instar 1.3.902 → 1.3.903

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.902",
+  "version": "1.3.903",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-07-21T21:55:00.348Z",
-  "instarVersion": "1.3.902",
+  "generatedAt": "2026-07-22T03:15:08.570Z",
+  "instarVersion": "1.3.903",
   "entryCount": 202,
   "entries": {
     "hook:session-start": {
@@ -418,7 +418,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4ecf781b398b85245b98ba5fb10c543722cd374d39b7ce5ec7f89b9c75489072",
+      "contentHash": "da71d0a9eaa1cfd5fe752e284ef5a947b4ea67a51b8586622e7e3fd50d2eee5d",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -426,7 +426,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4ecf781b398b85245b98ba5fb10c543722cd374d39b7ce5ec7f89b9c75489072",
+      "contentHash": "da71d0a9eaa1cfd5fe752e284ef5a947b4ea67a51b8586622e7e3fd50d2eee5d",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -434,7 +434,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4ecf781b398b85245b98ba5fb10c543722cd374d39b7ce5ec7f89b9c75489072",
+      "contentHash": "da71d0a9eaa1cfd5fe752e284ef5a947b4ea67a51b8586622e7e3fd50d2eee5d",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -442,7 +442,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4ecf781b398b85245b98ba5fb10c543722cd374d39b7ce5ec7f89b9c75489072",
+      "contentHash": "da71d0a9eaa1cfd5fe752e284ef5a947b4ea67a51b8586622e7e3fd50d2eee5d",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -450,7 +450,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4ecf781b398b85245b98ba5fb10c543722cd374d39b7ce5ec7f89b9c75489072",
+      "contentHash": "da71d0a9eaa1cfd5fe752e284ef5a947b4ea67a51b8586622e7e3fd50d2eee5d",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -458,7 +458,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4ecf781b398b85245b98ba5fb10c543722cd374d39b7ce5ec7f89b9c75489072",
+      "contentHash": "da71d0a9eaa1cfd5fe752e284ef5a947b4ea67a51b8586622e7e3fd50d2eee5d",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -466,7 +466,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4ecf781b398b85245b98ba5fb10c543722cd374d39b7ce5ec7f89b9c75489072",
+      "contentHash": "da71d0a9eaa1cfd5fe752e284ef5a947b4ea67a51b8586622e7e3fd50d2eee5d",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -474,7 +474,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4ecf781b398b85245b98ba5fb10c543722cd374d39b7ce5ec7f89b9c75489072",
+      "contentHash": "da71d0a9eaa1cfd5fe752e284ef5a947b4ea67a51b8586622e7e3fd50d2eee5d",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -482,7 +482,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4ecf781b398b85245b98ba5fb10c543722cd374d39b7ce5ec7f89b9c75489072",
+      "contentHash": "da71d0a9eaa1cfd5fe752e284ef5a947b4ea67a51b8586622e7e3fd50d2eee5d",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -490,7 +490,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4ecf781b398b85245b98ba5fb10c543722cd374d39b7ce5ec7f89b9c75489072",
+      "contentHash": "da71d0a9eaa1cfd5fe752e284ef5a947b4ea67a51b8586622e7e3fd50d2eee5d",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -498,7 +498,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4ecf781b398b85245b98ba5fb10c543722cd374d39b7ce5ec7f89b9c75489072",
+      "contentHash": "da71d0a9eaa1cfd5fe752e284ef5a947b4ea67a51b8586622e7e3fd50d2eee5d",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -506,7 +506,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4ecf781b398b85245b98ba5fb10c543722cd374d39b7ce5ec7f89b9c75489072",
+      "contentHash": "da71d0a9eaa1cfd5fe752e284ef5a947b4ea67a51b8586622e7e3fd50d2eee5d",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -514,7 +514,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4ecf781b398b85245b98ba5fb10c543722cd374d39b7ce5ec7f89b9c75489072",
+      "contentHash": "da71d0a9eaa1cfd5fe752e284ef5a947b4ea67a51b8586622e7e3fd50d2eee5d",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -522,7 +522,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4ecf781b398b85245b98ba5fb10c543722cd374d39b7ce5ec7f89b9c75489072",
