loki-mode 10.6.8 → 10.6.10

package/docs/v10/D63-CARDS.md

@@ -0,0 +1,354 @@
+# D63 remaining slice cards (Architect, main 23298d2eb)
+
+Scope: Control Plane default, Slack, Jira and Linear, multi-repo, MCP, containers, and the stub-provider E2E. Visual and contract flips and the D61 speed slices are carded elsewhere. These cards are a design; nothing here is implemented.
+
+## Findings
+
+Control Plane
+- `loki control` is gated on `LOKI_CONTROL=1` (`loki-ts/src/commands/control.ts:71`).
+- `LOKI_CONTROL_DEFAULT` exists only in bash `cmd_dashboard` (`autonomy/loki:7330`). Bare `loki` still runs `cmd_ui`, which starts the old dashboard.
+- Runs ship only when `LOKI_CONTROL_URL` is set (`engine10/supervisor.ts:189`). The `instance.json` discovery described in `docs/v10/CONTROL-PLANE.md:52` does not exist.
+- The BLOCKED answer UI exists (`packages/control-plane/ui/src/App.tsx:168-216`, `src/server/answer.ts`). It only writes `~/.loki/control/answers/<src>/<run>.answer.txt`; nothing reads that file to resume the run.
+
+Security gap (HIGH)
+- `docs/v10/CONTROL-PLANE.md:43` says a non-loopback bind refuses without `LOKI_CONTROL_TOKEN` and that `/v1` needs a Bearer token. Neither is implemented: `app.ts` has no auth middleware and `serve.ts` binds whatever `LOKI_CONTROL_HOST` says.
+- `Dockerfile.control-plane`, the Helm chart and the ECS task all set `0.0.0.0`, so the shipped container exposes unauthenticated ingest and answer-write on every interface.
+- On loopback there is no Host check (DNS rebinding).
+
+Routing (`bin/loki`)
+- `slack` is missing from the Bun allowlist at `bin/loki:570`, so the documented `loki slack serve` is unreachable from an installed CLI.
+- `jira:PROJ-1` and `linear:ENG-42` are one word and fall to the legacy engine.
+- Linear URLs (`/issue/`, singular) match neither `*/issues/*` nor `*/browse/*` and also go legacy. Only Jira `https://...atlassian.net/browse/` URLs reach v10.
+
+Slack
+- The default launcher spawns `process.execPath process.argv[1] <task>`, which is `cli.ts`, not `bin/loki`; `cli.ts` has no task route, so the launch fails.
+- The launcher passes `SLACK_BOT_TOKEN` and `SLACK_SIGNING_SECRET` into the child run's env.
+- Outbound with no webhook is already a clean no-op (`engine10/adapters/slack.ts:19`).
+
+Jira and Linear
+- Already on with no flag. A missing credential throws an error naming the variable, before any LLM call. Self-hosted Jira URLs are not parsed.
+
+Multi-repo
+- `autonomy/lib/workspace.py` is a 290-line compact version: repos run sequentially; no `show`, `status` or `clean`; no exit code 3; SIGINT not handled. The gate exists twice (`workspace.py:50`, `autonomy/loki:12926`).
+
+MCP
+- The three v10 tools are always registered. `mcp/tests/test_v10_tools.py` is not run by any runner, workflow or local-ci.
+
+Containers
+- Files exist; the only check is `packages/control-plane/test/deploy/container.test.ts`. The Dockerfile comment says "no authentication of its own". The token is optional in Helm.
+
+Stub provider (BUG-2 in E2E-D65.md)
+- A usage gap, not missing code: `LOKI_E10_INVOKER=cli` plus `LOKI_CLAUDE_CLI=<stub>` already drives v10 with a stub (`scripts/first-run-gate.sh:98`, `docs/v10/FIRST-RUN-GATE.md:11`).
+
+## File-set rules for every card
+- CHANGELOG: each card supplies its sentence; the Release Manager writes `CHANGELOG.md` at the train. No card edits it.
+- README: each card edits only the README section it names.
+- Headless tests: `LOKI_NO_BROWSER=1`, a throwaway `HOME`, `--port 0` or a stub server, never a port in 57374-57399. Stop only recorded PIDs; never kill by name or pattern.
+- Every spawn under `loki-ts/src` passes an explicit env. No stored credentials are read.
+- No new `tests/*.sh` except in C5, which owns `tests/run-all-tests.sh` and `tests/shard-durations.tsv`. Other cards extend existing suites.
+- Caps: core engine10 has 64 lines left (D71), e10ext 33 lines left. New code goes in `loki-ts/src/features` or `packages/`.
+
+---
+
+## C1 CP-AUTH: Control Plane auth enforced as documented
+- Tier: HIGH (auth, security). Budget: 30 min.
+- Goal:
+  - With `LOKI_CONTROL_TOKEN` set, every `/v1/*` call needs `Authorization: Bearer <token>`, compared with `timingSafeEqual`. `/health` and `/ready` stay open.
+  - A non-loopback `LOKI_CONTROL_HOST` without a token refuses to start: exit 2 with a line naming `LOKI_CONTROL_TOKEN`. Override: `LOKI_CONTROL_ALLOW_INSECURE_BIND=1`.
+  - On loopback, a request whose Host is not `127.0.0.1`, `localhost` or `[::1]` (any port) gets 403.
+  - The UI accepts `#token=` once, keeps it in sessionStorage and sends it on each call.
+- Files:
+  - `packages/control-plane/src/server/auth.ts` (new), `packages/control-plane/src/server/app.ts`, `packages/control-plane/src/server/serve.ts`
+  - `packages/control-plane/ui/src/api.ts`, `packages/control-plane/ui/dist/**` (rebuild)
+  - `packages/control-plane/test/server/auth.test.ts` (new)
+  - `docs/v10/CONTROL-PLANE.md` (Auth section only)
+- Wall checks:
+  - With a token: no header 401, wrong token 401, right token 200 on GET `/v1/runs`, POST `/v1/ingest`, POST `.../answer`.
+  - No token on loopback: behaviour unchanged, existing tests green.
+  - `serve.ts` with `LOKI_CONTROL_HOST=0.0.0.0` and no token exits 2 without binding (explicit env, port 0).
+  - `Host: evil.example` on loopback gives 403.
+  - Mutation: removing the middleware turns the 401 tests red.
+- Commands: `cd packages/control-plane && bun test ./test/ && bun run typecheck && bun run build:all`
+- CHANGELOG: "The Control Plane now enforces `LOKI_CONTROL_TOKEN` on every API call and refuses to listen on a non-loopback address without one."
+- Docs: `docs/v10/CONTROL-PLANE.md` Auth section.
+- Dependencies: none. Blocks C10.
+
+## C2 CP-DEFAULT: Control Plane on by default; local runs ship to it
+- Tier: MEDIUM. Budget: 30 min.
