loki-mode 10.5.20 → 10.5.22

package/README.md

@@ -48,6 +48,7 @@ Upgrade with `loki self-update`. Long form: [Installation Guide](docs/INSTALLATI
 ```bash
 export ANTHROPIC_API_KEY=sk-...
 loki doctor
+loki quick "fix the login bug"   # one small task on the Loki 10 engine
 ```
 
 <details>
@@ -71,9 +72,9 @@ loki-seal is a Claude Code Stop hook that runs your repo's real test suite when
 
 ## Loki 10 engine
 
-Opt-in: set LOKI_ENGINE=v10 <!-- loki10-default -->
+Default: Loki 10 engine for `loki "<task>"`, `loki owner/repo#N` and `loki quick "<task>"`. Set LOKI_ENGINE=legacy or run `loki legacy <args>` for the previous engine. <!-- loki10-default -->
 
-Loki 10 is the rewritten engine. It is not the default yet: with `LOKI_ENGINE` unset, `loki` runs the [legacy engine](#legacy-engine-reference) exactly as before. A default flip is in flight; this section describes what `main` does today (`bin/loki` routes to the v10 engine only when `LOKI_ENGINE=v10` is set). Guide, provider table and summary format: [docs/v10/GUIDE.md](docs/v10/GUIDE.md).
+Loki 10 is the rewritten engine and the default for tasks, issue mode and `quick`; `status`, `verify` and `dashboard` use it when `LOKI_ENGINE=v10` is set. Guide, provider table and summary format: [docs/v10/GUIDE.md](docs/v10/GUIDE.md).
 
 ```
 LOKI_ENGINE=v10 loki "fix the login redirect loop" --no-pr

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: An autonomous software factory that knows what it is supposed to deliver, and proves it did. Use when the user says Loki Mode or asks to build, fix or verify software autonomously.
 ---
 
-# Loki Mode v10.5.20
+# Loki Mode v10.5.22
 
 **You are an autonomous agent. You make decisions. You do not ask questions. You do not stop.**
 
@@ -470,4 +470,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v10.5.20 | [Autonomi](https://www.autonomi.dev/) flagship product | ~410 lines core**
+**v10.5.22 | [Autonomi](https://www.autonomi.dev/) flagship product | ~410 lines core**

package/VERSION

@@ -1 +1 @@
-10.5.20
+10.5.22

package/autonomy/loki

@@ -1606,7 +1606,9 @@ show_help() {
     echo "  loki doctor               Check your setup is ready (a few seconds)"
     echo "  loki quickstart           Guided first build from your idea (no PRD needed)"
     echo "  loki start ./prd.md       Build from a spec (PRD file, GitHub/GitLab/Jira/Azure issue, or no arg)"
-    echo "  quickstart = guided first build; quick = one small task (3 iters max)."
+    echo "  quickstart = guided first build; quick = one small task (Loki 10 engine, no PR)."
+    echo "  loki \"<task>\", loki owner/repo#N and loki quick run on the Loki 10 engine by default."
+    echo "  Previous engine: set LOKI_ENGINE=legacy or run 'loki legacy <args>'."
     echo "  Docs: https://github.com/asklokesh/loki-mode  |  Report a problem: loki crash"
     echo ""
     # CLI consolidation (Phase A): the front page presents ~17 canonical
@@ -1640,6 +1642,7 @@ show_help() {
     echo ""
     echo "Verify / trust:"
     echo "  verify [base]    Deterministic PR verification (CI-gate exit codes)"
+    echo "  keys export      Print the public receipt-signing key (JWK) for third-party verify --pubkey"
     echo "  review [opts]    Standalone code review with quality gates"
     echo "  ultracode \"task\" Run a task as a native Claude Code Dynamic Workflow (opt-in, Claude-only)"
     echo "  trust [cmd]      Visible trust trajectory; 'trust detail' for metrics"
@@ -1705,7 +1708,7 @@ show_help() {
     echo "  loki start PROJ-456           # Jira issue"
     echo "  loki start --bg ./prd.md      # Start in background"
     echo "  loki start --parallel ./prd.md   # Parallel mode (git worktrees)"
-    echo "  loki quick \"add dark mode\"  # Single-task mode (3 iters max)"
+    echo "  loki quick \"add dark mode\"  # Single-task mode (Loki 10 engine; LOKI_ENGINE=legacy for 3 iters max)"
     echo "  loki tour                     # See a real sample result (no provider, no key, no spend)"
     echo "  loki demo                     # Build a sample todo app end to end"
     echo "  loki init -t saas-starter     # Scaffold from template"
@@ -1916,7 +1919,7 @@ show_landing() {
     echo -e "  ${CYAN}loki doctor${NC}           Check your setup is ready (a few seconds)"
     echo -e "  ${CYAN}loki quickstart${NC}       Guided first build from your idea (no PRD needed)"
     echo -e "  ${CYAN}loki start ./prd.md${NC}   Build from a spec (PRD file, GitHub/GitLab/Jira/Azure issue, or no arg)"
-    echo "  quickstart = guided first build; quick = one small task (3 iters max)."
+    echo "  quickstart = guided first build; quick = one small task (Loki 10 engine, no PR)."
     echo ""
     echo -e "Need help? ${CYAN}loki help${NC} lists every command."
     echo "Tip: preview cost and scope before building: loki plan <your-prd.md>"
@@ -16408,8 +16411,10 @@ cmd_quick() {
             echo ""
             echo "Usage: loki quick \"description of what to do\""
             echo ""
-            echo "Runs Loki with a lightweight execution profile: 3 iterations max,"
