loki-mode 11.7.1 → 11.9.1

package/autonomy/verify.sh

@@ -2588,6 +2588,11 @@ OPTIONS:
                        Seal a workspace run into one signed composite receipt
                        (composite.json). `loki verify <composite.json>` then
                        re-checks it offline. Routed to the engine10 verifier.
+    --max-age <DUR>    With a receipt path: refuse a receipt whose signed issue
+                       time is older than DUR (Ns, Nm, Nh, Nd or seconds), has
+                       no signed issue time, or is more than 300s in the
+                       future. Exits 2 (UNCHECKED). Routed to the engine10
+                       verifier.
     -h, --help         Show this help.
 
 GATES (deterministic, reproducible by construction):

package/bin/loki

@@ -794,7 +794,7 @@ fi
 # Two-token routes (provider show/list, memory list/index) match on the first
 # token only; the Bun dispatcher handles subcommand routing internally.
 case "${1:-}" in
-    version|--version|-v|status|stats|doctor|provider|memory|rollback|internal|kpis|trust|proof|receipt|wiki|crash|control|contract|slack|queue|issues|answer|undo|verify-pr|completion|__complete)
+    version|--version|-v|status|stats|doctor|provider|memory|rollback|internal|kpis|estimate|trust|proof|receipt|wiki|crash|control|contract|slack|queue|issues|answer|undo|verify-pr|completion|__complete)
         # v7.5.2: rollback added (wires loki-ts/src/commands/rollback.ts).
         # v7.5.3: internal added for autonomy/run.sh phase1-hooks calls.
         # v7.5.28: kpis added (Phase K MVP: read-only KPI snapshot).

package/completions/_loki

@@ -56,6 +56,13 @@ function _loki {
                 agent)
                     _loki_agent
                     ;;
+                estimate)
+                    _arguments \
+                        '--json[Output machine-readable JSON]' \
+                        '--model[Model whose rough prior to use]:model:' \
+                        '--provider[Provider whose default model is used]:provider:' \
+                        '--help[Show help]'
+                    ;;
                 status)
                     _arguments \
                         '--json[Output machine-readable JSON]' \
@@ -162,6 +169,27 @@ function _loki {
                 code)
                     _loki_code
                     ;;
+                deploy)
+                    _arguments \
+                        '--dir[Project directory to scan]:directory:_directories' \
+                        '--no-clip[Do not copy the command to the clipboard]' \
+                        '--execute[Run the deploy command if the receipt gate passes]' \
+                        '--canary[With --execute: staged rollout (Vercel promote, Fly canary)]' \
+                        '--allow-unanchored[Proceed when the receipt records no baseline]' \
+                        '--health-url[Health probe URL]:url:' \
+                        '--auto-rollback[Roll back on a failed health probe]' \
+                        '--help[Show help]'
+                    ;;
+                verify)
+                    _arguments \
+                        '--pubkey[Check against this public key only]:key file:_files' \
+                        '--sign-deploy[Sign a loki.deploy/1 deploy record in place]:record:_files' \
+                        '--receipt[Cited receipt file for a deploy record]:receipt:_files' \
+                        '--max-age[Reject a receipt older than DUR]:duration:' \
+                        '--seal-composite[Sign a workspace composite]:run dir:_directories' \
+                        '--help[Show help]' \
+                        '*:receipt or deploy record:_files'
+                    ;;
             esac
             ;;
     esac
@@ -231,7 +259,7 @@ function _loki_commands {
         'plan:Preview the build plan for a spec'
         'report:Reporting commands (cost, kpis, share)'
         'cost:Show cost of recent runs (--detail for cache + trend)'
-        'estimate:Project run cost (requires --iterations N)'
+        'estimate:Estimate run cost from run history (--json, --model, --provider)'
         'kpis:Key performance indicators'
         'stats:Session statistics'
         'preview:Open the running app preview'
@@ -313,6 +341,11 @@ function _loki_start {
     _arguments \
         '--provider[AI provider]:provider name:(claude cline codex aider opencode)' \
         '--parallel[Parallel mode]' \
+        '--brief[Zero-config brief mode]:brief text:' \
+        '--worktree[Git worktree isolation]' \
+        '--pr[Worktree plus auto-create PR]' \
+        '--ship[Worktree plus PR plus auto-merge]' \
+        '--detach[Run in background (implies --worktree)]' \
         '--workspace[Run a loki.yaml workspace for the brief]:workspace name:' \
         '--deploy[Deploy after a VERIFIED run via loki deploy --execute]' \
         '--health-url[With --deploy: health probe URL]:url:' \