+- Goal:
+  - `LOKI_CONTROL` defaults on; `LOKI_CONTROL=0` prints one "off" line and exits 0.
+  - `serve` reads the child's "listening on" line and writes `~/.loki/control/instance.json` `{pid, port, url, version, install_path, db}` (mode 0600), removed when the CLI exits.
+  - The ship hook ships when `LOKI_CONTROL_URL` is set, or when `instance.json` names a live pid (`kill -0`) whose `/health` answers `service=loki-control` within 300 ms. It never starts a server. `LOKI_CONTROL=0` disables discovery.
+- Files:
+  - `loki-ts/src/commands/control.ts`
+  - `packages/control-plane/src/shipper/discover.ts` (new)
+  - `loki-ts/src/e10ext/ship_hook.ts` (at most 8 lines)
+  - `loki-ts/src/engine10/supervisor.ts` (line 189 only, 1-line condition change)
+  - `loki-ts/tests/commands/control_default.test.ts` (new)
+  - `tests/test-control-plane.sh` (update the "ungated" assertion)
+  - `docs/v10/CONTROL-PLANE.md` (sections 5 and 6)
+  - README "Control Plane" section
+- Wall checks:
+  - No `instance.json` gives zero fetch calls (injected fetch).
+  - A stale pid is ignored; a live stub `/health` with the wrong service is ignored; a valid instance gives one ship.
+  - `LOKI_CONTROL=0` gives no discovery.
+  - `instance.json` is mode 0600 and gone after serve exits.
+  - `budget.test.ts` passes (core under 5000, e10ext under 1500).
+- Commands: `cd loki-ts && bun test tests/commands/control_default.test.ts tests/engine10/budget.test.ts && bunx tsc --noEmit`; `bash tests/test-control-plane.sh`
+- CHANGELOG: "The Control Plane is on by default: `loki control serve` needs no flag, and runs on this machine appear in it automatically while it is running."
+- Docs: `docs/v10/CONTROL-PLANE.md` sections 5 and 6, README Control Plane section.
+- Dependencies: none. C3 builds against its `instance.json` contract.
+
+## C3 BASH-FLIPS: bare `loki` opens the Control Plane; workspace gate flips
+- Tier: MEDIUM. Budget: 30 min.
+- Goal:
+  - `cmd_ui` (bare `loki`) and `cmd_dashboard ""|start|open` use the Control Plane by default; `LOKI_CONTROL_DEFAULT=0` restores the old dashboard.
+  - Reuse a live `instance.json` URL; otherwise start `loki control serve` detached, record its PID and print the URL.
+  - Headless (`LOKI_HEADLESS=1`, `LOKI_NO_BROWSER=1` or `--no-open`): print only, never open.
+  - No bun: the old dashboard plus one line naming bun.
+  - `cmd_workspace`: the gate becomes "`LOKI_WORKSPACES=0` disables".
+  - Help lines 1633 and 1786 drop "preview" and "needs".
+- Files:
+  - `autonomy/loki` (`cmd_ui`, `cmd_dashboard` head, `cmd_workspace`, the two help lines only)
+  - `tests/test-ui-bare-loki.sh` (pin the legacy leg to `LOKI_CONTROL_DEFAULT=0`; add a Control Plane leg with a python stub answering `/health` with `service=loki-control`)
+  - `docs/dashboard.md` or the nearest dashboard doc (one paragraph)
+- Wall checks:
+  - Control Plane leg: bare `loki` with `LOKI_NO_BROWSER=1` and a stub `instance.json` prints the stub URL; the logging `open` stub has zero calls.
+  - Legacy leg output unchanged.
+  - No port in 57374-57399 bound (lsof on recorded PIDs).
+  - shellcheck on the changed test; `bash -n autonomy/loki`.
+- Commands: `bash tests/test-ui-bare-loki.sh; bash -n autonomy/loki; shellcheck tests/test-ui-bare-loki.sh`
+- CHANGELOG: "`loki` with no arguments now opens the Control Plane (set `LOKI_CONTROL_DEFAULT=0` for the previous dashboard)."
+- Docs: dashboard doc paragraph.
+- Dependencies: merges on the same train as C2 or one later.
+
+## C4 BLOCKED-RESUME: `loki answer` closes the BLOCKED loop
+- Tier: MEDIUM. Budget: 30 min.
+- Goal:
+  - New `loki answer [<run-id>] [--text "..."]`; default run is the newest BLOCKED run.
+  - Reads the run's task and question from events, and the answer from `--text` or the Control Plane answer file.
+  - Launches `bin/loki "<task>\n\nClarification answering \"<q>\": <a>"` with an explicit env (`LOKI_NO_BROWSER=1`; no `SLACK_*` and no `LOKI_CONTROL_TOKEN`) and prints the new run id.
+  - Refuses a run that is not BLOCKED (exit 2, says why).
+  - The Control Plane `writeAnswer` resume string becomes `loki answer <run>`.
+- Files:
+  - `loki-ts/src/features/blocked_answer.ts` (new, at most 120 lines)
+  - `loki-ts/src/cli.ts` (`answer` case plus the `control` help line)
+  - `packages/control-plane/src/server/answer.ts` (resume string only)
+  - `loki-ts/tests/features/blocked_answer.test.ts` (new)
+  - `packages/control-plane/test/server/answer.test.ts` (resume assertion)
+  - `docs/v10/CONTROL-PLANE.md` ("Answering a BLOCKED run" section)
+  - README "Answering a BLOCKED run" paragraph
+- Wall checks:
+  - A fixture BLOCKED run plus an answer file gives a spawn argv containing the task, question and answer (spawn injected).
+  - The env lacks `SLACK_BOT_TOKEN` and has `LOKI_NO_BROWSER=1`.
+  - A non-BLOCKED run gives exit 2.
+  - The features budget test passes.
+- Commands: `cd loki-ts && bun test tests/features/blocked_answer.test.ts tests/engine10/budget.test.ts && bunx tsc --noEmit`; `cd packages/control-plane && bun test test/server/answer.test.ts`
+- CHANGELOG: "`loki answer` resumes a BLOCKED run with the answer typed in the Control Plane (or `--text`)."
+- Docs: CONTROL-PLANE.md section and README paragraph above.
+- Dependencies: CLI reachability via C5 (unit tests independent).
+
+## C5 ROUTING: shim entry points for D65 features
+- Tier: MEDIUM. Budget: 20 min.
+- Goal:
+  - The `bin/loki:570` Bun allowlist gains `slack|answer`.
+  - v10 routing (top level and the `start` case) gains `jira:*|linear:*|https://linear.app/*/issue/*`.