-            echo "no quality council, no completion gate. Best for tiny tasks."
+            echo "Runs the Loki 10 engine on one small task (no PR is opened). Set"
+            echo "LOKI_ENGINE=legacy or run 'loki legacy quick ...' for the previous engine:"
+            echo "a lightweight profile, 3 iterations max, no quality council, no completion"
+            echo "gate. Best for tiny tasks. The options below apply to the previous engine."
             echo ""
             echo "Examples:"
             echo "  loki quick \"add dark mode to this React app\""
@@ -18647,6 +18652,11 @@ with open(manifest_path, 'w') as f:
 # usable.
 # ---------------------------------------------------------------------------
 cmd_verify() {
+    # D48: --pubkey verifies a receipt against a given public key (v10 engine, no ~/.loki needed).
+    local _pk_arg
+    for _pk_arg in "$@"; do
+        [ "$_pk_arg" = "--pubkey" ] && LOKI_ENGINE=v10 exec "$_LOKI_SCRIPT_DIR/../bin/loki" verify "$@"
+    done
     # --fast: deterministic checks only, in milliseconds. Measured on this repo
     # (1,932 tracked files): 298 ms cold, 87 ms warm, 19 ms diff-scoped, against
     # an 11,040 ms shell-based baseline.
@@ -21959,6 +21969,10 @@ main() {
         verify)
             cmd_verify "$@"
             ;;
+        keys)
+            # D48: public-key export lives in the Bun v10 engine; re-enter the shim on that route.
+            LOKI_ENGINE=v10 exec "$_LOKI_SCRIPT_DIR/../bin/loki" keys "$@"
+            ;;
         spec)
             cmd_spec "$@"
             ;;

package/bin/loki

@@ -271,26 +271,73 @@ if [ "${1:-}" = "modernize" ]; then
     unset _loki_mod_a
 fi
 
-# Loki 10 engine (D29): additive; skipped entirely unless LOKI_ENGINE=v10.
-if [ "${LOKI_ENGINE:-}" = "v10" ]; then
-    _e10=0
-    case "${1:-}" in
-        status|verify|dashboard) _e10=1 ;;
-        ""|-*) _e10=0 ;;
-        # http*://*/issues/* also covers GitLab's /-/issues/ URLs.
-        */*\#[0-9]*|http*://*/issues/*|http*://*/browse/*) _e10=1 ;;
-        *" "*) _e10=1 ;;
-        # ponytail: a one-word argument stays on the legacy CLI. The telemetry
-        # allowlist is not a command registry (estimate, intent, outcomes are
-        # missing from it), so it cannot decide routing. Multi-word tasks and
-        # issue refs reach v10.
-        *) _e10=0 ;;
-    esac
-    if [ "$_e10" = "1" ]; then
-        command -v bun >/dev/null 2>&1 || { echo "Error: LOKI_ENGINE=v10 needs bun. Unset LOKI_ENGINE to use the current engine." >&2; exit 1; }
-        exec bun "$BUN_CLI" engine10 "$@"
-    fi
-fi
+# `loki legacy <args>` (D29/D48): the previous engine, exactly as LOKI_ENGINE=legacy.
+# Re-runs this shim with the pin so every route below is the pre-flip route.
+case "${1:-}" in
+    legacy)
+        shift
+        [ -f "$REPO_ROOT/autonomy/lib/engine10-legacy-notice.txt" ] && cat "$REPO_ROOT/autonomy/lib/engine10-legacy-notice.txt" >&2
+        LOKI_ENGINE=legacy exec "$SCRIPT_PATH" "$@"
+        ;;
+esac
+
+# Loki 10 engine (D29, flipped to the default by D48 rows 7-9). LOKI_ENGINE unset
+# or v10 routes `loki "<task>"`, `loki owner/repo#N` and `loki quick "<task>"` to
+# engine10; LOKI_ENGINE=v10 (explicit) also routes status/verify/dashboard. Any
+# other value (legacy, v9, ...) skips this block: the previous engine, unchanged.
+_loki_engine_default="v10"
+case "${LOKI_ENGINE:-$_loki_engine_default}" in
+    v10)
+        _e10=0
+        _e10_args=("$@")
+        case "${1:-}" in
+            status|verify|dashboard|keys)
+                [ "${LOKI_ENGINE:-}" = "v10" ] && _e10=1
+                # Bare `loki verify` follows the newest run: a v10 run newer than the newest
+                # legacy proof is verified by v10, so a FAILED default run is never VERIFIED.
+                # Only a bare call or a v10 run id (e10-*) goes there; any flag (--fast, --pr, --json, unknown) stays on legacy verify.
+                if [ "$1" = "verify" ] && [ "$_e10" = "0" ] && [ -z "${LOKI_ENGINE:-}" ] && case "${2:-}" in ""|e10-*) true ;; *) false ;; esac; then
+                    _r10=""; _p10=""
+                    for _d in "${LOKI_DIR:-.loki}"/runs/e10-*/; do [ -d "$_d" ] && _r10="$_d"; done
+                    for _d in "${LOKI_DIR:-.loki}"/proofs/*/proof.json; do [ -f "$_d" ] && { [ -z "$_p10" ] || [ "$_d" -nt "$_p10" ]; } && _p10="$_d"; done
+                    if [ -n "$_r10" ] && { [ -z "$_p10" ] || [ "$_r10" -nt "$_p10" ]; }; then _e10=1; fi
+                    unset _r10 _p10 _d
+                fi
+                ;;
+            ""|-*) _e10=0 ;;
+            # quick: the lean small path, no PR (legacy quick never opened one). A flag-first
+            # call (--help, -v) stays on the legacy quick.
+            quick)
+                case "${2:-}" in
+                    ""|-*) _e10=0 ;;
+                    *) _e10=1; _e10_args=(--no-pr "${@:2}") ;;
+                esac
+                ;;
+            # http*://*/issues/* also covers GitLab's /-/issues/ URLs.
+            */*\#[0-9]*|http*://*/issues/*|http*://*/browse/*) _e10=1 ;;
