instar 1.3.9 → 1.3.10

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.9",
+  "version": "1.3.10",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-05-27T04:57:52.877Z",
-  "instarVersion": "1.3.9",
+  "generatedAt": "2026-05-27T05:11:33.728Z",
+  "instarVersion": "1.3.10",
   "entryCount": 192,
   "entries": {
     "hook:session-start": {
@@ -401,7 +401,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2347b1bdaa18ac50c52ac5acceb0438a813754db0f1fb486f91864930be9830a",
+      "contentHash": "94f598954bbaa4a106d3b546e822387eea96f3ea04973f2d6a053685aa410724",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -409,7 +409,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2347b1bdaa18ac50c52ac5acceb0438a813754db0f1fb486f91864930be9830a",
+      "contentHash": "94f598954bbaa4a106d3b546e822387eea96f3ea04973f2d6a053685aa410724",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -417,7 +417,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2347b1bdaa18ac50c52ac5acceb0438a813754db0f1fb486f91864930be9830a",
+      "contentHash": "94f598954bbaa4a106d3b546e822387eea96f3ea04973f2d6a053685aa410724",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -425,7 +425,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2347b1bdaa18ac50c52ac5acceb0438a813754db0f1fb486f91864930be9830a",
+      "contentHash": "94f598954bbaa4a106d3b546e822387eea96f3ea04973f2d6a053685aa410724",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -433,7 +433,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2347b1bdaa18ac50c52ac5acceb0438a813754db0f1fb486f91864930be9830a",
+      "contentHash": "94f598954bbaa4a106d3b546e822387eea96f3ea04973f2d6a053685aa410724",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -441,7 +441,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2347b1bdaa18ac50c52ac5acceb0438a813754db0f1fb486f91864930be9830a",
+      "contentHash": "94f598954bbaa4a106d3b546e822387eea96f3ea04973f2d6a053685aa410724",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -449,7 +449,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2347b1bdaa18ac50c52ac5acceb0438a813754db0f1fb486f91864930be9830a",
+      "contentHash": "94f598954bbaa4a106d3b546e822387eea96f3ea04973f2d6a053685aa410724",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -457,7 +457,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2347b1bdaa18ac50c52ac5acceb0438a813754db0f1fb486f91864930be9830a",
+      "contentHash": "94f598954bbaa4a106d3b546e822387eea96f3ea04973f2d6a053685aa410724",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -465,7 +465,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2347b1bdaa18ac50c52ac5acceb0438a813754db0f1fb486f91864930be9830a",
+      "contentHash": "94f598954bbaa4a106d3b546e822387eea96f3ea04973f2d6a053685aa410724",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -473,7 +473,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2347b1bdaa18ac50c52ac5acceb0438a813754db0f1fb486f91864930be9830a",
+      "contentHash": "94f598954bbaa4a106d3b546e822387eea96f3ea04973f2d6a053685aa410724",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -481,7 +481,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2347b1bdaa18ac50c52ac5acceb0438a813754db0f1fb486f91864930be9830a",
+      "contentHash": "94f598954bbaa4a106d3b546e822387eea96f3ea04973f2d6a053685aa410724",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -489,7 +489,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2347b1bdaa18ac50c52ac5acceb0438a813754db0f1fb486f91864930be9830a",
+      "contentHash": "94f598954bbaa4a106d3b546e822387eea96f3ea04973f2d6a053685aa410724",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -497,7 +497,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2347b1bdaa18ac50c52ac5acceb0438a813754db0f1fb486f91864930be9830a",
+      "contentHash": "94f598954bbaa4a106d3b546e822387eea96f3ea04973f2d6a053685aa410724",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -505,7 +505,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2347b1bdaa18ac50c52ac5acceb0438a813754db0f1fb486f91864930be9830a",
+      "contentHash": "94f598954bbaa4a106d3b546e822387eea96f3ea04973f2d6a053685aa410724",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -513,7 +513,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2347b1bdaa18ac50c52ac5acceb0438a813754db0f1fb486f91864930be9830a",
+      "contentHash": "94f598954bbaa4a106d3b546e822387eea96f3ea04973f2d6a053685aa410724",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -521,7 +521,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2347b1bdaa18ac50c52ac5acceb0438a813754db0f1fb486f91864930be9830a",