+- Files:
+  - `bin/loki`
+  - `tests/test-d65-routing.sh` (new, `timeout -k`)
+  - `tests/run-all-tests.sh` (one `run_test` row)
+  - `tests/shard-durations.tsv` (one row)
+- Wall checks:
+  - With a probe bun that echoes argv: `loki slack serve` and `loki answer x` reach `cli.ts`; `loki jira:ABC-1`, `loki linear:ENG-2` and a Linear URL reach `engine10`; one-word `loki foo` stays legacy.
+  - Real-CLI leg: `loki jira:ABC-1` with no `JIRA_*` env exits non-zero in under 5 s, names `JIRA_BASE_URL`, and the stub claude logs zero calls.
+  - `tests/test-shard-coverage.sh` and shellcheck pass.
+- Commands: `bash tests/test-d65-routing.sh; bash tests/test-shard-coverage.sh; shellcheck bin/loki tests/test-d65-routing.sh`
+- CHANGELOG: "`loki jira:KEY`, `loki linear:KEY`, Linear issue URLs and `loki slack serve` now reach the Loki 10 engine directly."
+- Docs: none beyond C6 and C7 docs.
+- Dependencies: none. Merge early; C4, C6, C7, C11a, C11b CLI-level checks rely on it.
+
+## C6 SLACK: two-way Slack polished and on by default
+- Tier: MEDIUM. Budget: 25 min.
+- Goal:
+  - Inbound defaults on; `LOKI_SLACK_INBOUND=0` disables.
+  - With no `SLACK_BOT_TOKEN` or `SLACK_SIGNING_SECRET`: one line naming both, exit 2, nothing bound.
+  - The launcher spawns `REPO_ROOT/bin/loki` (not `argv[1]`) with an explicit env that strips both Slack secrets and sets `LOKI_NO_BROWSER=1`.
+  - The poster logs an HTTP failure as one redacted line.
+  - Outbound unchanged: no webhook, no call.
+- Files:
+  - `loki-ts/src/features/slack_inbound.ts`
+  - `loki-ts/tests/features/slack_inbound.test.ts`
+  - `docs/slack.md`
+  - README Slack paragraph (around line 173)
+- Wall checks:
+  - No credentials: exit 2 and `Bun.serve` never called (injected).
+  - Spawn argv[0] ends in `bin/loki`; env lacks both Slack secrets.
+  - Signed `url_verification` returns the challenge; a bad signature returns 401.
+  - BLOCKED (exit 4) posts the question; a thread reply relaunches with the clarification.
+  - `LOKI_SLACK_INBOUND=0` gives exit 2 with the disabled line.
+- Commands: `cd loki-ts && bun test tests/features/slack_inbound.test.ts && bunx tsc --noEmit`
+- CHANGELOG: "Two-way Slack is on by default: with a bot token and signing secret, `@loki <task>` in a thread starts a run and a BLOCKED question is answered in the same thread."
+- Docs: `docs/slack.md`, README Slack paragraph.
+- Dependencies: CLI reachability via C5.
+
+## C7 TRACKERS: Jira and Linear intake polish
+- Tier: MEDIUM. Budget: 20 min.
+- Goal:
+  - `LOKI_TRACKER_INTAKE=0` kill switch (`parseTrackerRef` returns null).
+  - Self-hosted Jira: `<JIRA_BASE_URL>/browse/KEY` parses when its origin equals `JIRA_BASE_URL`.
+  - Error text names the exact variables per tracker (the one fix).
+  - Linear: `errors[]` with no data, or HTTP 401, names `LINEAR_API_KEY`.
+  - Intake only; no sync claims.
+- Files:
+  - `loki-ts/src/features/tracker_intake.ts`
+  - `loki-ts/tests/engine10/tracker_intake.test.ts`
+  - `docs/trackers.md` (new)
+  - README "Issue intake" paragraph
+- Wall checks:
+  - Injected fetch only; zero network.
+  - Self-hosted URL parses only when `JIRA_BASE_URL` matches, else null.
+  - Kill switch gives null.
+  - Missing credentials: message names the variable.
+  - ADF fixture output unchanged.
+- Commands: `cd loki-ts && bun test tests/engine10/tracker_intake.test.ts && bunx tsc --noEmit`
+- CHANGELOG: "Jira (cloud and self-hosted) and Linear issues start a Loki 10 run with `loki jira:KEY` or `loki linear:KEY`, using credentials from the environment only."
+- Docs: `docs/trackers.md`, README Issue intake paragraph.
+- Dependencies: CLI reachability via C5.
+
+## C8 WORKSPACES: multi-repo parity and the flag flipped
+- Tier: MEDIUM. Budget: 30 min.
+- Goal:
+  - `enabled()` defaults on; `LOKI_WORKSPACES=0` disables.
+  - Repos with no pending `after` run in parallel, bounded by `concurrency` (default 2).
+  - Add `show <ws>` and `status [<run>]`, reading `integration.json`.
+  - Exit 3 when the only non-ok outcomes are budget stops (child exit 3); 1 otherwise.
+  - SIGINT handled like SIGTERM (killpg on recorded PIDs).
+- Files:
+  - `autonomy/lib/workspace.py`
+  - `tests/test_workspace.py`
+  - `tests/workspace/50-run.sh` (new part, auto-sourced by the registered `tests/test-workspace.sh`)
+  - `docs/WORKSPACES.md`
+  - `docs/v10/D51-PHASE-B.md` (status block)
+  - `tests/docs-drift-allowlist.tsv` (remove rows 44-46; the commands now exist)
+- Wall checks (stub launcher):
+  - Two independent repos overlap in time (start timestamps).
+  - The `after` dependent starts after its predecessor; a failed predecessor makes it SKIPPED.
+  - All children exiting 3 gives group exit 3.
+  - `status` prints per-repo rows.
+  - `LOKI_WORKSPACES=0` gives exit 2.
+  - The docs drift guard passes.
+- Commands: `python3 -m pytest tests/test_workspace.py -q && bash tests/test-workspace.sh` plus the suite that reads `docs-drift-allowlist.tsv`
+- CHANGELOG: "Multi-repo workspaces are on by default: `loki workspace run <ws> <ref>` runs each repo in parallel, respects `after` ordering and records integration evidence."
+- Docs: `docs/WORKSPACES.md`, `docs/v10/D51-PHASE-B.md`.
+- Dependencies: the bash gate flip is in C3; `workspace.py` is gated independently, so either order works.
+
+## C9 MCP: v10 tools wired into CI and documented
+- Tier: MEDIUM. Budget: 20 min.
+- Goal:
+  - `mcp/tests/test_v10_tools.py` runs in CI through the existing `tests/test-mcp-server.sh` (no new runner row).
+  - `_env()` forces `LOKI_NO_BROWSER=1` and drops `LOKI_CONTROL_TOKEN` and the Slack secrets.
+  - `v10_status` returns `blocked_question` when the verdict is BLOCKED.