package/completions/loki.bash

@@ -27,7 +27,7 @@ _loki_completion() {
 
             # If the word starts with a dash, show flags
             if [[ "$cur" == -* ]]; then
-                local flags="--provider --max-iterations --parallel --background --bg --simple --complex --github --no-dashboard --sandbox --skip-memory --spec --spec-first --yes --budget --attempts --model --isolation --max-cost --no-pr --explain-route --workspace --deploy --health-url --auto-rollback --help"
+                local flags="--provider --max-iterations --parallel --background --bg --simple --complex --github --no-dashboard --sandbox --skip-memory --spec --spec-first --yes --budget --attempts --model --isolation --max-cost --no-pr --explain-route --brief --worktree --pr --ship --detach --workspace --deploy --health-url --auto-rollback --help"
                 COMPREPLY=( $(compgen -W "${flags}" -- "$cur") )
                 return 0
             fi
@@ -120,6 +120,13 @@ _loki_completion() {
             COMPREPLY=( $(compgen -W "${syslog_cmds}" -- "$cur") )
             ;;
 
+        estimate)
+            if [[ "$cur" == -* ]]; then
+                COMPREPLY=( $(compgen -W "--json --model --provider --help" -- "$cur") )
+                return 0
+            fi
+            ;;
+
         status)
             if [[ "$cur" == -* ]]; then
                 COMPREPLY=( $(compgen -W "--json --help" -- "$cur") )
@@ -142,14 +149,14 @@ _loki_completion() {
 
         deploy)
             if [[ "$cur" == -* ]]; then
-                COMPREPLY=( $(compgen -W "--execute --health-url --auto-rollback --help" -- "$cur") )
+                COMPREPLY=( $(compgen -W "--execute --canary --health-url --auto-rollback --dir --no-clip --allow-unanchored --help" -- "$cur") )
                 return 0
             fi
             ;;
 
         verify)
             if [[ "$cur" == -* ]]; then
-                COMPREPLY=( $(compgen -W "--base --out --block-on --no-llm --json --explain --check-fresh --hosted --seal-composite --help" -- "$cur") )
+                COMPREPLY=( $(compgen -W "--base --out --block-on --no-llm --json --explain --check-fresh --max-age --hosted --seal-composite --sign-deploy --receipt --pubkey --help" -- "$cur") )
                 return 0
             fi
             ;;

package/dashboard/__init__.py

@@ -7,6 +7,6 @@ Modules:
     control: Session control helpers (status, atomic writes, origin check)
 """
 
-__version__ = "11.7.1"
+__version__ = "11.9.1"
 
 __all__ = ["__version__"]

package/docs/ARCHITECTURE.md

@@ -209,7 +209,6 @@ memory/                    Memory system (Python package, ~19 modules)
   embeddings.py            Vector embeddings (optional)
   vector_index.py          Vector search index
   cross_project.py         Cross-project knowledge transfer
-  rag_injector.py          RAG context injection into prompts
   knowledge_graph.py       Knowledge graph over memories
   layers/                  Progressive-disclosure loading
 

package/docs/CLI-REFERENCE.md

@@ -1,6 +1,6 @@
 # CLI reference
 
-Generated from `loki-ts/src/cli/registry.ts` by `scripts/generate-stale-zero.sh` for v11.7.1. Do not edit by hand.
+Generated from `loki-ts/src/cli/registry.ts` by `scripts/generate-stale-zero.sh` for v11.9.1. Do not edit by hand.
 Hidden and legacy-only commands are omitted; see `docs/v10/CLI-MODERN.md` for the full inventory.
 
