loki-mode 7.103.0 → 7.104.0

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: Autonomous spec-driven build system with a built-in trust layer. It does not call work done until it is verified (RARV-C closure loop, 8 quality gates, completion council, verified-completion evidence gate). Triggers on "Loki Mode". Takes a spec (PRD, GitHub issue, OpenAPI doc, etc.) to deployed product with minimal human intervention. Provider-agnostic. Requires --dangerously-skip-permissions flag.
 ---
 
-# Loki Mode v7.103.0
+# Loki Mode v7.104.0
 
 **You are an autonomous agent. You make decisions. You do not ask questions. You do not stop.**
 
@@ -408,4 +408,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v7.103.0 | [Autonomi](https://www.autonomi.dev/) flagship product | ~260 lines core**
+**v7.104.0 | [Autonomi](https://www.autonomi.dev/) flagship product | ~260 lines core**

package/VERSION

@@ -1 +1 @@
-7.103.0
+7.104.0

package/autonomy/loki

@@ -15555,24 +15555,26 @@ _fable_architect = (
 # cross-route tests in test-plan-command.sh. If you change resolution here, change
 # it in claude.sh AND dashboard/server.py, and re-run those tests. The 'or' chains
 # mirror bash ':-' empty-string-fallthrough; allow_haiku uses an exact 'true'
-# match to mirror bash [ \"\$x\" = \"true\" ]. PROVIDER_MODEL_DEVELOPMENT is opus
-# by default; PROVIDER_MODEL_FAST is sonnet by default (haiku when ALLOW_HAIKU).
+# match to mirror bash [ \"\$x\" = \"true\" ]. v7.104.0: PROVIDER_MODEL_DEVELOPMENT
+# and PROVIDER_MODEL_PLANNING default to SONNET (was opus); PROVIDER_MODEL_FAST is
+# sonnet by default (haiku when ALLOW_HAIKU).
 _allow_haiku = (os.environ.get('LOKI_ALLOW_HAIKU', 'false') or 'false') == 'true'
 def _provider_model_fast():
     return (os.environ.get('LOKI_CLAUDE_MODEL_FAST')
             or os.environ.get('LOKI_MODEL_FAST')
             or ('haiku' if _allow_haiku else 'sonnet'))
 def _provider_model_development():
+    # v7.104.0: CLAUDE_DEFAULT_DEVELOPMENT=sonnet (was opus). ALLOW_HAIKU no longer
+    # changes dev (already sonnet); it only lowers fast to haiku.
     return (os.environ.get('LOKI_CLAUDE_MODEL_DEVELOPMENT')
             or os.environ.get('LOKI_MODEL_DEVELOPMENT')
-            or ('sonnet' if _allow_haiku else 'opus'))
+            or 'sonnet')
 def _provider_model_planning():
-    # claude.sh:65 -> LOKI_CLAUDE_MODEL_PLANNING > LOKI_MODEL_PLANNING > opus.
-    # CLAUDE_DEFAULT_PLANNING is always opus (LOKI_ALLOW_HAIKU only lowers the
-    # development and fast defaults, not planning).
+    # claude.sh:55 -> LOKI_CLAUDE_MODEL_PLANNING > LOKI_MODEL_PLANNING > sonnet.
+    # v7.104.0: CLAUDE_DEFAULT_PLANNING=sonnet (was opus).
     return (os.environ.get('LOKI_CLAUDE_MODEL_PLANNING')
             or os.environ.get('LOKI_MODEL_PLANNING')
-            or 'opus')
+            or 'sonnet')
