ab0cff592bec33ed4842755d18d6f9",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -530,7 +530,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8b7bd933ba22b93f6464e4cf95e1590e13f419957ea50b1f6ebe233a6ec13f93",
+      "contentHash": "b02ba8f24751e8c6083de6c5316c4d2903ab0cff592bec33ed4842755d18d6f9",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -538,7 +538,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8b7bd933ba22b93f6464e4cf95e1590e13f419957ea50b1f6ebe233a6ec13f93",
+      "contentHash": "b02ba8f24751e8c6083de6c5316c4d2903ab0cff592bec33ed4842755d18d6f9",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -546,7 +546,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8b7bd933ba22b93f6464e4cf95e1590e13f419957ea50b1f6ebe233a6ec13f93",
+      "contentHash": "b02ba8f24751e8c6083de6c5316c4d2903ab0cff592bec33ed4842755d18d6f9",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -554,7 +554,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8b7bd933ba22b93f6464e4cf95e1590e13f419957ea50b1f6ebe233a6ec13f93",
+      "contentHash": "b02ba8f24751e8c6083de6c5316c4d2903ab0cff592bec33ed4842755d18d6f9",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -562,7 +562,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8b7bd933ba22b93f6464e4cf95e1590e13f419957ea50b1f6ebe233a6ec13f93",
+      "contentHash": "b02ba8f24751e8c6083de6c5316c4d2903ab0cff592bec33ed4842755d18d6f9",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -570,7 +570,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8b7bd933ba22b93f6464e4cf95e1590e13f419957ea50b1f6ebe233a6ec13f93",
+      "contentHash": "b02ba8f24751e8c6083de6c5316c4d2903ab0cff592bec33ed4842755d18d6f9",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -578,7 +578,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8b7bd933ba22b93f6464e4cf95e1590e13f419957ea50b1f6ebe233a6ec13f93",
+      "contentHash": "b02ba8f24751e8c6083de6c5316c4d2903ab0cff592bec33ed4842755d18d6f9",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -586,7 +586,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8b7bd933ba22b93f6464e4cf95e1590e13f419957ea50b1f6ebe233a6ec13f93",
+      "contentHash": "b02ba8f24751e8c6083de6c5316c4d2903ab0cff592bec33ed4842755d18d6f9",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -594,7 +594,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8b7bd933ba22b93f6464e4cf95e1590e13f419957ea50b1f6ebe233a6ec13f93",
+      "contentHash": "b02ba8f24751e8c6083de6c5316c4d2903ab0cff592bec33ed4842755d18d6f9",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -602,7 +602,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8b7bd933ba22b93f6464e4cf95e1590e13f419957ea50b1f6ebe233a6ec13f93",
+      "contentHash": "b02ba8f24751e8c6083de6c5316c4d2903ab0cff592bec33ed4842755d18d6f9",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -610,7 +610,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8b7bd933ba22b93f6464e4cf95e1590e13f419957ea50b1f6ebe233a6ec13f93",
+      "contentHash": "b02ba8f24751e8c6083de6c5316c4d2903ab0cff592bec33ed4842755d18d6f9",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -618,7 +618,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8b7bd933ba22b93f6464e4cf95e1590e13f419957ea50b1f6ebe233a6ec13f93",
+      "contentHash": "b02ba8f24751e8c6083de6c5316c4d2903ab0cff592bec33ed4842755d18d6f9",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -626,7 +626,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8b7bd933ba22b93f6464e4cf95e1590e13f419957ea50b1f6ebe233a6ec13f93",
+      "contentHash": "b02ba8f24751e8c6083de6c5316c4d2903ab0cff592bec33ed4842755d18d6f9",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -634,7 +634,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8b7bd933ba22b93f6464e4cf95e1590e13f419957ea50b1f6ebe233a6ec13f93",
+      "contentHash": "b02ba8f24751e8c6083de6c5316c4d2903ab0cff592bec33ed4842755d18d6f9",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -642,7 +642,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8b7bd933ba22b93f6464e4cf95e1590e13f419957ea50b1f6ebe233a6ec13f93",
+      "contentHash": "b02ba8f24751e8c6083de6c5316c4d2903ab0cff592bec33ed4842755d18d6f9",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -650,7 +650,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8b7bd933ba22b93f6464e4cf95e1590e13f419957ea50b1f6ebe233a6ec13f93",