+      "contentHash": "da71d0a9eaa1cfd5fe752e284ef5a947b4ea67a51b8586622e7e3fd50d2eee5d",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -530,7 +530,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4ecf781b398b85245b98ba5fb10c543722cd374d39b7ce5ec7f89b9c75489072",
+      "contentHash": "da71d0a9eaa1cfd5fe752e284ef5a947b4ea67a51b8586622e7e3fd50d2eee5d",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -538,7 +538,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4ecf781b398b85245b98ba5fb10c543722cd374d39b7ce5ec7f89b9c75489072",
+      "contentHash": "da71d0a9eaa1cfd5fe752e284ef5a947b4ea67a51b8586622e7e3fd50d2eee5d",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -546,7 +546,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4ecf781b398b85245b98ba5fb10c543722cd374d39b7ce5ec7f89b9c75489072",
+      "contentHash": "da71d0a9eaa1cfd5fe752e284ef5a947b4ea67a51b8586622e7e3fd50d2eee5d",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -554,7 +554,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4ecf781b398b85245b98ba5fb10c543722cd374d39b7ce5ec7f89b9c75489072",
+      "contentHash": "da71d0a9eaa1cfd5fe752e284ef5a947b4ea67a51b8586622e7e3fd50d2eee5d",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -562,7 +562,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4ecf781b398b85245b98ba5fb10c543722cd374d39b7ce5ec7f89b9c75489072",
+      "contentHash": "da71d0a9eaa1cfd5fe752e284ef5a947b4ea67a51b8586622e7e3fd50d2eee5d",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -570,7 +570,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4ecf781b398b85245b98ba5fb10c543722cd374d39b7ce5ec7f89b9c75489072",
+      "contentHash": "da71d0a9eaa1cfd5fe752e284ef5a947b4ea67a51b8586622e7e3fd50d2eee5d",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -578,7 +578,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4ecf781b398b85245b98ba5fb10c543722cd374d39b7ce5ec7f89b9c75489072",
+      "contentHash": "da71d0a9eaa1cfd5fe752e284ef5a947b4ea67a51b8586622e7e3fd50d2eee5d",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -586,7 +586,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4ecf781b398b85245b98ba5fb10c543722cd374d39b7ce5ec7f89b9c75489072",
+      "contentHash": "da71d0a9eaa1cfd5fe752e284ef5a947b4ea67a51b8586622e7e3fd50d2eee5d",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -594,7 +594,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4ecf781b398b85245b98ba5fb10c543722cd374d39b7ce5ec7f89b9c75489072",
+      "contentHash": "da71d0a9eaa1cfd5fe752e284ef5a947b4ea67a51b8586622e7e3fd50d2eee5d",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -602,7 +602,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4ecf781b398b85245b98ba5fb10c543722cd374d39b7ce5ec7f89b9c75489072",
+      "contentHash": "da71d0a9eaa1cfd5fe752e284ef5a947b4ea67a51b8586622e7e3fd50d2eee5d",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -610,7 +610,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4ecf781b398b85245b98ba5fb10c543722cd374d39b7ce5ec7f89b9c75489072",
+      "contentHash": "da71d0a9eaa1cfd5fe752e284ef5a947b4ea67a51b8586622e7e3fd50d2eee5d",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -618,7 +618,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4ecf781b398b85245b98ba5fb10c543722cd374d39b7ce5ec7f89b9c75489072",
+      "contentHash": "da71d0a9eaa1cfd5fe752e284ef5a947b4ea67a51b8586622e7e3fd50d2eee5d",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -626,7 +626,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4ecf781b398b85245b98ba5fb10c543722cd374d39b7ce5ec7f89b9c75489072",
+      "contentHash": "da71d0a9eaa1cfd5fe752e284ef5a947b4ea67a51b8586622e7e3fd50d2eee5d",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -634,7 +634,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4ecf781b398b85245b98ba5fb10c543722cd374d39b7ce5ec7f89b9c75489072",