 _max_tier = (os.environ.get('LOKI_MAX_TIER', '') or '').strip().lower()
 def _loki_clamp_alias(alias):
     if not _max_tier:
@@ -15593,13 +15595,12 @@ def _loki_clamp_alias(alias):
 # planning, sonnet->development, haiku->fast, fable->fable) and resolves that
 # tier through resolve_model_for_tier (claude.sh:353), which reads
 # PROVIDER_MODEL_PLANNING/DEVELOPMENT/FAST and then applies
-# loki_apply_max_tier_clamp(model, REAL_tier). This DIFFERS from the override-
-# path clamp _loki_clamp_alias above: a 'sonnet' SESSION pin dispatches OPUS
-# (development tier -> PROVIDER_MODEL_DEVELOPMENT=opus on stock config), whereas
-# a 'sonnet' OVERRIDE file dispatches sonnet (alias fed straight to --model).
-# Quoting the alias name on the default session path was the task-568 gap (it
-# understated cost ~1.7x: Sonnet quote vs Opus dispatch). The estimator must
-# quote the model the runner actually dispatches.
+# loki_apply_max_tier_clamp(model, REAL_tier). v7.104.0: with the sonnet default,
+# a 'sonnet' SESSION pin now dispatches sonnet (development tier ->
+# PROVIDER_MODEL_DEVELOPMENT=sonnet), matching a 'sonnet' OVERRIDE file. The
+# estimator must quote the model the runner actually dispatches; on stock config
+# the session-pin path and override path now agree on sonnet for dev/planning
+# tiers (they diverge only when the tier defaults are overridden by env).
 #
 # SYNC: byte-faithful with run.sh's session-pin case + claude.sh
 # resolve_model_for_tier + loki_apply_max_tier_clamp. The same resolver lives in
@@ -15607,11 +15608,24 @@ def _loki_clamp_alias(alias):
 # session-pin parity matrix and the no-cap stock cross-route cases in
 # tests/test-model-override.sh.
 def _resolve_session_pin(alias):
+    # v7.104.0 opus-pin fix: mirror run.sh. Post the Sonnet-5 default flip, NO
+    # tier resolves to opus, so an opus SESSION pin must dispatch opus directly
+    # (not route through planning->sonnet). Clamped by LOKI_MAX_TIER so the
+    # ceiling still binds. sonnet/haiku pins stay on the tier route (preserving
+    # the ALLOW_HAIKU gate for haiku).
+    if alias == 'opus':
+        if not _max_tier:
+            return 'opus'
+        if _max_tier == 'haiku':
+            return _provider_model_fast()
+        # sonnet cap: clamp opus down to the development tier model (sonnet stock).
+        if _max_tier == 'sonnet':
+            return _provider_model_development()
+        return 'opus'  # opus cap (or any higher): opus stands.
     # alias -> abstract tier (run.sh:12331). Unknown -> development (the runner's
     # '*' arm passes CURRENT_TIER through to resolve_model_for_tier, whose '*'
     # default is PROVIDER_MODEL_DEVELOPMENT, i.e. the development tier).
     _pin_tier = {
-        'opus': 'planning',
         'sonnet': 'development',
         'haiku': 'fast',
         'fable': 'fable',