+      "contentHash": "94f598954bbaa4a106d3b546e822387eea96f3ea04973f2d6a053685aa410724",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -529,7 +529,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2347b1bdaa18ac50c52ac5acceb0438a813754db0f1fb486f91864930be9830a",
+      "contentHash": "94f598954bbaa4a106d3b546e822387eea96f3ea04973f2d6a053685aa410724",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -537,7 +537,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2347b1bdaa18ac50c52ac5acceb0438a813754db0f1fb486f91864930be9830a",
+      "contentHash": "94f598954bbaa4a106d3b546e822387eea96f3ea04973f2d6a053685aa410724",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -545,7 +545,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2347b1bdaa18ac50c52ac5acceb0438a813754db0f1fb486f91864930be9830a",
+      "contentHash": "94f598954bbaa4a106d3b546e822387eea96f3ea04973f2d6a053685aa410724",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -553,7 +553,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2347b1bdaa18ac50c52ac5acceb0438a813754db0f1fb486f91864930be9830a",
+      "contentHash": "94f598954bbaa4a106d3b546e822387eea96f3ea04973f2d6a053685aa410724",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -561,7 +561,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2347b1bdaa18ac50c52ac5acceb0438a813754db0f1fb486f91864930be9830a",
+      "contentHash": "94f598954bbaa4a106d3b546e822387eea96f3ea04973f2d6a053685aa410724",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -569,7 +569,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2347b1bdaa18ac50c52ac5acceb0438a813754db0f1fb486f91864930be9830a",
+      "contentHash": "94f598954bbaa4a106d3b546e822387eea96f3ea04973f2d6a053685aa410724",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -577,7 +577,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2347b1bdaa18ac50c52ac5acceb0438a813754db0f1fb486f91864930be9830a",
+      "contentHash": "94f598954bbaa4a106d3b546e822387eea96f3ea04973f2d6a053685aa410724",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -585,7 +585,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2347b1bdaa18ac50c52ac5acceb0438a813754db0f1fb486f91864930be9830a",
+      "contentHash": "94f598954bbaa4a106d3b546e822387eea96f3ea04973f2d6a053685aa410724",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -593,7 +593,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2347b1bdaa18ac50c52ac5acceb0438a813754db0f1fb486f91864930be9830a",
+      "contentHash": "94f598954bbaa4a106d3b546e822387eea96f3ea04973f2d6a053685aa410724",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -601,7 +601,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2347b1bdaa18ac50c52ac5acceb0438a813754db0f1fb486f91864930be9830a",
+      "contentHash": "94f598954bbaa4a106d3b546e822387eea96f3ea04973f2d6a053685aa410724",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -609,7 +609,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2347b1bdaa18ac50c52ac5acceb0438a813754db0f1fb486f91864930be9830a",
+      "contentHash": "94f598954bbaa4a106d3b546e822387eea96f3ea04973f2d6a053685aa410724",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -617,7 +617,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2347b1bdaa18ac50c52ac5acceb0438a813754db0f1fb486f91864930be9830a",
+      "contentHash": "94f598954bbaa4a106d3b546e822387eea96f3ea04973f2d6a053685aa410724",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -625,7 +625,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2347b1bdaa18ac50c52ac5acceb0438a813754db0f1fb486f91864930be9830a",
+      "contentHash": "94f598954bbaa4a106d3b546e822387eea96f3ea04973f2d6a053685aa410724",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -633,7 +633,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2347b1bdaa18ac50c52ac5acceb0438a813754db0f1fb486f91864930be9830a",
+      "contentHash": "94f598954bbaa4a106d3b546e822387eea96f3ea04973f2d6a053685aa410724",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -641,7 +641,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2347b1bdaa18ac50c52ac5acceb0438a813754db0f1fb486f91864930be9830a",
+      "contentHash": "94f598954bbaa4a106d3b546e822387eea96f3ea04973f2d6a053685aa410724",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -649,7 +649,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2347b1bdaa18ac50c52ac5acceb0438a813754db0f1fb486f91864930be9830a",
+      "contentHash": "94f598954bbaa4a106d3b546e822387eea96f3ea04973f2d6a053685aa410724",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -657,7 +657,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2347b1bdaa18ac50c52ac5acceb0438a813754db0f1fb486f91864930be9830a",