 | Command | Description |

package/docs/COMPONENTS.md

@@ -132,7 +132,7 @@ across projects.
 - `consolidation.py` - Episodic-to-semantic consolidation pipeline.
 - `token_economics.py` - Discovery vs read token accounting.
 - `embeddings.py`, `vector_index.py` - Optional embedding-based similarity.
-- `cross_project.py`, `knowledge_graph.py`, `rag_injector.py` - Cross-project
+- `cross_project.py`, `knowledge_graph.py` - Cross-project
   recall, knowledge graph, and RAG prompt injection (v7.1.0+).
 - `app_graph.py`, `error_log.py`, `ingest.py`, `namespace.py`, `replay.py`,
   `unified_access.py` - Supporting modules.

package/docs/DEPLOY-PLAN.md

@@ -7,9 +7,19 @@ clean tree, a destructive-op refusal and a policy permission (`.loki/policies.js
 deployed URL after the command. A non-2xx result is recorded as FAILED_HEALTH and exits non-zero;
 with `--auto-rollback` it also runs the provider's documented rollback verb (`vercel rollback`,
 `fly releases rollback <captured version>`; Netlify and Cloudflare print a manual note). With no
-URL, health is recorded as "unchecked", never healthy. The deploy record lives in `.loki/deploys`
-and is not part of the signed receipt. `loki start --deploy [--health-url U] [--auto-rollback]`
-chains the same gated command after a start. Not built: canary or staged rollout, and receipt-bound deploy records.
+URL, health is recorded as "unchecked", never healthy. The deploy record in `.loki/deploys` is a
+signed `loki.deploy/1` attestation bound to the receipt that authorized it (fields: receipt_sha256,
+head_sha, target, command, health_status, health_url, rollback_attempted, rollback_exit,
+started_at, finished_at). It is signed with the existing receipt signer (Ed25519, no new crypto)
+and the receipt itself is unchanged. `loki verify <record.json>` re-checks it offline (also with
+`--pubkey FILE`; `--receipt FILE` names the cited receipt when it is not beside the record). It
+fails closed: a flipped byte is TAMPERED, an unsigned record or an unknown key is UNCHECKED, and a
+cited receipt that is not VERIFIED is never reported as VERIFIED.
+`loki deploy --execute --canary` is a staged rollout using only documented provider verbs: Vercel
+deploys without `--prod`, health-checks the preview URL, then runs `vercel promote <url>` (a failed
+probe never promotes); Fly runs `fly deploy --strategy canary`; Netlify and Cloudflare document no
+staged path and refuse `--canary` with a sentence saying so.
+`loki start --deploy [--health-url U] [--auto-rollback]` chains the same gated command after a start.
 
 Everything below is the original print-only design plan and is kept for history.
 

package/docs/INSTALLATION.md

@@ -2,7 +2,7 @@
 
 Loki Mode, by [Autonomi](https://www.autonomi.dev/), turns a spec or an issue into a verified pull request with a receipt you can check. This page covers installing it, a first run, and the options around it.
 
-**Version:** v11.7.1
+**Version:** v11.9.1
 
 **Engine note:** `loki start` is the primary command. `loki start`, `loki "<task>"`, `loki owner/repo#N` and `loki quick` all run the Loki 10 engine, whatever the flag order or input form (PRD file, issue ref, task or one-word brief). The previous loop runs only on `--engine legacy`, `LOKI_ENGINE=legacy`, or for one call when a flag Loki 10 cannot honor is present. See the [user guide](v10/GUIDE.md) and the [5-minute quickstart](QUICKSTART.md).
 