+  - `v10_run` passes `jira:` and `linear:` refs through; the leading-dash guard stays.
+- Files:
+  - `mcp/v10_tools.py`
+  - `mcp/tests/test_v10_tools.py`
+  - `tests/test-mcp-server.sh`
+  - `docs/mcp.md` (or the existing MCP doc)
+  - README MCP section (with the `claude mcp add` line)
+- Wall checks:
+  - pytest green.
+  - The suite counts the v10 tests (positive control: one deliberately failing assert, run locally, turns the suite red).
+  - Child env has no secrets.
+  - A BLOCKED fixture returns the question.
+  - `tests/test-mcp-tool-surface-packaged.sh` still lists all three tools.
+- Commands: `python3 -m pytest mcp/tests/test_v10_tools.py -q && bash tests/test-mcp-server.sh && bash tests/test-mcp-tool-surface-packaged.sh`
+- CHANGELOG: "The MCP server's `loki_v10_run`, `loki_v10_status` and `loki_v10_verify` tools are tested in CI and report a BLOCKED run's question."
+- Docs: MCP doc, README MCP section.
+- Dependencies: none.
+
+## C10 CONTAINERS: image, Helm and ECS aligned with token auth
+- Tier: MEDIUM (the reviewer reads C1). Budget: 20 min.
+- Goal:
+  - Dockerfile: drop the "no authentication" comment; document that `LOKI_CONTROL_TOKEN` is required on `0.0.0.0`.
+  - Helm: `controlToken.existingSecret` required, failing at template time when unset (`required`), unless `allowInsecureBind: true` sets `LOKI_CONTROL_ALLOW_INSECURE_BIND=1`.
+  - ECS: already maps the token; README states it.
+- Files:
+  - `Dockerfile.control-plane`
+  - `deploy/helm/control-plane/**`
+  - `deploy/ecs/**`
+  - `docs/control-plane-container.md`
+  - `packages/control-plane/test/deploy/container.test.ts`
+- Wall checks (static, no helm or docker needed):
+  - The deployment template references the `LOKI_CONTROL_TOKEN` `secretKeyRef` and a `required` guard.
+  - The ECS task carries `LOKI_CONTROL_TOKEN` via `valueFrom`.
+  - Dockerfile has `USER loki`, a HEALTHCHECK on `/ready`, and no "no authentication" text.
+  - If `helm` is on PATH: `helm template` without the secret fails and with it succeeds. Otherwise the test prints SKIP (helm absent) and never passes silently.
+- Commands: `cd packages/control-plane && bun test test/deploy/`
+- CHANGELOG: "The Control Plane container, Helm chart and ECS task now require an access token whenever the service is exposed beyond localhost."
+- Docs: `docs/control-plane-container.md`, `deploy/helm/README.md`, `deploy/ecs/README.md`.
+- Dependencies: ships on the same train as C1 or later, never before.
+
+## C11a E2E-HARNESS: hermetic `npm pack` E2E, legs 1-4
+- Tier: MEDIUM. Budget: 30 min.
+- Goal: `scripts/e2e-d65.sh`
+  - `npm pack`, install into a temp prefix under a run-owned dir (`loki_run_tmp_create` pattern) with a throwaway `HOME` and `npm_config_cache`.
+  - Stub `claude` on PATH (reuse the `first-run-gate.sh` stub shape; writes only on a real `-p` call).
+  - `LOKI_E10_INVOKER=cli`, `LOKI_CLAUDE_CLI=<stub>`, `LOKI_NO_BROWSER=1`, `GIT_CONFIG_GLOBAL=/dev/null`; no `*_API_KEY` or `*_TOKEN` (`env -i` plus an allowlist).
+  - Sources `scripts/e2e-d65/legs/*.sh`; prints one `PASS|FAIL|SKIP(<reason>)` per leg; exit 0 if and only if there is no FAIL.
+  - `E2E_FORCE_FAIL=<leg>` is a positive control.
+- Legs:
+  - 1 D61 speed: `LOKI_SPEED=1` on a 2-file fixture task; receipt exists.
+  - 2 Visual evidence: no Playwright gives a NOT PROVEN line, not a failure.
+  - 3 Control Plane: `serve --port 0` (recorded PID); a run ships via `instance.json`; GET `/v1/runs` has at least one row; POST `answer` on the BLOCKED fixture returns 200.
+  - 4 Slack: `serve --port 0` with fake secrets; signed `url_verification` returns the challenge; bad signature returns 401; nothing outbound.
+- Files:
+  - `scripts/e2e-d65.sh` (new)
+  - `scripts/e2e-d65/legs/01-speed.sh`, `02-visual.sh`, `03-control.sh`, `04-slack.sh` (new)
+  - `scripts/e2e-d65/stub-claude.sh` (new)
+- Wall checks:
+  - shellcheck clean.
+  - A run on the current tree exits 0, or each FAIL names a bug.
+  - `E2E_FORCE_FAIL=3` gives exit 1.
+  - Afterwards no recorded PID is alive and the run dir is removed.
+- Commands: `bash scripts/e2e-d65.sh` (timeout 10 min); `shellcheck scripts/e2e-d65.sh scripts/e2e-d65/*.sh scripts/e2e-d65/legs/*.sh`
+- CHANGELOG: none (tooling); C11b documents it in `docs/v10/E2E-D65.md`.
+- Dependencies: final run after C1-C10 merge; leg 3 needs C2, leg 4 needs C5 and C6.
+
+## C11b E2E-LEGS: legs 5-9 and the results doc
+- Tier: MEDIUM. Budget: 30 min.
+- Legs:
+  - 5 Jira: `jira:ABC-1` against a local fake `JIRA_BASE_URL=http://127.0.0.1:<port0>` gives a run whose `issue.json` has `source=jira`; with no credentials it exits fast naming the variable.
+  - 6 Spec to contract: a `.loki/contract.json` fixture gives a receipt containing the contract section.
+  - 7 Multi-repo: two local git repos in `loki.yaml` give two runs plus `integration.json`.
+  - 8 MCP: `python3` imports `mcp.v10_tools` from the installed package; `v10_status` then `v10_verify` on leg 6's repo.
+  - 9 Containers: deploy files exist in the repo; if `docker` is on PATH and the daemon answers, build `Dockerfile.control-plane` and probe `/ready` on a random host port; otherwise SKIP(docker unavailable), never PASS.
+- Results doc: append section 6 "Stub E2E (`scripts/e2e-d65.sh`)" to `docs/v10/E2E-D65.md` with version, date, per-leg table (exit codes, seconds), the note that BUG-2 is resolved by `LOKI_E10_INVOKER=cli`, and which legs SKIP and why.