+      "contentHash": "b02ba8f24751e8c6083de6c5316c4d2903ab0cff592bec33ed4842755d18d6f9",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -658,7 +658,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8b7bd933ba22b93f6464e4cf95e1590e13f419957ea50b1f6ebe233a6ec13f93",
+      "contentHash": "b02ba8f24751e8c6083de6c5316c4d2903ab0cff592bec33ed4842755d18d6f9",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -666,7 +666,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8b7bd933ba22b93f6464e4cf95e1590e13f419957ea50b1f6ebe233a6ec13f93",
+      "contentHash": "b02ba8f24751e8c6083de6c5316c4d2903ab0cff592bec33ed4842755d18d6f9",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -674,7 +674,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8b7bd933ba22b93f6464e4cf95e1590e13f419957ea50b1f6ebe233a6ec13f93",
+      "contentHash": "b02ba8f24751e8c6083de6c5316c4d2903ab0cff592bec33ed4842755d18d6f9",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -682,7 +682,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8b7bd933ba22b93f6464e4cf95e1590e13f419957ea50b1f6ebe233a6ec13f93",
+      "contentHash": "b02ba8f24751e8c6083de6c5316c4d2903ab0cff592bec33ed4842755d18d6f9",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -690,7 +690,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8b7bd933ba22b93f6464e4cf95e1590e13f419957ea50b1f6ebe233a6ec13f93",
+      "contentHash": "b02ba8f24751e8c6083de6c5316c4d2903ab0cff592bec33ed4842755d18d6f9",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -698,7 +698,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8b7bd933ba22b93f6464e4cf95e1590e13f419957ea50b1f6ebe233a6ec13f93",
+      "contentHash": "b02ba8f24751e8c6083de6c5316c4d2903ab0cff592bec33ed4842755d18d6f9",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -706,7 +706,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8b7bd933ba22b93f6464e4cf95e1590e13f419957ea50b1f6ebe233a6ec13f93",
+      "contentHash": "b02ba8f24751e8c6083de6c5316c4d2903ab0cff592bec33ed4842755d18d6f9",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -714,7 +714,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8b7bd933ba22b93f6464e4cf95e1590e13f419957ea50b1f6ebe233a6ec13f93",
+      "contentHash": "b02ba8f24751e8c6083de6c5316c4d2903ab0cff592bec33ed4842755d18d6f9",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -722,7 +722,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8b7bd933ba22b93f6464e4cf95e1590e13f419957ea50b1f6ebe233a6ec13f93",
+      "contentHash": "b02ba8f24751e8c6083de6c5316c4d2903ab0cff592bec33ed4842755d18d6f9",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -730,7 +730,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8b7bd933ba22b93f6464e4cf95e1590e13f419957ea50b1f6ebe233a6ec13f93",
+      "contentHash": "b02ba8f24751e8c6083de6c5316c4d2903ab0cff592bec33ed4842755d18d6f9",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -738,7 +738,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8b7bd933ba22b93f6464e4cf95e1590e13f419957ea50b1f6ebe233a6ec13f93",
+      "contentHash": "b02ba8f24751e8c6083de6c5316c4d2903ab0cff592bec33ed4842755d18d6f9",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -746,7 +746,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8b7bd933ba22b93f6464e4cf95e1590e13f419957ea50b1f6ebe233a6ec13f93",
+      "contentHash": "b02ba8f24751e8c6083de6c5316c4d2903ab0cff592bec33ed4842755d18d6f9",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -754,7 +754,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8b7bd933ba22b93f6464e4cf95e1590e13f419957ea50b1f6ebe233a6ec13f93",
+      "contentHash": "b02ba8f24751e8c6083de6c5316c4d2903ab0cff592bec33ed4842755d18d6f9",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -770,7 +770,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8b7bd933ba22b93f6464e4cf95e1590e13f419957ea50b1f6ebe233a6ec13f93",
+      "contentHash": "b02ba8f24751e8c6083de6c5316c4d2903ab0cff592bec33ed4842755d18d6f9",
       "since": "2025-01-01"
     },
     "cli:init": {
@@ -1530,7 +1530,7 @@
       "type": "subsystem",
       "domain": "server",
       "sourcePath": "src/server/AgentServer.ts",
-      "contentHash": "32658731bb6b20942f26350aa10f74d7c4301a91537e208ed057ee13627bb58d",
+      "contentHash": "92254469720b6e5df80c8949bafcbe72211b838d8e1b9c4b1e86eea5d9a06cf2",
       "since": "2025-01-01"
     },
     "subsystem:session-manager": {

package/upgrades/1.3.900.md

@@ -0,0 +1,27 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+- Added bounded per-feature maturation metric contracts to existing rollout records.