+            *" "*) _e10=1 ;;
+            # ponytail: a one-word argument stays on the legacy CLI. The telemetry
+            # allowlist is not a command registry (estimate, intent, outcomes are
+            # missing from it), so it cannot decide routing. Multi-word tasks and
+            # issue refs reach v10.
+            *) _e10=0 ;;
+        esac
+        # Default (unset) mode never breaks a host: no bun, or a provider engine10 has no
+        # invoker for, falls through to the legacy engine. Explicit v10 keeps its hard error.
+        if [ "$_e10" = "1" ] && [ "${LOKI_ENGINE:-}" != "v10" ]; then
+            case "${LOKI_PROVIDER:-claude}" in claude|codex|cline|aider) ;; *) _e10=0 ;; esac
+            command -v bun >/dev/null 2>&1 || _e10=0
+            if [ "$_e10" = "0" ]; then
+                echo "loki: using the legacy engine (the Loki 10 engine needs bun and LOKI_PROVIDER of claude, codex, cline or aider)." >&2
+            fi
+        fi
+        if [ "$_e10" = "1" ]; then
+            command -v bun >/dev/null 2>&1 || { echo "Error: LOKI_ENGINE=v10 needs bun. Install bun, or set LOKI_ENGINE=legacy to use the previous engine." >&2; exit 1; }
+            exec bun "$BUN_CLI" engine10 "${_e10_args[@]}"
+        fi
+        unset _e10 _e10_args
+        ;;
+esac
 
 # Bun must be installed for the new path; if it isn't, fall through to bash
 # silently rather than fail. This keeps users on systems without Bun working.

package/completions/_loki

@@ -193,6 +193,7 @@ function _loki_commands {
         'spec:Living spec drift detection'
         'intent:Does the spec still say what was actually wanted'
         'verify:Deterministic PR verification'
+        'keys:Export the receipt-signing public key'
         'grill:Interrogate a spec before building'
         'trust:Visible trust trajectory'
         'trust-metrics:Trust metrics report'

package/completions/loki.bash

@@ -5,8 +5,8 @@ _loki_completion() {
     _init_completion || return
 
     # Main subcommands (must match autonomy/loki main case statement)
-    local main_commands="start backlog quick monitor demo tour welcome init stop pause resume steer status next ship dashboard web serve api sandbox notify import github issue config provider reset memory compound checkpoint council dogfood projects enterprise secrets cockpit secure own handoff doctor watchdog audit metrics syslog onboard share proof receipt outcomes explain plan report cost estimate kpis stats test ci watch telemetry agent context ctx code run export review optimize heal modernize migrate cluster worktree wt trigger failover remote deploy docker mcp magic assets analyze compliance crash open otel preview quickstart rc rollback self-update sentrux setup-skill spec state template trust trust-metrics ultracode update verify voice why wiki bench cleanup logs grill docs cp version completions help"
-    local main_commands="start backlog quick monitor demo tour welcome init stop pause resume steer status next ship dashboard web serve api sandbox notify import github issue intent config provider reset memory compound checkpoint council dogfood projects enterprise secrets cockpit secure own handoff doctor watchdog audit metrics syslog onboard share proof receipt explain plan report cost estimate kpis stats test ci watch telemetry agent context ctx code run export review optimize heal modernize migrate cluster worktree wt trigger failover remote deploy docker mcp magic assets analyze compliance crash open otel preview quickstart rc rollback self-update sentrux setup-skill spec state template trust trust-metrics ultracode update verify voice why wiki bench cleanup logs grill docs cp version completions help"
+    local main_commands="start backlog quick monitor demo tour welcome init stop pause resume steer status next ship dashboard web serve api sandbox notify import github issue config provider reset memory compound checkpoint council dogfood projects enterprise secrets cockpit secure own handoff doctor watchdog audit metrics syslog onboard share proof receipt outcomes explain plan report cost estimate kpis stats test ci watch telemetry agent context ctx code run export review optimize heal modernize migrate cluster worktree wt trigger failover remote deploy docker mcp magic assets analyze compliance crash open otel preview quickstart rc rollback self-update sentrux setup-skill spec state template trust trust-metrics ultracode update verify voice why wiki bench cleanup logs grill docs cp version completions help keys"
+    local main_commands="start backlog quick monitor demo tour welcome init stop pause resume steer status next ship dashboard web serve api sandbox notify import github issue intent config provider reset memory compound checkpoint council dogfood projects enterprise secrets cockpit secure own handoff doctor watchdog audit metrics syslog onboard share proof receipt explain plan report cost estimate kpis stats test ci watch telemetry agent context ctx code run export review optimize heal modernize migrate cluster worktree wt trigger failover remote deploy docker mcp magic assets analyze compliance crash open otel preview quickstart rc rollback self-update sentrux setup-skill spec state template trust trust-metrics ultracode update verify voice why wiki bench cleanup logs grill docs cp version completions help keys"
 