+- Files:
+  - `scripts/e2e-d65/legs/05-jira.sh`, `06-contract.sh`, `07-workspaces.sh`, `08-mcp.sh`, `09-containers.sh` (new)
+  - `docs/v10/E2E-D65.md`
+- Wall checks: as C11a, plus every leg is cited with its rc line in the doc.
+- Commands: `bash scripts/e2e-d65.sh` (with the C11a harness)
+- CHANGELOG: none (tooling).
+- Docs: `docs/v10/E2E-D65.md`.
+- Dependencies: C11a harness; leg 5 needs C5 and C7, leg 7 needs C8, leg 8 needs C9, leg 9 needs C10.
+
+## C12 STUB-INVOKER (optional; drop if fix-e2e-bugs already owns BUG-2)
+- Tier: MEDIUM. Budget: 15 min.
+- Goal: setting `LOKI_CLAUDE_CLI` implies `LOKI_E10_INVOKER=cli`, so a stub path alone drives v10. Core edit at most 3 lines.
+- Files:
+  - `loki-ts/src/engine10/session.ts` (around line 39 only)
+  - `loki-ts/tests/engine10/session_invoker.test.ts` (new)
+  - `docs/v10/FIRST-RUN-GATE.md` (one line)
+- Wall checks:
+  - `LOKI_CLAUDE_CLI` set: env has no `LOKI_SDK_LOOP`.
+  - Unset: unchanged (`LOKI_SDK_LOOP=1`).
+  - Budget test passes.
+- Commands: `cd loki-ts && bun test tests/engine10/session_invoker.test.ts tests/engine10/budget.test.ts`
+- CHANGELOG: "Setting `LOKI_CLAUDE_CLI` now selects the Claude CLI invoker, so a stub or custom `claude` binary drives Loki 10 directly."
+- Docs: `docs/v10/FIRST-RUN-GATE.md`.
+- Dependencies: none; C11a works without it.
+
+---
+
+## Ordering and parallelism
+All 12 cards can start now; file sets do not overlap. C1 (HIGH, opus reviewer) is the critical path and goes on the first train; C10 ships on the same train or later. C5 merges early because the CLI-level checks of C4, C6, C7 and both E2E cards reach their commands through it. C2 and C3 together make the Control Plane the default; they build in parallel against C2's `instance.json` contract, and C3 merges on the same train as C2 or one later. C11a and C11b start in parallel, but the final E2E runs only on a tree containing C1-C10. C12 goes only if fix-e2e-bugs has not fixed BUG-2. With 8 engineers: C1, C5, C2, C6, C7, C8, C9, C4 first; then C3, C10, C11a, C11b, C12 as seats free. Only C1 needs the HIGH review.

package/docs/v10/DECISIONS.md

@@ -515,3 +515,47 @@ The D61 decomposer (125 lines) does not fit: engine10 core is at 4,993 of its 5,
 - D34 and D38 are unchanged. lg- and tier "large" mean only real upstream PR tasks. measure-size.py runs over every task with no name exclusion, and a test proves an unsized lg- task fails it.
 - Speed-tier results measure decomposer choice and wall-time ratio only. They are never published as large-tier, "any size" or completion-at-scale claims.
 - The LOKI_SPEED default flips only when D61 section 5 B and 5 C hold on the speed tier and LOKI_SPEED=1 is no worse than LOKI_SPEED=0 on completion, p50 wall and tokens per completed across the real medium tasks and any D34 large tasks on main, at 2 runs per arm. A loss on any axis keeps the default off.
+
+## D68: D65 12-hour mandate (founder, about 03:00Z 2026-10-03, relayed by autonomi-dev-76)
+- Founder's words: "steer with highest velocity for releasing asap everything to complete all implementation roadmap within this time.. no excuses". Deadline 15:00Z 2026-10-03; work continues after it.
+- Goal: every D63 item released to npm latest with flags ON and documented. An item whose opus D12 review has not passed ships flags-off and is named in the handoff.
+- The per-hour governor pace is lifted for 12 hours. The only usage floor is 85% of the week on live /usage (03:01Z reading: 46%). Builders scale with CI and machine load. train-cycle runs every 10 to 15 minutes; red slices are dropped, never held.
+- Unchanged: CI gates (no waivers), no stored credentials read (real-model E2E legs stay parked), P9 rerun once in full with the new diagnostics, never added to pending.txt.
+- Every release carries a CHANGELOG sentence, README and docs in the same slice, and a version report to the peer. docs/v10/MORNING-BRIEF-1003.md is written at 14:30Z (60 lines max).
+
+## D69: no founder waits (founder, about 03:05Z 2026-10-03, relayed by autonomi-dev-76)
+- Founder's words: "lokimode session should never prompt me or wait for me for anything ... complete all work with chief of staff and software factory it is".
+- The Chief of Staff and the CTO role decide every call that would go to the founder: product, scope, ordering, D12 sign-offs through the opus reviewer, and flag flips. Each decision is logged here with its rationale so the founder can reverse it.
+- Anything only the founder can physically do (credentials, licensing, external accounts, posting as himself) becomes a non-blocking FOUNDER-QUEUE.md row; work goes around it.
+- Safety rules are not founder waits and still hold: CI gates, no stored keys read, never kill by pattern, the Never list, and repo configuration (CLAUDE.md, .claude/settings.json) is not edited on a relayed request.
+
+## D70: contract and visual evidence default ON (Chief of Staff and CTO role, 03:08Z 2026-10-03, under D68 and D69)
+- The opus D12 HIGH re-review (af6ddde5) approved both after reproducing C1 and B1-B3 on the pre-fix parent and showing them fixed. D68 asks for flags on once D12 passes.
+- LOKI_CONTRACT and LOKI_VISUAL_EVIDENCE default to on; `=0` turns each off. Contract only acts when .loki/contract.json exists. Visual evidence only acts when Playwright is present and pages changed, inside its 25s budget, and otherwise writes a NOT PROVEN line, never a failure.
+- Rationale: both fail closed or advisory (neither can raise a verdict to VERIFIED); the remaining should-fixes (D65-SPEC-F1, D62-VIS-F1, D65-SPEC-F2) are non-blocking and build in parallel. Reverse by setting the defaults back to off.
+
+## D71: D61 parallel-units code lives under loki-ts/src/features/speed (CTO role, 03:08Z 2026-10-03)
+- Core engine10 measures 4936 lines against the 5000 cap (D29, D33, D42), so 64 lines remain. The cap is a gate and is not raised.
+- New D61 modules (decompose check, unit mode, integrator, group seal helpers, group output) go under loki-ts/src/features/speed/ (features budget 3000, 993 used). Each slice may add at most 10 lines of hook code to core engine10; the wave's total stays under 60, and structural-checks.sh must pass on every merge.
+- engine10/decompose.ts (slice 8) stays where it is.