package/docs/WORKSPACES.md

@@ -37,7 +37,7 @@ loki workspace status <run-id>
 - The repo that owns the issue ref gets the ref; other repos get a task text naming the ref and the sibling worktree paths as read-only context.
 - After all repos finish, the `integration` command runs once from the run directory with `LOKI_WS_DIR_<OWNER>_<REPO>` pointing at each worktree. A timeout counts as failed. With no integration configured the status is `not_configured`.
 - Evidence is written to `.loki/workspaces/<name>/<run-id>/integration.json`: head SHA per repo, exit code, log sha256. When every repo succeeded, integration did not fail and every child sealed a receipt, the run also seals a signed `composite.json` that binds integration.json and every child receipt (see "Verify a workspace run").
-- `loki workspace infer <name>` prints suggested `after:` edges read from package.json, go.mod and pyproject.toml dependencies on other listed repos. It is print-only and cycle-checked; it never edits loki.yaml. Manifests only: no OpenAPI or import inference.
+- `loki workspace infer <name>` prints suggested `after:` edges read from package.json, go.mod and pyproject.toml dependencies on other listed repos. It also suggests an edge from (1) a source import (TS/JS import or require, Python import, Go import path) of a sibling's package or module name even when the manifest does not declare it, scanning at most 400 source files per repo, and (2) a client generator config (openapitools.json, openapi-generator*.yaml, orval.config.*) whose input spec path lies inside a sibling checkout. Each inferred edge prints its evidence as `file:line`. It is print-only and cycle-checked; it never edits loki.yaml.
 - `plan: true` (or `LOKI_WORKSPACE_PLAN=1`) makes one provider call that decomposes the brief per repo into `<run-dir>/plan.json`. A valid plan gives each listed repo its own task; an invalid one falls back to the generic text and prints the reason.
 - `integration: {per_stage: true}` also runs the integration command after each topological layer. A failing stage SKIPs every later layer, so a broken contract stops before downstream repos build on it.
 - Without `path`, a repo is cloned to `~/.loki/repos/owner__name`.

package/docs/dev/architecture-reference.md

@@ -39,7 +39,7 @@ model explicitly rather than inherit the session model.
 - **Progressive Disclosure**: 3-layer loading (index, timeline, full details)
 - **Token Economics**: Discovery vs read token tracking
 - **Vector Search**: Optional embedding-based similarity (sentence-transformers)
-- **Cross-project + RAG injection**: `memory/cross_project.py`, `memory/rag_injector.py`, `memory/knowledge_graph.py` (added v7.x)
+- **Cross-project index + knowledge graph**: `memory/cross_project.py`, `memory/knowledge_graph.py` (added v7.x)
 - **Managed memory client**: `memory/managed_memory/` -- gated on `LOKI_MANAGED_MEMORY=true`. See `skills/memory.md`.
 - **CLI**: `loki memory index|timeline|consolidate|economics|retrieve|episode|pattern|skill|vectors`
 - **API**: REST endpoints at `/api/memory/*`

package/docs/sentry-intake.md

@@ -22,3 +22,39 @@ The token is sent only to the Sentry host through a curl config on stdin, never
 
 The output is a receipt-gated PR only, never a deploy. Whether the PR opens is still decided by the policy file (`autonomy`).
 