+      "contentHash": "da71d0a9eaa1cfd5fe752e284ef5a947b4ea67a51b8586622e7e3fd50d2eee5d",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -642,7 +642,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4ecf781b398b85245b98ba5fb10c543722cd374d39b7ce5ec7f89b9c75489072",
+      "contentHash": "da71d0a9eaa1cfd5fe752e284ef5a947b4ea67a51b8586622e7e3fd50d2eee5d",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -650,7 +650,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4ecf781b398b85245b98ba5fb10c543722cd374d39b7ce5ec7f89b9c75489072",
+      "contentHash": "da71d0a9eaa1cfd5fe752e284ef5a947b4ea67a51b8586622e7e3fd50d2eee5d",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -658,7 +658,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4ecf781b398b85245b98ba5fb10c543722cd374d39b7ce5ec7f89b9c75489072",
+      "contentHash": "da71d0a9eaa1cfd5fe752e284ef5a947b4ea67a51b8586622e7e3fd50d2eee5d",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -666,7 +666,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4ecf781b398b85245b98ba5fb10c543722cd374d39b7ce5ec7f89b9c75489072",
+      "contentHash": "da71d0a9eaa1cfd5fe752e284ef5a947b4ea67a51b8586622e7e3fd50d2eee5d",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -674,7 +674,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4ecf781b398b85245b98ba5fb10c543722cd374d39b7ce5ec7f89b9c75489072",
+      "contentHash": "da71d0a9eaa1cfd5fe752e284ef5a947b4ea67a51b8586622e7e3fd50d2eee5d",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -682,7 +682,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4ecf781b398b85245b98ba5fb10c543722cd374d39b7ce5ec7f89b9c75489072",
+      "contentHash": "da71d0a9eaa1cfd5fe752e284ef5a947b4ea67a51b8586622e7e3fd50d2eee5d",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -690,7 +690,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4ecf781b398b85245b98ba5fb10c543722cd374d39b7ce5ec7f89b9c75489072",
+      "contentHash": "da71d0a9eaa1cfd5fe752e284ef5a947b4ea67a51b8586622e7e3fd50d2eee5d",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -698,7 +698,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4ecf781b398b85245b98ba5fb10c543722cd374d39b7ce5ec7f89b9c75489072",
+      "contentHash": "da71d0a9eaa1cfd5fe752e284ef5a947b4ea67a51b8586622e7e3fd50d2eee5d",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -706,7 +706,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4ecf781b398b85245b98ba5fb10c543722cd374d39b7ce5ec7f89b9c75489072",
+      "contentHash": "da71d0a9eaa1cfd5fe752e284ef5a947b4ea67a51b8586622e7e3fd50d2eee5d",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -714,7 +714,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4ecf781b398b85245b98ba5fb10c543722cd374d39b7ce5ec7f89b9c75489072",
+      "contentHash": "da71d0a9eaa1cfd5fe752e284ef5a947b4ea67a51b8586622e7e3fd50d2eee5d",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -722,7 +722,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4ecf781b398b85245b98ba5fb10c543722cd374d39b7ce5ec7f89b9c75489072",
+      "contentHash": "da71d0a9eaa1cfd5fe752e284ef5a947b4ea67a51b8586622e7e3fd50d2eee5d",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -730,7 +730,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4ecf781b398b85245b98ba5fb10c543722cd374d39b7ce5ec7f89b9c75489072",
+      "contentHash": "da71d0a9eaa1cfd5fe752e284ef5a947b4ea67a51b8586622e7e3fd50d2eee5d",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -738,7 +738,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4ecf781b398b85245b98ba5fb10c543722cd374d39b7ce5ec7f89b9c75489072",
+      "contentHash": "da71d0a9eaa1cfd5fe752e284ef5a947b4ea67a51b8586622e7e3fd50d2eee5d",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -746,7 +746,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4ecf781b398b85245b98ba5fb10c543722cd374d39b7ce5ec7f89b9c75489072",
+      "contentHash": "da71d0a9eaa1cfd5fe752e284ef5a947b4ea67a51b8586622e7e3fd50d2eee5d",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -754,7 +754,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4ecf781b398b85245b98ba5fb10c543722cd374d39b7ce5ec7f89b9c75489072",