+
+## D72: drop D63-C12 (stub invoker via LOKI_CLAUDE_CLI alone) (CoS with CTO, 04:13Z 2026-10-03)
+- Opus HIGH review blocked 7a83f2fa8: setting LOKI_CLAUDE_CLI alone switches to the CLI invoker, so a paid run records $0 with source "cli-invoker-unmetered", and supervisor.ts disagrees with the receipt. That breaks cost honesty in the receipt.
+- The card marked C12 optional, and an explicit LOKI_E10_INVOKER=cli already selects the CLI invoker for the stub-provider gate. Dropping it costs no user capability.
+- C11b and the D65 stub E2E use LOKI_E10_INVOKER=cli explicitly. Row set to rejected; no founder input needed (D69).
+
+
+## D60-5 addendum: INTEL-2 closed (visible cost cap)
+The $20.00 default per-run cap stays. It is a hard stop on priced sessions only; lower it with one line in loki.yaml (`budgets.per_run`) or `--max-cost`. Every v10 start line shows the cap and its source (`--max-cost`, `loki.yaml` or `default`). A run that reaches it ends BUDGET_STOP with exit 3. Unpriced sessions (subscription or local providers) never count, so the cap never fires on a guess. Proven end to end through the CLI for the flag, the yaml key and flag-over-yaml precedence (loki-ts/tests/engine10/budget_stop_e2e.test.ts, commit 0cc189106). The typical cost of a fast run has not been measured yet; the default is not justified by a run-cost figure.
+
+## D73: drop D61-12 (integrator) from the 10-03 window (CoS with CTO, 04:47Z 2026-10-03, under D68 and D69)
+- Round 8 opus review of 35a7b0c32 reproduced four cases (C1-C4) and one regression (S3) where a unit's change is missing from HEAD while the group reports merged and ready, plus a false failure on a mode-only change (E6). Probe: scratchpad rev-d61-12-r8/r8.test.ts.
+- Round 8 was declared final. Eight rounds on a HIGH Seal-adjacent surface without convergence means the per-path containment design needs rework, not another patch.
+- D61-12 is parked. D61 ships without an integrator: parallel units stay behind their flag and the integrator is not in the shipped feature set. Named in the handoff as not shipped.
+- Next window: redesign around per-resolution-commit containment (B at R^1, X at R, H at HEAD) and a revert guard for covered units, as the reviewer proposed.
+
+
+## D74: gitleaks job timeout 15 -> 30 min (CoS under D69, 07:25Z 2026-10-03)
+- Evidence: the gitleaks full-history scan took 8-15 min on trains 83-87 and was cancelled at the 15 min limit on trains 86, 88, 89 and 90 ("gitleaks scan (all reachable history) ##[error]The operation was canceled", run 37104195817 attempt 2). Every other Security Audit job passed.
+- Decision: raise timeout-minutes to 30. Same scan, same config, same blocking posture; nothing is narrowed or skipped, so this is not a gate weakening.
+- Follow-up slice: make the scan scale (incremental scan against a reviewed baseline commit) before history doubles again. Any change to scan scope needs a CTO pass.

package/docs/v10/E2E-D65.md

@@ -85,3 +85,31 @@ grep -rIl -E 'sk-ant-|oat01-' "$HOME/loki-ci-logs/real-repo-gate-e2e.logs" || ec
 ```
 
 Pass criteria per repo are in `scripts/real-repo-gate.repos` (expected outcome, allowed diff paths, max seconds); evidence to record for the log: exit code, wall seconds, Outcome line, receipt path, `loki verify` verdict.
+
+## 6. Stub E2E (`scripts/e2e-d65.sh`)
+
+Hermetic run on loki-mode 10.6.8 (tree 158d977ba plus the C11b legs), 2026-10-03. The script runs `npm pack`, installs the tarball into a run-owned temp prefix (throwaway `HOME` and npm cache), puts a stub `claude` on PATH and drives the INSTALLED `loki` under `env -i` with an allowlist: no `*_API_KEY`, no `*_TOKEN` (only fake values such as `JIRA_API_TOKEN=e2e-fake-token`). Command: `LOKI_NO_BROWSER=1 timeout 600 bash scripts/e2e-d65.sh`; total 19 s, script rc=1 (two FAIL legs, both named product bugs below).
+
+BUG-2 (the v10 engine ignored the stub `claude`) is resolved by `LOKI_E10_INVOKER=cli` plus `LOKI_CLAUDE_CLI=<stub>`, which the harness sets for every leg: legs 1, 2, 5 and 6 each produced a receipt with run rc=0 and no `Not logged in`.
+
+| Leg | Result | Wall | rc line (from the run) |
+|---|---|---|---|
+| 1 D61 speed | PASS | 1 s | `loki quick rc=0 run=e10-20261003T053414Z-f543` |
+| 2 Visual evidence | PASS | 1 s | `loki quick rc=0 run=e10-20261003T053416Z-13df`; NOT PROVEN line present |
+| 3 Control Plane | PASS | 1 s | `blocked run rc=4 run=e10-20261003T053417Z-a324`; `POST answer ... -> 200` |
+| 4 Slack | PASS | 1 s | signed `url_verification` returned the challenge; bad signature 401; no outbound connection |
+| 5 Jira | PASS | 1 s | `loki quick jira:ABC-1 rc=0 run=e10-20261003T053418Z-d497`, `issue.json has source=jira`; `no-credentials rc=2 in 0s`, names `JIRA_EMAIL`/`JIRA_API_TOKEN` |
+| 6 Spec to contract | PASS | 1 s | `loki quick rc=0 run=e10-20261003T053419Z-7afd`; receipt has the `contract` section with AC-1 |
+| 7 Multi-repo | FAIL | 1 s | `loki workspace run rc=2`, `receipts=0 integration.json=none` (BUG-5) |
+| 8 MCP | PASS | 0 s | `python rc=0`; `v10_status` done/VERIFIED, `v10_verify` `exit_code` 0 on leg 6's repo |
+| 9 Containers | FAIL | 3 s | deploy files present; docker daemon answered; `docker build` failed (BUG-6) |
+
+SKIP legs: none in this run. Leg 8 would SKIP if leg 6 had not produced a run, and leg 9 SKIPs with `SKIP(docker unavailable)` when `docker` is missing or `docker info` does not answer within 10 s; it never passes without a real `/ready` 200 probe on a random host port.
+
+Positive control: `E2E_LEGS=6 E2E_FORCE_FAIL=6 bash scripts/e2e-d65.sh` prints `FAIL leg 6 ... forced by E2E_FORCE_FAIL=6 (positive control)` and exits 1. After each run the recorded PIDs (control-plane servers, the fake Jira `http.server`, the Slack proxy trap) are stopped by PID and the run directory is removed; nothing outside the run dir was touched.