     # 1. If we are on the first argument (subcommand)
     if [[ $cword -eq 1 ]]; then

package/dashboard/__init__.py

@@ -7,7 +7,7 @@ Modules:
     control: Session control API (start/stop/pause/resume)
 """
 
-__version__ = "10.5.20"
+__version__ = "10.5.22"
 
 # Expose the control app for easy import
 try:

package/docs/INSTALLATION.md

@@ -2,7 +2,7 @@
 
 The flagship product of [Autonomi](https://www.autonomi.dev/). Loki Mode is a spec-driven autonomous builder with a built-in trust layer that takes any spec to a deployed product and verifies completion with evidence (quality gates plus a completion council), not just a "done" claim. Complete installation instructions for all platforms and use cases.
 
-**Version:** v10.5.20
+**Version:** v10.5.22
 
 ---
 

package/docs/exit-codes.md

@@ -89,9 +89,18 @@ not rank above UNCHECKED.
 | Legacy shell (`autonomy/verify.sh`) | BLOCKED (non-zero) | the receipt line passes with the same accepted line |
 
 Engine10 `loki verify [run-id]` exits: 0 verified, 1 tampered, 2 unchecked,
-3 unsigned (refused), 66 no runs. The flag never changes TAMPERED or UNCHECKED,
+3 unsigned (refused), 4 run outcome not verified (a sealed receipt of a FAILED or
+otherwise unverified run), 66 no runs. The outcome check runs before the UNSIGNED
+branch, so the flag never changes exit 4, TAMPERED or UNCHECKED,
 and verify never creates a signing key.
 
+`loki verify --pubkey FILE <receipt.json|run-id>` (v10 only) checks the signature
+against the supplied Ed25519 public key (JWK from `loki keys export`, or PEM) and
+never the local JWKS. Exits: 0 VERIFIED, 1 TAMPERED, 2 UNCHECKED (kid does not
+match the key, or the key file is unusable), 3 UNSIGNED (a receipt with no
+signature is refused even with `--allow-unsigned`, because the caller asked for a
+signature check), 4 run outcome not verified (checked before UNSIGNED).
+
 An early draft spec listed `1=BLOCKED, 2=CONCERNS`. That ordering was rejected:
 it is not used anywhere, it has no consumers, and it inverts the
 severity-rises-with-the-code rule that every other command follows.

package/docs/v10/GUIDE.md

@@ -1,10 +1,20 @@
 # Loki 10 engine guide
 
-Opt-in: set LOKI_ENGINE=v10 <!-- loki10-default -->
-
-Loki 10 is the rewritten engine (docs/v10/ENGINE.md). It is not the default
-yet. Every command below only runs when LOKI_ENGINE=v10 is set; leave it
-unset and `loki` keeps using the current (legacy) engine exactly as before.
+Default: Loki 10 engine for `loki "<task>"`, `loki owner/repo#N` and `loki quick "<task>"`. Set LOKI_ENGINE=legacy or run `loki legacy <args>` for the previous engine. <!-- loki10-default -->
+
+Loki 10 is the rewritten engine (docs/v10/ENGINE.md). Since the D48 flip it
+is the default for three entry points: `loki "<task>"`, `loki owner/repo#N`
+(issue mode) and `loki quick "<task>"`. Each prints one start line,
+`Loki 10 engine (set LOKI_ENGINE=legacy or run 'loki legacy' for the previous
+engine)`, then the summary below. Everything else (`loki start`, `loki
+status`, `loki dashboard` and the rest) is unchanged unless you set
+LOKI_ENGINE=v10 explicitly, which also routes status, verify and dashboard
+to the v10 commands. Bare `loki verify` (no LOKI_ENGINE) follows the newest
+run: when the newest entry in .loki/runs/ is a v10 run newer than the newest
+legacy proof it runs the v10 verify, otherwise the legacy verify. If bun is
+missing or LOKI_PROVIDER is unsupported, the default mode falls back to the
+legacy engine and prints one stderr line saying why. The previous engine stays one step away:
+`loki legacy <args>` and LOKI_ENGINE=legacy.
 
 Some pieces named in this guide are still being built. Each one below says
 so plainly instead of describing a finished feature.
@@ -12,19 +22,34 @@ so plainly instead of describing a finished feature.
 ## Quickstart
 
 Put the task first, as a quoted multi-word string, so bin/loki's router
-sends it to the v10 engine instead of the legacy one. A one-word argument
-that is not an issue ref, or any first argument starting with `-`, stays
-on the legacy engine.
+sends it to the v10 engine. A one-word argument that is not an issue ref,
+or any first argument starting with `-`, stays on the legacy engine.
+
+```
+loki "fix the login redirect loop" --no-pr
+```
+
+`loki quick "<task>"` is the small-task entry. It runs the same engine
+without opening a pull request (the legacy quick never opened one), and the
+engine's own sizing picks the lean path for a small task: Plan and Wall are
+skipped and implement starts on sonnet, escalating to the top model only
+on a real test failure (E-64; `LOKI_E10_CASCADE=0` turns the cascade off).
+`loki quick --help` and a flag-first `loki quick -v "<task>"` stay on the
+legacy quick.
 
