loki-mode 11.74.2 → 11.75.2

package/docs/v10/FC21B-FC22-PLAN.md

@@ -1,107 +0,0 @@
-# FC-21b and FC-22 slice plan (Architect, 2026-10-03T23:58Z)
-
-The order is S1, then S2, S3 and S5 in parallel, then S4 last. No two slices touch the same file. Every slice must pass the full `bun test` plus `bunx tsc --noEmit` before APPROVE.
-
-## Findings (file:line, loki-ts/src)
-- Impacted-test selection lives in engine10/testmap.ts:201 impactedRefs, not in e10ext/select.ts (which is attempt ranking).
-  - It matches basename stems across the whole repo (sourceRefs :186-193), so a backend validation.ts pulls in frontend validation.test.ts.
-  - Callers: verify.ts:250 and :260, implement.ts:25, sizing.ts:43, plan.ts:58.
-- The Project Model has no package graph (schema.ts:21 ModelPackage) and no install command (COMMAND_KINDS, schema.ts:8).
-- seal.ts:140: an implement exit of killed is always PARTIAL. machine.ts:128 overwrites outputs.implement on a kill, and restoreReadOnly (implement.ts:43) never runs on a kill. A killed session can therefore leave an edited Wall file behind, and verify runs it. This blocks shipping VERIFIED-after-limit.
-- The cap is fixed before the worker spawns (supervisor.ts:330), and the backstop comes from it (:181).
-  - plan.ts:91 relevant_files is keyword overlap, so it is not a size signal.
-  - run_cap.ts:28 matches run_cap_s at any depth under budgets; CRLF fails silently at :27; :35 has an off-by-one line count. budget_cap.ts:20 yamlPerRun has the same bugs.
-- output.ts:70 outcomeOf returns BUDGET_STOP over a sealed PARTIAL or FAILED receipt, which is an L7 violation.
-- A1: machine.ts:145.
-- A2: conflict_resume.ts:14 spreads the first session's options, and machine.ts:66 raises limitS back to the full budget, then appends the note after FINISH_LINE.
-- Measured line counts: core 4705, e10ext 1481, features 2971. New modules go in project_model/ and util/ (uncapped). e10ext changes must be net <= 0.
-
-## Decisions
-- FC-22a: ModelPackage gets `dependsOn?: string[]` (package roots), declared and cited by the discovery model (L0, no import parsing).
-  - Absent means edges are unknown: keep today's cross-package selection (fail safe).
-  - [] is an explicit "no dependents".
-- FC-22b: ModelPackage gets `install?: ModelCommand|null`. Install is triggered by evidence only: a selected check in that package came back as a harness-owned load error (FC-02).
-  - It runs once per package per run, between verify and the fix loop, with timeout min(300s, cap left).
-  - It is recorded as check `install:<root>`, and verify is rerun once (not a fix round).
-  - No install command means NOT PROVEN naming the package; never guess.
-  - Opt-out: LOKI_E10_INSTALL=0 or loki.yaml `verify.install_deps: false`.
-- FC-21b(1): add before the fail->FAILED line in verdictOf:
-  `if (exit === "killed") return typeof o.implement?.limit_s === "number" && targetProof && proof && !verifyNotProven && checks.length > 0 && checks.every((c) => c.result === "pass") ? "VERIFIED" : "PARTIAL";`
-  - targetProof means a verify `target_checks` entry (Wall or a task-named relevant test) passed with n>0.
-  - The receipt gets an optional `implement_limit: {limit_s, elapsed_s}`, omitted when unset so other receipts stay byte-stable.
-- FC-21b(2): the plan session writes <runDir>/plan-scope.json {"files":[...]}.
-  - P = packages owning those files plus their dependentsOf; F = the file count.
-  - cap = clamp(900 + 450*(P-1) + 20*max(0, F-3), 900, ceiling). The ceiling is 3600 on subscription and 2400 with a dollar cap.
-  - The worker resizes once after plan||wall. An explicit env or yaml cap is fixed.
-  - Task-text length and the repo file count are removed from the formula.
-- FC-21b(3): the receipt is the one source of truth. Outcome = receipt.verdict, and the exit code is EXIT[verdict].
-  - A cap stop is shown on the Reason line and as `stop:"cap"` in --json.
-  - BUDGET_STOP remains only when no receipt was sealed.