+
+New bugs found by this run (product code is not changed by this slice):
+
+BUG-5 (P1, packaging): the npm package omits `schemas/`, so `loki workspace` fails on every installed copy. `package.json` `files` has no `schemas/` entry, while `autonomy/lib/loki_yaml.py:23` reads `schemas/loki-yaml.schema.json` relative to the package root. Repro: install the tarball, put a `workspaces:` block in `loki.yaml`, run `loki workspace run <name> <task>`; output `workspace: cannot read loki.yaml: [Errno 2] No such file or directory: '.../node_modules/loki-mode/autonomy/lib/../../schemas/loki-yaml.schema.json'`, rc=2. Leg 7 stays FAIL until `schemas/loki-yaml.schema.json` ships; the two-runs and `integration.json` assertions were therefore not reached.
+
+BUG-6 (P1, container): `Dockerfile.control-plane` cannot build. Its build stage copies only `packages/control-plane/`, but `packages/control-plane/src/server/ingest.ts:3` and `:5` import `../../../../loki-ts/src/engine10/events.ts` and `../../../../loki-ts/src/util/redact.ts`. Repro: `docker build -f Dockerfile.control-plane .` fails at `RUN bun run build:all` with `error: Could not resolve: "../../../../loki-ts/src/engine10/events.ts"` and `.../util/redact.ts`. The `/ready` probe was therefore not reached and leg 9 is FAIL, not PASS.

package/docs/v10/PROGRESS.md

@@ -1911,3 +1911,66 @@ The swarm is stopped: .loki/V10-STOP exists, the loop has no wake-ups, and the c
 - D62 (resume now) and D63 (roadmap, docs/v10/ROADMAP-D63.md) recorded and pushed (main 49a940d81). D64 (max pace, all Vorflux rows) arrived at 00:20Z and was withdrawn at 00:25Z; recorded as WITHDRAWN, no builder started.
 - Building (sonnet, worktrees): D61-17 large eval tier, D61-01 pre-model timer, D61-08 decomposer, D62-FIX (action.yml to Loki 10 plus real BUDGET_STOP exit 3 test). Ready next: D61-02, D61-07, D62-VIS, D62-JIRA.
 - Governor: weekly projected 57.4% at 01:55Z; pace target about 0.5% of the week per hour at 4 engineers.
+
+## 2026-10-03T03:04Z Train 82 in CI; HIGH re-review APPROVES contract and visual evidence
+- Train 82 (e072e47a9) carries every D61, D62 and D65 slice from trains 80 and 81 plus fixes: CI fixes dc1fa634f, contract spawn env 32b9db508, visual evidence B1-B3 e035e9929, P9 diagnostic capture e3b353e7a. Local gates: bun test 2905 pass 0 fail, dist guard 13/0, moat rc=0.
+- CI on train/82 so far: Bun Parity, First-run gate, Tier A, Coverage (baseline) success; Tests and Security Audit running.
+- HIGH re-review (opus, af6ddde5): APPROVE both. C1 and B1-B3 each reproduced on the pre-fix parent and shown fixed. Its release-gate item (stale dist) is already met: e072e47a9 dist contains "seal aborted", "keyword_match", "contract trace failed" (1 each) and no "untraced: " line.
+- Five non-blocking should-fixes filed as D65-SPEC-F1, D65-SPEC-F2 (HIGH, design) and D62-VIS-F1.
+- LOKI_CONTRACT and LOKI_VISUAL_EVIDENCE stay default off; flipping them is a separate decision.
+- Reviewer incident: a failed cd ran `loki contract` in the main checkout and wrote .loki/contract.json (gitignored); the reviewer removed it, confirmed absent at 03:04Z.
+
+## 2026-10-03T03:20Z train/83 red, P0-D66-FENCE
+- train/83 (1a63ad156) Coverage (baseline) failure: run 37092508809, `features size and import budget (D66)` fails on "speed/lean_select.ts imports ../../engine10/stages/plan.ts without a whole-statement 'import type'" (local repro: `bun test tests/engine10/budget.test.ts` 26 pass 1 fail).
+- Cause: D61-03 (999ea6af3) value-imports selectRelevantFiles from stages/plan.ts. Fix-forward slice P0-D66-FENCE dispatched (dependency injection, test untouched). Train 83 will not release; train 84 carries the fix.
+- Guard gap: the D61-03 engineer and TL did not run budget.test.ts. Every features/ slice prompt now names it as a required command.
+- Dispatched D63 cards C1 (HIGH), C2, C5, C8, C9, C12 and D61-10-F1; reviews: D61-04 (opus), D61-12 re-review (opus).
+
+## 2026-10-03T03:56Z v10.6.8 released, train 85 staged, train 86 reviewed
+- v10.6.8 released from main d95095d9d (train/82 tree e072e47a9; Tests, Bun Parity, Coverage, Security Audit, First-run green on that SHA). Peer told; D49 auto-promote pending (npm latest 10.6.7 at 03:46Z).
+- train/84 (b45cc902e, carries P0-D66-FENCE) CI running.
+- Train 85 on local main 52c3b0e02: C5, C9, C7, D61-10-F1, D61-16, C4 plus dist (dist guard 13/0). local-ci fast tier hit the 590s cap (rc 124) after 76 PASS, 0 FAIL, bun test PASS; train CI is the authority.
+- Train 86 fully reviewed: C2 00f6741d9 (opus) + C2-F 3177c28ba + C2-F2 3fca6590d (TL, preload mutation goes red), C3 e41381751 + C3-F 362e9c501 (TL, 20/0), C11a 50a75bcfa (TL; legs 1-2 PASS, positive control rc 1).
+- D61-12 round 4 opus BLOCK (B3: repo filter driver fooled the fresh verify checkout). Round 5 630772f97 fixes B3, N1, N5, N7 (integrate tests 68/0); opus round 5 running.
+- In review: C6 (HIGH), C1 (HIGH), C8, C12 (HIGH), D61-04, D61-11, D61-13, D61-16-F, VIS-F1. Next: BUG-C (slack --port 0) after C6, C10 after C1, C11b after train 86.
+
+## 2026-10-03T04:13Z Train 85 pushed (2cc94a548), C1 approved, C12 dropped
+- Train 84 went stale behind the v10.6.8 release commit (train-cycle B: TRAIN_STALE); merged origin/main into local main (dist conflict resolved by rebuild, dist guard 13/0) and pushed train/85 (train-cycle A: TRAIN_PUSHED).
+- Train 85 carries C2, C3, C4, C5, C7, C9, C11a, D61-10-F1, D61-16, D61-16-F (opus APPROVE round 3) and C8 (TL APPROVE). Main moat on bf3e42066: 4 of 9, rc 0. Local-ci hit the 590s cap at 43 PASS, 0 FAIL.