package/autonomy/run.sh

@@ -2441,10 +2441,13 @@ get_provider_tier_param() {
                         # resolve_model_for_tier and the estimator/dashboard.
                         echo "opus"
                     else
-                        echo "opus"
+                        # v7.104.0: default planning to sonnet (was opus) to match
+                        # the sourced claude.sh default. This bare fallback only
+                        # fires when claude.sh is unsourced.
+                        echo "sonnet"
                     fi
                     ;;
-                development) echo "${PROVIDER_MODEL_DEVELOPMENT:-opus}" ;;
+                development) echo "${PROVIDER_MODEL_DEVELOPMENT:-sonnet}" ;;
                 fast) echo "${PROVIDER_MODEL_FAST:-sonnet}" ;;
                 # fable unavailable, collapse to opus. Without this arm an
                 # unsourced-claude.sh environment (this static fallback) would
@@ -4846,7 +4849,7 @@ _write_pricing_json() {
     "opus":            {"input": 5.00,  "output": 25.00, "label": "Opus (latest)",   "provider": "claude"},
     "sonnet":          {"input": 3.00,  "output": 15.00, "label": "Sonnet (latest)", "provider": "claude"},
     "haiku":           {"input": 1.00,  "output": 5.00,  "label": "Haiku (latest)",  "provider": "claude"},
-    "gpt-5.3-codex":   {"input": 1.50,  "output": 12.00, "label": "GPT-5.3 Codex", "provider": "codex"}
+    "gpt-5.3-codex":   {"input": 1.75,  "output": 14.00, "label": "GPT-5.3 Codex", "provider": "codex"}
   }
 }
 PRICING_EOF
@@ -10149,11 +10152,14 @@ _dispatch_reviewer() {
     case "${PROVIDER_NAME:-claude}" in
         claude)
             # SECURITY-REVIEW MODEL GUARD (evidence-based routing, item 4b):
-            # Reviewers deliberately do NOT pass --model, so they run on
-            # the account default model and are NEVER routed to Fable by a
-            # mid-flight model override or LOKI_FABLE_ARCHITECT (those only
-            # rewrite the iteration's tier_param, not this dispatch). This
-            # must stay true. The official model-config docs CONTRADICT
+            # By DEFAULT reviewers pass NO --model, so they run on the account
+            # default model and are NEVER routed to Fable by a mid-flight model
+            # override or LOKI_FABLE_ARCHITECT (those only rewrite the
+            # iteration's tier_param, not this dispatch). The ONLY way to pin the
+            # reviewer model is the explicit opt-in LOKI_ADVISOR_MODEL below,
+            # which honors haiku|sonnet|opus and REFUSES fable for the reason
+            # stated here. This must stay true. The official model-config docs
+            # CONTRADICT
             # routing security review to Fable: Fable's safety classifiers
             # refuse cybersecurity content, and in non-interactive (-p)
             # mode a flagged request ends the turn with stop_reason
@@ -10180,6 +10186,25 @@ _dispatch_reviewer() {
             #     real net is commit-before-agent-wave. Opt out
             #     LOKI_REVIEW_TOOL_GUARD=0. See loki_review_guard_denylist.
             local _rv_argv=("--dangerously-skip-permissions")
+            # OPT-IN advisor pin (v7.104.0, LOKI_ADVISOR_MODEL): reviewers still
+            # pass NO --model by default (unchanged behavior: they run on the
+            # account default). When the operator/user sets LOKI_ADVISOR_MODEL to
+            # an allowlisted alias, pin the trust-gate reviewer to it for a
+            # stronger/consistent judge - the founder's "advisor will be opus if
+            # needed or user opted". FABLE IS REFUSED here: the model-config docs
+            # say Fable's safety classifiers refuse cybersecurity content and end
+            # a -p turn with stop_reason "refusal", which would return no VERDICT
+            # and break the unanimous-council gate. So only haiku|sonnet|opus are
+            # honored; fable (or any other value) is ignored with no --model.
+            if [ -n "${LOKI_ADVISOR_MODEL:-}" ]; then
+                local _adv _adv_norm
+                _adv="${LOKI_ADVISOR_MODEL}"
+                _adv_norm="$(printf '%s' "$_adv" | tr '[:upper:]' '[:lower:]' | sed -e 's/^[[:space:]]*//' -e 's/[[:space:]]*$//')"