-
-## Questions the Architect raised (decided by the CoS under the standing mandate; recorded in FOUNDER-QUEUE.md for veto)
-- (a) After a limit, VERIFIED requires a Wall or task-named test to pass with n>0. ACCEPTED: Seal accuracy outranks delivered accuracy.
-- (b) Install defaults ON (L1 parity with raw Claude Code, which would install deps), with the opt-out above. ACCEPTED, on two conditions: install runs only on evidence of a load error, and the tree guard is L2-classified.
-- (c) Exit code 3 is dropped when a receipt is sealed. ACCEPTED (L7). It ships as a CHANGELOG "Changed" entry that names the exit-code change.
-
-## Slices
-S1 (MEDIUM, no deps): Project Model graph and install schema.
-- Files: project_model/schema.ts, api.ts, discover.ts, gather.ts (computeKey salt "model-rev:2"), new project_model/graph.ts, new util/yaml_key.ts, tests/project_model/graph.test.ts, tests/util/yaml_key.test.ts, fixtures/project-model/firelater-17/response.json.
-- Wall checks:
-  - dependsOn naming an unknown root is rejected;
-  - an absent dependsOn validates;
-  - dependentsOf is transitive and ignores cycles;
-  - a rev-1 cached model is rediscovered;
-  - yamlKey ignores nested per_stage run_cap_s;
-  - yamlKey reads CRLF.
-- If FC-23 merged module-system fields into schema.ts, rebase on them.
-
-S2 (HIGH, needs S1): package-scoped selection (FC-22a).
-- Files: engine10/testmap.ts, new project_model/scope.ts, tests/engine10/fc22_select.test.ts, fixtures/monorepo-fc22/**.
-- Wall checks:
-  - a backend-only change selects no frontend test;
-  - with frontend dependsOn backend, the frontend test is kept;
-  - an absent dependsOn keeps today's selection;
-  - single-package output is byte-identical;
-  - an unowned test is kept;
-  - implement impactedTests and hasRelevantTests are scoped the same way;
-  - scoped-out tests are emitted as a verify event.
-
-S3 (HIGH, needs S1): install pre-step library (FC-22b).
-- Files: new project_model/install.ts (prepareDeps, once-per-run memo, git status snapshot before and after), the L2 destructive-path classification entry, tests/engine10/fc22_install.test.ts, fixtures/install-fc22/**.
-- Wall checks:
-  - one install check per load-failed package, with its cwd;
-  - no command means no run and a NOT PROVEN naming the package;
-  - both opt-outs skip the install;
-  - it runs once across fix rounds;
-  - a failed install is not_run with owner harness, never fail;
-  - an install that writes a lockfile is restored and listed.
-
-S5 (HIGH, needs S1): cap sizing and A3 (FC-21b(2)).
-- Files: util/run_cap.ts, e10ext/budget_cap.ts (net <= 0 lines), stages/plan.ts (plan-scope.json), supervisor.ts (backstop at the ceiling, started.cap_ceiling_s), tests/engine10/fc21_cap.test.ts.
-- Wall checks:
-  - a 4-package, 4-file scope gets a larger cap than a 1-file scope;
-  - a 1-file scope gets 900;
-  - a long task text with a 1-file scope gets 900;
-  - explicit env and yaml caps are fixed and win;
-  - a nested run_cap_s is ignored;
-  - CRLF yaml is read;
-  - the clamp holds;
-  - the e10ext cap passes.
-
-S4 (HIGH, needs S3 and S5 merged): earned VERIFIED, A1, A2, L7 and wiring (FC-21b(1)(3)).
-- Files: stages/seal.ts, stages/verify.ts, stages/implement.ts (export restoreReadOnly), machine.ts, types.ts, output.ts, worker.ts, tests/engine10/fc21_limit.test.ts, new tests/engine10/fc21b_verdict.test.ts.
-- Wall checks:
-  - limit plus green fix rounds with n>0 and a Wall pass is VERIFIED, with implement_limit set;
-  - limit plus a red check, an unrun check, or no target check is PARTIAL;
-  - a limit throw with killed false never seals VERIFIED (A1);
-  - a killed session's Wall edit is restored before verify;
-  - a resumed implement gets limitS <= budget - elapsed, and both briefs end with FINISH_LINE (A2);
-  - CLI outcome equals receipt.verdict and the exit code is EXIT[verdict] for a cap stop;
-  - core stays under 5000.