+- C1 round 2 opus APPROVE (7ca8f9832); held until C10 so the Dockerfile and Helm chart do not exit 2 on a tokenless 0.0.0.0 bind. C10 builder dispatched on top of C1.
+- C12 dropped (D72). D61-12 round 6 BLOCK; round 7 fix running. Opus round 2 reviews running for D61-04, D61-13, C6, D61-11.
+- Deferred cleanup (no compound rm mid-window): review scratch dirs rev-d61-16-f-r3, rev-d61-12-r6, and 12 git-home dirs leaked by the D61-12 tests (reviewer removed 2 it owned).
+
+
+## 2026-10-03T04:40Z CoS tick
+- Train 85 Tests red twice in full (run 37095579466): control_default "serve needs no flag; instance.json is 0600" times out on ubuntu only (passes on macOS 13/0). Real cause, so P0-CONTROL-LINUX dispatched (D68). Train 85 will not promote; train 86 supersedes it once green.
+- Merged to local main: C1, C10, INTEL-2, C6, C6-F (TL APPROVE e8837ffa4), D61-13 (opus r3 APPROVE a2c3d9cb2); dist 7ad4a44e9.
+- Core engine10 at 5001 after D61-13 (budget.test needs < 5000): P0-CORE-BUDGET dispatched. Train 86 waits on it and on P0-CONTROL-LINUX.
+- D61-04 r3 BLOCK (live-tree read), r4 fix 9d2bbf4b9 in opus review. D61-12 r7 BLOCK, r8 fix 35a7b0c32 in opus review (final round, else drop). P0-VERIFY-ARG r2 BLOCK (core budget, unguarded unknown-option check, autonomy/loki routes --pubkey= to legacy), r3 fix running. D61-11 r3 fix running.
+- Deferred cleanup adds: scratchpad rev-d61-04-r3, rev-d61-12-r7, rev-d61-13-r3; 13 pre-existing loki-run.git-home-* dirs in TMPDIR (record exact list at end-of-window pass).
+
+## 2026-10-03T04:57Z CoS tick
+- D73 logged: D61-12 integrator dropped from this window (r8 reproduced C1-C4, S3, E6); D61 ships without it, flag-gated, named in handoff. BOARD a1f83c7a9.
+- Merged to local main: D51-B11 (933ecc9fc, test-workspace 14/0), D51-B05/B06 (c1095889f, backlog 49/0, api_start_prep 2 passed). D51-B02/03/04/07/08/09/10/12 parked as already delivered (99aaa6d2b).
+- P0-CONTROL-LINUX opus APPROVE: root cause reproduced in oven/bun:1.3.13 (repo-root node_modules disables bun auto-install, hono missing); npm tarball uses bundled dist/server.js so no runtime fetch. Cherry-picked 2d6e4a77d, dist 377871c88, dist guard 13/0.
+- Train 86 now waits only on P0-CORE-BUDGET TL verdict. In flight: P0-VERIFY-ARG r3 opus, D61-04 r5 fix, D61-11 test fix, P1-DISCARD-PROTO build (HIGH), D50-F4b build.
+- Deferred cleanup adds: scratchpad rev-d61-04-r4, rev-d61-12-r8.
+
+## 2026-10-03T05:27Z tick (CoS)
+- Merged to local main since 04:57Z: P0-VERIFY-ARG (dist 7bfa73a64), P1-DISCARD-PROTO (dist 4d8d1db59), D50-F4b (dist 159abf6d6), D61-04 off-path already-done check under LOKI_SPEED=1 (dist 588658b36, main bun test 1338/0 on rerun after one load flake). Core budget now passes on main, so train 86 no longer waits on P0-CORE-BUDGET.
+- Train 86 first push failed: gitleaks github-pat on the synthetic token fixture tests/workspace/80-comment.sh:7 (D51-B11). Fingerprint baselined with a reason line in .gitleaksignore (acb4ee58f). Rerun: TRAIN_PUSHED train/86 at acb4ee58f, 05:25:53Z; CI pending.
+- In flight: P0-CORE-BUDGET TL r2, D61-11 test fix, D61-04-F leak fixes (MEDIUM, new BOARD row).
+- Carry-forward reviewer notes: P0-CONTROL-LINUX wants a frozen-lockfile install for packages/control-plane in CI; D50-F4b invalid-base reason unreachable in supervisor; D61-04 child env carries OLDPWD (informational).
+
+## 2026-10-03T06:15Z tick (CoS)
+- Train 86 red: spawn_env_guard flagged already_done_async.ts (env passed via spread) and the gitleaks shape pin drifted after acb4ee58f. Fixed by P0-SPAWN-ENV-SPEED (env inline, bun suite 3072/0) and the shape pin 3c47d0f1a (31/0).
+- Train 87 (3c47d0f1a) all six checks green (Tests 37101104493, Coverage, Security Audit, Bun Parity, Tier A, First-run). Promoted by SHA to main at 06:14Z (fast-forward from d95095d9d); Phase C waits on main Tests.
+- Incident: train-cycle Phase A pushed train/88 before Phase B evaluated green train/87, and Phase B only looks at the newest train, so a green train was skipped. Promoted 87 by hand with the same RM push Phase B uses. Guard slice wanted: Phase A must not supersede a green unpromoted train.
+- Train 88 (c127f5e9f) pushed: C11b E2E legs 5-9, D65-BUG5 (schemas/ shipped), D65-BUG6 (Dockerfile COPYs), D65-BUG6-G (TL APPROVE, 18/0), D61-04-F.
+- In flight: P0-CORE-BUDGET TL r2, D61-11 test fix. E2E-D65 section 6 table refresh due after train 88.
+
+## 2026-10-03T06:31Z tick (CoS)
+- v10.6.9 released (tag 48dadd05c). Release run all 10 jobs success; publish-npm logged "+ loki-mode@10.6.9" at 06:24:51Z. Registry at 06:30Z still reads latest=next=10.6.8 with no time entry; not announced as latest until npm view shows it (peer finding accepted).
+- Peer finding: `loki serve` is the deprecated alias of `loki api start`, not the Control Plane; docs and help disagreed. D65-UI-NAMING (62b592031) and D65-UI-NAMING-2 (e564d2423, bash fallback honors LOKI_CONTROL=0 and names bun) merged, both TL APPROVE.
+- P0-TC-SUPERSEDE merged (bd686b7c9): train-cycle now holds a green unpromoted train so Phase B promotes it first.
+- Train 88 was cut before the v10.6.9 release commit, so it is not a fast-forward of main. Merged origin/main into local main (7ad91e03f, no conflicts, dist rebuilt unchanged, dist guard 13/0) and pushed train 89 (8576564a7) carrying C11b, D65-BUG5, D65-BUG6, D65-BUG6-G, D61-04-F, P0-TC-SUPERSEDE, D65-UI-NAMING and -2.