+      "contentHash": "da71d0a9eaa1cfd5fe752e284ef5a947b4ea67a51b8586622e7e3fd50d2eee5d",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -770,7 +770,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4ecf781b398b85245b98ba5fb10c543722cd374d39b7ce5ec7f89b9c75489072",
+      "contentHash": "da71d0a9eaa1cfd5fe752e284ef5a947b4ea67a51b8586622e7e3fd50d2eee5d",
       "since": "2025-01-01"
     },
     "cli:init": {
@@ -1530,7 +1530,7 @@
       "type": "subsystem",
       "domain": "server",
       "sourcePath": "src/server/AgentServer.ts",
-      "contentHash": "92254469720b6e5df80c8949bafcbe72211b838d8e1b9c4b1e86eea5d9a06cf2",
+      "contentHash": "98bbfb6bf6ef57368c26230a9afbbba723ccf37335a2631c482e69f3f04a0d79",
       "since": "2025-01-01"
     },
     "subsystem:session-manager": {

package/upgrades/1.3.903.md

@@ -0,0 +1,27 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+The autonomous stop hook now parses ISO-8601 timestamps with fractional seconds on macOS as well as Linux. It normalizes the terminal fractional-second component before using the existing BSD or GNU date parser, while malformed timestamps retain the existing fail-safe behavior and keep the run alive.
+
+The shared parser is used by the standard duration-expiry path, the native-goal expiry path, and the related progress-report timing calculations. No parallel clock or lifecycle path was added.
+
+## What to Tell Your User
+
+Timed autonomous runs on macOS now stop when their configured duration expires even when their recorded start time includes milliseconds. This closes a lifecycle-safety gap that could previously let a timed run continue until it completed or encountered another stopping condition.
+
+## Summary of New Capabilities
+
+- Fractional-second autonomous timestamps work on macOS and Linux.
+- Duration expiry remains fail-safe for genuinely malformed timestamps.
+- Standard and native-goal runs share the same timestamp interpretation.
+
+## Evidence
+
+- A macOS BSD-date check proves the strict millisecond form fails while the normalized form resolves to the exact expected epoch.
+- Behavioral coverage proves a millisecond timestamp yields a valid non-zero epoch.
+- Behavioral coverage proves a run past its duration exits and clears its autonomous state.
+- Build, type, lint, and focused autonomous-hook tests pass.

package/upgrades/side-effects/nine-feature-rollout-closure.md

@@ -0,0 +1,127 @@
+# Side-Effects Review — Nine-feature rollout placement closure
+
+**Version / slug:** `nine-feature-rollout-closure`
+**Date:** `2026-07-21`
+**Author:** `Instar-codey`
+**Second-pass reviewer:** `throughput_second_pass (concurred)`
+
+## Summary of the change
+
+This change accounts for source PRs 1531–1539 in the existing rollout scanner,
+InitiativeTracker, and D7 lifecycle ledger. Five independently controlled features
+are active, three owner-controlled components are composed, and one documentation-only
+source is excluded. Existing owner services provide bounded numeric projections; no
+new rollout control or persistence authority is introduced.
+
+## Decision-point inventory
+
+- `featureRolloutScan` contract parsing — modified — classifies explicit rollout
+  accounting metadata and rejects malformed contracts as invalid evidence.
+- `FeatureRolloutReconciler` placement — modified — maps active controls to rungs while
+  preserving null rungs for composed and excluded rows.
+- `BlockerLifecycleService.evaluateMaturation` — modified — evaluates active and
+  composed evidence through the existing D7 authority; excluded rows remain visible
+  but ineligible.
+- Pool-summary sanitizer — modified — rejects structurally dishonest peer summaries.
+
+## 1. Over-block
+
+Malformed or future-version peer accounting rows are rejected from the pool summary.
+That is intentional boundary validation: accepting a row whose claimed disposition,
+rung, counts, or descriptors disagree would corrupt the denominator. Local legacy rows
+remain supported explicitly through `legacyEligible`.