+- Extended the existing blocker-lifecycle metrics database and summary/trend surfaces with recurring per-feature evaluation snapshots.
+- Every dark, dry-run, or live rollout now receives an explicit ready, hold, stale, insufficient, missing-contract, or missed-cadence result on the development-agent measurement substrate.
+- Evaluation is measure-only: it cannot enable a feature, advance a rollout, or send a notification.
+
+## What to Tell Your User
+
+Instar can now show whether each feature that is still dark or soaking has fresh, measurable evidence for its next rollout step. Missing or stale evidence stays visible instead of quietly aging out, while promotion remains an operator-controlled decision.
+
+## Summary of New Capabilities
+
+- Track numeric maturation criteria per staged feature.
+- Re-score every active rollout on a recurring cadence.
+- Read per-machine maturation status and history through the existing blocker-lifecycle summary and trend surfaces.
+
+## Evidence
+
+- Focused ledger, scorer, contract-parser, rollout-reconciler, canonical-scan, and lifecycle e2e tests pass.
+- TypeScript and repository lint pass.
+- The duplicate-safety audit preserves the blocker ledger's exactly-two latency factors and prohibits a parallel maturation ledger.

package/upgrades/side-effects/feature-maturation-recurring-evaluation.md

@@ -0,0 +1,37 @@
+# Side-effects review — feature maturation recurring evaluation
+
+## Scope
+
+Adds measure-only per-feature observation/evaluation rows to the existing blocker-lifecycle SQLite owner, extends existing rollout metadata, and adds bounded maturation fields to existing summary/trend responses.
+
+## 1. State and persistence
+
+Two additive tables share the existing SQLite handle, WAL policy, close path, registry, 90-day retention, and bounded prune pass. No authoritative rollout or feature state moves into telemetry. Rollout records gain one optional validated contract; old records remain valid.
+
+## 2. Runtime and performance
+
+One boot-delayed and six-hour unref'd evaluation timer runs only when the existing blocker-lifecycle development gate resolves on and an InitiativeTracker is injected. A pass is capped at 512 features and 16 metrics per feature. Reads and writes are indexed and fail-soft; measurement cannot block server boot or feature behavior.
+
+## 3. External and user-visible effects
+
+No outbound message, attention item, external API, model call, flag mutation, or rollout promotion is added. Existing summary/trend JSON gains additive `maturation` fields. Pool peers that predate the field are reported as unsupported rather than as healthy zeros.
+
+## 4. Signal versus authority
+
+Compliant. Metric comparisons are deterministic signals. They cannot write InitiativeTracker, configuration, standards, approvals, or feature flags. Existing human/config promotion authority is unchanged.
+
+## 5. Failure and rollback
+
+Malformed contracts become missing-contract signals; invalid/future observations are rejected; unavailable SQLite degrades reads and guard health. Observation/evaluation write failures return false, and read failures return empty evidence that deterministically becomes insufficient evidence or missed cadence; these fail-soft boundaries are explicitly marked for the repository fallback audit. Disable the existing blocker-lifecycle gate or revert the change. Additive rows become inert and require no destructive rollback.
+
+## 6. Security and privacy
+
+Rows contain bounded feature/metric ids, numeric values, sample counts, source enums/refs, stages, hashes, and timestamps only. They contain no prose, prompt, log content, topic/user id, path, credential, or URL. Pool responses remain authenticated and machine-tagged.
+
+## 7. Multi-machine behavior
+
+Measurements remain per-origin because feature traffic and model routing can differ by runtime. The existing authenticated pool read projects tagged origins without a fleet aggregate, so one machine cannot hide another's missing evidence.
+
+## Review conclusion
+
+Concur. The change extends the intended owners, is bounded and reversible, and introduces no new actuation authority.