 ```
-LOKI_ENGINE=v10 loki "fix the login redirect loop" --no-pr
+loki quick "fix the login redirect loop"
 ```
 
+If bun is not installed, or LOKI_PROVIDER names a provider the v10 engine
+has no invoker for (anything but claude, codex, cline, aider), these entry
+points fall back to the legacy engine instead of failing.
+
 Issue refs work the same way:
 
 ```
-LOKI_ENGINE=v10 loki owner/repo#123
-LOKI_ENGINE=v10 loki https://github.com/owner/repo/issues/123
+loki owner/repo#123
+loki https://github.com/owner/repo/issues/123
 ```
 
 bin/loki routes GitHub, GitLab (`.../-/issues/N`) and Jira
@@ -58,9 +83,13 @@ verify, seal) and then, in the supervisor, the pr stage, ending in the
 Slack is not part of the v10 engine surface (no command, no notification
 hook) and is in progress, tracked with the other wave 3 items.
 
-## The 5-line summary
+## The summary
 
-A finished run prints five lines, one label each:
+A finished run prints the start line, then one label per line (Outcome,
+PR, Receipt, NOT PROVEN, Cost, Time; a Reason line is added for any
+outcome other than VERIFIED or ALREADY_SATISFIED). The quiet default stays
+within 8 lines. The block below is the older 5-line form; the labels are the
+same:
 