+                case "$_adv_norm" in
+                    haiku|sonnet|opus) _rv_argv+=("--model" "$_adv_norm") ;;
+                    *) : ;;  # fable and invalid values: no --model (account default)
+                esac
+            fi
             if type loki_subcall_bare_enabled >/dev/null 2>&1 && loki_subcall_bare_enabled; then
                 _rv_argv+=("--bare")
             fi
@@ -12152,7 +12177,7 @@ pricing = {
     'opus': {'input': 5.00, 'output': 25.00},
     'sonnet': {'input': 3.00, 'output': 15.00},
     'haiku': {'input': 1.00, 'output': 5.00},
-    'gpt-5.3-codex': {'input': 1.50, 'output': 12.00},
+    'gpt-5.3-codex': {'input': 1.75, 'output': 14.00},
 }
 for f in glob.glob('${efficiency_dir}/*.json'):
     try:
@@ -15951,6 +15976,9 @@ except Exception as exc:
         # Tier selection (S0.1):
         # Default: pin a single tier for the whole session via LOKI_SESSION_MODEL.
         # Legacy: LOKI_LEGACY_TIER_SWITCHING=true restores RARV-driven rotation.
+        # Reset the opus-pin flag every iteration BEFORE either branch so a value
+        # from a prior pass can never leak (the legacy branch never sets it).
+        local _loki_session_pin_opus=0
         if [ "${LOKI_LEGACY_TIER_SWITCHING:-false}" = "true" ]; then
             CURRENT_TIER=$(get_rarv_tier "$ITERATION_COUNT")
         else
@@ -15983,6 +16011,16 @@ except Exception as exc:
                 planning|development|fast) CURRENT_TIER="$_session_pin" ;;
                 *)      CURRENT_TIER="$_session_pin" ;;
             esac
+            # v7.104.0 opus-pin fix: post the Sonnet-5 default flip, NO tier
+            # resolves to opus (planning+development+fast all default to sonnet).
+            # So mapping an opus SESSION pin to the planning tier would silently
+            # dispatch SONNET - a model-honesty lie ("user picks opus, gets
+            # sonnet"). A concrete opus pin must dispatch opus. Record it so the
+            # tier_param resolution below sets the model directly to opus (still
+            # clamped by LOKI_MAX_TIER). sonnet/haiku pins stay on the tier route
+            # so the LOKI_ALLOW_HAIKU gate for haiku is preserved. Mirrored in the
+            # estimator (autonomy/loki) and dashboard (server.py) + parity test.
+            [ "$_session_pin" = "opus" ] && _loki_session_pin_opus=1
         fi
         # Architect opt-in (LOKI_FABLE_ARCHITECT=1): route ONLY the first
         # iteration (the architecture/REASON pass) to Fable, then fall back to
@@ -16019,6 +16057,24 @@ except Exception as exc:
         export LOKI_CURRENT_TIER
         local rarv_phase=$(get_rarv_phase_name "$ITERATION_COUNT")
         local tier_param=$(get_provider_tier_param "$CURRENT_TIER")
+        # v7.104.0 opus-pin fix (see the case block above): an opus SESSION pin
+        # must dispatch opus, not the sonnet-defaulted planning tier. Set the
+        # model directly, then apply the SAME LOKI_MAX_TIER clamp the resolver
+        # uses so the operator's cost ceiling still binds (e.g. LOKI_MAX_TIER=sonnet
+        # caps this back down). Only for the claude provider; other providers map
+        # tiers to their own model strings.
+        if [ "${PROVIDER_NAME:-claude}" = "claude" ] && [ "${_loki_session_pin_opus:-0}" = "1" ]; then
+            tier_param="opus"
+            if type loki_apply_max_tier_clamp >/dev/null 2>&1; then
+                # Clamp at the PLANNING level (opus conceptually sits at planning):
+                # loki_apply_max_tier_clamp(model, tier). Passing tier=opus would
+                # make the sonnet-cap arm a no-op (it only downgrades planning/fable),
+                # letting opus ESCAPE a LOKI_MAX_TIER=sonnet ceiling. tier=planning
+                # gives: no-cap->opus, haiku->fast, sonnet->development(sonnet),
+                # opus->opus. The ceiling wins over the pin, as everywhere else.
+                tier_param="$(loki_apply_max_tier_clamp "opus" "planning")"
+            fi
+        fi
         # Mid-flight model override: the dashboard (POST /api/session/model) or a
         # CLI user may rewrite .loki/state/model-override between iterations to
         # change the model a live run uses. Read it here, after tier_param is