+
+## Slack, Linear, Jira and Teams delegation
+
+`loki trigger` server setup for delegating a job from chat or a tracker. Both routes enqueue through the same job queue and runner as `POST /jobs`; a completion summary goes back to the origin. Nothing unauthenticated can start a job or choose a reply URL.
+
+Secrets are env only and must differ from each other, the GitHub webhook secret, the API token and the Sentry secret (an equal secret disables its route at startup). A missing secret answers 503 naming the variable, and the server logs a startup warning. None of them reach the `loki start` child environment.
+
+Slack (`POST /slack`):
+
+1. Set `SLACK_SIGNING_SECRET`. Point a `/loki` slash command (and Events URL verification) at `/slack`.
+2. The signature is `v0=` + hex HMAC-SHA256 over `v0:<X-Slack-Request-Timestamp>:<raw body>`, window 300s, the same contract as `loki-ts/src/contrib/slack_inbound.ts`. Bad, stale or missing signature: 401, nothing queued.
+3. The command text is the spec (one line, not starting with `-`) and runs as `loki start <text> --detach`. Slack gets an ephemeral reply carrying the job id.
+4. On completion the summary is posted to the request's `response_url`, only if it starts with `https://hooks.slack.com/`. Any other host is never contacted.
+
+Linear (`POST /linear`):
+
+1. Set `LINEAR_WEBHOOK_SECRET`. Point a Linear issue webhook at `/linear`.
+2. `Linear-Signature` is the hex HMAC-SHA256 of the raw body, and the signed `webhookTimestamp` must be within 300s. Otherwise 401.
+3. A created issue enqueues `loki start linear:<identifier> --detach` and answers 202 with the job id. Other events are skipped.
+4. If `LINEAR_API_KEY` is set, a comment with the result is posted on the issue through `https://api.linear.app/graphql`. Without it nothing is posted.
+
+Jira (`POST /jira`):
+
+1. Set `JIRA_WEBHOOK_SECRET` (the secret on a Jira Cloud webhook) and point the webhook at `/jira`. Set `JIRA_ASSIGNEES` (comma-separated accountId, email or display name) and/or `JIRA_LABELS`. With neither set, every event is skipped.
+2. `X-Hub-Signature` is `sha256=` + hex HMAC-SHA256 of the raw body. Bad or missing signature: 401. Jira signs no timestamp and the `X-Atlassian-Webhook-Identifier` header is not covered by the HMAC, so replay is bounded two ways: a repeated delivery id, or a repeated signed body (sha256 of the raw body, so changing or dropping the header does not help), answers `duplicate` and queues nothing. A replay of a body Jira never sent twice still needs the secret to forge.
+3. `jira:issue_created`, or `jira:issue_updated` whose changelog touches assignee or labels, runs only when the issue is assigned to a configured user or has a configured label. The key, summary and description are folded into a one-line brief (1500 bytes max; an Atlassian Document Format description is flattened to its text) and run as `loki start --brief "<brief>" --pr --detach`. Answers 202 with the job id.
+
+Teams (`POST /teams`):
+
+1. Set `TEAMS_SECURITY_TOKEN` (the base64 token Teams shows when you create the outgoing webhook) and point the webhook at `/teams`.
+2. `Authorization: HMAC <base64>` is the base64 HMAC-SHA256 of the raw body keyed by the base64-decoded token. Bad signature: 401. The activity `timestamp` must be within 300s; a stale or missing one is refused with 401.
+3. The message text (with `<at>` mentions and tags removed) is the brief and runs as `loki start --brief "<brief>" --pr --detach`. Teams gets a synchronous reply whose text starts with "Queued" and ends with the job id. A repeated activity id is not queued twice.
+
+Jira and Teams runs are receipt-gated PR runs only: the server always passes `--pr` and never a deploy argument, so shipping stays a separate gated step. `--brief` forces brief mode, so text that ends in `.md` or contains an issue URL is never reclassified, and `loki start --brief ... --pr/--worktree/--detach` runs in an isolated worktree, detached, and opens a PR carrying the Evidence Receipt (the same machinery as `loki start <issue>`). Sentry alerts use the same form. Neither secret reaches the `loki start` child environment, and both must differ from every other credential. A missing secret answers 503 naming the variable.
+
+Reply targets are stored server side keyed by job id, captured only after verification. Notifier errors are logged and never fail the job. Poll status with `GET /jobs/<id>`.

package/docs/v10/D61-SPEED.md

@@ -89,3 +89,17 @@ With `LOKI_SPEED=1` (default off), intake no longer waits on the cheap-model alr
 ## D82-FLAGS status: default on
 