 ```
 PR:         https://github.com/owner/repo/pull/1
@@ -81,7 +110,13 @@ Time:       4m12s (intake 11s, plan 20s, implement 3m10s, verify 31s)
   separate `; flaky ...` clause on the same line.
 - **Cost**: the provider-reported dollar figure and token count. When the
   provider does not report cost, this line reads `not measured` instead of
-  `$0.00`; a missing cost is never rendered as free.
+  `$0.00`; a missing cost is never rendered as free. The one exception is the
+  CLI invoker (LOKI_E10_INVOKER=cli, which the first-run gate's stub uses): it
+  has no dollar figure to report, so the run records 0 with the source marker
+  `cli-invoker-unmetered` in the cost event, the receipt (`cost.source`) and
+  the efficiency record, shows `$0.00 (...; CLI invoker records no cost)`, and
+  adds `cost unmetered (CLI invoker; recorded as 0)` to NOT PROVEN. The cost
+  fields are never null on such a run.
 - **Time**: total wall time, then each stage's own duration in parentheses.
 
 This formatter (`loki-ts/src/engine10/output.ts`, `formatSummary`) is
@@ -138,15 +173,12 @@ provider names (`claude`, `codex`, `cline`, `aider`); it is not supported.
 
 ## After the flip
 
-Once v10 becomes the default (docs/v10/DECISIONS.md, D29), `loki`, `loki
-status`, `loki verify` and `loki dashboard` with no `LOKI_ENGINE` set will
-mean the v10 commands described above. The previous engine stays
-reachable through `LOKI_ENGINE=legacy` (bin/loki sends every value other
-than `v10` to it), unchanged. Nothing is removed at the flip. A separate
-legacy alias command is planned (docs/v10/ENGINE.md, E-31) but is not on
-main.
-
-That flip has not happened on main as of this guide. The opt-in line near
-the top of this file and of README.md's section is the one place that
-records which state we are in; it changes in the same commit as the flip
-itself.
+D48 made v10 the default for `loki "<task>"`, `loki owner/repo#N` and
+`loki quick "<task>"`. The previous engine stays fully reachable and
+unchanged: `loki legacy <args>` (prints a short deprecation notice to
+stderr, then runs exactly the pre-flip route for `<args>`) and
+`LOKI_ENGINE=legacy` (the same, without the notice, for scripts). Any
+LOKI_ENGINE value other than v10 or unset also keeps the legacy engine.
+Nothing is removed at the flip. The one place that records which state we
+are in is the marked line near the top of this file and of README.md's
+Loki 10 section; it changed in the same commit as the flip.