package/autonomy/verify.sh

@@ -1019,6 +1019,14 @@ OPTIONS:
                        Default: critical,high  (one notch looser than the
                        Loki build loop, which also blocks on medium).
     --no-llm           Accepted for forward-compat; LLM is already off in MVP.
+    --hosted           Opt-in. When the embedded Autonomi Verify engine is
+                       usable (bun present + bundle present), fold its verdict
+                       fields into evidence.json under a "hosted" key. Additive
+                       only: the deterministic verdict and exit code are
+                       unchanged. If the engine is absent or unusable, behavior
+                       is exactly as without --hosted (fail-open, never a silent
+                       pass). Without --hosted, output is byte-identical to prior
+                       releases.
     -h, --help         Show this help.
 
 GATES (deterministic, reproducible by construction):
@@ -1108,6 +1116,160 @@ verify_spec_drift_gate() {
     return 0
 }
 
+# ---------------------------------------------------------------------------
+# Hosted-engine enrichment (--hosted opt-in).
+#
+# Folds the embedded Autonomi Verify engine's verdict fields into the
+# already-emitted evidence.json, under a top-level "hosted" key. This is
+# ADDITIVE only: the deterministic bash verdict (and the process exit code)
+# stays authoritative. The embedded engine is a dependency-free bundle built
+# from the private Autonomi Verify repo, shipped under a commercial license at
+# vendor/autonomi-verify/embed.js, and run via bun -- the SAME bun-gated,
+# optional, fallback-to-current-behavior pattern run.sh uses for loki-ts.
+#
+# Fail-open is total. Every one of these degrades to "leave evidence.json
+# untouched, change nothing": bun absent, bundle absent, engine nonzero exit,
+# empty/unparseable engine output, evidence.json unreadable, or python3 absent.
+# It NEVER promotes or alters the verdict, and NEVER turns an unusable engine
+# into a silent pass -- the deterministic verdict already stands.
+# ---------------------------------------------------------------------------
+verify_hosted_enrich() {
+    local out_dir="$1"
+    local base_ref="${2:-}"
+    local ev_path="$out_dir/evidence.json"
+
+    # Precondition probes -- any miss = silent fail-open (return 0, no change).
+    command -v bun >/dev/null 2>&1 || {
+        _verify_log "hosted: bun not found; keeping deterministic evidence (fail-open)"
+        return 0
+    }
+    local bundle
+    bundle="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)/vendor/autonomi-verify/embed.js"
+    [ -f "$bundle" ] || {
+        _verify_log "hosted: embedded engine bundle not found; fail-open"
+        return 0
+    }
+    [ -f "$ev_path" ] || {
+        _verify_log "hosted: evidence.json not present; fail-open"
+        return 0
+    }
+    command -v python3 >/dev/null 2>&1 || {
+        _verify_log "hosted: python3 not found for fold; fail-open"
+        return 0
+    }
+
+    # Run the embedded engine read-only against the working tree. Nonzero exit
+    # (genuine observation failure) or empty stdout = fail-open.
+    #
+    # Hand the engine the ALREADY-RESOLVED merge-base SHA (verify_diff_base()
+    # resolved origin/<ref> -> <ref> -> merge-base for the deterministic path).
+    # The embed's own base resolver is intentionally minimal (bare-ref
+    # rev-parse, no origin/ fallback); feeding it the concrete merge-base SHA
+    # makes its diff = merge_base..HEAD, identical PR semantics to the
+    # deterministic verdict, and avoids a spurious "inconclusive (no_base_sha)"
+    # in remote-only checkouts (CI, detached HEAD) where only origin/<ref>
+    # exists. When the deterministic path could not resolve a base, pass the
+    # raw ref through (best effort) and let the engine report inconclusive,
+    # consistent with the deterministic inconclusive.
+    local engine_base="${VERIFY_MERGE_BASE:-}"
+    [ -z "$engine_base" ] && engine_base="$base_ref"
+    local engine_out engine_rc
+    if [ -n "$engine_base" ]; then
+        engine_out="$(bun "$bundle" --dir . --base "$engine_base" 2>/dev/null)"; engine_rc=$?
+    else
+        engine_out="$(bun "$bundle" --dir . 2>/dev/null)"; engine_rc=$?
+    fi