+      "contentHash": "94f598954bbaa4a106d3b546e822387eea96f3ea04973f2d6a053685aa410724",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -665,7 +665,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2347b1bdaa18ac50c52ac5acceb0438a813754db0f1fb486f91864930be9830a",
+      "contentHash": "94f598954bbaa4a106d3b546e822387eea96f3ea04973f2d6a053685aa410724",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -673,7 +673,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2347b1bdaa18ac50c52ac5acceb0438a813754db0f1fb486f91864930be9830a",
+      "contentHash": "94f598954bbaa4a106d3b546e822387eea96f3ea04973f2d6a053685aa410724",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -681,7 +681,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2347b1bdaa18ac50c52ac5acceb0438a813754db0f1fb486f91864930be9830a",
+      "contentHash": "94f598954bbaa4a106d3b546e822387eea96f3ea04973f2d6a053685aa410724",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -689,7 +689,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2347b1bdaa18ac50c52ac5acceb0438a813754db0f1fb486f91864930be9830a",
+      "contentHash": "94f598954bbaa4a106d3b546e822387eea96f3ea04973f2d6a053685aa410724",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -697,7 +697,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2347b1bdaa18ac50c52ac5acceb0438a813754db0f1fb486f91864930be9830a",
+      "contentHash": "94f598954bbaa4a106d3b546e822387eea96f3ea04973f2d6a053685aa410724",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -705,7 +705,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2347b1bdaa18ac50c52ac5acceb0438a813754db0f1fb486f91864930be9830a",
+      "contentHash": "94f598954bbaa4a106d3b546e822387eea96f3ea04973f2d6a053685aa410724",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -713,7 +713,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2347b1bdaa18ac50c52ac5acceb0438a813754db0f1fb486f91864930be9830a",
+      "contentHash": "94f598954bbaa4a106d3b546e822387eea96f3ea04973f2d6a053685aa410724",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -721,7 +721,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2347b1bdaa18ac50c52ac5acceb0438a813754db0f1fb486f91864930be9830a",
+      "contentHash": "94f598954bbaa4a106d3b546e822387eea96f3ea04973f2d6a053685aa410724",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -729,7 +729,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2347b1bdaa18ac50c52ac5acceb0438a813754db0f1fb486f91864930be9830a",
+      "contentHash": "94f598954bbaa4a106d3b546e822387eea96f3ea04973f2d6a053685aa410724",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -737,7 +737,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2347b1bdaa18ac50c52ac5acceb0438a813754db0f1fb486f91864930be9830a",
+      "contentHash": "94f598954bbaa4a106d3b546e822387eea96f3ea04973f2d6a053685aa410724",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -753,7 +753,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2347b1bdaa18ac50c52ac5acceb0438a813754db0f1fb486f91864930be9830a",
+      "contentHash": "94f598954bbaa4a106d3b546e822387eea96f3ea04973f2d6a053685aa410724",
       "since": "2025-01-01"
     },
     "cli:init": {
@@ -1449,7 +1449,7 @@
       "type": "subsystem",
       "domain": "server",
       "sourcePath": "src/server/AgentServer.ts",
-      "contentHash": "fdca02dbf63855be79a6e90190916886d06432ca4e91f64b2c5c721d9f2ce6a7",
+      "contentHash": "e30d4746e66b84e1608cd372b9d6f54395ad0e466d740a536a9b3a2f039f4081",
       "since": "2025-01-01"
     },
     "subsystem:session-manager": {

package/src/scaffold/templates/jobs/instar/mentor-onboarding.md

@@ -0,0 +1,41 @@
+---
+name: Framework-Onboarding Mentor
+description: Heartbeat that drives one mentor tick — Stage A (drive the mentee as the user, blind to internals), leak check, Stage B forensics, and ledger capture. Off by default; the actual loop, budget gate, and safe-window check live in-process behind POST /mentor/tick (mentor.enabled=false until promoted). Phase §19.4 of FRAMEWORK-ONBOARDING-MENTOR-SPEC.md.
+schedule: "*/15 * * * *"
+priority: low
+expectedDurationMinutes: 1
+model: haiku
+enabled: false
+tags:
+  - cat:learning
+  - mentor
+  - framework-integration
+toolAllowlist: "*"
+unrestrictedTools: true
+---
+Run one mentor heartbeat by POSTing to the local mentor endpoint, then stop.
+
+This job is a thin trigger — all the real logic (the leak-detector canary, the fail-closed budget
+gate, the durable safe-window check, the Stage-A spawn with an empty tool grant, the leak detector,
+Stage-B forensics, and the ledger capture) runs IN-PROCESS inside the server, not in this session.