package/docs/v10/PROGRESS.md

@@ -1747,3 +1747,16 @@ The swarm is stopped: .loki/V10-STOP exists, the loop has no wake-ups, and the c
 - Merged on local main: D48-flip r3 (opus APPROVE: FAILED receipt exits 4 with or without --allow-unsigned; dispatch 56/0; gate --stub 0 failed), A-134b r4 (sonnet APPROVE; registration rc=0, shard rc=0, own test 6/0), E-162 (opus APPROVE as CTO call).
 - train/33 63db8710 pushed. Guards: registration rc=0, shard-coverage rc=0 (E2e Features row 19 -> 20 to keep the five heaviest suites in distinct shards), v10-ops rc=0, run-shellcheck rc=0, docs-cli-drift rc=0, release-dist-guard rc=0, budget.test 24 pass.
 - REJECTED, fix rounds building: E-163 (live /usage timeout has no process-group kill), D48-r2 (unsigned receipt exits 0 under --pubkey; merge conflicts with the exit-4 change).
+
+## 2026-10-01T05:34Z v10.5.19 published and auto-promoted; train/33 red, flip dropped
+- v10.5.19: Release run 47050d65 completed success; npm view loki-mode@10.5.19 gitHead 47050d6533d7 matches; dist-tags latest=10.5.19 next=10.5.19 (D49 auto-promote). Unblocks the CodeQL P0 (10.5.18 never published).
+- train/33 63db8710 RED: Tests shard 7/8, suite "first-run gate assertion logic (A-02)" (tests/test-first-run-gate.sh): "FAIL clean: gate exit 1". Reproduced locally on 63db8710, not on aad61f9a. Cause: D48-flip r3 added gate checks (engine-start-line, cost-non-null, output-lines 8, bare verify rc 4) that the test's clean fixture does not emit.
+- D46 drop: reverted c2c43fd10 on main (5d25b205; reverted paths identical to aad61f9a; local test-first-run-gate rc=0, 0 FAIL). train/34 5d25b205 pushed with E-163 r3 (haiku fix; env parse probes abc/-5/nan/inf/0 -> 20, 46/0), A-134b r4, E-162.
+- D48-flip r4 (fixture fix) building; D48-r2b (pubkey, null-jwt exits 3 under --pubkey) built, in opus re-review; it needs the flip re-landed first.
+
+## 2026-10-01T06:07Z v10.5.20 promoted; v10.5.21 (D48 engine flip) released; train/39
+- v10.5.20 240f3285: Release success; npm gitHead 240f3285f42b matches; dist-tags latest=10.5.20 next=10.5.20 (auto-promote, watcher bybzbhat6). Contents A-134b, E-162, E-163.
+- train/35 RED (Tests shard 1/8: "1 command(s) absent from 'loki help': keys"). D46 drop of D48-r2b (76e3d25c, revert clean vs flip-r4 merge). Fix r2c 2e7c68a3 (one help line), re-landed as 3eade3d4; train/37 green on Tests, Bun Parity, Coverage, Security Audit.
+- train/36 76e3d25c green (all four); main fast-forwarded; v10.5.21 189f347e pushed (--check-clean rc=0, parent == origin/main). CHANGELOG corrected: the flip's Unreleased notes said "loki verify unchanged"; r3 routes bare verify to v10 when the newest run is a v10 run (bin/loki:296-305), exit 4 for a non-VERIFIED outcome. Watcher bpighrue2.
+- Tier A red on every train since train/33: E-162 ran tests/test-shard-coverage.sh before the Python deps install; two pytest-gated suites (run-all-tests.sh:782-787) were not registered, 666 of 668. Fix 55d559ea moves the step after pip install (train/38).
+- train/39 c34511e5 = flip + keys (D48 rows 2, 7-9) + Tier A fix + 10.5.21 merge; local help, registration, shard-coverage, docs-drift, v10-ops all rc=0.