+    if [ "$engine_rc" -ne 0 ] || [ -z "$engine_out" ]; then
+        _verify_log "hosted: embedded engine unusable (rc=$engine_rc); keeping deterministic verdict (fail-open)"
+        return 0
+    fi
+
+    # Fold the engine payload into evidence.json under "hosted". A parse failure
+    # at any step leaves the file byte-for-byte unchanged.
+    _V_EV="$ev_path" _V_ENGINE="$engine_out" python3 - <<'PYEOF' || {
+import json, os, sys
+
+ev_path = os.environ["_V_EV"]
+raw = os.environ["_V_ENGINE"]
+
+try:
+    engine = json.loads(raw)
+except Exception:
+    sys.exit(1)  # unparseable engine output -> caller fails open, no change
+if not isinstance(engine, dict):
+    sys.exit(1)
+
+try:
+    with open(ev_path) as f:
+        doc = json.load(f)
+except Exception:
+    sys.exit(1)  # evidence.json unreadable/corrupt -> no change
+if not isinstance(doc, dict):
+    sys.exit(1)
+
+# Additive only: attach the engine verdict under "hosted". The deterministic
+# "verdict"/"exit_code" fields are left untouched -- the embedded engine
+# enriches, it does not override.
+doc["hosted"] = {
+    "engine": engine.get("engine", "autonomi-verify"),
+    "engine_version": engine.get("engine_version"),
+    "verified": engine.get("verified"),
+    "inconclusive": engine.get("inconclusive"),
+    "inconclusive_reason": engine.get("inconclusive_reason"),
+    "evidence": engine.get("evidence"),
+    "note": "additive enrichment; deterministic verdict above is authoritative",
+}
+
+# Write atomically: a fold that fails mid-write must not corrupt the document
+# that the deterministic path already produced.
+tmp = ev_path + ".hosted.tmp"
+with open(tmp, "w") as f:
+    json.dump(doc, f, indent=2)
+    f.write("\n")
+os.replace(tmp, ev_path)
+PYEOF
+        _verify_log "hosted: fold failed; deterministic evidence preserved (fail-open)"
+        return 0
+    }
+
+    # Surface a one-line human summary of the hosted enrichment for the banner.
+    # Built from the engine payload via python3 (already a precondition above);
+    # any parse hiccup leaves the summary empty and the banner simply omits the
+    # line -- never a fabricated summary.
+    VERIFY_HOSTED_SUMMARY="$(_V_ENGINE="$engine_out" _V_VERDICT="${VERIFY_VERDICT:-}" python3 - <<'PYEOF' 2>/dev/null || true
+import json, os
+try:
+    e = json.loads(os.environ["_V_ENGINE"])
+    ver = e.get("engine_version") or "?"
+    # The authoritative verdict is the deterministic one (VERIFY_VERDICT); the
+    # hosted engine is a PARTIAL signal (Phase 2 observes diff+tests only, not
+    # secrets/lint/deps). It must NEVER claim "verified" when the authoritative
+    # verdict is not VERIFIED -- a tool named Verify printing "-> verified" next
+    # to a BLOCKED result is a fake-green-shaped surface, and this product never
+    # lies about done. So the banner reports the engine's partial finding,
+    # explicitly subordinated to the authoritative verdict, and never the word
+    # "verified" on its own when the verdict disagrees.
+    verdict = (os.environ.get("_V_VERDICT") or "").strip().upper()
+    if e.get("inconclusive"):
+        finding = "inconclusive (%s)" % (e.get("inconclusive_reason") or "no reason")
+    elif e.get("verified"):
+        finding = "no fabrication found (diff+tests)"
+    else:
+        finding = "fabrication evidence found"
+    if verdict and verdict != "VERIFIED":
+        # Authoritative verdict overrides; never imply the build is verified.
+        print("Hosted:   Autonomi Verify %s partial check: %s (authoritative verdict: %s; see evidence.json:hosted)" % (ver, finding, verdict))
+    else:
+        print("Hosted:   Autonomi Verify %s -> %s (enrichment in evidence.json:hosted)" % (ver, finding))
+except Exception:
+    pass
+PYEOF
+)"
+
+    _verify_log "hosted: folded Autonomi Verify engine fields into $ev_path"
+    return 0
+}
+
 # ---------------------------------------------------------------------------
 # Entry point
 # ---------------------------------------------------------------------------
@@ -1115,6 +1277,9 @@ verify_main() {
     local base_ref=""
     local out_dir=".loki/verify"
     local block_on="critical,high"
+    # Opt-in hosted-engine enrichment (--hosted). Default 0 = exactly today.
+    VERIFY_HOSTED=0
+    VERIFY_HOSTED_SUMMARY=""
 