-
-## Risks
-1. With the backstop at the ceiling, a hung small task can live up to 3600s. Follow-up: re-arm the backstop on cap.sized.
-2. The salt forces one rediscovery per repo. If discovery fails, selection runs unscoped and the cap is sized by file count only.
-3. A wrong "no edge" from the model under-selects tests. Mitigation: dependsOn must cite a manifest, and scoped-out tests are audited.
-4. Install runs repo scripts and spends the cap. Mitigation: it is evidence-triggered, guarded, and opt-out.
-5. Scripts keyed on exit code 3 change behavior. Mitigation: a CHANGELOG Changed entry.

package/docs/v10/FIRST-RUN-GATE.md

@@ -1,39 +0,0 @@
-# First-run gate: defect reproduction (A-02, step 1)
-
-Base: main at VERSION 10.5.10. Local CLI `bin/loki` from this worktree, never a global install.
-Every run used a run-owned temp dir (`loki_run_tmp_create`), `HOME=<tmp>/home` (empty: no
-`~/.claude` skills, no `~/.loki`, no dashboard), `LOKI_NO_BROWSER=1`, and the bugrepo from
-`firstrun-repro/bugrepo-original/` (git repo, no remote, one commit).
-
-Provider: a stub `claude` first on PATH (answers `--help` with `--settings`, exits 0, fixes
-`sum.js` on the implement stage, signals completion; in the Wall stage it writes nothing).
-`STUB_SPEC_CONFLICT` makes it print a `LOKI_SPEC_CONFLICT:` line. The v10 engine needs
-`LOKI_E10_INVOKER=cli` to use the stub (its default SDK loop does not go through PATH).
-
-Real provider: 2 attempts (`LOKI_ENGINE=v10`), both died in 1-3 s at cost $0 with
-`Not logged in`. A throwaway HOME does not carry the Claude login (copying
-`~/.claude/.credentials.json` was not enough). Real-provider reproduction of (a) and the
-real-claude timing in (d) therefore rests on the recorded logs (`run1.log`, `run2.log`,
-`raw.log`) plus the source reading below. The gate's `--real` mode must pass a token via
-`ANTHROPIC_API_KEY` or `CLAUDE_CODE_OAUTH_TOKEN`, or run with the real HOME.
-
-Entry point chosen for a new user (README.md "Use it"): `loki quickstart` is interactive and
-asks for an idea, so it cannot fix a given repo; the README's one-shot task command is
-`loki quick "<task>"`, which is what run1.log used and what the gate runs. The v10 engine
-(`LOKI_ENGINE=v10 loki "<task>" --no-pr`) is tested as a second entry.
-
-| # | Defect | Reproduced | Command and rc | Evidence line | Class | Source |
-|---|--------|-----------|----------------|---------------|-------|--------|
-| a | Wall commits Jest globals in a node:test repo | Not reproduced live (real provider unavailable in clean HOME); root cause confirmed in code | v10 stub run: intake event `"testmap":{"runners":["npm"],"tests":[]...}` | Wall brief is paths only ("framework named in repomap.txt"); the testmap reports `tests: []` and runner `npm` for a node:test repo, so nothing names node:test; `guessRunner` returns null for npm so the generated file is never run or checked | CODE BUG | `loki-ts/src/engine10/stages/wall.ts:76-86` (brief), `:110-117` (guessRunner), `loki-ts/src/engine10/testmap.ts:37` (npm coarse, no node:test detection) |
-| b | npm test red (2 of 3) but the run exits 0 | Yes | v10 stub run, implement makes no diff, tests still red: rc=0, `seal ... SPEC_CONFLICT`; also `PARTIAL` rc=0 | `Verdict:    SPEC_CONFLICT` then `rc=0` with the failing test untouched | CODE BUG | `loki-ts/src/engine10/supervisor.ts:387` (`res.verdict === "FAILED" ? 1 : 0`, so PARTIAL and SPEC_CONFLICT exit 0) |