 Per the D82 founder directive, `LOKI_SPEED` is on unless set to `0` (decomposer routing, warm engine on a unix socket, stage prefix, deferred already-done check, lean keyword fallback, unit mode when `LOKI_UNIT_SPEC` is set). `LOKI_SPEED=0` restores the previous behaviour byte for byte. The other D82 opt-outs are `LOKI_VISUAL_EVIDENCE=0`, `LOKI_CONTRACT=0`, `LOKI_SLACK_INBOUND=0` (Slack stays inert until its credential is configured), `LOKI_CONTROL=0` and `LOKI_WORKSPACES=0`. Test: `loki-ts/tests/features/d82_default_on.test.ts`.
+
+## Missions and group Seal (v11.8.0)
+
+Missions: a spec with two or more milestones runs milestone by milestone. Format: `## Milestone N[: title]` headings (the body is everything up to the next milestone heading), or a top-level `milestones:` list of `- title` lines. Fewer than 2 milestones is not a mission and takes the normal path unchanged. Parsing is `parseMilestones` in `loki-ts/src/features/decompose.ts`; the loop is in `maybeRunGroup` (`loki-ts/src/features/speed/route.ts`), reached from `loki start` and from chat `/run` through the same supervisor call.
+
+Each milestone prints `loki: milestone k/N: <title>`, is decomposed on its own, and runs as its own group with its own frozen contract and group Seal. One-unit groups and sequential providers are allowed for milestones (the normal fewer-than-2-units and slot fallbacks do not apply). The mission stops at the first non-zero result, prints `loki: milestone k/N failed (exit X); rerun the same loki start to resume`, and returns that code; later milestones never start. All milestones exit 0 returns 0.
+
+Group exit codes: 0 = every unit VERIFIED and the group receipt VERIFIED; 4 = NOT PROVEN (integrated, but no checked group receipt); 1 = failures.
+
+Resume: rerun the same `loki start`. Each milestone group is found again by the hash of its body, so finished milestones re-verify and return 0 fast and the run continues at the failed one. No extra state is kept. `LOKI_GROUP_RESUME=0` disables auto-resume and starts every group fresh. Check any group receipt with `loki verify .loki/groups/<gid>/receipt.json`.
+
+Test command precedence: `LOKI_GROUP_TEST_CMD` (whitespace split) wins over the repo's own test script. Test: `loki-ts/tests/engine10/route_group.test.ts`.
+
+Fix units: when group integration stops on a merge conflict or a failing suite, one bounded fix unit runs through the same unit launcher (same scoped env, one slot) from the group branch, then integration restarts once. A conflict fix takes the conflicting unit's place; a suite fix goes last and receives the failing test names and output tail. Max one fix per conflict and 2 per group; `LOKI_GROUP_FIX_UNITS=0` restores stop-and-name. The suite, every unit receipt and the group Seal still decide the verdict, and a failed fix keeps the stop-and-name output (exit 1). A fix unit is stored in `dag.json` and resumes like any unit. Code: `loki-ts/src/features/speed/fix_units.ts`; tests: `loki-ts/tests/engine10/seal_group.test.ts`.