+That keeps the structural two-hats enforcement in code, not in this prompt.
+
+Do exactly this:
+
+1. POST to `http://localhost:${PORT}/mentor/tick` with the bearer token:
+   `curl -s -X POST -H "Authorization: Bearer $AUTH" http://localhost:${PORT}/mentor/tick`
+
+2. Read the JSON result. It will be one of:
+   - `{"ran":false,"reason":"disabled"}` — the mentor is off (the default). Nothing to do; stop.
+   - `{"ran":false,"reason":"budget"|"unsafe-window"|"canary-failed"}` — it correctly skipped this
+     tick. Stop; the next heartbeat will try again.
+   - `{"ran":true,...}` — a mentor tick ran. Note `leakDetected` and `observationsWritten` briefly,
+     then stop.
+
+3. Do NOT do any mentoring work yourself in this session, do NOT read the mentee's logs or code,
+   and do NOT send the mentee any message — the in-process tick owns all of that. You are only the
+   timer that pokes it. Then exit.
+
+This job is OFF by default. Enable it (and set `mentor.mode` to `dry-run`, then `live`, in
+`.instar/config.json`) only when you want continuous framework-onboarding mentoring — the
+graduated-rollout track drives that promotion with your sign-off at each step.

package/upgrades/1.3.10.md

@@ -0,0 +1,47 @@
+# Instar Upgrade Guide — NEXT
+
+<!-- bump: minor -->
+
+## What Changed
+
+**Framework-Onboarding Mentor System — the live mentor loop, shipped dormant (§19.4).** This wires
+the previous three pieces (ledger, auto-capture, Stage-A boundary) into one heartbeat: a pure tick
+that runs a leak-detector canary, a fail-closed budget gate, and a durable safe-window check, then
+spawns a constrained sub-agent (empty tool grant) to drive the mentee as the user, runs the leak
+detector on the transcript, runs Stage-B forensics, and captures findings to the ledger funnel. The
+orchestration is a pure function with every side-effect injected, so the structural guarantees live
+in code, not a prompt. A new built-in job (`mentor-onboarding`, off by default) is a thin timer that
+pokes `POST /mentor/tick`; the real work runs in-process.
+
+It ships **dormant**: `mentor.enabled=false` / `mode='off'`, so `POST /mentor/tick` returns
+`{ran:false, reason:'disabled'}` and nothing spawns, spends, or contacts anyone. There is no
+mentee-delivery path wired yet — promotion off → dry-run → live (with the documented live-promotion
+blockers closed first) is the human's, via the graduated-rollout track.
+
+## What to Tell Your User
+
+- The mentor's full loop now exists end-to-end but is switched off — it can't act until you turn it
+  on, and even then it starts in an observe-only dry-run.
+- When you do enable it, it refuses to run under budget pressure or while anything else is working,
+  checks its own leak-detector is alive before every tick, and logs every run so it can't quietly
+  break.
+
+## Summary of New Capabilities
+
+| Capability | How to Use |
+|-----------|-----------|
+| Mentor status | `curl -H "Authorization: Bearer $AUTH" http://localhost:<port>/mentor/status` — mode + mentee framework (off by default) |
+| Mentor tick | `POST /mentor/tick` — runs one heartbeat (`{ran:false,reason:"disabled"}` until enabled) |
+| Built-in mentor job | `mentor-onboarding` (ships `enabled:false`) — heartbeat that pokes the tick |
+| `mentor.*` config | `.instar/config.json` — `enabled`, `mode` (off/dry-run/live), `minIntervalMs`, `maxRoundsPerDay` |
+
+## Evidence
+
+Net-new feature, not a bug fix — no prior failure to reproduce. Behavior is proven by tests: 8 unit
+tests assert the load-bearing gate ORDER (canary → budget → safe-window → Stage A → leak → Stage B →
+capture) and that a **fail-closed budget skip happens before any spawn or contact**; 6 runner tests
+prove the dormant short-circuit (disabled config → no work) and the busy/min-interval safe-window;
+4 integration tests cover the routes; and 5 e2e tests boot the real server and confirm `/mentor/tick`
+is dormant on the production init path and the job template ships `enabled:false`. A dedicated
+second-pass reviewer independently audited the spawn/gating logic (concur, 0 blocking concerns).
+Affected push-config suite green (3431 + 300 capability tests) vs canonical main.