-| c | `loki verify` calls an untouched sealed receipt TAMPERED | Yes | `LOKI_ENGINE=v10 loki verify` after a sealed run whose receipt holds a non-ASCII char: rc=1 | `verdict: TAMPERED / receipt_sha256 mismatch: recorded "40b8a0ef..." computed 4a572bdf...` (receipt untouched; ASCII-only receipts verify UNSIGNED rc=0) | CODE BUG | `loki-ts/src/engine10/verify_cmd.ts:21-28` private `canonicalJson` does not `\uXXXX`-escape chars U+0080 and above; the sealer does at `stages/seal.ts:39-50` |
-| d | `loki quick` slow, noisy, commits extra files | Yes for noise and commits; time partly (stub) | `loki quick "fix ..."` stub provider: rc=0, 111 s wall with a zero-latency stub (real: 97 s vs 10 s raw per run1.log/raw.log), 269 output lines | commit `Loki Mode session changes` adds `HANDOFF.md` and `package-lock.json` (+77 -1 for a 1-line fix); USAGE.md is also committed when the provider returns Markdown (run1.log) | CODE BUG | `autonomy/run.sh:11065-11233` (`commit_session_changes` stages everything), HANDOFF writer `autonomy/run.sh:29334-29344`, docs gate `autonomy/run.sh:14835-14853`, banner/gate logging throughout |
-| e | Printed receipt digest differs from what proof verify checks | Yes | `loki quick` stub, then `loki proof verify <run>` rc=0 | Printed block: `Files changed | 2`, `Diff sha256 af01b739...`; `proof verify` recorded/current diff `25b61f73...` over 3 files (the printed block predates the session commit that adds HANDOFF.md and the lockfile) | CODE BUG | receipt generated before `commit_session_changes` (`autonomy/run.sh:11233`, proof call near `:8815-8935`); printer at `:4948-4964` |
-| f | v10 prints UNSIGNED; two engines use different signing env vars | Yes (UNSIGNED); partially (env vars) | any v10 run: rc per verdict | `receipts will be UNSIGNED (no signing key configured; set LOKI_RECEIPT_SIGNING_KEY or LOKI_RECEIPT_SIGNING_KEY_FILE)` | CODE BUG (first-run default) | both honor `LOKI_RECEIPT_SIGNING_KEY[_FILE]` (`seal.ts:69`, `autonomy/lib/proof-generator.py:2185-2186`), but the legacy engine also has `LOKI_PROOF_GPG_KEY` (`proof-generator.py:2158`); with no key neither signs, so a new user always gets an unsigned receipt |
-| g | doctor FAILs for Cline and Aider | No | `loki doctor` in clean HOME: rc=1 | `WARN  Cline CLI - not found (optional)`, `PASS  Aider CLI (v0.86.2)`; the only FAIL is `Claude login has EXPIRED` (stub claude / empty HOME) | MACHINE ARTIFACT | founder machine broken symlinks; not a code path (Cline and Aider are WARN when absent) |
-
-Notes
-- (c) needs a non-ASCII character anywhere in the receipt (task-derived reasons, repo paths,
-  check messages); real runs with a spec-conflict reason or unicode in a path hit it.
-- (b) shows the exit code is wrong independent of (a): any non-FAILED verdict exits 0.
-- Cost of all runs in this table: $0.00 (stub runs; both real attempts failed on login).

package/docs/v10/FOUNDER-QUEUE.md

@@ -1,29 +0,0 @@
-# Founder queue
-
-Things only the founder can do or decide. Append-only. The loop never blocks on
-this file; each item says what the loop does meanwhile.