+
+## 2. Under-block
+
+A structurally valid peer can still report inaccurate underlying owner measurements;
+this change validates the contract envelope, not remote machine integrity. Freshness,
+sample floors, and owner-local projection semantics keep missing or stale evidence from
+becoming green, but Byzantine peers are outside this trusted-agent pool model.
+
+## 3. Level-of-abstraction fit
+
+The scanner owns declarative contract discovery, InitiativeTracker owns placement
+accounting, existing feature services own operational truth, and D7 remains the sole
+maturation evaluator. The implementation extends those existing layers instead of
+adding a parallel registry, synthetic flag, or child-owned promotion authority.
+
+## 4. Signal vs authority compliance
+
+Required reference: [docs/signal-vs-authority.md](../../docs/signal-vs-authority.md)
+
+- [x] No — this change produces a signal consumed by an existing smart gate.
+
+The new projections are numeric observations. They do not promote, block, or mutate
+their owner systems. D7 consumes them under persisted contracts and produces the
+existing HOLD/READY/REGRESSED lifecycle decision. Pool validation is a hard structural
+API invariant, which the principle explicitly permits at system boundaries.
+
+## 4b. Judgment-point check
+
+No new static heuristic is added at a competing-signals judgment point. Thresholds and
+sample floors are explicit feature contracts; disposition/rung relations and peer
+schema checks are enumerable invariants. Promotion remains outside this change.
+
+## 5. Interactions
+
+- **Shadowing:** contract errors become `invalid-contract` before metric evaluation;
+  they cannot be misreported as ordinary missing evidence.
+- **Double-fire:** projections are read-only snapshots and do not trigger owner actions.
+- **Races:** each snapshot tolerates concurrent owner updates; it records a bounded
+  point-in-time value and D7 applies its existing evaluation transaction.
+- **Feedback loops:** maturation output does not write into source metrics or promote a
+  rollout, so no control loop is introduced.
+- **Degradation visibility:** a throwing owner projection or failed bounded recovery-log
+  read reports through `DegradationReporter`; the observation remains absent/HOLD.
+
+## 6. External surfaces
+
+The blocker lifecycle local and pool summary responses gain accounting rows, metric
+descriptors, exact counts, nullable rungs, and promotion-authority labels. Existing
+legacy response semantics remain represented. The D7 SQLite schema migrates its source
+CHECK and nullable-rung constraint transactionally while preserving rows and indexes.
+There are no new operator actions, URLs, notices, or external-service writes.
+
+## 6b. Operator-surface quality
+
+No operator surface — not applicable.
+
+## 7. Multi-machine posture
+
+**Proxied-on-read:** source observations are machine-local truths, while
+`/blocker-lifecycle/summary?scope=pool` merges and strictly validates peer summaries.
+The response preserves per-origin accounting rather than pretending local counters are
+replicated. This emits no user-facing notices, creates no generated URLs, and strands
+no topic-owned state. The existing D7 ledger remains machine-local evidence history;
+pool reads are the cross-machine answer surface.
+
+## 8. Rollback cost
+
+Revert and ship a patch. The ledger migrations are additive/compatibility-preserving;
+older code ignores accounting stored in initiative JSON and can read the recreated D7
+tables. No external state repair or user notification is required.
+
+## Conclusion
+
+The change is clear to ship. Review tightened classified-claim causality, hostile-peer
+invariants, mixed legacy/accounted denominators, nullable-rung migrations, and explicit
+promotion authority. Focused typecheck and 38 rollout/migration tests pass.
+
+## Second-pass review
+
+**Reviewer:** `throughput_second_pass`
+**Independent read of the artifact: concur**
+
+The independent implementation review completed three passes and concurred after the
+claim, pool-integrity, denominator, and migration findings were repaired and tested.
+
+## Evidence pointers
+
+- `tests/unit/featureRolloutScan.test.ts`
+- `tests/unit/feature-rollout-reconciler.test.ts`
+- `tests/unit/BlockerLifecycleMaturation.test.ts`
+- `tests/integration/blocker-throughput-pool-routes.test.ts`
+
+## Class-Closure Declaration
+
+No agent-authored-artifact defect and no self-triggered controller — not applicable.