package/docs/v10/PROGRESS.md

@@ -2337,3 +2337,25 @@ The swarm is stopped: .loki/V10-STOP exists, the loop has no wake-ups, and the c
 - 10.6.6 (456058bae): scope control, Control Plane v0, train-cycle fix, docs. All green. Published.
 - 10.6.7 (bfce1db12): D60 sprint, all gates, Release, Post-Release Smoke and Promote success. latest and next at 10.6.7.
 - Open at handoff: real-repo gate not wired into promote.yml and needs operator provider auth; no end-to-end exit 3 run of the cost cap; root action.yml still uses loki start --simple; about 43 worktrees under .claude/worktrees (cap 15); never push backup/train-67..70 or backup/main-pre-rebuild.
+
+## 2026-10-15T20:05Z (CoS) 11.7.1 published, v11.8.0 train started
+- 11.7.0 (8b22e5fba): Tests red on tests/test-help-changelog-drift.sh (three flags missing from help/completion) and tests/test-sigpipe-guard.sh (count 1743 over ceiling 1742). Not published.
+- 11.7.1 (a01a22740): Release and Tests completed/success (gh run watch log, runs 38794589410 and 38794589637); npm dist-tags next=11.7.1, latest=11.6.0.
+- v11.8.0 train (workflow wf_e6306e08-008): group Seal, group resume, multi-milestone missions, Slack and Linear delegation on the trigger server, receipt --max-age, deploy completion and pulse ID_RE fixes.
+
+## 2026-10-15T20:45Z (CoS) v11.8.0 failed CI, v11.8.1 fix-forward
+- v11.8.0 (b5191b999): Tests run 38800796458 and Release failed on line budgets (core engine10 5020, features 3190), the D66 fence (run_group.ts value-imported seal and verify_cmd), two unclassified checkouts in the L2 registry, macOS-first stat in tests/test-backlog-units.sh:162, and a `loki help verify` mismatch. Not published.
+- Fix 1d734e6ba (Opus HIGH review APPROVED, 162 pass 0 fail on five suites), merged as 1788db60b. Correction: E-121 (pulse ID_RE for S41-style ids) already shipped in v10.5.3 (BOARD row E-121, merge aecf6daa); nothing is open there.
+- Local guards on the merged tree, all rc=0: test-help-changelog-drift, test-sigpipe-guard, test-help-and-log-cap, test-backlog-units, structural-checks, test-ci-only-divergence, test-platform-infra; bun test budget, l2_destructive_registry, route_group, seal_group: 117 pass 0 fail.
+
+## 2026-10-15T21:36Z (CoS) v11.9.0 train merged, release pending
+- 11.8.1 (22a6efc1f): Release and Tests completed/success; npm next=11.8.1.
+- Merged into main with --no-ff (workflow wf_b2e3c1df-452): DELEG-JIRA-TEAMS, DEPLOY-ATTEST-CANARY, ESTIMATE-ONE, RAG-DECIDE, GRAPH-IMPORTS, CPE24-HARDEN, CP-NITS-START, FC-01b (head e089b4224). FC-19b was already on main (5470167dd).
+- Rework round wf_4d4e81e3-3c3, Opus review APPROVE: GROUP-FIX-UNITS 196e3a6a4 (cap mutant MAX_FIX_UNITS=3 now red; 124 pass 0 fail), merged 0b3a2a46b; FC-09r c91b3642d (safeGit at runner_config.ts:45; raw execFileSync positive control red; 72 pass 0 fail), merged c39697cc1.
+- Guards on c39697cc1 plus dist rebuild (build rc=0): structural-checks rc=0; bun budget, l2_destructive_registry, fc25_raw_spawn_guard, spawn_env_guard, start_flag_parity_guard 43 pass 0 fail.
+- Advisories to card: detached --ship brief path calls gh issue close on b<epoch>; non-detached auto-merge arm rejects --brief; `loki run --brief-text` not marked internal; Teams dedup keys only on activity id; backlog.py base silently falls back to origin/HEAD on a non-SHA; runner_config subdir-base test missing.
+
+## 2026-10-15T21:56Z (CoS) v11.9.0 failed CI, v11.9.1 fix-forward
+- v11.9.0 (b46960893): Tests run 38811268755 and Release 38811268450 failed: python test_trigger_server_hardening BriefPr test assumed a host provider CLI; bun static shape (engine10 outside the cli.ts arm, from ESTIMATE-ONE) and its E-12 shell twin; bun L0 guard (runner_config probes unlisted, two stale verify.ts rows); DOC-02 (docs/sentry-intake.md:56 named `loki job`). Not published; npm next stays 11.8.1.
+- Fix c42d7fd22 (TL review APPROVE: 140 pass 0 fail plus 26 pass 0 fail on a git-archive copy), merged 9da6e2772.
+- Guards on 9da6e2772 after dist rebuild (build rc=0): help-changelog-drift, sigpipe-guard, help-and-log-cap, ci-only-divergence, platform-infra, engine10-dispatch, docs-cli-drift, structural-checks all rc=0; pytest test_trigger_server_hardening 70 passed; bun budget, l2_destructive_registry, fc25, spawn_env, start_flag_parity, l0_guard, cli static shape 57 pass 0 fail.