-
-| # | Date | Item | Why only you | Loop does meanwhile |
-|---|---|---|---|---|
-| 1 | 2026-09-25 | Review the stash `pre-v10 leftover (founder review)` (commit `2c00b2eb`, `git stash show -p 2c00b2eb`). Six uncommitted files found at v10 start: `coverage/clover.xml`, `coverage/lcov-report/index.html`, `loki-ts/tests/integration/loki_start_e2e.test.ts`, `tests/fixtures/project-graph/acme/ui/.loki/state/project-graph.json`, `tests/test-proven-pr-receipt.sh`, `web-app/tests/e2e/filewatcher.spec.ts`. Apply, or drop. | Not the loop's work; build prompt 1b says stash, never commit or discard. | Works on a clean main. |
-| 2 | 2026-09-25 | Add a cheap-model key (DeepSeek, OpenRouter or MiniMax) to the environment the loop runs in. | Needs an account and a card. | Uses Claude Haiku 4.5 or the cheapest OpenAI model reachable through opencode as the provisional floor (build prompt section 5). |
-| 3 | 2026-09-25 | Daily model budget is **$50/day** unless you change this line. | Money. | Stays under it; deterministic work when out. |
-| 4 | 2026-09-25 | Expected founder items for v10: SOC 2 audit, sales motion, Claude Marketplace partner application, GitHub and GitLab partnerships, pricing. | Contracts, money, legal. | Engineering ships readiness docs only, never a certification claim. |
-| 5 | 2026-09-25 | Five older stashes predate v10 (`stash@{1}`..`stash@{5}`, v9.22.10 era and three `autonomi/*` branches). Keep or drop. | Not created by the loop. | Leaves them alone. |
-| 6 | 2026-09-25 | On this Mac (macOS 27.0), `/usr/bin/python3` stops at "You have not agreed to the Xcode license agreements". Run `sudo xcodebuild -license accept` once. It may be why the seatbelt test in `tests/dashboard/test_build_supervisor.py` fails locally and blocks the pre-push hook (D5); not proven. | Needs sudo. | Investigates the seatbelt test separately (BACKLOG). |
-| 7 | 2026-09-30 | License for `loki-seal` and the core: MIT/Apache, FSL-1.1-Apache, or keep BUSL. Also remove the "independent reimplementation" IP notice, and replace the CLA with DCO. | License and legal. | Builds `loki-seal` license-neutral with no LICENSE file. |
-| 8 | 2026-09-30 | Create a public repo for `loki-seal`, and submit to the Anthropic plugin directory, awesome-claude-code, the e2b list (the CLA signature is pending on PR #1106) and skills registries. | Outward posting and new public repos. | Prepares the manifests and entry text in `packages/loki-seal/SUBMIT.md`. |
-| 9 | 2026-09-30 | GitHub About text and topics (claude-code, claude-code-plugin, agent-skills, claude-skills, mcp). | Public repo settings. | Keeps a draft in `packages/loki-seal/SUBMIT.md`. |
-| 10 | 2026-09-30 | Tagline veto: "Your agent says done. Loki proves it." | Brand. | Uses it as README line 1 by default. |
-| 11 | 2026-09-30 | Opt-in first-run telemetry (install, first verified run, day-7 return). | Privacy and data. | Collects nothing. |
-| 12 | 2026-09-30 | One relaunch after the first-run gate passes, ideally posted by an outside user. | Outward posting. | Drafts a Show HN and an r/ClaudeAI post in `packages/loki-seal/SUBMIT.md`, led by the GIF and the harness table, with no agent counts and no percentages. |
-| 13 | 2026-09-30 | Repo `.claude/settings.json` hooks use relative paths (`bash autonomy/hooks/session-init.sh`, `validate-bash.sh`, `track-metrics.sh`, `store-episode.sh`, lines 9, 20, 31, 42), so they fail ("No such file or directory") whenever a session or agent's cwd is not the repo root (gate worktrees, /private/tmp train checkouts). validate-bash.sh is a PreToolUse guard, so it may silently not guard there. Proposed: `bash "$CLAUDE_PROJECT_DIR/autonomy/hooks/<name>.sh"`, exiting 0 quietly when the variable is unset. Raised by the steering session 22:50Z. | Claude Code configuration; agents may not edit it on a peer's request. | Leaves the file unchanged; hook errors continue outside the repo root. | RESOLVED 2026-10-01T00:30Z: Loki approved "fix the hooks"; slice-F13-hook-paths (65dc1411) merged on train/15. |
-| 14 | 2026-10-01 | Move the full-history `gitleaks --all` scan out of the Release path (to nightly plus every push to main, still blocking there), keeping a base-tag-to-tip range scan in Release. Relayed by the steering session as part of D46. | Weakens a release-blocking security gate; needs the founder directly, not a relay. | Release keeps the `--all` scan; E-156 removes the recurring false positive at the source. | SUPERSEDED 2026-10-01T00:30Z: Security Audit verdict reuse for VERSION-only bumps keeps the full --all scan scope (steering session 00:28Z); filed for the CI-health engineer. |
-| 15 | 2026-10-01 | Run the REAL-provider first-run gate on the published `next` build: `CLAUDE_CODE_OAUTH_TOKEN=<token from "claude setup-token"> bash scripts/first-run-gate.sh --real --installed loki-mode@10.5.13` (or ANTHROPIC_API_KEY). The swarm has no provider credential in its environment and does not read stored secrets; the gate's throwaway HOME cannot use the keychain login. Stub mode on the installed npm package runs meanwhile. | Credential only the founder holds. | The promote milestone (real gate pass on a `next` version) stays blocked; stub-mode evidence only. |
-| 16 | 2026-10-01 | A Slack incoming-webhook URL for testing D51 item 4 (notify.sh on the v10 path: PR opened, BLOCKED, backlog finished). Provide it as an env var (for example `LOKI_SLACK_WEBHOOK_URL`) in the Release Manager session, never in a file or chat. | Needs a credential only the founder holds. | Until then notify.sh is tested against a local mock webhook; the real end-to-end check runs once the env var is set. | open |
-| 17 | 2026-10-01 | Ship bun with the npm package so `npm install -g loki-mode` runs the Loki 10 default without a separate bun install (P0-nobun, architect option B): add `"bun": "1.4.2"` as an optionalDependency. Cost: each install grows from 26.6MB to about 90-110MB (platform binary 62MB darwin-arm64, 80MB linux-x64, 86MB win-x64); `--omit=optional` and unsupported platforms keep the legacy engine with a plain message. The alternative (rewrite engine10 to run under node) is about 14 files and 300-450 lines, breaks the engine10 line budget and needs a third Bun Parity runtime. | Install size and dependency policy. | Builds only the resolver and the plain cannot-run message (both useful either way); npm users without bun keep getting legacy, and promote stays paused until the two-leg gate (E-167) lands. DECIDED B 07:35Z by peer relay (autonomi-dev-dc, citing the founder's 03:30Z delegation): the Loki 10 default is the product; a bigger install costs less than an inert default for most npm users; same pattern as esbuild and biome. Conditions: per-platform optional packages only; measured delta reported and held if above about 60MB per platform (architect figures 62-86MB exceed it; 07:35Z follow-up relay: decided (i) accept about 62-86MB, or (iii) bun's baseline build if smaller and Bun Parity passes; not (ii), since a first-run consent step breaks the one-command bar; record measured deltas in the CHANGELOG; document --omit=optional as the slim legacy path); --version probe plus plain start line when bun cannot run; Docker and Homebrew use the same resolver; E-167 two-leg gate stays. Founder may reverse. |
-| 18 | 2026-10-03 | Screenshot veto for the 10.8.0 Control Plane rebuild (D83): the ground colour #F1F2F6 from the legacy dashboard, and keeping the legacy mascot in the sidebar brand. Also: light-theme status text uses AA-safe companion ink tokens (darker than the legacy hex) because the legacy success, warning, info and muted text fail WCAG AA on #F1F2F6. | Brand and visual design. | Builds with the legacy ground and mascot plus the AA ink tokens (D83 point 6); screenshots go in PROGRESS when CPE-02 lands. | open |
-| 19 | 2026-10-03 | FC-21b and FC-22 (docs/v10/FC21B-FC22-PLAN.md): (a) after an implement time limit, VERIFIED also requires a Wall or task-named test to pass with n>0; (b) dependencies are installed up front at intake (FireLater#20, 11.17.68), by default, for each package whose dependencies are absent (and again on a harness-owned load error); when the package has a lockfile the install is the ecosystem's frozen form and never rewrites the lockfile, a failed locked install fails closed (harness-owned NOT PROVEN, no mutating fallback), opt-out LOKI_E10_INSTALL=0 or loki.yaml verify.install_deps false (docs/environment-variables.md, D106); (c) exit code 3 (BUDGET_STOP) is dropped whenever a receipt is sealed, outcome and exit follow receipt.verdict. | Behavior and exit-code changes users see. | Decided by the CoS under the standing mandate: (a) yes, (b) yes as stated, (c) yes with a CHANGELOG Changed entry. Founder may reverse. Part (b) decided by the founder 2026-10-19: keep the up-front install, hardened to locked and fail-closed (D106). | open (a, c); (b) decided 2026-10-19 |
-| 20 | 2026-10-04 | CP-ASK (docs/v10/CP-ASK-PLAN.md): (a) with LOKI_CP_ASK on, the home box is Ask only, with a "Start a build" link to Compose; (b) defaults $1.00 per ask and 600s, configurable, Ask spend shown on the Cost page apart from run budgets; (c) CP-level runs, receipts and events across all repos always available, per-repo memory and code tools scoped to one repo chip per ask. | Product shape and spend defaults. | Decided by the CoS under the standing mandate as stated. Founder may reverse. | open |
-| 21 | 2026-10-07 | Enable GitHub private vulnerability reporting in the repo settings (Settings, Code security, Private vulnerability reporting). SECURITY.md already tells reporters to use Security tab, "Report a vulnerability". | Public repo settings; agents never change them. | SECURITY.md ships as written; until enabled the "Report a vulnerability" button is absent. | open |
-| 22 | 2026-10-16 | C-C1, C-C2, C-C3, C-C4, C-F1, C-F5, C-F6, C-F7, C-F8, M-27, M-27E D1-D3, P12-13b | Decided by the CoS under the founder grant of 2026-10-16 (D99). | Builds the unblocked slices. | decided (D99) |

package/docs/v10/GAP-RESEARCH-1003.md

@@ -1,32 +0,0 @@
-# GAP RESEARCH 1003: Loki vs Competitors
-
-Research date: Oct 3, 2026. Scope: public product docs, launch announcements, funded claims.
-
-## What Each Competitor Ships That Loki Lacks
-
-**Devin AI (Cognition Labs):** Desktop app with computer-use capability ($500/mo), self-review gate (catches 30% more issues), no manual intervention for 15-task planning. Publicly claimed features from https://www.buildfastwithai.com/ai-tools/devin and https://singularitymoments.com/devin-ai-coding-agent-guide/.
-
-**Factory AI:** IDE integrations (VS Code, JetBrains, Vim native), role-based API for droid swarm control, Linear/Jira issue-to-code pipeline, OpenTelemetry adoption analytics, background cloud/local agents. Cited from https://www.digitalapplied.com/blog/factory-ai-multi-agent-coding-platform-review and https://fritz.ai/factory-ai-review/.
-
-**8090 Software Factory:** Requirements-Blueprint-Planner workflow for regulated enterprises, audit-trail-first governance, AI agent skill marketplace. For regulated orgs only. Cited from https://www.8090.ai/docs/general/introduction and https://rywalker.com/research/8090-software-factory.
-
-**Vorflux:** Browser-based test recording with mergeable PR video proof, adversarial reviewer agents (planner vs reviewer), GitHub/Linear/Slack/AWS native bindings, $15M seed. Cited from https://vorflux.com/docs and https://www.thesaasnews.com/news/vorflux-raises-15m-seed/.
-
-**Claude Code:** Scheduled task execution on Anthropic cloud (runs without laptop), computer-use desktop capability, TypeScript mod/plugin system, interactive visualizations, multi-threaded project coordination. Cited from https://www.builder.io/blog/claude-code-updates and https://releasebot.io/updates/anthropic/claude-code.
-
-## Top 10 Gaps Ranked by User Value (Slice Candidates)
-
-1. **IDE/editor integration (VSCode, JetBrains)** - 80% of developers code in editors; CLI-only cuts reach by half.
-2. **Issue tracker native binding (GitHub Issues, Linear)** - work originates there; native pipeline removes copy-paste.
-3. **Browser test execution with proof video** - video proof that code works earns trust; text pass/fail claims don't.
-4. **Scheduled/background agent task queue** - devs want builds while laptop is off; async job model unlocks 24/7.
-5. **Self-review quality gate before PR** - automated issue-catching before human review saves review cycles.
-6. **Droid/agent role-based SDK/API** - programmatic control lets orgs embed Loki into their CI/CD automation.
-7. **Desktop application (GUI + CLI)** - non-engineer stakeholders (PMs, execs) need GUI visibility into builds.
-8. **Enterprise audit trail & on-prem option** - regulated industries won't use SaaS without HIPAA/SOC2 provenance.
-9. **Cost analytics per agent/task** - enterprises need chargeback models; opaque token spend blocks budget approval.
-10. **Local-only execution mode** - IP-sensitive work (defense, finance) requires on-premises guarantees.
-
----
-
-Research validated via web sources: Devin, Factory, 8090, Vorflux, Claude Code press/docs (Oct 2026).