     # Fail-closed defaults. These globals are read at the end of this function
     # (the VERDICT banner and the function return code). verify_compute_verdict()
@@ -1139,6 +1304,13 @@ verify_main() {
                 block_on="$(printf '%s' "${2:-}" | tr '[:upper:]' '[:lower:]')"; shift 2 ;;
             --no-llm)
                 shift ;;
+            --hosted)
+                # Opt-in: when the embedded Autonomi Verify engine is usable
+                # (bun present + bundle present), enrich evidence.json with the
+                # engine's verdict fields. Additive only; the deterministic
+                # verdict above stays authoritative for the exit code. Unset =
+                # exactly today's behavior. See verify_hosted_enrich().
+                VERIFY_HOSTED=1; shift ;;
             --) shift; break ;;
             -*)
                 _verify_err "unknown option: $1"; verify_help; return $VERIFY_EXIT_ERROR ;;
@@ -1227,9 +1399,22 @@ verify_main() {
         return $VERIFY_EXIT_ERROR
     }
 
+    # Opt-in (--hosted): fold the embedded Autonomi Verify engine's verdict
+    # fields into the just-written evidence.json. Fully additive and fail-open:
+    # any failure (no bun, no bundle, engine error, unparseable output) leaves
+    # evidence.json exactly as emitted above and never changes the verdict or
+    # exit code. Skipped entirely on the default path (VERIFY_HOSTED=0).
+    if [ "${VERIFY_HOSTED:-0}" = "1" ]; then
+        verify_hosted_enrich "$out_dir" "$base_ref" || true
+    fi
+
     printf 'VERDICT: %s\n' "$VERIFY_VERDICT"
     printf 'Evidence: %s/evidence.json\n' "$out_dir"
     printf 'Report:   %s/report.md\n' "$out_dir"
+    # --hosted only: surface the enrichment in human output so the extra signal
+    # is visible without parsing JSON. Printed solely when a fold succeeded;
+    # the default path never sets VERIFY_HOSTED_SUMMARY, so it stays byte-identical.
+    [ -n "${VERIFY_HOSTED_SUMMARY:-}" ] && printf '%s\n' "$VERIFY_HOSTED_SUMMARY"
 
     return "$VERIFY_EXIT"
 }

package/dashboard/__init__.py

@@ -7,7 +7,7 @@ Modules:
     control: Session control API (start/stop/pause/resume)
 """
 
-__version__ = "7.103.0"
+__version__ = "7.104.0"
 
 # Expose the control app for easy import
 try: