loki-mode 11.17.16 → 11.17.17

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: An autonomous software factory that knows what it is supposed to deliver, and proves it did. Use when the user says Loki Mode or asks to build, fix or verify software autonomously.
 ---
 
-# Loki Mode v11.17.16
+# Loki Mode v11.17.17
 
 **Current entry points (Loki 10 engine):** `loki "<task>"`, `loki owner/repo#N` and `loki quick "<task>"` run the Loki 10 engine and end with a signed receipt (`loki verify`). `loki backlog owner/repo --all` runs many issues in parallel. Guide: `docs/v10/GUIDE.md`. The skill instructions below, and `loki start`, describe the previous bash loop. PRD-file starts (`loki start ./prd.md`) and the opencode provider still run on it until FC38-SWEEP ports them; the legacy-engine command and the LOKI_ENGINE switch remain removed. Prefer `loki owner/repo#N` for issues.
 
@@ -483,4 +483,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v11.17.16 | [Autonomi](https://www.autonomi.dev/) flagship product | core skill**
+**v11.17.17 | [Autonomi](https://www.autonomi.dev/) flagship product | core skill**

package/VERSION

@@ -1 +1 @@
-11.17.16
+11.17.17

package/completions/_loki

@@ -155,7 +155,7 @@ function _loki {
                         '--private[Create a secret gist when sharing]' \
                         '--hosted[Hosted publishing (coming in R9)]' \
                         '--help[Show help]' \
-                        '1:subcommand:(list show open share)'
+                        '1:subcommand:(list show open share badge md bundle)'
                     ;;
                 completions)
                     _arguments '1:shell:(bash zsh install)'
@@ -186,6 +186,7 @@ function _loki {
                         '--sign-deploy[Sign a loki.deploy/1 deploy record in place]:record:_files' \
                         '--receipt[Cited receipt file for a deploy record]:receipt:_files' \
                         '--max-age[Reject a receipt older than DUR]:duration:' \
+                        '--require-exogenous[Exit 4 when a VERIFIED receipt has no agent-independent passing check]' \
                         '--seal-composite[Sign a workspace composite]:run dir:_directories' \
                         '--help[Show help]' \
                         '*:receipt or deploy record:_files'

package/completions/loki.bash

@@ -157,7 +157,7 @@ _loki_completion() {
 
         verify)
             if [[ "$cur" == -* ]]; then
-                COMPREPLY=( $(compgen -W "--base --out --block-on --no-llm --json --explain --check-fresh --max-age --hosted --seal-composite --sign-deploy --receipt --pubkey --help" -- "$cur") )
+                COMPREPLY=( $(compgen -W "--base --out --block-on --no-llm --json --explain --check-fresh --max-age --hosted --seal-composite --sign-deploy --receipt --pubkey --require-exogenous --help" -- "$cur") )
                 return 0
             fi
             ;;
@@ -305,11 +305,11 @@ _loki_completion() {
 
         proof)
             if [[ "$cur" == -* ]]; then
-                COMPREPLY=( $(compgen -W "--yes --private --hosted --help" -- "$cur") )
+                COMPREPLY=( $(compgen -W "--yes --private --hosted --out --help" -- "$cur") )
                 return 0
             fi
             if [[ $cword -eq 2 ]]; then
-                COMPREPLY=( $(compgen -W "list show open share" -- "$cur") )
+                COMPREPLY=( $(compgen -W "list show open share badge md bundle" -- "$cur") )
                 return 0
             fi
             ;;

package/dashboard/__init__.py

@@ -7,6 +7,6 @@ Modules:
     control: Session control helpers (status, atomic writes, origin check)
 """
 
-__version__ = "11.17.16"
+__version__ = "11.17.17"
 
 __all__ = ["__version__"]

package/docs/CLI-REFERENCE.md

@@ -1,6 +1,6 @@
 # CLI reference
 
-Generated from `loki-ts/src/cli/registry.ts` by `scripts/generate-stale-zero.sh` for v11.17.16. Do not edit by hand.
+Generated from `loki-ts/src/cli/registry.ts` by `scripts/generate-stale-zero.sh` for v11.17.17. Do not edit by hand.
 Hidden and legacy-only commands are omitted; see `docs/v10/CLI-MODERN.md` for the full inventory.
 
 | Command | Description |

package/docs/INSTALLATION.md

@@ -2,7 +2,7 @@
 
 Loki Mode, by [Autonomi](https://www.autonomi.dev/), turns a spec or an issue into a verified pull request with a receipt you can check. This page covers installing it, a first run, and the options around it.
 
-**Version:** v11.17.16
+**Version:** v11.17.17
 
 **Engine note:** `loki start` is the primary command. `loki start`, `loki "<task>"`, `loki owner/repo#N` and `loki quick` all run the Loki 10 engine, whatever the flag order or input form (PRD file, issue ref, task or one-word brief). The previous loop runs only on `--engine legacy`, `LOKI_ENGINE=legacy`, or for one call when a flag Loki 10 cannot honor is present. See the [user guide](v10/GUIDE.md) and the [5-minute quickstart](QUICKSTART.md).
 

package/docs/exit-codes.md

@@ -144,6 +144,8 @@ printing the envelope, 1 TAMPERED, an envelope given as input, or an envelope
 under a run id whose `predicate.run_id` differs, 2 UNSIGNED, UNCHECKED or an
 unreadable receipt, 4 a verified receipt whose run outcome is not VERIFIED or
 ALREADY_SATISFIED, 66 no signing key (or no runs). Refusals print nothing on stdout.
+
+`loki verify <run-id> --require-exogenous` (or `LOKI_VERIFY_REQUIRE_EXOGENOUS=1`, v10 only) prints an `agent-independent: k of n passing checks` line for a VERIFIED receipt and exits 4 when k is 0 or the receipt records no check provenance. TAMPERED, UNCHECKED and UNSIGNED verdicts are unchanged.
 `--pubkey` may come before or after the run-id and may be written `--pubkey=FILE`; `--pubkey` with no file or an empty `--pubkey=`, a repeated `--pubkey`, an unknown option, or more than one run-id exits 2.
 
 An early draft spec listed `1=BLOCKED, 2=CONCERNS`. That ordering was rejected: